Clinical Confidentiality & PHI Protection

Notice of Privacy Practices & Patient Data Protection

This notice describes how medical information about you may be used and disclosed, and how you can get access to this information under HIPAA, the UK Data Protection Act 2018, and GDPR.

Effective Date: January 1, 2026•Last Reviewed: October 20, 2026•Version 2.4 (Active)

Information We Collect

When you use DermaCare's teledermatology platform, clinical questionnaire, refill portal, or direct dispensing checkout, we collect information necessary to deliver clinical care and dispense genuine pharmaceutical treatments safely:

Protected Health Information (PHI): Dermatological history, current topicals, allergies, contraindication answers, pregnancy/lactation status, and prior retinoid tolerance.
Identity & Demographics: Full legal name, date of birth, biological sex, shipping address, postcode, phone number, and email address.
Photographic Intake: Optional skin photos submitted during doctor assessment to verify erythema, acne lesion grading, or hyperpigmentation distribution.
Prescription & Order Metadata: Prescribed strength, batch number, clinical countersignatures, dispatch tracking IDs, and refill cadence.

How We Use Your Medical Information

Your Protected Health Information is strictly used for clinical diagnosis, treatment formulation, and lawful pharmacy operations:

Clinical Evaluation

Review by registered UK attending physicians and dermatologists to verify indication and evaluate contraindications.

Pharmacy Dispensing

GPhC registered electronic verification, lot number logging, and tracked courier dispatch.

Security & 256-Bit Cryptographic Standards

We implement comprehensive physical, electronic, and administrative safeguards to protect your personal data from unauthorized access, alteration, or disclosure:

End-to-End Cryptographic Security

All data transmission between your browser and our clinical servers is protected using TLS 1.3 / 256-bit AES encryption. Prescriptions and medical certificates stored in our registry are secured with cryptographic integrity seals.

Zero Data Selling Policy

We do not sell, rent, or monetize your personal or medical data to third-party advertisers, data brokers, or pharmaceutical marketers. Your records are shared solely with:

Attending licensed prescribers reviewing your medical questionnaire.
Dispensing pharmacists fulfilling your prescribed medication.
Tracked delivery couriers (Royal Mail, FedEx, DHL) strictly for parcel delivery.