Privacy notice

mandate is a trading name of Macbon Chemist, 14 Chapel Street, Manchester M3 5DF, a pharmacy registered with the General Pharmaceutical Council under number 9012345. Macbon Chemist is the data controller for the information you give us.

Your consultation answers, including health information and anything you tell us about recreational drug use. Your name, email, delivery address and payment reference. Records of messages between you and the pharmacy team. Basic technical information about the device you used, for security and fraud prevention.

We process health information to provide healthcare, which UK GDPR permits under Article 9(2)(h), with professional confidentiality obligations. We process contact and order details to perform our contract with you, and a limited amount for our legal obligations as a pharmacy.

The prescriber reviewing your consultation and the pharmacy team dispensing your treatment. Our delivery partner receives your name and address only. Our payment provider receives what it needs to take payment and never receives clinical information.

We do not sell your data. We do not share clinical information with advertisers, data brokers or analytics providers. We do not contact your GP unless it becomes clinically necessary, and we ask you first.

Clinical records are kept for 10 years from your last treatment, as expected of a UK pharmacy. Consultations that are not completed are deleted after 90 days. Marketing preferences are kept until you change them.

You can ask for a copy of your data, ask us to correct it, ask us to restrict how we use it, and object to certain uses. Some rights are limited where we must keep a clinical record. Email privacy@mandate.clinic and we will respond within one month.

If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.

Data is encrypted in transit and at rest, access is limited to staff who need it for your care, and access to clinical records is logged.