Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect:

• Your name and email address
• Your GP surgery name and address
• Your professional role (e.g., clinical pharmacist)

Usage Data

We collect anonymised usage data to improve our service, including:

• Pages visited and features used
• Interaction check frequency
• Browser type and device information
• Approximate location (country/region level only)

Medication Lists

When you use InteractRx to check drug interactions, medication lists are processed to provide results. These lists are associated with anonymous session identifiers, not patient records. We do not collect, store, or process any patient identifiable data -- no names, NHS numbers, dates of birth, or other personal patient information.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the InteractRx service
• Process your subscription and billing
• Send service-related communications (e.g., updates, security alerts)
• Improve our service based on anonymised usage patterns
• Respond to your support requests

We will never use your information for unsolicited marketing. You may opt in to receive product updates, but this is entirely optional.

3. Data Storage and Security

Your data is protected by the following measures:

• UK-hosted infrastructure: All data is stored on servers located in the United Kingdom
• Encryption at rest: All stored data is encrypted using AES-256 encryption
• Encryption in transit: All data transmitted between your browser and our servers uses TLS 1.3
• Access controls: Strict role-based access controls limit who can access data within our organisation
• Regular audits: We conduct regular security audits and vulnerability assessments

4. Your Rights Under GDPR

Under the UK General Data Protection Regulation (UK GDPR), you have the following rights:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate personal data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Request that we limit how we use your data
• Right to data portability: Request your data in a machine-readable format
• Right to object: Object to our processing of your personal data

To exercise any of these rights, contact us at privacy@interactrx.co.uk. We will respond to all requests within 30 days.

5. Cookies

InteractRx uses only essential and analytics cookies:

• Essential cookies: Required for the service to function (e.g., session management, authentication). These cannot be disabled.
• Analytics cookies: Help us understand how the service is used so we can improve it. These are anonymised and do not track you across other websites.

We do not use advertising cookies, tracking cookies, or any third-party cookies that follow you across the web.

6. Third Parties

We do not sell, rent, or share your personal data with third parties for their marketing purposes. We may share data with the following service providers who help us operate InteractRx:

• Hosting provider: UK-based cloud infrastructure for data storage
• Payment processor: For secure subscription billing (we do not store card details)
• Analytics: Anonymised usage analytics to improve the service

All third-party providers are bound by data processing agreements and are required to comply with UK GDPR.

7. Changes to This Policy

We may update this privacy policy from time to time. When we make significant changes, we will notify you via email or a prominent notice within the InteractRx application. We encourage you to review this page periodically.

The "Last updated" date at the top of this page indicates when the policy was most recently revised.

8. Contact Us

If you have any questions about this privacy policy or how we handle your data, please contact us:

• Email: privacy@interactrx.co.uk
• Post: InteractRx Ltd, Data Protection Officer, [Address]

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.