Privacy Policy

Apotec Mobile

About

This Privacy Policy explains how Apotec Ltd handles information when Apotec Mobile is used.

Apotec Mobile is a companion application for Apotec CRM and is intended for use by authorised pharmacy staff. It allows pharmacy teams to access and perform selected Apotec CRM functions from an Android device, including prescription storage, barcode scanning, patient searches and prescription handout workflows.

Apotec Ltd is registered in England and Wales under company number 12941289. Our registered contact address is Camburgh House, 27 New Dover Road, Canterbury, Kent, CT1 3DN.

We may modify this Privacy Policy at any time without prior notice and will publish the revised Privacy Policy on our website. The revised policy will take effect from the latest effective date shown on our website. Your continued use of Apotec Mobile following any changes will constitute your acceptance of the revised Privacy Policy.

Our role

For patient information processed through Apotec CRM and Apotec Mobile, the pharmacy or pharmacy organisation using Apotec CRM is the data controller. Apotec Ltd acts as a data processor and processes that information on the pharmacy's instructions.

Apotec may act as a data controller for limited information relating to the administration, security, support and operation of our own services.

Information processed though Apotec Mobile

Apotec Mobile uses an existing Apotec CRM user account. Accounts cannot be created through the mobile application.

Depending on the functions being used, Apotec Mobile may process:

  • account and authentication information required to sign in to Apotec CRM and determine the pharmacy sites and functions a user is authorised to access;

  • patient information available within Apotec CRM that is required to perform the selected function, which may include identification, prescription, medication, dispensing, delivery, bag location and other pharmacy-related information;

  • barcode information scanned by the user when managing prescription bags and storage locations;

  • technical information required for the operation, compatibility, security and updating of the application, such as application version, operating system, platform and device architecture.

Patient information may include health information and other special category personal data where this is necessary for the pharmacy service being provided.

Camera access

Apotec Mobile uses the device camera for barcode scanning.

Camera access is used to read barcodes required for Apotec Mobile functions, such as identifying prescription bags and storage locations. It is not used for advertising or marketing purposes.

How information is used

Information processed through Apotec Mobile is used to:

  • authenticate authorised Apotec CRM users;

  • provide Apotec CRM functions through the mobile application;

  • allow pharmacy teams to manage prescription storage, handout and related workflows;

  • maintain the security, reliability and operation of the service;

  • provide application updates, technical support and troubleshooting.

Apotec Mobile does not use patient information for advertising, targeted advertising or marketing.

Apotec does not sell patient or Apotec Mobile user information.

Sharing of information

Patient and pharmacy information processed through Apotec Mobile is transmitted to and processed within the systems used to provide Apotec CRM.

Apotec may use service providers to provide infrastructure, authentication, software delivery and other services necessary to operate Apotec CRM and Apotec Mobile. These providers are only permitted to process information for the purposes of providing their services to Apotec and are subject to appropriate contractual and security requirements.

Apotec Mobile uses an application update service which may process limited technical information, such as the application version, platform, device architecture and an anonymous application identifier, in order to check for and deliver software updates. This information does not include patient information.

We may also disclose information where required by law, regulation, court order or another lawful requirement.

Security

Apotec uses appropriate technical and organisational measures designed to protect information processed through Apotec Mobile against unauthorised access, loss, misuse, alteration or disclosure.

Access to Apotec Mobile requires an authorised Apotec CRM account and access is restricted according to the user's organisation, pharmacy site and permissions.

No method of electronic transmission or storage can be guaranteed to be completely secure, but Apotec regularly reviews the measures used to protect the systems and information under its control.

Data retention and deletion

Patient information accessed through Apotec Mobile forms part of the information held within Apotec CRM. The pharmacy or pharmacy organisation is responsible for determining how long patient information must be retained, subject to applicable legal, regulatory and professional requirements.

Apotec processes and retains this information in accordance with the instructions of the relevant pharmacy, our contractual obligations and applicable law.

Apotec Mobile does not provide users with the ability to create a separate mobile account. Access is provided through an existing Apotec CRM account. If a user's Apotec CRM access is removed or disabled, they will no longer be able to access Apotec Mobile using that account.

Limited technical, security and support information may be retained for as long as reasonably necessary to operate, protect and support the service or to meet legal and regulatory requirements.

Your rights

If you are a patient and wish to exercise your data protection rights in relation to information held by your pharmacy, you should contact the pharmacy or pharmacy organisation responsible for your records. As the data controller, they are responsible for handling your request.

Where Apotec Ltd is the data controller for your personal information, you may have rights under applicable data protection law, including rights to access, correct or erase your personal data, restrict or object to processing, and make a complaint to a supervisory authority.

You can contact us regarding privacy or data protection matters at:

Email: datagov@apotec.com

Data Protection Officer Apotec Ltd Camburgh House 27 New Dover Road Canterbury Kent CT1 3DN United Kingdom.

Children

Apotec Mobile is a professional application intended for authorised pharmacy staff. It is not intended for use by children or by members of the public.

Other Apotec services

This Privacy Policy specifically covers Apotec Mobile.

Further information about Apotec's general privacy practices is available in the Apotec Privacy Policy at www.apotec.com/privacy-policy.

Changes to this Privacy Policy

We may update this Privacy Policy where our services, technology, legal requirements or data handling practices change.

Any revised Privacy Policy will be published on our website and will show the date on which the latest version became effective.