Registrations & insurance

Legal entity

To be published before go-live

Company number

To be published before go-live

Registered office

To be published before go-live

ICO number

To be published before go-live

Company and ICO registration numbers will be published here before go-live, once the company is incorporated and the ICO fee is paid.

Pharmacy premises details live on Our pharmacy.

Check registration status on the GPhC pharmacy register, pharmacist register, or visit pharmacyregulation.org.

• GPhC pharmacy premises. The supplying pharmacy’s name, address, GPhC number, owner, superintendent pharmacist, phone, email, and opening hours are published on Our pharmacy and in the footer. Patients can check them on the GPhC register.
• GPhC pharmacist register. The superintendent pharmacist’s GPhC number is shown with the pharmacy details. Individual pharmacists must stay registered to practise.
• Distance-selling transparency. GPhC guidance for pharmacies that supply at a distance requires those details on the website, plus a complaints route and a way to verify registration.

• Companies House. If you trade as a limited company, publish the legal name, registered number, and registered office on the website (Companies Act 2006 and e-commerce rules).
• ICO data protection fee. Almost every UK organisation that processes personal data must pay the ICO fee and publish the registration number. Health data makes this essential before launch.
• GPhC internet pharmacy annotation. A pharmacy that offers services via a website should have the internet pharmacy annotation on the GPhC register and display the GPhC internet pharmacy logo that links to its register entry.
• Responsible Pharmacist notice. While the pharmacy is operating, the Responsible Pharmacist’s name and GPhC number should be displayed (on site and, for an online service, on the website during opening hours).
• VAT number. Publish it if the company is VAT-registered. Many dispensed medicines are zero-rated; your accountant should confirm the position.

Patients do not need to see the full policy schedule. They do need confidence that cover exists. Once policies are in place, we can add a short “insured as a registered pharmacy” line here. You must keep:

• Professional indemnity. Required for pharmacy professionals and the premises. Usually arranged through NPA, CCA, or a specialist broker. Do not launch without current cover that includes distance selling / internet pharmacy.
• Public liability. Covers injury or damage to third parties. Expected by landlords, couriers, and many professional bodies.
• Cyber / data liability. Strongly recommended because you store prescription images and health data. Ask specifically about ICO fines, ransom, and patient notification costs.
• Employers’ liability. Legally required if you have employees in the UK.

• CQC registration. Community pharmacy is regulated by the GPhC, not CQC, unless you also provide a CQC-regulated activity (for example an independent medical agency that itself prescribes). SW Rx does not prescribe, so CQC is not the default route.
• MHRA wholesale dealer licence (WDA(H)). Only needed if you wholesale medicines to other businesses. Patient supply from a registered pharmacy is a different activity.
• NHS DSPT. Required if you connect to NHS systems or hold an NHS contract. Not required for a purely private service, but it is a useful security benchmark.

• Cyber Essentials. UK government scheme. Good trust signal for a health data site. Apply via a certification body listed on ncsc.gov.uk.
• PCI DSS. Card data stays with Stripe, so your scope is usually SAQ-A. Complete Stripe’s requirements; you do not need to put card numbers on this server.
• ISO 27001. Optional. Useful later if you handle more data or bid for larger contracts.