Privacy & Cookie Policy

1. Who we are

This policy explains how BritUn Ltd ("BritUn", "we", "us") collects and uses personal data, and your rights over it. BritUn is a specials head office service for community pharmacies.

We are the controller for the personal data we collect through our website and enquiries. Where we hold documents on a member pharmacy's behalf as part of our service, we act as a processor for that pharmacy, under the terms of the membership agreement.

2. The data we collect

We collect only the information you choose to give us, through:

• Founding reservation form — your name, pharmacy/organisation, email, area, monthly specials volume, your message, and your consent.
• Contact form — name, pharmacy/organisation, email, phone, and your message.
• Supplier enquiry form — company name, contact name, email, phone, licences held, product range, and your message.
• The Specials Money-Check Calculator — the figures you enter (sent to us when you press Calculate), and, if you request your report, your name, pharmacy and email so we can send it to you.
• Website usage data — anonymous, aggregated analytics via Umami, a privacy-friendly tool that uses no cookies and collects no personal data (see Section 9).

We collect business and professional contact data. We do not seek personal data beyond what's needed to respond to you and provide our service.

3. Patient and special-category data — out of scope

BritUn's service is designed so that patient-identifiable and other special-category data is not required and is not part of what we handle. We do not seek, request or require it, and we ask that you do not send it to us. You must not submit patient-identifiable or special-category data through our forms, calculator or correspondence.

4. Why we use your data, and our lawful basis

We process personal data relying on the lawful bases of legitimate interests, performance of (or steps prior to) a contract, consent where required, and legal obligation — to respond to enquiries, manage founding reservations and membership, provide and improve the service, onboard suppliers, market our own services (with opt-out), and meet legal obligations.

Where we rely on legitimate interests, we have weighed those against your rights and concluded our use is proportionate, and we process for these and other compatible related purposes. We may process the same personal data on more than one lawful basis depending on the purpose; where this is the case, more than one basis may apply. To confirm which basis applies to a particular activity, contact info@BritUn.co.uk.

5. Marketing

We may contact you about BritUn's services where we have a lawful basis. You can opt out at any time via the unsubscribe link in our emails or by contacting info@BritUn.co.uk. We market our own services only.

6. Anonymised and business data

Aggregated and anonymised data — trends, volumes and insights derived from how our service is used — is BritUn's confidential commercial information, which we may analyse, use and commercialise for any business purpose. It contains no personal information and is not subject to the restrictions in this policy.

7. Who we share data with

We never sell, rent or trade your personal data. We share it only with service providers (processors) acting on our behalf under contract (e.g. website host, forms and cloud-storage providers such as Microsoft, email tools), and with regulators or authorities where required by law. All providers must keep your data secure and within the UK or a jurisdiction with equivalent protection.

8. How long we keep it, and where

We keep personal data only as long as needed for the purposes above or as required by law, then securely delete it. Records held as part of the membership service are retained per the membership agreement. Data is stored on secure systems within the UK (or a jurisdiction offering equivalent protection). We keep form submissions only as long as they are needed for the founding programme and our launch communications, then delete them — and you can ask us to delete yours at any time via info@britun.co.uk.

9. Cookies & analytics

We use a privacy-friendly, cookieless analytics tool (Umami) to understand how our website is used — for example, which pages are visited and how visitors move through the site. It sets no cookies, stores no personal data, and does not track you across other websites; all data is aggregated and anonymous. Because it uses no cookies and no personal data, no cookie-consent banner is required. We do not use cookies for tracking or third-party advertising.

10. Your rights

Under UK GDPR you have the right to access, correct, delete, restrict or object to the use of your data, data portability, and to withdraw consent. To exercise any right, email info@BritUn.co.uk. You may also complain to the Information Commissioner's Office (ICO) at ico.org.uk.

11. Our commitment

All personal data is processed strictly in accordance with UK GDPR, the Data Protection Act 2018, and all applicable regulations. We keep our need to appoint a Data Protection Officer under review and will appoint one if and when required.

12. Changes

We may update this policy; the current version is always on this page, with the date above.

Contact: info@BritUn.co.uk