PRIVACY POLICY
Market Harborough Travel Clinic, operated by Mistry Pharmacy
Last updated: April 2026
At Market Harborough Travel Clinic, operated by Mistry Pharmacy, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, use our online booking form, or receive services from us.
Please read this policy carefully. By using our website or services, you confirm that you have read and understood this policy. If you have any questions, please contact us using the details provided at the end of this document.
WHO WE ARE
The data controller responsible for your personal information is:
Mistry Pharmacy (operating as Market Harborough Travel Clinic) 14 High Street Market Harborough Leicestershire LE16 7NJ
Email: info@mistryspharmacy.com
Telephone: 01858 467027
We take our obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 seriously.
WHAT PERSONAL DATA WE COLLECT
We may collect and process the following categories of personal data:
Personal identification information: your full name, date of birth, email address, telephone number, and postal address.
Health information: details of your travel destination, medical history, current medications, and vaccination records. This is classed as special category data under UK GDPR and is handled with the highest level of care.
Booking information: details of your appointment, travel plans, and any specific health concerns or requirements you share with us.
Website usage data: information about how you use our website, including pages visited, time spent on the site, browser type, and IP address. This data is collected through third party analytics tools including Google Analytics.
Communications: records of any correspondence between you and our clinic, including emails and enquiry form submissions.
HOW WE COLLECT YOUR DATA
We collect your personal data in the following ways:
Directly from you: when you complete our online booking form, contact us by email or telephone, attend an appointment at our clinic, or communicate with us in any other way.
Automatically: when you visit our website, certain data is collected automatically through cookies and third party analytics tools such as Google Analytics. Please see our Cookies section for more information.
From third parties: in some cases we may receive information about you from other healthcare providers, with your consent, in order to provide you with appropriate care.
HOW WE USE YOUR DATA
We use your personal data for the following purposes:
To provide travel health services: including booking and managing your appointment, carrying out a pre-travel health consultation, administering vaccinations, issuing prescriptions, and providing health certificates.
To communicate with you: including sending appointment confirmations, reminders, and follow-up information relevant to your care.
To comply with legal and regulatory obligations: including maintaining accurate clinical records as required by healthcare regulations and our professional obligations.
To improve our services: using anonymised and aggregated data from website analytics to understand how our website is used and to improve the experience for our patients.
To send you relevant health information: where you have given your consent, we may contact you with information about travel health updates, new services, or appointment reminders.
We will never sell your personal data to third parties or use it for purposes unrelated to your care without your explicit consent.
LEGAL BASIS FOR PROCESSING YOUR DATA
Under UK GDPR, we rely on the following lawful bases for processing your personal data:
Contract: processing is necessary to fulfil our agreement with you to provide travel health services.
Legal obligation: processing is necessary to comply with our legal and regulatory obligations as a healthcare provider.
Vital interests: in an emergency, we may need to process your data to protect your vital interests or those of another person.
Legitimate interests: we use website analytics data to improve our services, where this does not override your rights and interests.
Explicit consent: for special category health data and for any marketing communications, we rely on your explicit consent, which you may withdraw at any time.
HOW LONG WE KEEP YOUR DATA
We retain your personal data only for as long as is necessary for the purposes for which it was collected and to comply with our legal obligations.
Clinical records: in line with NHS and professional guidelines, health records are retained for a minimum of eight years from the date of your last appointment, or until the age of 25 for patients who were children when treated.
Booking and contact information: retained for a period of two years following your last contact with us, after which it will be securely deleted.
Website analytics data: anonymised and aggregated data collected through Google Analytics is retained in accordance with Google's data retention policies.
When your data is no longer required, it is securely deleted or anonymised in accordance with our data retention policy.
YOUR RIGHTS
Under UK GDPR, you have the following rights in relation to your personal data:
The right to access: you may request a copy of the personal data we hold about you at any time. This is known as a Subject Access Request (SAR).
The right to rectification: you may ask us to correct any inaccurate or incomplete personal data we hold about you.
The right to erasure: in certain circumstances, you may ask us to delete your personal data. Please note that we may be required to retain certain records for legal or regulatory reasons.
The right to restrict processing: you may ask us to restrict how we use your data in certain circumstances.
The right to data portability: where processing is based on your consent or a contract, you may request that we provide your data in a structured, commonly used format.
The right to object: you have the right to object to processing based on legitimate interests, including for direct marketing purposes.
The right to withdraw consent: where we rely on your consent to process your data, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact us using the details provided below. We will respond to all requests within one calendar month.
COOKIES
Our website uses cookies to improve your experience and to collect anonymised analytics data. Cookies are small text files stored on your device when you visit a website.
We use the following types of cookies:
Essential cookies: necessary for the website to function correctly. These cannot be disabled.
Analytics cookies: used by Google Analytics to collect information about how visitors use our website. This data is anonymised and used only to improve our website. You can opt out of these cookies through your browser settings or by using the Google Analytics Opt-out Browser Add-on.
You can control and manage cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website.
DATA SECURITY
We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include secure data storage, restricted access controls, and regular reviews of our data security practices.
While we take every precaution to protect your data, no method of electronic transmission or storage is completely secure. If you have any concerns about the security of your personal data, please contact us immediately.
COMPLAINTS AND HOW TO CONTACT US
If you have any questions, concerns, or complaints about how we handle your personal data, please contact us in the first instance:
Mistry Pharmacy (Market Harborough Travel Clinic), 14 High Street Market Harborough Leicestershire LE16 7NJ
Email: info@mistryspharmacy.com
Telephone: 01858 467027
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: www.ico.org.uk
Helpline: 0303 123 1113
CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be published on this page with a revised date. We encourage you to review this policy periodically.