RX-Info Privacy Policy

Website Privacy Policy

Rx-info Ltd  |  www.rx-info.co.uk  |  Version 2.0  |  July 2026

1. INTRODUCTION

Rx-info Ltd (“Rx-info”, “we”, “us” or “our”) is committed to protecting and respecting your privacy. This privacy policy explains how we collect and use personal data about visitors to our website at www.rx-info.co.uk (our “site”), and about individuals who contact or correspond with us through it, and describes your rights in relation to that personal data.

Rx-info Ltd, of Exeter Science Park Centre, 4 Babbage Way, Science Park, Clyst Honiton, Exeter, EX5 2FN, is the controller of your personal data for the purposes of the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, each as amended by the Data (Use and Access) Act 2025 (together, “data protection law”).

This policy should be read together with our Cookie Policy, our website terms of use, and any other privacy notice we provide to you on specific occasions when we collect or process personal data about you, so that you are fully aware of how and why we are using your data. This policy supplements those notices and is not intended to override them.

Our site is not intended for children and we do not knowingly collect personal data relating to children.

If you use the Rx-info applications and services provided to NHS and other healthcare organisations, our separate Application Privacy Policy applies to that use.

2. CONTACT AND COMPLAINTS

Questions, comments and requests regarding this privacy policy, and any request to exercise your legal rights, should be addressed to [email protected] or to Rx-info Ltd, Exeter Science Park Centre, 4 Babbage Way, Science Park, Clyst Honiton, Exeter, EX5 2FN.

If you are unhappy with how we have handled your personal data, you have the right to complain to us. We will acknowledge your complaint within 30 days of receiving it and will take appropriate steps to investigate and respond without undue delay, in accordance with our data protection complaints procedure.

You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

3. THE PERSONAL DATA WE COLLECT

We may collect and process the following personal data about you:

• Identity and contact data. Your name, organisation, job role, email address and telephone number, which you give us by filling in forms on our site or by corresponding with us by post, telephone, email or otherwise. This includes information you provide when you request information about our products and services, register for an event or webinar, subscribe to our updates, or report a problem with our site.
• Technical data. Information collected automatically when you visit our site, including your IP address, browser type and version, device type, operating system, and other technology on the devices you use to access our site.
• Usage data. Information about how you use our site, including the pages you visit, how you arrived at our site, and the date, time and duration of your visits, collected through cookies and similar technologies as described in our Cookie Policy.
• Marketing and communications data. Your preferences in receiving marketing communications from us.

We do not collect any special categories of personal data about you through our site, and we do not collect financial or payment card information through our site.

We do not receive personal data about website visitors from third-party sources.

4. HOW WE USE YOUR PERSONAL DATA AND OUR LAWFUL BASES

We will only use your personal data where the law allows us to. The table below sets out the purposes for which we process your personal data and the lawful basis under Article 6 of the UK GDPR on which we rely for each purpose. Where we rely on legitimate interests, we have identified the interest concerned.

We do not sell your personal data, and we do not use your personal data for online behavioural advertising or share it with advertising networks.

We do not make any decision about you based solely on automated processing which produces legal effects concerning you or similarly significantly affects you.

5. MARKETING

We will only send you marketing communications by electronic means where you have opted in to receive them or, where permitted by law, where you are an existing customer and the communication relates to our similar products and services and you have not opted out. Every marketing email we send includes a means of unsubscribing, and you can ask us to stop sending you marketing communications at any time by contacting us at [email protected].

6. COOKIES

Our site uses cookies and similar technologies. For details of the cookies we use, the purposes for which we use them, and how you can control them, please see our Cookie Policy.

7. WHO WE SHARE YOUR PERSONAL DATA WITH

We may share your personal data with:

• any member of our group, meaning our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the Companies Act 2006;
• service providers acting as processors who provide IT, hosting, website development, communications and system administration services;
• professional advisers acting as processors or controllers, including lawyers, accountants, insurers and bankers, who provide consultancy, legal, insurance, accounting and banking services;
• HM Revenue & Customs, regulators and other authorities who require reporting of processing activities in certain circumstances; and
• third parties to whom we may choose to sell, transfer or merge parts of our business or our assets, or whose business or assets we may seek to acquire. If a change happens to our business, the new owners may use your personal data in the same way as set out in this privacy policy.

We may also disclose your personal data where we are under a duty to do so in order to comply with any legal obligation, or in order to enforce or apply our terms of use or to protect the rights, property or safety of Rx-info, our customers or others, including exchanging information with other companies and organisations for the purposes of fraud protection.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

8. INTERNATIONAL TRANSFERS

Your personal data is stored on secure servers located in the United Kingdom. Where personal data is transferred from the UK to the EEA, that transfer is permitted under the UK’s adequacy regulations.

If we transfer your personal data to any other country outside the UK, we will ensure that a similar degree of protection is afforded to it by ensuring that an appropriate safeguard is in place, such as the UK International Data Transfer Agreement or the UK Addendum to the European Commission’s Standard Contractual Clauses, or that the destination country has been the subject of UK adequacy regulations.

9. DATA SECURITY

We have put in place appropriate technical and organisational measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

The transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk.

10. DATA RETENTION

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it and whether we can achieve those purposes through other means, and the applicable legal requirements. Details of retention periods for different aspects of your personal data are available in our retention policy, which you can request from us using the contact details above.

11. YOUR LEGAL RIGHTS

Under data protection law you have the following rights in relation to your personal data:

• You have the right to request a copy of the personal data we hold about you (commonly known as a “data subject access request”) and to check that we are lawfully processing it.
• You have the right to request correction of any incomplete or inaccurate personal data we hold about you, though we may need to verify the accuracy of the new data you provide to us.
• You have the right to ask us to delete or remove personal data where there is no good reason for us continuing to process it, where you have successfully exercised your right to object, where we may have processed your data unlawfully, or where we are required to erase it to comply with law. We may not always be able to comply with your request for specific legal reasons, which will be notified to you at the time of your request if applicable.
• You have the right to object to processing of your personal data where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object. You also have an absolute right to object at any time to the processing of your personal data for direct marketing purposes.
• You have the right to ask us to suspend the processing of your personal data in certain scenarios: if you want us to establish the data’s accuracy; where our use of the data is unlawful but you do not want us to erase it; where you need us to hold the data to establish, exercise or defend legal claims; or where you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
• You have the right to request that we transfer your personal data to you or to a third party in a structured, commonly used, machine-readable format. This right applies only to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
• Withdrawal of consent. Where we are relying on consent to process your personal data, you may withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before you withdraw your consent.

Exercising your rights

You can exercise any of these rights at any time by contacting us at [email protected] or at the address above. You will not usually have to pay a fee to exercise your rights; however, we may charge a reasonable fee, or refuse to comply, if your request is clearly unfounded, repetitive or excessive.

We may need to request specific information from you to help us confirm your identity. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

We will respond to all legitimate requests within one month. Where we reasonably need further information from you to identify the information sought or to confirm your identity, the period for responding does not begin to run (or is paused) until you have provided it, and we will tell you if that is the case. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests; in that case we will notify you and keep you updated.

12. THIRD-PARTY LINKS

Our site may, from time to time, contain links to and from the websites of our partner networks and other third parties. If you follow a link to any of these websites, please note that they have their own privacy policies and that we do not accept any responsibility or liability for those policies. Please check those policies before you submit any personal data to those websites.

13. CHANGES TO THIS PRIVACY POLICY

Any changes we make to our privacy policy in the future will be posted on this page and, where the changes are significant, notified to you by email where we hold your email address. This policy was last updated in July 2026.

Rx-info Ltd

Registered in England and Wales, Company Number 04981011

Registered office: 1 Colleton Crescent, Exeter, Devon, England, EX2 4DG

Trading address: Exeter Science Park Centre, 4 Babbage Way, Science Park, Clyst Honiton, Exeter, EX5 2FN