Privacy Policy

SecurMed UK, a non-profit organisation set up to establish the National Medicines Verification System for the UK, under the European Falsified Medicines Directive [2011/62/EU], registered in England under company number 10276927.

If you give us your personal information through this website, or you contact us by other means, SecurMed UK is the data controller for information you share with us.

Our website contains links to other websites. Please note that we have no control over how your data is collected, stored, or used by other websites and we advise you to check the privacy policies of any such websites before providing any data to them.

We may change this Privacy Notice from time to time, any changes will be immediately posted on our website. We recommend that you check this page regularly to keep up-to-date.

How we collect your personal data
We may collect your personal data in a number of ways, for example:

How we will use your personal data
In order to provide the service of the UK National Medicines Verification System.

In order to perform a role which we have been designated to carry out by an official authority (e.g. the government or Medicines and Healthcare products Regulatory Agency (MHRA)), or where we are otherwise carrying out tasks which are in the public interest (e.g. which have been designated as such by government, or which would otherwise be deemed in the public interest).

In order to manage our relationship with you including:

In order to administer and protect our business, deal with any misuse of our website and to comply with our security policies at our locations.

In order to comply with our own legal obligations, e.g. health and safety legislation, or to assist in an investigation.

Our Legal Basis for processing personal data.
We only process your personal data:

The legal bases that we rely on when processing your personal data are:

Legal obligation
Most of the processing we carry out in relation to your personal data is necessary for the performance of one of our legal obligations (e.g. provision of the UK National Medicines Verification System and our duty to protect the health, safety and wellbeing of our employees).

Public task
In some circumstances we may also use your personal data for the performance of a task carried out in the public interest, or in the exercise of an official authority vested in us.

Legitimate interests
Where our processing is not necessary for compliance with a legal obligation, we generally rely on our legitimate interests to run our business efficiently and improve our services. We always check that our legitimate interests are not overridden by your rights and process your Personal Information in a way that we think you would reasonably expect (i.e. as set out in this Privacy Notice).

Where we have entered into a contractual arrangement with you, we will use your personal data to support the execution of that contract.

In some circumstances we may require consent from you to process your personal data for specific purposes not covered by another legal basis. When we collect your personal data for these purposes we will ensure that we get your explicit consent to collect and record it (and share with others if applicable), and tell you how you can withdraw your consent if you change your mind.

Keeping your personal data safe

The security of your personal data is very important to us. We will ensure that the personal information that you provide us via this website is held on secure servers.

We will take appropriate technical and organisational measures to prevent unauthorised or unlawful processing of personal data and protect against accidental loss or destruction of, or damage to personal data.

How long do we keep your information?
We have a retention policy in place and will store your personal data as long as necessary for the provision of our services.

We take reasonable steps to retain your information for only as long as is necessary to fulfil our contractual and legal obligations to you, after which we will delete it.

How we share your personal data
We may share your personal data;

Third Parties
We have contractual arrangements in place with third party partners and agents who perform services on our behalf. These partners may include accountants, printers and IT specialists.

Your data privacy rights
At any point while we are in possession of or processing your personal data, you, the data subject, have the following rights, although they are all affected by different conditions and limitations:

It is important that your personal data is kept accurate and up-to-date. If any of the personal data we hold about you changes, please keep us informed for as long as we have that data.

You also have the right to lodge a complaint regarding our use of your data. Please tell us first, so we have a chance to address your concerns. If we fail in this, you can address any complaint to the UK Information Commissioner’s Office, either by calling their helpline or as directed on their website at

Please let us know if you wish to exercise any of your rights, or make a complaint, by emailing us at

Data Subject Access Request – DSAR
You can request a copy of the information that we hold about you at any time. You can contact us in writing by email or letter using the contact information at the bottom of this notice. You also have the right to make your request by telephone, or in person, if you wish.

In accordance with GDPR you will be required to prove your identity and thereafter we will provide the information to you within a month.


Communicating with us:

By post
You can write to us at:

SecurMed UK
Milton Park Innovation Centre
99 Park Drive
Milton Park
OX14 4RY

By email

If you prefer to contact us by email, please send your query or request to: