Privacy Policy
Privacy Policy
EverydayMeds (a trading name of OVIO Ltd)
Last updated: 08/01/2026
1. Who we are
EverydayMeds is a distance-selling online pharmacy registered with the General Pharmaceutical Council (GPhC registration number 9012878), operated by OVIO Ltd, a company registered in England and Wales.
- Registered address: 109 Coleman Road, Leicester, United Kingdom, LE5 4LE
- Data controller: OVIO Ltd (trading as EverydayMeds)
- ICO registration number: ZB897471
- Superintendent Pharmacist: Mahommed Zunaid Ayub Patel, GPhC No. 2217101
- Contact for privacy queries: support@everydaymeds.co.uk
We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What data we collect
Identity and contact data
Name, date of birth, gender, email address, phone number, delivery and billing address.
Identity verification data
To meet our legal and professional obligations as a pharmacy, we verify your identity before supplying prescription-only medicines. We use Yoti, a third-party identity verification provider, which may process a photograph of your ID document and a facial scan. Yoti processes this data in accordance with its own privacy policy.
Health and medical data (special category data)
- Responses to our online health consultations and questionnaires
- Medical history, current medications, allergies, and relevant conditions
- Height, weight, and BMI (relevant to weight-management treatments)
- Prescription and dispensing records
- Communications with our prescribers and pharmacists
Transaction data
Order history, payment details (processed by our payment provider — we do not store full card numbers), and delivery information.
Technical data
IP address, browser type, device information, and website usage data collected via cookies (see our Cookie Policy).
3. How we use your data and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Assessing suitability for treatment, prescribing, and dispensing medicines | Article 6(1)(b) contract; Article 9(2)(h) provision of healthcare, under the responsibility of registered professionals |
| Verifying your identity and age | Article 6(1)(c) legal obligation |
| Processing orders, payments, and deliveries | Article 6(1)(b) contract |
| Contacting you about your treatment, including clinical safety follow-ups | Article 6(1)(b) contract; Article 9(2)(h) healthcare |
| Maintaining pharmacy records required by law and our regulator | Article 6(1)(c) legal obligation |
| Responding to queries and complaints | Article 6(1)(f) legitimate interests |
| Marketing emails and offers (non-health-specific) | Article 6(1)(a) consent — you can withdraw at any time |
| Fraud prevention and website security | Article 6(1)(f) legitimate interests |
| Improving our website and services | Article 6(1)(f) legitimate interests; consent for non-essential cookies |
We will never use your health data for marketing purposes without your explicit consent, and we do not sell your personal data to third parties.
4. Who we share your data with
We share your data only where necessary:
- Our clinical team — registered prescribers and pharmacists involved in your care
- Identity verification — Yoti (ID and age verification)
- Payment processors — Trust Payments (we do not store full card details)
- Delivery partners — couriers such as DPD receive your name, address, and contact details to deliver your order (packaging is plain and does not disclose contents)
- IT and platform providers — hosting, e-commerce, customer support, and communications platforms that process data on our instructions under data processing agreements
- Your GP — only with your consent, or where a clinician judges it necessary for your safety
- Regulators and authorities — the GPhC, MHRA, ICO, or law enforcement where legally required
Where any provider processes data outside the UK, we ensure appropriate safeguards are in place (such as UK adequacy regulations or International Data Transfer Agreements/standard contractual clauses).
5. How long we keep your data
- Pharmacy, prescription, and clinical records: retained in line with pharmacy record-keeping requirements and professional guidance — retained for a minimum of 8 years from the date of supply
- Identity verification records: retained for as long as required to demonstrate compliance with our legal obligations
- Order and financial records: 6 years, in line with tax and accounting requirements
- Marketing data: until you withdraw consent or after a prolonged period of inactivity
- Website analytics: in line with the retention periods set out in our Cookie Policy
When data is no longer required, it is securely deleted or anonymised.
6. Your rights
Under UK GDPR you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate or incomplete data
- Erasure — ask us to delete your data (note: we must retain certain pharmacy and clinical records by law, so this right may be limited)
- Restriction — ask us to limit how we use your data
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interests, and to direct marketing at any time
- Withdraw consent — where processing is based on consent
To exercise any of these rights, contact us at support@everydaymeds.co.uk. We will respond within one month. We may need to verify your identity before acting on a request.
7. How we protect your data
We use appropriate technical and organisational measures, including encryption in transit (TLS), access controls limiting clinical data to authorised staff, staff confidentiality obligations and training, and data processing agreements with all suppliers. No system is completely secure, but we regularly review our security practices.
8. Cookies
Our website uses cookies and similar technologies. Essential cookies are required for the site to function; analytics and marketing cookies are used only with your consent. See our Cookie Policy for details and to manage your preferences.
9. Children
Our services are intended for adults aged 18 and over. We do not knowingly collect data from anyone under 18.
10. Changes to this policy
We may update this policy from time to time. The latest version will always be available on our website, and we will notify you of significant changes where appropriate.
11. Complaints
If you have concerns about how we handle your data, please contact us first at support@everydaymeds.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Helpline: 0303 123 1113
- Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF