Privacy Policy
Last updated: 5 November 2026
This policy explains what personal data PharmacySkills collects when you use our website (pharmacyskills.com) and our learning app (app.pharmacyskills.com), why we collect it, and the rights you have over it. We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
PharmacySkills is an online revision service for pharmacists preparing for the GPhC registration assessment, run by Champe Chilufya trading as PharmacySkills in the United Kingdom. We are the data controller for the personal data described here. For anything about your data, email privacy@pharmacyskills.com.
2. What we collect
Information you give us
- Account details: your name, email address, password (stored only in hashed form by our authentication provider) and profile details you choose to add, such as your training stage, exam sitting date or workplace type.
- Learning activity: lessons watched, quiz and mock exam answers and scores, flashcards, notes, study paths, streaks and leaderboard entries.
- AI practice content: what you type or say in AI features such as OSCE practice and study helpers, so the feature can respond to you.
- Support messages: anything you send us by email or through the in-app support pages.
- Payment details: handled directly by Stripe. We never see or store your full card number. We receive your subscription status, plan, purchase history and the last four digits and expiry of your card.
Information collected automatically
- Usage and diagnostics: pages and features you use, app version, device type, errors and timings, so we can fix problems and improve the service.
- Cookies and similar storage: see our Cookie Policy.
3. Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Creating your account and providing lessons, quizzes, AI practice and progress tracking | Contract |
| Taking payments and managing subscriptions and credits | Contract; legal obligation (tax and accounting records) |
| Service emails such as sign-up confirmation, password resets and receipts | Contract |
| Keeping the service secure, preventing abuse and fixing errors | Legitimate interests |
| Understanding how the service is used so we can improve it | Legitimate interests |
| Measuring our advertising (Google Ads conversion tracking) | Consent, where required |
| Marketing emails about new features and study tips | Consent. You can unsubscribe at any time. |
4. Who we share it with
We do not sell your personal data. We share it only with service providers who help us run PharmacySkills, under contracts that require them to protect it:
- Supabase: database, authentication and file storage.
- Vercel: website and app hosting.
- Stripe: payments and subscriptions.
- Resend: sending account and service emails.
- AI providers (such as OpenAI and Google): to generate responses in AI features. We send only what the feature needs and do not send your payment details.
- Google: advertising conversion measurement.
We may also disclose data where the law requires it, or to protect our rights or the safety of others.
5. International transfers
Some of these providers process data outside the UK, including in the United States. Where they do, we rely on UK adequacy regulations, the UK International Data Transfer Addendum or equivalent safeguards to keep your data protected.
6. How long we keep it
- Account and learning data: while your account is open, and deleted within 90 days of you closing it.
- Payment and invoice records: 6 years, as UK tax law requires.
- Support messages: up to 2 years after the conversation ends.
- Diagnostic logs: up to 12 months.
7. Your rights
You have the right to access your data, correct it, have it deleted, restrict or object to how we use it, and receive a copy in a portable format. Where we rely on consent, you can withdraw it at any time. To use any of these rights, email privacy@pharmacyskills.com. We will reply within one month.
If you are unhappy with how we handle your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
8. Security
Data is encrypted in transit, access is limited to the people who need it, and passwords are never stored in plain text. No online service can be perfectly secure, so please use a strong password that you do not use elsewhere.
9. Children
PharmacySkills is for pharmacy students, trainees and professionals. It is not meant for children under 16 and we do not knowingly collect their data.
10. Changes to this policy
We may update this policy from time to time. We will change the date at the top, and tell you by email or in the app if a change is significant.