Who we are
Community Pharmacy Leicestershire & Rutland (CPL&R) is the data controller for Pharmacy Community Connect. CPL&R decides why and how personal data is processed for this app.
- Data-protection queries: privacy@pcc-app.co.uk
- App and account support: support@pcc-app.co.uk
- CPL&R website: leicestershire-rutland.communitypharmacy.org.uk
What this app is for
Pharmacy Community Connect is a members-only communications app for community pharmacy professionals linked to CPL&R. Access is by invitation or administrator approval. It is not a public social network, does not provide medical advice or clinical care, and does not hold patient records.
Personal data we process
| Data | Purpose |
|---|---|
| Email address and name | Sign-in, account identity, profile display, and office communications. |
| Optional phone number | Profile contact for the CPL&R office. It is not published in the premises directory. |
| Working pharmacy | Link an account to an LLR ODS code and its public premises details. |
| Account and technical identifiers | Clerk/app user ID, Expo push token or device identifier, IP address, and request/device metadata for authentication, security, hosting, and notification delivery. |
| Approximate location | Clerk or hosting providers may infer coarse location from an IP address for security and service delivery. The app does not request precise GPS location. |
| Message content | Provide office-initiated Messages threads between CPL&R and members. |
| Directory search terms | Return matching pharmacy premises. The app does not create a saved search-history profile, although provider request or security logs may record the query temporarily. |
| Product interactions | Pages and notices opened, read state, notification preferences, and service actions needed to operate the app. |
| Role and approval status | Distinguish members, contractors, and administrators and enforce access. |
| Optional MHRA read-confirm record | Record that a member acknowledged reading an alert when they enable this feature. It is not a biometric signature or clinical record. |
Some member, contact, and pharmacy information may already be held within the CPL&R ecosystem. Linking, transmitting, or displaying existing personal information in the app is still processing and is disclosed here.
What we do not collect
- No patient or NHS patient-identifiable data.
- No prescription, clinical, or care-record data.
- No precise GPS collection or background location tracking.
- No advertising identifiers or third-party advertising analytics.
Do not send patient details in Messages, profile fields, or support requests.
Why we process this data
We process data to provide and secure approved member accounts, deliver CPL&R member services, maintain the pharmacy directory, send important operational communications, and keep a minimal governance and security record. The intended UK GDPR bases are contract and legitimate interests, and legal obligation where a specific obligation applies. Optional profile phone and MHRA read-confirm features also rely on consent.
Push notifications
The app sends operational notifications for LPC notices, supported safety alerts, and office-started Messages. A notification may show the notice, alert, or message-thread subject plus a fixed prompt to open the app. Notification bodies do not contain message bodies, patient information, or clinical content. The app does not send marketing push notifications in this release.
Service providers and sharing
| Provider | Processing purpose |
|---|---|
| Clerk | Authentication, email verification, account management, and security metadata. |
| Neon | Application database for profiles, messages, notices, and related records. |
| Expo / EAS and platform push providers | Mobile build services and notification hand-off. |
| Vercel | API and web hosting, request processing, and security logs. |
Some processing may occur outside the UK under the providers' contractual safeguards. We do not sell personal data and do not use it for advertising or cross-app tracking.
Retention
| Record | Retention approach |
|---|---|
| Account, profile, and ODS link | Kept while the account is active and removed through the account-deletion process. |
| Messages | Kept while the thread exists; a member's replies and participation are removed on account deletion where permitted. |
| Push tokens, delivery records, read state, and preferences | Kept while needed to provide the service and removed through account deletion. |
| Directory search terms | Not deliberately stored as an app search-history record; they may remain temporarily in provider request or security logs. |
| Provider security and backup records | Retained under the applicable provider schedule and legal obligations. |
| Minimal administrator audit records | May remain where necessary for governance, security, fraud prevention, or legal claims. |
Your rights and account deletion
Depending on the circumstances, you may have rights to access, rectify, erase, restrict, or object to processing and to data portability. Contact privacy@pcc-app.co.uk.
Members can request deletion from Profile → Delete account. If you cannot sign in, follow the public account-deletion instructions or email support@pcc-app.co.uk. Administrators and accounts that own shared organisational content must contact support first so ownership can be transferred safely.
Public information and licensing
Pharmacy Community Connect is operated by CPL&R. It is not affiliated with or endorsed by the UK Government, GOV.UK, NHS, or MHRA and does not represent any of those organisations. MHRA and GOV.UK material is attributed to its source and, where applicable, is used under the Open Government Licence v3.0 .
Security
Access to member services is restricted to approved accounts. Traffic uses HTTPS. Secrets and database credentials are held in managed hosting environments and are not included in the mobile app binary. No internet service is risk-free; report suspected incidents to support@pcc-app.co.uk.