Last Updated: 14-Feb-2026
1. Introduction
Bakri Pharma Ltd ("we", "us", or "our") is committed to protecting the privacy and security of your personal data. As a wholesale distributor authorized by the MHRA, we process data primarily to facilitate safe and compliant pharmaceutical commerce. We are a "Data Controller" under the UK General Data Protection Regulation (UK GDPR).
2. The Data We Collect
In the course of our wholesale operations, we collect:
- Identity Data: Full name, job title, and professional registration numbers (GPhC, GMC, etc.).
- Business Regulatory Data: Copies of MHRA WDA(H) licenses, Pharmacy registrations or / and all related equivalent medicinal supply certifications.
- Contact Data: Business address, delivery addresses (which must match your licenses), email addresses and telephone numbers.
- Financial Data: Bank account details, VAT numbers and credit history information provided during account applications.
- Transaction Data: Details of medicinal products purchased, batch numbers and delivery tracking.
3. How We Use Your Data (Lawful Basis)
We process your data under the following legal bases:
- Legal Obligation: To fulfill our mandatory "Bona Fide" checks under Good Distribution Practice (GDP) to ensure we only supply medicines to authorized entities.
- Contractual Necessity: To process your orders, manage your credit account and arrange deliveries.
- Legitimate Interests: To maintain a secure supply chain, prevent fraud and perform product recalls if mandated by the MHRA or manufacturers.
4. Sharing Your Data
We do not sell your data. We only share information with:
- Regulatory Bodies: The MHRA, Home Office, or GPhC for compliance audits or investigations.
- Logistics Partners: Validated couriers who require delivery details to transport medicines under temperature-controlled conditions.
- Credit Reference Agencies: To assess your creditworthiness during the account application process.
- Manufacturers: Only in the event of a formal Product Recall where patient safety is at risk.
5. Data Retention
In accordance with pharmaceutical regulations, we are legally required to keep records of all medicinal transactions (including batch numbers and customer details) for a minimum of five years. Financial records are kept for seven years for HMRC compliance.
6. Data Security
We implement industry-standard technical and organizational measures to protect your data. Access to sensitive regulatory and financial documents is restricted to authorized personnel (such as our Responsible Person and Finance Team) and stored in encrypted environments.
7. Your Rights
Under UK GDPR, you have the right to:
- Request access to the personal data we hold about you.
- Request correction of any inaccurate data.
- Request erasure of your data (subject to our legal obligations to retain medicinal transaction records).
- Object to processing based on legitimate interests.
8. Contact Us
For any data protection queries, please contact our Data Protection Lead: Email: info@bakripharma.com