Privacy Notice

1. Introduction

We are the Prescriber and Pharmacist and the data controller of your personal data when you use the Platforms and the Services. Our Pharmacy is registered with the General Pharmaceutical Council, registration number 9011648.

This privacy notice describes how we, as a controller, protect personal data and respect privacy in accordance with data protection law, including the UK General Data Protection Regulation (UK GDPR).

2. Personal Data

How we collect your personal data

From the first moment you interact with GetWeightLoss, we are collecting your personal data. Sometimes you voluntarily provide it, sometimes it is collected automatically, and sometimes we collect it from third parties.

Why we collect your personal data

We process your personal data for the following purposes:

1. To provide the Services to you — including registering your account, connecting you to prescribers, and providing weight management services. Legal basis: Contract, Consent.
2. To fulfil your orders — processing orders, dispensing prescriptions, and delivering medication. Legal basis: Contract, provision of health treatment.
3. To communicate with you — dispatch information, customer support, automated responses. Legal basis: Contract, Legitimate interests.
4. To send you marketing — only where you have consented. Legal basis: Consent, Explicit Consent.
5. To improve GetWeightLoss — analytics, research and development. Legal basis: Legitimate interests, Consent.
6. To comply with the law — identity checks, record-keeping requirements. Legal basis: Legal obligation.

Who we share your data with

We share your personal data only when necessary and according to the safeguards in this notice: Partner Prescribers · Your GP (where consented) · Third party service providers · Our group companies · Regulators or authorities where legally required.

How we protect your personal data

We maintain appropriate physical, organisational and technical measures to prevent loss, misuse, unauthorised access, disclosure, or modification of personal data — including access controls, encryption and security audits.

How long we keep your personal data

We retain your personal data for as long as we have a valid purpose and as required to comply with applicable law, establish legal defences and resolve disputes.

3. Your Rights

You have the following rights in relation to your personal data (exercisable by emailing privacy@getweightloss.co.uk):

• Right to access — obtain a copy of your personal data
• Right to correction — request correction of inaccurate data
• Right to portability — receive your data in a structured, machine-readable format
• Right to erasure — ask us to delete your data in certain circumstances
• Right to object — object to processing for legitimate interests or direct marketing
• Right to restrict processing — limit how we use your data
• Right to withdraw consent — where processing is based on consent
• Right to lodge a complaint — with the ICO at ico.org.uk

4. General Provisions