CPNBS Privacy Policy
CPNBS (Community Pharmacy National Booking Service) is committed to protecting the privacy and confidentiality of users who access our service. This Privacy Policy explains how information is used when patients request appointments with community pharmacies through CPNBS.
Who We Are
CPNBS is a FREE online service that enables patients to request appointments with participating community pharmacies. The service acts solely as a secure communication tool between the patient and the pharmacy selected by the patient.
What Information We Collect
When a patient submits an appointment request, the following information may be entered by the user:
- NHS Number
- Date of Birth
- Contact Details (mobile number or email address)
- Service or appointment request details provided by the patient
CPNBS is designed to minimise the collection and retention of personal information wherever possible.
How Information Is Used
The information submitted through CPNBS is used only to send the appointment request directly to the NHS email address or approved contact channel of the community pharmacy chosen by the patient. The pharmacy uses this information to contact the patient and manage the appointment or service request.
Once information has been received by the selected pharmacy, the pharmacy becomes responsible for handling the patient’s information in accordance with its own privacy and data protection obligations.
Data Storage
CPNBS is designed not to retain patient information after successful transmission to the selected pharmacy.
Appointment request details are transmitted directly to the selected pharmacy and are not intentionally retained within the CPNBS platform after successful transmission, except for limited temporary technical or security logs where required for system integrity, troubleshooting, or fraud prevention purposes.
CPNBS does not maintain patient medical records or ongoing patient profiles within the platform.
CPNBS does not intentionally keep records of:
- Patient personal information
- NHS Numbers
- Appointment or service request details
- The pharmacy selected by the patient
Legal Basis for Processing
CPNBS processes information solely for the purpose of transmitting appointment requests to the selected pharmacy. The processing is necessary to facilitate communication between the patient and the selected pharmacy in relation to the service requested by the patient.
The lawful basis for processing is:
- the patient’s consent when submitting the request, and/or
- legitimate interests in enabling secure communication and service delivery.
Data Security
CPNBS implements reasonable technical and organisational security measures to ensure that information submitted through the service is transmitted securely to the selected pharmacy.
Third Parties
CPNBS does not sell, share, or use patient information for advertising or marketing purposes.
Information is transmitted only to the pharmacy selected by the patient and to technical service providers where necessary for the secure operation of the platform.
Patient Rights
Under applicable UK data protection laws, including the UK GDPR and Data Protection Act 2018, patients may have rights relating to their personal data, including the right to:
- Request access to their personal information
- Request correction of inaccurate information
- Request restriction of processing in certain circumstances
- Raise concerns with the receiving pharmacy or relevant supervisory authority
Changes to This Policy
CPNBS may update this Privacy Policy from time to time. Any updates will be published within the service or website.
Contact
For questions about this Privacy Policy or the operation of CPNBS, please email: info@cpnbs.com
📧