Privacy notice

How we handle your data

Short version: we don't ask for any personal information, we don't set cookies, and we count page visits anonymously so we can see what's useful.

The short version

  • No personal data — we never ask for your name, email, NHS number, postcode, or anything that could identify you.
  • No cookies — this site sets no cookies of any kind.
  • No tracking across sites — we do not follow you around the web.
  • Anonymous page counts — we use Vercel Analytics to count which pages are useful. It does not store your IP address or build a profile about you.
  • No clinical data collected — this site is information only. It does not ask about your symptoms, take a history, or record anything you do.

Who we are

Aryash Health Limited is the data controller for this site. We are a UK company (company number on request) registered with the ICO. Our public contact for privacy questions is feedback@aryash.health.

What we collect

Standard server logs

Our hosting provider (Vercel) sees standard server logs when your browser asks for a page. These include your IP address, the page you opened, the time, and the type of browser you're using. Vercel keeps these for a short period for security and abuse prevention. We don't read or analyse these logs.

Anonymous page counts (Vercel Analytics)

We use Vercel Analytics to count which pages people visit. This is a privacy-first analytics tool that:

  • Records the page URL you visited and the page that referred you (e.g. Google or another website)
  • Records your country and device type (phone, tablet, desktop)
  • Uses a daily hashed signal to count unique visitors — the hash cannot be reversed to identify you, and it changes every day
  • Does not store your IP address
  • Does not set cookies
  • Does not follow you across other websites
  • Does not build a profile about you

This is the lightest privacy-respecting way to know whether the site is helping people. Read more about how it works on Vercel's privacy page.

Legal basis: We rely on legitimate interest (UK GDPR Article 6(1)(f)) — knowing which pages are useful so we can improve the service. The processing is anonymous, low-risk, and you can opt out by enabling Do Not Track in your browser, which Vercel respects.

What we do NOT collect

  • No name, email, phone number, postcode, NHS number or any identifier
  • No symptom data — we do not ask you what's wrong, and we do not record anything you read
  • No location data more precise than country
  • No cookies of any kind
  • No third-party trackers, pixels, ad networks or session recording tools

Where your data goes

The site is hosted by Vercel Inc., headquartered in the United States. Vercel acts as our data processor. Data transfers to the US are covered by the UK International Data Transfer Addendum and Standard Contractual Clauses. Vercel is committed to GDPR compliance.

We don't share your information with anyone else. There are no advertising networks, no analytics resellers, no email or marketing tools attached to this site.

Your rights

Because we don't collect any personally identifiable data, there's normally nothing for us to find, correct, export or delete on request. If you have a question about how the site works or you want to raise a concern, email us at feedback@aryash.health.

If you're unhappy with how we've handled your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Children

This site is written in plain English for adults — patients, parents, carers and family members helping someone make sense of NHS Pharmacy First. The site does not knowingly collect any data from children, and there is no log-in, account or interactive feature on the site.

About this notice

This notice covers pharmacy.aryash.health only. Other Aryash Health surfaces (aryash.health, heart.aryash.health, mens.aryash.health, tools.aryash.health, heartcheck.aryash.health) have their own privacy notices.

Last updated: 1 May 2026. We will update this page if anything material changes.