Legal

Privacy Policy

How Scotland's Weight Clinic collects, uses and protects your personal data.

Last updated: August 2026

Introduction

Scotland's Weight Clinic ("the Clinic", "we", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you use our website and services. The Clinic is a GPhC registered pharmacy (Reg. No. 9010506) providing pharmacist-led medical weight loss services.

Data Controller

Scotland's Weight Clinic is the data controller responsible for your personal data. Our Superintendent Pharmacist is Aidan Patrick Connolly (GPhC No. 2070186). If you have any questions about how we handle your data, please contact us using the details at the end of this policy.

Information We Collect

We may collect and process the following categories of personal data: • Personal identifiers: name, date of birth, address, email and telephone number. • Health information: weight, BMI, medical history, current medications and any other information you provide during your consultation. • Consultation records: notes taken during your clinical assessment and any treatment plans. • Payment information: billing details processed securely via our payment provider. • Technical data: IP address, browser type and usage data collected through cookies and analytics. Special category data (health information) is collected only where necessary to provide you with safe, clinically appropriate care.

How We Use Your Information

We use your personal data to: • Provide pharmacist-led consultations and ongoing clinical care. • Assess your suitability for weight loss treatments and prescribe safely. • Communicate with you about appointments, treatment and follow-ups. • Process payments and maintain accurate financial records. • Meet our legal and regulatory obligations as a GPhC registered pharmacy. • Respond to your enquiries and provide customer support. We will only process your data where we have a lawful basis to do so, including your consent, the performance of a contract (providing your treatment) and our legal obligations.

Legal Basis for Processing

Under the UK GDPR, we rely on the following lawful bases: • Consent — for marketing communications and non-essential cookies. • Performance of a contract — for delivering the services you have requested. • Legal obligation — for record-keeping required of a registered pharmacy. • Vital interests and public health — to ensure safe clinical care. Special category health data is processed under the substantial public interest condition for health and social care purposes.

Sharing Your Information

We do not sell your personal data. We may share your information with: • Our clinical team and pharmacy staff involved in your care. • Regulators, including the General Pharmaceutical Council, where required. • Our payment processor, to handle transactions securely. • IT and service providers who help us operate, under appropriate data processing agreements. • Healthcare professionals involved in your care, where you have consented or it is in your vital interests. We will only disclose your data where it is lawful and necessary to do so.

Data Retention

We retain your personal data only for as long as necessary to provide your care and meet our legal and regulatory obligations. Clinical and pharmacy records are retained in line with NHS and GPhC guidance. When data is no longer needed, it is securely deleted or anonymised.

Your Rights

Under the UK GDPR you have the right to: • Be informed about how we use your data. • Access your personal data. • Rectify inaccurate or incomplete data. • Erase your data (in limited circumstances). • Restrict or object to processing. • Data portability. • Withdraw consent at any time. • Lodge a complaint with the Information Commissioner's Office (ICO). To exercise any of these rights, please contact us using the details below.

Data Security

We implement appropriate technical and organisational measures to protect your personal data, including secure storage, access controls and encryption. Access to your data is restricted to authorised personnel who need it to provide your care.

Cookies

Our website uses cookies to function properly and to understand how the site is used. You can control cookies through your browser settings. Where we use non-essential cookies, we will seek your consent.

International Transfers

Your personal data is stored within the UK where possible. Where any data is transferred outside the UK, we ensure appropriate safeguards are in place to protect it in line with UK data protection law.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: Scotland's Weight Clinic 1 Stirling Street, Denny, FK6 6EL Tel: 01324 357760 Email: info@scotlandsweightclinic.com You also have the right to complain to the Information Commissioner's Office at ico.org.uk.