*This is a simplified version of the full Healthera privacy policy, which can be accessed here.

Your Customers

All customers will remain your customers while they are connected to you on the Healthera app. The only third parties who can view your customers’ data are GP practices (for the approval of prescriptions) or any of their approved contractors or subcontractors (through Prescription Ordering Direct).

We guarantee not to offer any competing parties access to your customers under any circumstances.

We do retain the right to collaborate with you in occasionally offering them appropriate information pertinent to their health or targeted offers from your online store. Therefore, we will never pass on yours or your customers’ personally identifiable information unless it is necessary for providing your customers with prescriptions or services.



All confidential or private customer data is encrypted using 2048-bit next generation universally compatible SSL certificates as used by companies and organisations such as NHS, BBC, and Vodafone. Data is backed up nightly in multiple locations for security. In addition, all repeat prescription orders and patient consent nomination forms are also sent to you via email for additional back up.


Data Protection

Healthera is GDPR compliant. We are listed on the NHS apps library, which means that Healthera exhibits care and security over patient data management to the standards of NHS Digital. Our app is also tested and assured by NHS Digital in public use.

Healthera takes your and your customers’ privacy and data protection very seriously. Every effort has been made to make sure our databases are secure and can only be accessed by you and trusted Healthera staff.



Healthera can provide a back-up of all customer content to the customer under the customer’s reasonable request. Healthera will also assist you with data back-up and migration should you choose an alternative supplier in the future.


CEO & Data Protection Officer