Our WORKPLACE VACCINATION Privacy Policy

We all need some privacy and at Amiry & Gilbride Pharmacy we resepct yours

About this privacy policy

This privacy policy has been written to provide you with information about how Barrie Dear Limited (“Amiry & Gilbride Pharmacy”, “we”, “us”, “our”) handles or intends to handle personal information in accordance with the UK General Data Protection Regulation (“UK GDPR”). This policy relates specifically to our collection and use of personal information of individuals being administered a workplace vaccination. Our standard privacy policy applies to any engagement through our website.

About us

We are Amiry & Gilbride Pharmacy. Our registered office address is Norwood, 3 Beech Road, Lenzie, Scotland, G66 4HN. We are registered as a data controller with the Information Commissioner’s Office and our registration number is TBC.

We aim to process information about you fairly, lawfully, and in a transparent manner. The aim of this policy is to provide you with sufficient information for you to be able to understand what we are doing with your information. If you are unsure how we are handling information about you or you think we could improve our privacy information, please let us know.

Information we collect

We collect and hold a range of information about individuals administered with a workplace vaccination. This includes:

Information received from your employer about provision of services to you
Information about your receipt of a vaccination
Identification and contact details
Medical details such as your medical history, allergies, previous vaccination history

How information is collected

The information we hold will either have been provided by your employer or other organisation arranging for you to receive the vaccination or by you through information provided to individuals administering the vaccination.

Purposes for processing

We have set out below a description of all the ways we plan to use your information, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate. We may process your information for more than one lawful ground depending on the specific purpose for which we are using your information.

Purpose/Activity	Type of Information	Lawful Basis for Processing Information
Delivery of workplace vaccination and associated medical record keeping	Contact details	Legal obligation to which the controller is subject Article 6.1(c), and Our legitimate interests Article 6(1)(f)
Delivery of workplace vaccination and associated medical record keeping	Medical details	Preventive or occupational medicine article 9(2)(h)
Marketing	Contact details	Article 6(1)(a) consent

Our marketing communications

Where you have agreed for us to contact you with updates relating to our services, we will send you information we believe might be of interest to you via email or text message (we call this marketing communications).

You can ask us to stop sending you marketing communications at any by following the unsubscribe links on any marketing communications sent to you or by contacting us at any time.

Sharing personal information

Where necessary or required, we may share your personal information as follows:

with third party service providers, in connection with services performed on our behalf
with government bodies and public health agencies
with our insurers and legal advisers
with third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy
to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the Companies Act 2006.

This list is not exhaustive as there are other circumstances where we may also be required to share information, for example:

in connection with legal proceedings (or where we are instructed to do so by Court order)
where we are under a legal obligation.

Our relationships with third party service providers are governed by contractual provisions with us and they only have access to personal information for specified purposes and may not use it for other purposes.

Where we store personal information

The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (EEA). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff maybe engaged in, among other things, the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

How long we keep it for

We will only retain personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Your rights

Under the UK GDPR and the Data Protection Act 2018, you have the following rights:

Right of access – You have the right of access to information we hold about or concerning you.
Right of rectification or erasure – If you feel that any data that we hold about you is inaccurate you have the right to ask us to correct or rectify it. You also have a right to ask us to erase information about you where you can demonstrate that the data we hold is no longer needed by us, or if you withdraw the consent upon which our processing is based, or if you feel that we are unlawfully processing your data.
Right to restriction of processing – In certain circumstances, you have a right to request that we refrain from processing your data.
Right of portability – In certain circumstances, you have a right to receive any personal data that you have provided to us in order to transfer it onto another data controller.
Right to object – In certain circumstances, you have a right to object to our processing of your personal data.
Right to withdraw consent – In the circumstances where you may have provided consent to the collection, processing and transfer of personal information for a specific purpose has been provided, you have the right to withdraw consent for that specific processing at any time.

Please note, there are some specific circumstances where these rights do not apply and we can refuse to deal with your request.

To exercise any of these rights, please contact our Data Protection Officer using the contact details below.

Complaints

If you have a concern about the way we are collecting or using personal information, we would ask that you raise your concern with us in the first instance by using the contact details below.

You also have a right to lodge a complaint with the Information Commissioner’s Office (ICO) should you feel that we have not handled your information in line with legislative and regulatory requirements. They can be contacted at:

The Information Commissioner’s Office – Scotland
Queen Elizabeth House
Sibbald Walk
Edinburgh
EH8 8FT

Telephone: 0303 123 1115

Email: Scotland@ico.org.uk

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113

Website: www.ico.org.uk

Contact Details

For further information on how to request your personal information, exercise any of your data protection rights or request further information in relation to how and why we process your information, you can contact us at our registered office address or through the About page on our website [INSERT URL]

Changes to this privacy policy

We may change this privacy policy from time to time. This privacy policy was last updated in July 2023.