Privacy Policy

The data controller is PharmaSi Prep Ltd (registered in England and Wales, company number 17442114), trading as PharmaSi Prep, whose registered office is at Apartment 2606, 12 Bankside Boulevard, Salford, England, M3 7HZ.

[CONFIRM: ICO registration number — register at ico.org.uk and put the number here]

For anything about your data, email support@pharmasiprep.co.uk.

We never receive your card details. Card data goes directly to Stripe, who are certified to handle it. We only ever see a reference and whether the payment succeeded.

We do not ask for, and do not want, health data, GPhC registration numbers, or anything about your employer. Please do not send us any.

We use a small number of suppliers to run the service. Each one processes data only on our instructions.

• Supabase — the database and sign-in system. Holds your account and your exam data.
• Vercel — hosting. Serves the site and keeps short-lived request logs.
• Stripe — payments. Handles your card and sends your receipt. Stripe is a controller in its own right for fraud prevention; see their privacy policy.
• SiteGround — our domain and the mailbox that account emails are sent from.
• Google — analytics, plus cross-device recognition and audience demographics through Google signals, only if you accepted analytics cookies.
• Meta — the Facebook and Instagram advertising pixel, only if you accepted analytics cookies.

We do not sell your data, and we do not give it to anyone else — unless we are legally required to, or you ask us to. The one exception to keep in mind is the advertising pixel described below: if you accept it, Meta receives data about your visit and uses it to build advertising audiences. That is the whole purpose of it, and it is why we ask first rather than assume.

Your data is held by these providers on infrastructure that may be located in the United Kingdom, the European Economic Area, or the United States. Where your personal data is transferred outside the UK, that transfer is protected by appropriate safeguards — the UK International Data Transfer Addendum, or the European Commission’s Standard Contractual Clauses.

Essential cookies. Our sign-in system sets cookies to remember that you are signed in and to keep your session secure. Without them you could not stay signed in through an exam. These do not require your consent and cannot be turned off while you use an account.

Analytics and advertising cookies. We use Google Analytics to see which pages people find useful, and the Meta (Facebook and Instagram) pixel to understand which of our posts bring people here and to show our adverts to people similar to our visitors.

Cross-device recognition and audience data. We have Google signals switched on. If you are signed in to a Google account that has Ads Personalisation enabled, this lets Google recognise that the same person visited from a phone and a laptop, and lets us see the broad age range, gender and interest categories of our visitors as a group. The Meta pixel works similarly for people signed in to Facebook or Instagram.

To be clear about the limits of that: we see groups, never individuals. Google and Meta do not tell us your name, your email address or that any particular person visited. Reports are withheld entirely when too few people match, precisely so nobody can be identified from them.

All of it only loads if you accept. Nothing is set before you choose. If you decline, no analytics or advertising script is loaded at all — not loaded-but-disabled, simply absent, and none of the above happens. The site behaves identically either way, and declining is exactly one click, the same as accepting.

To change your mind, clear this site’s data in your browser settings and you will be asked again on your next visit. You can also opt out of Google Analytics across all sites using Google’s browser add-on, and control ad personalisation in your Facebook and Instagram settings. You can also turn off the cross-device recognition described above for every site at once, by switching off Ads Personalisation in your Google Ad Centre.

Where we use these, Google and Meta act as controllers of the data they collect in their own right. What they do with it is governed by their own privacy policies, which we do not control.

• Your account and exam results — until you ask us to delete them, or until the account has been dormant for three years.
• Order and payment records — six years after the end of the relevant tax year, because HMRC requires it. This is why deleting your account does not delete your invoices.
• Mailing list entries — until you unsubscribe or ask us to remove you, which we action immediately.
• Technical logs — a short rolling window, typically no more than 30 days.

Under UK data protection law you can ask us to:

• give you a copy of the data we hold about you;
• correct anything inaccurate;
• delete your data — subject to the accounting records above;
• restrict or object to how we use it;
• send it to you, or to somebody else, in a portable format.

Email support@pharmasiprep.co.uk from the address on your account. We will respond within one month, and we will not charge you for it.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk, or on 0303 123 1113. We would rather you told us first, so we can put it right.

This service is for trainee and qualified pharmacy professionals and is not intended for anyone under 16. We do not knowingly collect data from children.

If we change how we use your data we will update this page and change the date at the top. If the change is significant, we will email you about it rather than hoping you notice.

See also our Terms and Conditions.