Privacy Policy
Last Updated: 25 October 2025
JRH Pharma Ltd ("we," "us," or "our") is committed to protecting the privacy and security of the information we process. This Privacy Policy describes how we collect, use, and protect information in our capacity as a healthcare management and technology consultancy.
This policy applies to our business-to-business operations and our role as an Integrated Care Services Provider (ICSP), providing administrative, logistical, and platform support services to medical clinics and pharmacies ("Partner Organisations").
Our Role
It is important to understand that JRH Pharma Ltd is a non-clinical entity. We do not provide clinical services, employ clinicians, prescribe, or dispense medications. Our services are strictly administrative, technological, and logistical, designed to support the operations of our Partner Organisations.
Our Partner Organisations (e.g., medical clinics, pharmacies) are separate legal entities and act as the Data Controllers for their patient data. Our processing of any patient data is done strictly on their behalf and under their instruction as a Data Processor.
Information We Process
We process information in two main categories:
- Business Contact Information: We collect and process information about the staff and directors of our Partner Organisations, as well as our own consultants and technology partners. This includes names, email addresses, roles, and financial information necessary for managing contracts and processing payments.
- Data Processed on Behalf of Partners: In providing our platform and administrative services, we may process personal data, including patient data, on behalf of our Partner Organisations. In this context, the Partner Organisation is the Data Controller, and we are the Data Processor. We only process this data in accordance with our formal Service Level Agreements and Data Processing Agreements.
How We Use Information
Our use of information is limited to our defined business purposes:
- To provide, maintain, and improve our non-clinical management and compliance support services.
- To operate and secure our digital infrastructure and platforms, which enable coordination between our Partner Organisations.
- To manage supply chain and logistics consultancy on behalf of our partners.
- To manage our contracts, invoices, and financial accounts.
- To ensure rigorous governance and auditability in line with our legal and professional standards.
Data Sharing and Disclosure
We do not sell any personal information. We only share information in the following limited circumstances:
- With Partner Organisations: To facilitate the integrated-care framework, such as securely coordinating information between a clinical provider and a dispensing pharmacy, as instructed by those partners.
- With Our Service Providers: We engage third-party consultants and technology providers (e.g., payment processors, logistics services) to perform functions on our behalf. These providers are bound by formal agreements and confidentiality terms.
- For Legal and Compliance Reasons: We may disclose information if required by law, regulation, or a valid legal request, or to protect our rights and ensure adherence to our compliance framework.
Data Security and Compliance
We take data security seriously. We maintain a full suite of governance policies, including a Data Protection & Access Control Policy, to ensure all information is protected.
We are committed to ensuring our systems and procedures comply with UK data protection laws, including the UK General Data Protection Regulation (UK GDPR). We ensure that clear functional separation is maintained between prescribing, dispensing, and our administrative functions to protect data integrity and confidentiality.
Your Data Rights
As we primarily act as a Data Processor for patient data, any requests from individuals regarding their health data (e.g., access, correction, deletion) should be directed to the relevant Partner Organisation (e.g., the clinic you attend) who is the Data Controller.
For any Business Contact Information we hold as a Data Controller, you have rights under UK GDPR, including the right to access, correct, or request deletion of your data. Please contact us using the information below.
Contact Us
JRH Pharma Ltd
Email: info@jrhicsp.com
Registered Address: Elthorne Gate, 64 High Street, Pinner, England, HA5 5QA