P

pills

Legal Documents

Pills Platform

Privacy Policy

Effective Date: 25 August 2026

At Pills, we take privacy, security and the responsible handling of information seriously.

This Privacy Policy explains how Pills (“Pills”, “we”, “us” or “our”) collects, uses, stores and protects personal information when you use the Pills platform, including our web applications and the Pills Companion mobile application.

The Pills platform includes:

  • Pills Code
  • Pills Deliver
  • Pills Prescribe
  • Pills Stock
  • Pills Verify
  • Pills Pay
  • Pills Companion

This Privacy Policy applies to information collected through our websites, applications, services and Pills Companion, unless a separate privacy notice is provided for a particular service or processing activity.


1. Who We Are

The Pills platform is operated by: Nipharm Phamacies - [manager@nipharm.co.uk]

For privacy-related questions or requests, you can contact us using the details above.

Where Pills provides services to a pharmacy, pharmacy group or other organisation, that organisation may also have responsibilities as a data controller for information processed through the Pills platform.

2. Information We Collect

Depending on how you use Pills, we may collect and process different categories of information.

Account and User Information

This may include:

  • Name
  • Email address
  • Telephone number
  • Username or account identifier
  • Organisation or pharmacy name
  • Role or job title
  • Login and authentication information
  • Account preferences
  • User permissions and access information

Pharmacy and Organisation Information

Where Pills is used by a pharmacy or organisation, we may process information relating to that organisation, including:

  • Pharmacy name
  • Business contact information
  • Organisation details
  • User and staff account information
  • Configuration information
  • Subscription and service information
  • Operational information generated through use of the platform

Information Processed Through Pills Applications

Depending on the Pills application you use, information may include data relating to:

  • Prescriptions
  • Pharmacy workflows
  • Stock and inventory
  • Delivery workflows
  • Verification processes
  • Payments
  • Product and medication information
  • Operational records
  • Documents and records processed by the pharmacy

The exact information processed depends on how your pharmacy or organisation configures and uses the relevant Pills services.

3. Pills Companion

Pills Companion is the mobile companion application for the Pills platform.

Depending on the features you use, Pills Companion may request access to your device's camera and may process information captured through the camera.

QR Code Scanning

Pills Companion can scan QR codes.

Information contained within a QR code may be captured and processed as part of the relevant Pills workflow.

Data Matrix Scanning

Pills Companion can scan Data Matrix codes.

Information contained within a Data Matrix code may be captured and processed as part of the relevant Pills workflow.

Document Scanning

Pills Companion can allow users to capture documents using the device camera.

Documents captured through the application may contain personal, pharmacy, business, prescription or other information.

You should only capture documents where you have the appropriate authority and lawful basis to do so.

OCR Processing

Pills Companion may use Optical Character Recognition (“OCR”) technology to extract text or information from captured documents.

OCR processing may convert information contained in an image into machine-readable information.

Because OCR technology may occasionally produce errors, extracted information may need to be reviewed and verified by the user before it is relied upon.

4. Camera Permission

Pills Companion requires access to your device camera for features such as:

  • QR code scanning
  • Data Matrix scanning
  • Document scanning

Camera access is requested through the permissions provided by your mobile operating system.

We do not use the camera for unrelated purposes.

You can manage camera permissions through your device settings. If camera access is disabled, certain Pills Companion features may not function.

5. Information Collected Automatically

When you use Pills or Pills Companion, we may collect certain technical information automatically.

This may include:

  • Device type
  • Operating system
  • Application version
  • Browser type
  • IP address
  • Approximate technical location derived from IP address where required for security or service operation
  • Device identifiers where applicable
  • Crash reports
  • Error logs
  • Performance information
  • Login dates and times
  • Features used
  • Basic diagnostic information

We use this information primarily to:

  • Operate the Services;
  • Maintain security;
  • Detect errors;
  • Diagnose technical problems;
  • Improve reliability;
  • Understand how features are used; and
  • Improve the performance of our applications.

6. How We Use Your Information

We use personal information only where we have an appropriate legal basis to do so.

Depending on the circumstances, we may use information to:

  • Create and manage accounts;
  • Provide Pills services;
  • Provide Pills Companion functionality;
  • Process and transmit scanned information;
  • Process documents and OCR results;
  • Support pharmacy workflows;
  • Manage stock and operational processes;
  • Support delivery workflows;
  • Support verification processes;
  • Support payment-related workflows;
  • Provide customer and technical support;
  • Maintain application security;
  • Detect and prevent misuse;
  • Diagnose technical issues;
  • Improve application performance;
  • Develop and improve our Services;
  • Communicate important service information;
  • Meet legal and regulatory obligations; and
  • Protect our rights, users and systems.

We will not use personal information for purposes that are incompatible with the purposes described in this Privacy Policy unless we have a lawful basis to do so and provide any additional information required by law.

7. Legal Bases for Processing

UK data protection law requires organisations to have a lawful basis for processing personal information.

Depending on the circumstances, Pills may rely on one or more of the following lawful bases:

Contract

Where processing is necessary to provide the Services under an agreement with you or the organisation you represent.

Legal Obligation

Where processing is necessary for Pills to comply with a legal or regulatory obligation.

Legitimate Interests

Where processing is necessary for our legitimate interests, or those of another party, provided those interests are not overridden by your rights and interests.

Examples may include maintaining service security, preventing misuse, providing technical support and improving service reliability.

Consent

Where we rely on consent for a particular processing activity, we will request consent where required and explain how you can withdraw it.

Other Lawful Bases

Where appropriate, we may rely on another lawful basis permitted under applicable data protection law.

We determine and document the appropriate lawful basis for each processing activity.

8. Health and Pharmacy Information

Pills is designed for pharmacy environments and may process information that relates to medicines, prescriptions, patients or healthcare activities.

Some information concerning an individual's health may constitute special category data under UK GDPR and receives additional protection. Where we process special category data, we must identify both an Article 6 lawful basis and an appropriate Article 9 condition, together with any additional requirements that may apply.

The precise legal basis and role of Pills will depend on the specific service, processing activity and relationship between Pills and the organisation using the platform.

Where Pills processes personal information on behalf of a pharmacy or organisation, that organisation may determine the purposes and means of the processing and may act as the relevant data controller.

Pills will process such information in accordance with applicable contractual arrangements and data protection requirements.

9. Information Processed Through Scanning

When you use Pills Companion to scan a QR code, Data Matrix code or document, the information captured may be transmitted to Pills systems where required to provide the relevant functionality.

The information contained within a code or document is determined by the source material and may contain personal or sensitive information.

You are responsible for ensuring that you have the appropriate authority to scan and process the information.

Pills does not intentionally collect unrelated information from your device simply because you use the scanning functionality.

10. How We Use Documents and OCR Information

Documents captured through Pills Companion may be processed to provide document scanning and OCR functionality.

Depending on the workflow, information extracted from documents may be:

  • Temporarily processed;
  • Stored within the Pills platform;
  • Associated with an authorised pharmacy workflow;
  • Transmitted between the mobile application and Pills systems; or
  • Used to populate information within an authorised Pills application.

The exact handling of scanned documents depends on the particular Pills service and configuration.

We do not use document contents for advertising purposes.

11. Information We Do Not Collect Through Pills Companion

Pills Companion does not require access to your:

  • Contacts;
  • Microphone;
  • Call history;
  • SMS messages; or
  • Personal photo library

unless a particular feature is introduced that requires such access and you are informed about the purpose and asked for the relevant permission.

The camera is used for the scanning and document-capture functionality described in this Privacy Policy.

12. Data Sharing

We do not sell personal information.

We may share or provide access to personal information where necessary to operate the Services, comply with legal obligations or provide services requested by you or your organisation.

This may include sharing information with:

Service Providers

Trusted third-party providers that support services such as:

  • Cloud hosting
  • Data storage
  • Infrastructure
  • Application monitoring
  • Security
  • Communications
  • Customer support
  • Technical services
  • Error and crash reporting

Where third parties process personal information on our behalf, we seek to ensure that appropriate contractual and security arrangements are in place.

Your Organisation

If you use Pills through a pharmacy, company or other organisation, authorised administrators within that organisation may be able to access information associated with your account or workflows according to the permissions and configuration established by that organisation.

Legal and Regulatory Authorities

We may disclose information where required by law, regulation, court order or other lawful request.

We may also disclose information where reasonably necessary to protect the rights, safety, security or property of Pills, our users or others.

13. International Data Transfers

Some of our service providers or technology infrastructure may process information outside the United Kingdom.

Where personal information is transferred internationally, we will take steps required by applicable data protection law to ensure that appropriate safeguards are in place.

These safeguards may include an adequacy decision, approved contractual safeguards or another lawful transfer mechanism.

Further details about relevant international transfers can be provided where required.

14. Data Security

We use appropriate technical and organisational measures designed to protect personal information against:

  • Unauthorised access;
  • Accidental loss;
  • Destruction;
  • Alteration;
  • Disclosure; and
  • Other unlawful or unauthorised processing.

Security measures may include access controls, authentication, encryption where appropriate, monitoring, logging and other technical safeguards.

However, no internet transmission, software application, device or storage system can be guaranteed to be completely secure.

Users are also responsible for maintaining appropriate security of their accounts and devices.

15. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, or for as long as required by applicable legal, regulatory, contractual or operational requirements.

Retention periods may vary depending on:

  • The type of information;
  • The purpose for which it is processed;
  • The Pills service being used;
  • The relationship with the relevant organisation;
  • Legal or regulatory requirements; and
  • Security and dispute-resolution requirements.

We do not retain personal information indefinitely without a reason.

Where information is no longer required, we will seek to delete or anonymise it in accordance with our applicable retention procedures.

UK GDPR's storage-limitation principle requires organisations to justify how long personal data is retained and generally not keep it longer than necessary.

16. Your Data Protection Rights

Depending on the circumstances and applicable law, you may have rights including:

  • The right to be informed about how your information is used;
  • The right to access personal information we hold about you;
  • The right to request correction of inaccurate information;
  • The right to request deletion of personal information;
  • The right to request restriction of processing;
  • The right to object to certain processing;
  • The right to data portability; and
  • Rights relating to automated decision-making and profiling where applicable.

These rights are subject to legal exceptions and limitations.

If Pills processes your personal information on behalf of your pharmacy or organisation, you may need to exercise certain rights through that organisation as the relevant data controller.

17. Account and Data Deletion

If you want to request deletion of your Pills account or personal information, please contact us using the details provided below.

Where your information is processed by Pills on behalf of a pharmacy or other organisation, we may need to refer your request to that organisation.

Deletion may not always be possible where we are required or permitted by law to retain certain information.

18. Cookies and Similar Technologies

Our website may use cookies and similar technologies to:

  • Operate the website;
  • Remember preferences;
  • Understand website performance;
  • Maintain security; and
  • Improve the user experience.

Where required, we will request appropriate consent before placing non-essential cookies or similar technologies on your device.

Pills Companion may use technically necessary technologies required to operate the application.

19. Analytics and Diagnostics

We may use technical analytics, monitoring and diagnostic tools to understand application performance and identify technical problems.

This may include information such as:

  • Application crashes;
  • Device type;
  • Operating-system version;
  • Application version;
  • Performance metrics;
  • Error information; and
  • Basic usage information.

We will seek to limit this information to what is reasonably necessary for the relevant purpose.

Any third-party analytics or diagnostic providers used by Pills should be identified in our internal records and, where required, in appropriate privacy information.

20. Marketing Communications

We may occasionally contact users or organisations about Pills products, services, updates or other relevant information where permitted by applicable law.

Where marketing consent is required, we will request it appropriately.

You can unsubscribe from marketing communications at any time using the unsubscribe mechanism provided in the communication or by contacting us.

Service, security and account-related communications may still be sent where necessary to provide the Services.

21. Children's Privacy

Pills is designed primarily for pharmacy professionals, organisations and authorised users.

Our Services are not intended to be used independently by children.

We do not knowingly collect personal information from children for purposes unrelated to the provision of our Services.

If you believe that a child has provided personal information to Pills inappropriately, please contact us so that we can review the situation.

22. Third-Party Services

Pills may integrate with or rely upon third-party services, including infrastructure providers, payment providers, communication services, app stores, analytics providers and other technology providers.

These third parties may process information according to their own privacy policies and contractual arrangements.

Where appropriate, we will provide information about relevant third-party processing in our privacy documentation.

23. App Store and Mobile Platform Privacy

Pills Companion is distributed through third-party mobile application stores, including the Apple App Store and Google Play.

Apple and Google may collect certain information independently when you download or use applications through their platforms.

Their processing is governed by their respective privacy policies and terms.

Pills does not control the privacy practices of Apple, Google or other third-party platform providers.

24. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Changes may be made to reflect:

  • New Pills features;
  • Changes to Pills Companion;
  • Changes to our data-processing activities;
  • Changes to technology;
  • Changes to legal or regulatory requirements; or
  • Other operational changes.

When we make material changes, we may notify users through the website, application or other appropriate communication channels.

The “Effective Date” at the beginning of this Privacy Policy indicates when the current version became effective.

25. Complaints

If you have concerns about how we process your personal information, we encourage you to contact us first so that we can investigate and attempt to resolve your concern.

You also have the right to raise a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO), where you believe your data protection rights have been infringed.

Information about contacting the ICO is available through its official website.

© 2026 Pills. All rights reserved.

© 2026 Pills. All rights reserved.