Playbook, pharmacy
Delete my details, said to a pharmacy
The person asking is usually picturing a delivery list and a mobile number, and a fair amount of what they mean can genuinely be changed. Underneath it sits a dispensing record held for a period the pharmacy did not choose, registers kept because the law requires them, and a nomination that is not held here at all.
Why this is not the general answer
The handling pattern for data deletion requests holds across every trade. What follows is the part that does not.
- A dispensing record is kept for a defined period set outside the pharmacy, so the answer to delete everything is a no with a reason and a document behind it, rather than a process somebody can be walked through.
- Part of what a pharmacy holds is a legal register rather than a customer record, and a register is not something anybody in the building has the authority to edit, whoever is asking and however reasonably.
- The nomination that decides where prescriptions are sent is not a record the pharmacy owns, so somebody wanting to stop things arriving here is asking for a change made elsewhere, and telling them that is the useful half of the reply.
- What is genuinely deletable at a pharmacy is a delivery round entry, a reminder message and a marketing preference, and naming those keeps the answer from reading as a flat refusal to somebody who mostly wanted the texts to stop.
How it arrives
- delete everything you hold about me
- how long do you keep records of what i was given
- stop sending me reminder texts
- i have moved pharmacy can you remove me
- can i get a copy of what you have dispensed to me
- who do i send a data request to
What has to be indexed for this to work
| Your retention position for dispensing records | How long, measured from what event, and where it is published. A period quoted with its starting point reads as a rule. A period quoted on its own reads as an excuse somebody has invented. |
|---|---|
| The records kept because they have to be | Registers and records a pharmacy is required to maintain, named as categories rather than described in detail. This is the part nobody asking has pictured, and it is why the answer cannot be yes. |
| What can genuinely be changed today | The delivery list, reminder messages, a marketing preference, the number held for a call about an owing item. There is always something, and naming it changes the tone of the entire reply. |
| The route for a formal request and who reads it | The address or form, what has to be included so it can be matched to a person, and the response period you publish. The clock runs whether or not the inbox was opened that week. |
The reply
Some of this we can change and some of it we cannot. Reminder messages and the delivery list are contact details, and those can be updated. A record of what has been dispensed is kept for a set period, which our privacy notice sets out, and the pharmacy cannot shorten it [1]. If you want prescriptions to stop coming here, that is a nomination and it is changed through your prescriber or the service you order through rather than by us [2]. I cannot change anything from here.
It opens with the split, because the visitor is asking about two categories they do not know are separate. The refusal carries a reason and a document rather than the word policy. The nomination sentence is included because it is what somebody moving pharmacies actually needs, and it is the part nobody ever tells them.
Where it stops
The trigger. Any request phrased as deletion, erasure or removal, any request for a copy of what has been dispensed, and any request made about another person.
This is a request rather than a question, so it needs the person who handles them. Leave me your name, an email and a short note of what you are asking for, and you will get a reply within the period in our privacy notice.
It stops answering before it guesses, says who will pick it up, and asks for the one thing that makes a reply possible. Nothing about it reads as a dead end.
Never say this here
Out of bounds
- Never confirm that anything has been deleted, removed or unsubscribed, because nothing here writes to any list.
- Never quote a retention period that is not in your own published notice.
- Never confirm that a named person is or has been a customer, including to a relative or a carer.
- Never say a record can be destroyed early because somebody has moved away or changed pharmacy.
Questions
- Can it take somebody off the delivery round?
- No, not even that. Every request here ends as an email to the address you nominate, and the enquiry is stored as well so it survives a mail failure, which matters when a deadline is attached to it.
- Should we publish our retention period?
- Publish yours in your privacy notice and point the assistant at that page. Periods differ by record type and by market, and a pharmacy is the last place you want an approximate number given out in your name.
- What about a request for a list of what was dispensed?
- That is an access request rather than a deletion, with its own route and its own deadline. Handle it identically: describe the route, take the details, hand it over without confirming anything about the person.
Keep reading
- Everything for a pharmacyOpening hours, services and prescription collection are safe ground. Anything about a medicine belongs with the pharmacist.
- Handling data deletion requests in generalA deletion request is a request with a clock on it, not a question. The characteristic failure is silence, so it always has to reach a person.
- Somebody needs a receipt for something they collected in MarchA till receipt, a private prescription receipt and a monthly account are different documents, and only staff can reissue any of them.
- Is it covered, asked at a counter that mostly takes no insuranceExemption, private medical cover and travel insurance get asked in the same words, and only one of them touches a pharmacy counter.
- One shop, two completely different answers about returnsTwo returns positions run in one shop: ordinary retail at the front, and medicines that are destroyed rather than put back on a shelf.
Try it on your own material
Upload a document or point it at your site, paste one line of HTML, then ask it something only your business could answer.