Privacy policy

Last updated: 26 September 2026

This notice explains how we collect and use personal information when you use this website or contact VaccinesHub.

Who we are

VaccinesHub is a vaccination service provided by Fusion Pharmacy, operated by Pen Garva Ltd (company number 14384073), registered office Unit 3 Swinford Avenue, Leicester, LE2 9RW. Pen Garva Ltd is the data controller for the information described here. Our ICO registration number is ZB712439.

Information we collect

When you book online: your name, email address, phone number and appointment time, collected through Google Calendar appointment booking. We only ask for these details: you'll discuss your health with the pharmacist at your appointment.
When you contact us by phone, email, WhatsApp or text message: your name, contact details and anything you tell us, such as the vaccines you're interested in and your availability.
When you have a consultation or treatment: the health information needed to provide safe care, such as your medical history, medicines, allergies, vaccination history and travel plans.
When you visit this website: our hosting provider processes technical information such as your IP address and browser type to deliver the site and keep it secure. If you accept advertising cookies, Google Ads processes technical information, ad identifiers and clicks on booking, telephone and other contact links to measure advertising. These clicks do not confirm a completed booking, call or message. See our cookie policy.

How we use it and our lawful basis

To respond to your enquiry and arrange appointments: our legitimate interests in responding to you, or steps you ask us to take before providing a service.
To assess, provide and record your care: the provision of health care, which is a task we carry out as a registered pharmacy. Health information is processed under UK GDPR Article 9(2)(h), for the provision of health care by or under the responsibility of health professionals.
To meet our legal and regulatory obligations, including professional record-keeping.
To tell your GP about vaccinations you have received, only with your permission.
To measure how our adverts perform: your consent, which you can withdraw at any time using the cookie settings link at the bottom of every page.

We do not sell your information or use it for marketing without your consent.

Who we share it with

We share information only where needed: with your GP (with your permission), with NHS services where required for your care, with regulators where the law requires it, and with service providers who handle data on our behalf, such as our website host (Vercel) and email and online booking provider (Google Workspace). These providers act under contract and only on our instructions. If you message us on WhatsApp, your messages are also handled by WhatsApp (Meta) under its own privacy policy. If you accept advertising cookies, Google receives the information described in our cookie policy. Our advertising events do not include names, contact details, form responses or clinical information. Google Workspace booking and email are separate from advertising measurement.

How long we keep it

Enquiries that do not lead to an appointment are deleted when no longer needed. Clinical records are kept for the periods set out in NHS and professional records guidance.

Your rights

You have the right to access your information, to ask us to correct it, and in some circumstances to ask us to delete it, restrict its use or object to its use. To make a request, contact us using the details above.

If you are unhappy with how we have handled your information, please contact us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.