Privacy Policy
This policy explains how MyStockWatch collects and uses personal data, and what rights you have. It applies to visitors to this website, people who create or use a MyStockWatch account, and people whose business contact details appear when a customer uses the Goods-In Scanner or the brand-manager platform.
1. Who we are
MyStockWatch is a trading name of CPA Healthcare Training Ltd, registered in England and Wales, company number 13810197, registered office Fergusson House, 124 City Road, London EC1V 2NX, which operates this website, the scanner at scan.mystockwatch.co.uk and the platform at app.mystockwatch.co.uk.
For any privacy question or request, contact us through the MyStockWatch platform at app.mystockwatch.co.uk. We have not set out a Data Protection Officer on this page.
2. Our roles
- When a pharmacy customer uses the Goods-In Scanner and platform, the customer is the controller of its pharmacy data — for example pack scans, orders, invoices, price discrepancies, and branch user accounts. MyStockWatch is the processor of that data, and processes it only on the customer’s instructions in order to provide the service. Those processor terms are described on our Data processing page.
- MyStockWatch is the controller of personal data we hold in order to operate accounts and billing — for example the name, email address and password of a person who creates an account, and billing records for the subscription.
- For this website, MyStockWatch is the controller of any personal data collected from visitors, as described below.
3. The personal data we collect
As a controller, we may collect:
- Account and billing details: name, business or pharmacy name, email address, password, and related account information. A company number may be provided if you choose to supply it when you create an account.
- Contact and enquiry details: if you get in touch, we will keep what you send us so we can reply.
- Website technical data: when you visit this website, our hosting provider may automatically process technical data needed to deliver the site and keep it secure, such as your IP address, browser type, the pages requested and the date and time. We do not use marketing or analytics cookies on this website. See our Cookie Notice.
As a processor, on the customer’s behalf, we may process:
- Pack and delivery details from scans, including the branch, staff name or initials, barcodes (such as a GTIN), product names, batch, expiry and serial, a delivery note or invoice number, and a photograph of a pack if staff take one.
- Orders, invoices, price discrepancies, and claims or credit-note records that the customer uses the platform to manage.
- Branch user accounts, such as a staff first name or initials saved on a scanner, and manager login details for the branches they are given.
We do not intend to collect patient information, or other special category data about patients. The service is designed to keep pack, delivery, order and invoice details only. Please do not enter patient information into the service.
4. How we use your data and our lawful basis
| Purpose | Lawful basis (UK GDPR Article 6) |
|---|---|
| Providing the service, managing accounts, and billing | Performance of a contract, or steps at your request before entering into a contract |
| Replying to an enquiry | Legitimate interests (responding to people who contact us), or steps at your request before entering into a contract |
| Running, securing and improving the website and the service | Legitimate interests |
| Keeping accounting and tax records | Legal obligation |
| Establishing, exercising or defending legal claims | Legitimate interests |
Where we rely on legitimate interests, we balance those interests against your rights. You can object at any time (see section 8).
We will not send you marketing emails unless you have asked us to, or another lawful basis applies and we have told you about it.
5. Who we share your data with
We do not sell personal data. We share it only with:
- Service providers who host or help us operate this website and the Goods-In Scanner service, acting on our instructions.
- Professional advisers, such as accountants or lawyers, where needed.
- A buyer or successor if all or part of the service is sold or reorganised.
- Authorities, regulators, law enforcement or courts, where the law requires it.
When we process pharmacy data as a processor, we do so for the customer, and we only use further processors as described on the Data processing page.
6. International transfers
Some providers may process data outside the UK. Where that happens, we will make sure the transfer is protected by a lawful mechanism under UK data protection law, such as UK adequacy regulations or an International Data Transfer Agreement.
7. How long we keep your data
- Account and billing records: kept for as long as needed to meet accounting and tax rules.
- Pharmacy data we process for a customer: for the life of the customer’s account, and then returned or deleted as described on the Data processing page.
- Website technical logs: kept by our hosting provider for a short period in line with its own retention policy.
- Enquiries: kept only for as long as needed to deal with the enquiry.
8. Your rights
Under UK data protection law you have the right to:
- access your personal data and get a copy of it;
- have inaccurate data corrected or incomplete data completed;
- have your data erased in certain circumstances;
- restrict how we use your data in certain circumstances;
- object to our use of your data based on legitimate interests, and object at any time to direct marketing (we will always stop);
- data portability, meaning you can receive data you gave us in a reusable format, where processing is based on consent or contract and carried out by automated means;
- withdraw consent at any time, where we rely on consent.
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
To use any of these rights, contact us through the MyStockWatch platform at app.mystockwatch.co.uk. We will respond within one month. This can be extended by up to two further months for complex requests, and we will tell you if that happens. We may need to confirm your identity. There is usually no fee.
If you are a member of a customer’s staff and we hold your details only as a processor, we will pass your request to that customer, who is the controller of that data.
9. Complaints
If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator:
- Website: ico.org.uk/make-a-complaint
- Phone: 0303 123 1113
- Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
10. Security
We use appropriate technical and organisational measures to protect personal data.
11. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.