Last updated: 19 March 2026
OTC Consult ("we", "us", "our") is a clinical decision-support and learning tool for registered pharmacists, pharmacy students, pharmacy technicians and pharmacy support staff. This privacy policy explains how we collect, use and protect your personal data when you use OTC Consult at otcconsult.co.uk or via the installed web application.
The data controller is Maurice Hall. You can contact us at info@otcconsult.co.uk.
Account information: When you sign in, we collect your name and email address as provided by your chosen authentication provider (Google, Microsoft or Apple). We do not collect or store passwords — authentication is handled entirely by the third-party provider.
Analytics data: We use Google Analytics to collect anonymised usage data including pages visited, session duration, device type and approximate geographic location (country/region level). This data is aggregated and cannot be used to identify you personally.
We do not collect: health data, patient data, payment information, precise location data, or any data entered during clinical consultations. OTC Consult is a reference tool only and does not process or store patient information of any kind.
We use your data for the following purposes:
Authentication: Your email address is used solely to manage your account access and to distinguish between free and authenticated content within the application.
Analytics: Anonymised usage data helps us understand which sections of the application are most used, so we can prioritise updates and improvements.
Communication: We may use your email address to contact you about important changes to the application, such as significant clinical content updates. We will not send marketing emails.
We process your personal data on the basis of legitimate interests (Article 6(1)(f) UK GDPR) — specifically, the operation and improvement of a professional clinical reference tool. For analytics, we rely on your consent where required by applicable cookie legislation.
We use the following third-party services which may process your data:
Firebase Authentication (Google LLC): Manages sign-in via Google, Microsoft and Apple. Firebase stores your authentication credentials securely. See Firebase Privacy Information.
Google Analytics (Google LLC): Collects anonymised usage statistics. See Google Privacy Policy.
Cloudflare (Cloudflare, Inc.): Provides hosting and content delivery. See Cloudflare Privacy Policy.
We do not sell, rent or share your personal data with any other third parties.
Your account information is retained in Firebase for as long as your account remains active. If you wish to delete your account and associated data, please contact us at info@otcconsult.co.uk and we will remove your data within 30 days. Analytics data is retained in aggregated, anonymised form and cannot be linked back to individual users.
All data is transmitted over HTTPS encryption. Authentication is handled by established providers (Google, Microsoft, Apple) with their own security measures. We do not store passwords or sensitive authentication tokens on our servers.
Under UK GDPR, you have the right to:
Access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; object to processing of your data; request restriction of processing; and data portability. To exercise any of these rights, please contact us at info@otcconsult.co.uk.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
OTC Consult uses cookies for authentication (to keep you signed in) and analytics (Google Analytics). You can control cookie preferences through your browser settings. Disabling cookies may affect your ability to sign in to the application.
OTC Consult is intended for use by registered pharmacists, pharmacy students, pharmacy technicians and pharmacy support staff. It is not intended for use by children under 16. We do not knowingly collect personal data from children under 16.
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
This privacy policy and any dispute arising from it shall be governed by the laws of Northern Ireland. The courts of Northern Ireland shall have non-exclusive jurisdiction.