Privacy & Data Protection

This privacy policy is for New Line Pharma (D K Wood Ltd), Unicorn House, Prestbury, Cheshire, SK10 4DG and governs the privacy of those who use it and our services.

The purpose of this policy is to explain to you how we control, process, handle and protect your personal information when providing services, including your rights under current laws and regulations.

If you do not agree to the following policy you may wish to cease viewing / using this website.

Data Protection Officer

If you have any queries or concerns about your data, please contact our Data Protection Officer:

DPO@newlinepharma.co.uk

Policy Key Definitions

  • "I", "our", "us", or "we" refer to the business, New Line Pharma
  • "you", "the user" refer to the person(s) using our services
  • GDPR means General Data Protection Act
  • PECR means Privacy & Electronic Communications Regulation
  • ICO means Information Commissioner's Office
  • Cookies mean small files stored on a user's computer or device

Your Individual Rights

Under the GDPR, your rights include:

  • The right to be informed
  • The right of access
  • The right to rectification
  • The right to erasure
  • The right to restrict processing
  • The right to data portability
  • The right to object
  • The right not to be subject to automated decision-making

Complaints to the ICO

You also have the right to complain to the ICO if you feel there is a problem with the way we are handling your data:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow, Cheshire
SK9 5AF

We handle subject access requests in accordance with the GDPR.

What Personal Data Do We Collect?

Professional Registration

Private medical professionals who register to use New Line Pharma provide the following information on the completed registration form:

  • Name
  • Invoicing address
  • Delivery address
  • Registration number to their professional body
  • Phone number
  • Email address
  • Bank reference and trade reference
  • Photographic identification and proof of address

Prescriber Information

We also collect prescriber contact information:

  • Name
  • Address
  • Phone number
  • Email address

Prescription Orders

When prescription orders are placed, we collect:

  • Patient details (name, address, date of birth)
  • Relevant medical history
  • Payment information

Website Visits

With regards to visitor data and analytics, we monitor website usage to improve our services and user experience.

What Do We Do With The Data Collected?

All data is used to provide you with services. We only take the information required to carry out the dispensing of medications for your patients and to fulfil your orders.

Patient Information Storage

Patient information is stored on our secure PMR (Patient Medical Record) system provided by a fully accredited and GDPR compliant, UK-based PMR service provider. This data is kept for as long as advised by the NHS.

Customer Information

Customer information necessary for generating invoices, completed registration forms, stock order forms and paper prescriptions are kept securely on site. Paper prescriptions are kept securely for 2 years as recommended by the General Pharmaceutical Council. Other data is stored for as long as the account remains active.

Email Orders

Orders and prescriptions received by email are hosted on our secure email server.

Data Access

Only staff who require access in order to provide the necessary service have access to the data. All staff contracts of employment contain a requirement to keep patient information confidential.

All staff that deal with Personal Data regarding prescriptions are trained in and must comply with the NHS Code of Practice on Confidential Information. Additionally, pharmacists have a requirement under their professional standards to keep records about you confidential, secure and accurate.

Who May The Information Be Shared With?

We may need to share data about private medical professionals who use our services with the following third parties:

Service Providers

  • Courier and delivery companies
  • Accountants
  • Credit reference companies
  • Support and hosting providers
  • Technical engineers and IT professionals
  • Other third parties who assist in providing our services

Professional Regulators

  • GPhC (General Pharmaceutical Council)
  • GMC (General Medical Council)
  • GDC (General Dental Council)
  • NMC (Nursing and Midwifery Council)
  • MHRA (Medicines and Healthcare products Regulatory Agency)

Suppliers

We may share data limited to your clinic name and postcode to our suppliers to fulfil our legitimate interests and for product support. You may write to us to opt out. All our suppliers are UK-based and governed by the same GDPR regulations.

Legal Basis For Processing Personal Data

We may process your Personal Data on the following bases:

Contractual Obligation

Processing data is required to carry out the agreement between ourselves and our customers, and to provide a service to you.

Legal Obligation

Processing data is necessary for compliance with our regulatory bodies.

Public Interest

Processing patient data is necessary to provide the service.

Legitimate Interest

Processing data is required to handle customer enquiries and orders, enforce our terms and conditions, and to protect our rights.

Email Marketing & Subscriptions

Under the GDPR, we use the consent lawful basis for anyone subscribing to our marketing mailing list. Any email marketing messages we send are done so through an EMS (Email Marketing Service) provider.

Email Tracking

Email marketing messages that we send may contain tracking beacons, tracked clickable links, or similar server technologies in order to track subscriber activity. Such marketing messages may record:

  • Times and dates
  • IP addresses
  • Opens and clicks
  • Forwards
  • Geographic and demographic data

Email Marketing Service Provider

Our EMS provider is Mail Chimp. We hold the following information about you within our EMS system:

  • Email address
  • Consent to marketing date

Unsubscribe & Preferences

We provide you with an easy method to withdraw your consent (unsubscribe) or manage your preferences at any time. See any marketing messages for instructions on how to unsubscribe or manage your preferences.

Direct Marketing

We may from time to time send direct print marketing to you under our legitimate interests. We will still contact you regarding your account or orders even if you have opted out of receiving marketing from us.

Internet Cookies

We may use cookies on our website to provide you with a better user experience. We do this by placing a small text file on your device / computer hard drive to:

  • Track how you use the website
  • Record or log whether you have seen particular messages we display
  • Keep you logged into the website where applicable
  • Display relevant adverts or content
  • Track referrals to third-party services

Cookie Management

Some cookies are required to enjoy and use the full functionality of our website. We use a cookie control system which allows you to accept the use of cookies and control which cookies are saved to your device / computer.

Some cookies will be saved for specific time periods, where others may last indefinitely. Your web browser should provide you with the controls to manage and delete cookies from your device. Please see your web browser options for more information.

Changes & Updates

Any changes we may make to our privacy policy will be posted on our website and, where appropriate, notified to you by email.

This policy was last updated in January 2026.