Pharmaceutical Press Privacy Policy
Version 5.0 (updated April 2026)
Organisation: Pharmaceutical Press Limited (“PhP Ltd”, “we”, “our”, “us”) — a wholly owned subsidiary of the Royal College of Pharmacy.
Scope: This policy covers personal data processing carried out by Pharmaceutical Press Limited in connection with our publishing, subscription, e‑commerce and digital knowledge services offered via our owned sites and apps (together, the “PhP Services”).
Introduction
PhP Ltd is the controller of personal data obtained when you visit our sites, create an account, purchase printed titles, digital subscriptions or license our data, use our apps and forums, or interact with our editorial teams and support channels.
We comply with UK GDPR, the Data Protection Act 2018 and the Digital United Adequacy Act 2025 (DUAA).
Children under 18 are not the target audience of our services.
What This Policy Applies To
- www.pharmaceuticalpress.com, www.medicinescomplete.com, bnf.org (and the BNF + BNFC app), and www.formularycomplete.com
- Account areas used for purchases, content access, or subscriptions (including NHS‑registered user access to BNF and BNFC via MedicinesComplete)
- Forums we operate (e.g., PCF Discussion Board for palliative care health professionals)
- Submission workflows to our editorial teams (PCF Syringe Driver Database; BNF + BNFC editorial submissions; contributor/author/editor interest forms)
- E‑commerce functionality for printed books
Personal Data We Collect About You
The personal data we collect depends on how you use the PhP Services.
| Category | Types of Data Included | Retention Period |
| Identity Data | First name, last name, organisation name, RCPharm membership number | 7 years after your last interaction with a PhP website or email |
| Contact Data | Billing and delivery address, email address, telephone number | 7 years after your last interaction with a PhP website or email |
| Transaction Data | Details of payments to and from you; products/services purchased | 7 years after transaction |
| Technical Data | IP address, login data, browser type/version, time zone and location, OS and platform, device details | 28 days (cookie expiries per Cookie Policy) |
| Profile Data | Job role/level/sector, purchase history, feedback, survey responses | 7 years after your last interaction with a PhP website or email |
| Marketing & Communications Data | Preferences in receiving marketing; communication preferences | 7 years after your last interaction with a PhP website or email |
| Video & Audio Data | Your image, voice and likeness (where recorded) | 7 years after consent is given |
How Your Personal Data Is Collected
We collect data directly from you, indirectly via our sites/apps, and from trusted third parties:
| Purpose/Activity | Type of Data | Lawful Basis (including legitimate interests) |
| Process and deliver printed product orders; e‑commerce and reporting | Identity; Contact; Financial; Transaction; Marketing & Communications | Contract; Legitimate interests (recover debts) |
| Manage our relationship (policy updates; reviews/surveys; event info/feedback) | Identity; Contact; Profile; Marketing & Communications | Contract; Legal obligation; Legitimate interests (keep records updated; service improvement) |
| Administer and protect our business/sites (troubleshooting, analysis, testing, maintenance, hosting; effective content presentation) | Identity; Contact; Technical | Legitimate interests (run business; IT/admin; security; fraud prevention; group reorganisation); Legal obligation |
| Deliver relevant content/advertising and measure effectiveness | Contact; Profile; Usage; Marketing & Comms; Technical | Legitimate interests (develop services; grow business; inform marketing strategy) |
| Use analytics to improve sites/products/marketing/relationships/experience | Technical; Usage | Legitimate interests (define audiences; keep sites relevant; business development) |
| Make suggestions/recommendations on goods/services that may interest you | Identity; Contact; Technical; Usage; Profile | Legitimate interests (develop services; business growth) |
Special Category Personal Data
We process special category data only where necessary and lawful, e.g., for recruitment (application data) or limited instances connected with surveys or profile details you provide. Where required, we obtain explicit consent, which you may withdraw at any time.
Marketing
We may send promotional offers if you’ve requested information or purchased goods/services and not opted out. We may work with platforms such as LinkedIn and Instagram to present targeted ads; you can change your ad preferences within those platforms. You can opt out of our emails any time via unsubscribe links or by contacting customersupport@pharmaceuticalpress.com.
Who We Share Your Personal Data With
We may share your personal data with payment processors (Braintree) for e‑commerce; with external third parties who support hosting, analytics, support, product development, subscriptions, identity verification, and advertising (see Annex); and with successors in the event of merger/asset transfer. All third parties are bound by contract to process data only for specified purposes with appropriate security.
International Transfers (DUAA 2025)
We transfer personal data internationally only where permitted by DUAA: a DUAA Adequacy Regulation applies; DUAA‑approved Standard Data Protection Clauses are in place; or a DUAA‑recognised exception applies. We maintain ongoing adequacy assessments and will update this policy if transfer mechanisms change.
Cookies
You can refuse some/all browser cookies or receive alerts when cookies are set. Some site features may not function without cookies. For details, see our Cookie Policy.
Your Rights
You can request access, correction, erasure, restriction, portability, objection (including to direct marketing), and withdraw consent (where we rely on consent). We may need to verify your identity and typically respond within one month (extensions for complex cases).
Keeping Your Data Secure
We implement appropriate technical and organisational measures to protect personal data. Where you have an account, keep credentials confidential. We operate breach response procedures and will notify you/the ICO where legally required.
Data Retention
We retain data only as long as needed for the purpose collected, subject to legal/accounting/reporting requirements. We only retain data in line with the retention periods shown in the table above (in the “Personal Data We Collect About You” section).
Changes to this Policy
We review this notice periodically and update it as needed. Significant changes will be highlighted on our sites. Keep your details up to date.
How to Contact Us
Pharmaceutical Press Limited
Registered office: 66-68 East Smithfield, London, E1W 1AW, UK
Company number: 07165037
General enquiries: info@pharmaceuticalpress.com
Data Protection Officer (for RCPharm Group): Calvin Smith — data.protection@rcpharm.org +44 (0)207 572 2402
You may lodge complaints with the Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint
Annex: Third‑Party Data Processors
| Third‑Party | Purpose | Location |
| Amazon Web Services | Website hosting & advertising services | Ireland & US |
| Braintree | Payment processing | US |
| Firebase | Analytics, crash reporting (BNF + BNFC app), marketing/product experiments | US |
| FullStory | Anonymised website usage analytics | US |
| Google Ads | Website advertising | US |
| Google LLC | Website usage analytics | US |
| Hedgehog Lab | BNF + BNFC app support & product development | UK |
| Highwire (SAMS SIGMA) | Login & access services | UK |
| HM Revenue & Customs | Regulatory reporting (as required) | UK |
| Atlassian JIRA | Customer enquiry/workflow management | US |
| Targeted advertising uploads | US | |
| MDL MacMillan | Institutional/organisational subscription services | UK & India |
| MPS Ltd. | Invoice processing & credit management | India |
| MW Associates | Website maintenance services | UK |
| OKO | Market research services | UK |
| OneTrust | Cookie management | US |
| Red Hat Inc. | API services into MedicinesComplete | US |
| Ribbonfish | Salesforce support & development | UK |
| Rollbar | Real‑time error tracking & debugging | US |
| Salesforce (incl. Pardot) | CRM, doc signing, storage; marketing/emailing & web analytics | US |
| SiteGround Hosting Ltd | Hosting | UK |
| SurveyMonkey | Market research software | US |
| Usabilla | Customer feedback survey services | Netherlands |
| WooCommerce | E‑commerce services | US |
| WordPress | CMS, blog & web platform services | UK |
| Zendesk | Support & workflow services | US |
