How we look after the information you give us.
Who we are
Stopsley (2024) Ltd, trading as Stopsley Pharmacy, is the data controller for the personal information collected through this website. Our address is 613 Hitchin Road, Luton, Bedfordshire, LU2 7UP.
Questions about your information go to us at [email protected], or by phone on 01582 611003.
What we collect, and why
We only collect what you give us through this website, and only for the reason you gave it.
- Contact form. Your name, email address, phone number if you give one, and your message. We use them to reply to you. Our lawful basis is our legitimate interest in answering people who get in touch.
- EPS nomination. Your name, date of birth, address, phone number, email address and NHS number if you give them. We use them to set you up as a patient of this pharmacy for electronic prescriptions. This is health information; our lawful basis is that we need it to provide you with pharmacy services, and the provision of health care under Article 9(2)(h) of the UK GDPR.
- Appointments. The name, date of birth, phone number and address of each person the appointment is for, the email address of the person booking, and the service booked. We use them to provide the appointment and to contact you about it. As above, this is needed to provide you with pharmacy services.
- Prescription ordering. Repeat prescriptions are ordered through a separate service provided by a third party, whose own privacy notice applies to the details you enter there.
- Marketing. Only if you tick the box asking to hear from us. We keep a record of when and how you agreed, and you can change your mind at any time by contacting us. Our lawful basis is your consent.
We do not buy information about you, and we do not sell or share it for anyone else's marketing.
Who else sees it
This website is built and hosted for us by The Pharmacy Website Company (Cosydian Limited), who process the information on our behalf under a written contract and store it on servers in the United Kingdom. They use a UK hosting provider to run the servers. Nobody else sees the information you give us, with these exceptions:
- Our website forms use a check from Cloudflare to tell people from automated programs. It sees your device's connection details for that purpose and nothing you type.
- The map on our pages comes from Google Maps. Google sees that your device requested it and may set its own cookies; Google's privacy notice applies.
- The NHS and other health bodies, where we are required to share information to provide your care or by law.
How long we keep it
- Messages sent through the contact form and EPS nominations: up to 12 months after we have dealt with them.
- Appointment details: the personal details are removed 24 months after the appointment; the fact that a slot was booked is kept for our records.
- Marketing consent: until you withdraw it, or 36 months after we last heard from you.
Records we hold in the pharmacy itself, such as your prescription history, are kept under the NHS records management rules, which are separate from this website.
Visitor counting
We count visits to the website on our own server so that we know which pages are useful. This uses no cookies and stores nothing that identifies you: the count works from a code that changes every day and cannot be traced back to a person or followed from one day to the next.
Your rights
You can ask us for a copy of the information we hold about you, ask us to correct it, ask us to delete it where we no longer need it, object to how we use it, and withdraw consent you have given. Write to us using the details above and we will reply within a month. If you are unhappy with our answer you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Keeping it safe
The website is served over an encrypted connection, the information you send is stored encrypted, and the people who can see it sign in with a password and a code from their phone. Every access is recorded.
Last reviewed November 2026.