Privacy Notice

Last updated: 13 October 2026

Who we are

Knightsbridge Pharmacy is operated by Al-Hyatt Limited (company number 07583324), 156 Brompton Road, London SW3 1HW. We are a pharmacy registered with the General Pharmaceutical Council, registration number 1108267. Al-Hyatt Limited is the controller of the personal information described in this notice and is registered with the Information Commissioner's Office, reference ZB672397.

Our Data Protection Officer handles data protection requests. Email hello@knightsbridge-pharmacy.com marked for the attention of the Data Protection Officer, message us on WhatsApp at +44 7483 903836, or write to us at the address above.

What this notice covers

This notice explains how we use personal information when you use our private services (travel and other vaccinations, blood testing, weight loss consultations, and private prescription dispensing and delivery), contact us, or use our website.

Information we collect

Depending on the service, we may hold your name, date of birth, sex, contact details, address, appointment details and messages you send us. To provide care safely we may also hold health information, such as your medical history, allergies, medicines, vaccination history, consultation notes, prescriptions, blood test requests and results. Health information is special category data and we protect it accordingly.

For deliveries we hold the recipient's details, delivery address and delivery status. We also keep records of payments for services and supplies. When you use our website, we collect technical information such as your device, browser and pages visited using Google Analytics, to understand how the site is used and improve it. You can switch this off at any time.

Where your information comes from

Most information comes directly from you when you book, contact us or use a service. It may also come from the clinician who issued your prescription, the laboratory that analyses your sample, someone you have authorised to act for you, and the providers that run our booking and delivery services.

How we use your information and our lawful bases

We use your information to arrange appointments, assess whether a service is suitable for you, provide vaccinations, blood tests and consultations, dispense and deliver prescriptions, communicate with you about your care, take payment, keep the records the law requires, respond to enquiries and complaints, and keep our systems secure.

Under UK data protection law, we rely on these lawful bases: performing our contract with you or taking steps you ask for before one; complying with our legal obligations, including pharmacy record keeping; our legitimate interests in running and protecting our business, where these do not override your rights; and your consent, for advertising cookies. Website analytics cookies are used under the statistical purposes exemption in the Privacy and Electronic Communications Regulations, with a free opt-out. We process health information because it is necessary for the provision of health care by, or under the responsibility of, professionals bound by a duty of confidentiality (Article 9(2)(h) of the UK GDPR and Schedule 1, paragraph 2 of the Data Protection Act 2018).

Who we share your information with

We share only what is needed for each service, with:

• our UKAS-accredited partner laboratory, to analyse blood samples;
• Semble, our booking and clinical records system;
• delivery providers, including Royal Mail and specialist couriers for international deliveries;
• the clinician who issued your prescription, if we need to check it;
• IT, email and messaging providers that support our services, including WhatsApp;
• Trustindex, which displays our Google reviews on our website;
• Google, which provides our website analytics and advertising measurement;
• Microsoft, whose Clarity service shows us how visitors use our pages, if you choose "Accept all";
• regulators, the police or other authorities, where the law requires it.

We do not sell your personal information.

International transfers

Some of our technology providers may process information outside the UK. Where this happens, we rely on the safeguards UK law requires, such as UK adequacy regulations or approved contract terms. Contact us for more details.

How long we keep your information

We keep clinical, prescription and vaccination records for the periods required by law and professional guidance for pharmacies. Other information, such as enquiries and delivery records, is kept only for as long as we need it for the purpose it was collected, or to deal with complaints or legal claims.

Automated decisions

We do not make decisions about you based solely on automated processing. Decisions about your care are made by our pharmacists.

Your rights

You can ask to access your information, correct it, have it erased, restrict how we use it, or receive it in a portable format. You can object to certain uses, including direct marketing, and withdraw consent at any time where we rely on it. Some rights are limited where we must keep records by law.

To make a request, contact our Data Protection Officer using the details above. Requests are usually free, and we normally respond within one month. We may need to confirm your identity first.

Cookies

Our website uses strictly necessary cookies to work. We also use Google Analytics cookies to produce statistics about how the site is used, so we can improve it; we do not use them to identify you, and you can opt out by choosing "Essential only" in our cookie banner. Google Ads cookies, which help us measure our advertising, and Microsoft Clarity, which records clicks and scrolling on our pages with all text hidden so we can see how the site is used, are only used if you choose "Accept all". Without that consent, Google may receive limited information that does not use cookies, such as the fact that a page was visited, which it uses to estimate ad results. You can change your choice at any time using the Cookie settings link at the bottom of each page.

Messages and security

WhatsApp and email are run by third parties, so please send only the information we need. We protect personal information with appropriate technical and organisational measures, and our staff are bound by professional confidentiality.

Complaints

If you are unhappy with how we have used your information, please contact our Data Protection Officer first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.

Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last changed.