Privacy Policy

Who we are

The Red Band Chemical Co Ltd T/A Lindsay & Gilmour Pharmacy operates community pharmacies in Scotland and provides NHS and private pharmacy and healthcare services.

For the purposes of UK data protection law, The Red Band Chemical Co Ltd T/A Lindsay & Gilmour is the data controller for the personal information described in this Privacy Notice where we determine how and why that information is processed.

Our contact details are:

This Privacy Notice explains how we collect, use, share and protect your personal information when you use our pharmacies and healthcare services.

What personal data we collect and why we collect it

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Google Analytics

Who we share your data with & how long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

Visitor comments may be checked through an automated spam detection service.

Privacy Policy for Pharmacy Customers

When you visit one of our pharmacies, we process personal information about you. This includes information from your prescriptions and information collected when we provide pharmacy and healthcare services to you, including NHS Pharmacy First Scotland, Medicines: Care and Review (MCR), smoking cessation services and other NHS and private healthcare services.

We use and share your information where necessary for the following purposes:

Your care – providing safe and effective pharmacy and healthcare services to you and, where appropriate, sharing relevant information with your GP, prescriber and other health and care professionals involved in your care.

Our payments – sharing relevant information with NHS National Services Scotland (NSS) Practitioner Services, NHS Boards and other appropriate organisations where necessary to process, verify and check payments for the services we provide.

Management and governance – sharing relevant information where necessary for the management, monitoring, audit and assurance of pharmacy services, including with NHS organisations, regulatory bodies and others responsible for ensuring appropriate professional, clinical and service standards are maintained.

What information do we collect?

The information we collect will depend on the services we provide to you. It may include your name, address, date of birth, contact details and CHI number; details of your GP or prescriber; NHS and private prescriptions; your Patient Medication Record (PMR); medicines prescribed, dispensed or supplied to you; allergies and adverse drug reactions; medical conditions, symptoms and relevant medical history; and information provided during pharmacy consultations and clinical assessments.

We may also hold information relating to vaccinations, clinical measurements or test results, referrals, NHS and private pharmacy services, prescription collections or deliveries, and communications with you or other healthcare professionals.

Information about your health is classed as special category personal data and receives additional protection under data protection law.

Where do we get your information?

We obtain most information directly from you. We may also receive relevant information from your GP or prescriber, NHS Scotland, NHS Boards, NHS National Services Scotland, hospitals, other pharmacies, other healthcare professionals, care providers, or a family member, carer or representative acting on your behalf.

Our pharmacy professionals may also have authorised access to relevant information held within NHS Scotland clinical and electronic prescription systems. Information will only be accessed where there is an appropriate reason to do so.

Why are we allowed to use your information?

We are required to keep appropriate records of the pharmacy and healthcare services we provide. We use your personal information where necessary to provide safe and effective care and to meet our legal, NHS, professional and regulatory obligations.

We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For NHS pharmacy and healthcare services, our principal lawful bases will normally be that processing is necessary to perform a task in the public interest (Article 6(1)(e) UK GDPR) and/or to comply with a legal obligation (Article 6(1)(c)).

As information about your health is special category personal data, an additional condition is required. For most of our pharmacy and healthcare activities this will be because processing is necessary for the provision of health care or treatment or the management of health care services (Article 9(2)(h) UK GDPR).

Other lawful bases may apply depending on the particular service or reason for using your information, including where necessary to provide a private service to you, for our legitimate interests or, where appropriate, with your consent.

Your consent to receive healthcare or treatment is separate from the legal basis upon which we process your personal information.

If you do not provide information that is necessary for us to provide a particular service safely or to meet our legal requirements, we may not be able to provide that service to you.

Who do we share your information with?

We respect the confidentiality of your information and only share it where there is an appropriate and lawful reason to do so.

Where necessary, we may share relevant information with your GP, prescriber, NHS Boards, NHS National Services Scotland, hospitals, other pharmacies and other health or social care professionals involved in your care.

We may also share relevant information with organisations providing services on our behalf; regulatory and professional bodies, including the General Pharmaceutical Council; organisations responsible for preventing or investigating fraud; our professional advisers, auditors and insurers; or the police, courts and other public authorities where disclosure is required or permitted by law.

Information may also be shared where necessary to protect you or another person from serious harm.

Where another organisation processes information on our behalf, we require appropriate safeguards to protect your information.

We do not sell your health information.

NHS Scotland pharmacy services

As a community pharmacy providing NHS pharmaceutical services in Scotland, we are required to maintain appropriate records of the pharmaceutical services we provide.

These services may include dispensing NHS prescriptions, NHS Pharmacy First Scotland, Medicines: Care and Review (MCR), smoking cessation services, vaccination programmes, public health services, unscheduled care, emergency supplies and other nationally or locally commissioned NHS pharmacy services.

Information generated when providing these services may be recorded within our pharmacy systems and/or appropriate NHS Scotland systems.

Relevant information may also be submitted to NHS National Services Scotland, NHS Boards or other appropriate NHS organisations for purposes including your care, payment and reimbursement, service administration, clinical governance, audit and fraud prevention.

Private pharmacy and healthcare services

We also provide private pharmacy and healthcare services. Depending on the service, we may need to collect information about your medical history, current medicines, allergies, symptoms, previous treatments, clinical measurements and other information necessary to assess whether a service or treatment is safe and appropriate for you.

Where appropriate, relevant information may be shared with your GP, prescriber or another healthcare professional involved in your care.

We may provide additional privacy information for a particular service where the way your information is used differs significantly from what is described in this policy.

Prescription collection and delivery

If you ask another person to collect a prescription or medicine on your behalf, we may process information necessary to ensure that it is appropriate to release the medicine to that person.

Where we provide a prescription delivery service, information such as your name, address, telephone number and delivery details may be provided to authorised delivery staff or an appropriate delivery provider where necessary to complete the delivery.

How do we contact you?

Where you provide us with contact details, we may use these to communicate with you about your healthcare, prescriptions, medicines, appointments or services. This may include telephone calls, emails or text messages.

We take reasonable steps to protect your confidentiality when communicating with you. Please tell us if there is a particular method by which you do not wish us to contact you.

Healthcare and service communications are separate from marketing. Where your consent is required before we send electronic marketing communications, we will obtain it.

How long do we keep your information?

We keep your information only for as long as necessary and in accordance with applicable legal, NHS, professional and regulatory requirements.

Records relating to NHS pharmaceutical services are retained for a minimum of seven years, as required by the National Health Service (Pharmaceutical Services) (Scotland) Regulations 2009.

Some information may need to be retained for longer where another legal, NHS, professional or regulatory requirement applies, or where it is necessary in connection with a complaint, investigation or legal claim. Other information may be retained for a shorter period where there is no requirement or legitimate need for us to retain it.

At the end of the appropriate retention period, information will be securely deleted or destroyed unless there is a lawful reason for retaining it for longer.

How do we keep your information safe?

We take appropriate steps to protect your personal information against loss, inappropriate disclosure and unauthorised access.

Access to patient records and NHS systems is restricted to authorised individuals who require access for a legitimate purpose. Our pharmacy teams are required to respect patient confidentiality and must only access patient information where there is an appropriate reason to do so.

We use appropriate physical, technical and organisational safeguards, including access controls, secure pharmacy and NHS IT systems, staff training, information security procedures and secure disposal of confidential information.

CCTV

Some of our pharmacies use CCTV to help protect patients, colleagues and visitors, protect our premises and property, prevent and detect crime and investigate incidents.

Appropriate signage will be displayed where CCTV is in operation. CCTV information is retained only for as long as necessary unless footage is required in connection with an incident, complaint, investigation or legal matter.

Your rights

You have rights in relation to your personal information. Depending on the circumstances, these may include the right to:

• request a copy of the personal information we hold about you;

• ask us to correct information that is inaccurate or incomplete;

• ask us to erase information in certain circumstances;

• ask us to restrict the way we use your information in certain circumstances;

• object to certain uses of your information;

• receive your information in a portable format in certain circumstances; and

• withdraw your consent where we are relying on consent to process your information.

These rights are not absolute. For example, we may be legally required to retain certain pharmacy records even if you ask us to delete them.

You will not normally have to pay a fee to exercise your data protection rights. We may need to verify your identity before providing personal information to you.

Transfers outside the UK

Some organisations providing IT, communications or other services to us may process personal information outside the United Kingdom.

Where this happens, we will ensure that the transfer complies with UK data protection law and that appropriate safeguards are in place where required.

Children and young people

We provide pharmacy and healthcare services to children and young people and may therefore process their personal and health information.

We handle this information in accordance with applicable confidentiality and data protection requirements, taking account of the child's or young person's age and capacity and the appropriate involvement of parents, guardians or carers.

Questions, requests or complaints

If you have a question about how we use your information, would like to exercise one of your data protection rights, or have a concern about how we have handled your information, please contact:

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent regulator for data protection.

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113

Changes to this Privacy Policy

We regularly review this Privacy Policy and may update it where our services, the way we use personal information, or legal and regulatory requirements change.

The current version will always be available on our website.

Last updated: August 2026

Freedom of Information

We have adopted the Model Publication Scheme approved by the Scottish Information Commissioner. This means we are committed to making a wide range of information about our work available to the public.

You can find details of the information we publish, how to access it, and any charges that may apply in our Guide to Information, available below:

Model Publication Scheme