This privacy policy explains how HEUJ Logistics Solutions Ltd (“RxWise”, “we”, “us”, “our”) collects, uses and protects personal data in connection with the RxWise Partner mobile application and the RxWise web portal (together, the “Services”).
HEUJ Logistics Solutions Ltd is a company registered in England and Wales (company number 16449750), with its registered office at 167-169 Great Portland Street, London, England, W1W 5PF. We are the “data controller” for the personal data described in this policy except where we act as a “data processor” on behalf of a pharmacy (see section 3).
If you have any questions about this policy or your personal data, contact us at admin@rxwise.io.
The Services are a business tool for the pharmacy delivery workflow. The people whose data we handle fall into two groups:
The Services are not intended for use by children and are not directed at anyone under 16.
For delivery recipient (patient) data — names, addresses, order details, proof-of-delivery photos and signatures — the pharmacy that instructs the delivery is the data controller, and RxWise acts as a data processor, handling that data only on the pharmacy’s documented instructions under a data processing agreement. If you are a delivery recipient and wish to exercise your rights over your data, please contact the pharmacy that arranged your delivery; we will support them in responding to your request.
For account and operational data about our direct users (for example, login credentials, app usage and diagnostic data), and for running and improving the Services generally, RxWise acts as the data controller.
| Category | Examples | Why |
|---|---|---|
| Account & identity | Name, email address, phone number, role (driver / branch / admin), the pharmacy or branch you belong to, and a securely hashed password. | To create and secure your account and control what you can access. |
| Delivery & order data | Recipient name and delivery address, order/parcel references, delivery status, and delivery notes. Entered by the pharmacy, not the recipient. | To route, track and complete deliveries. |
| Proof of delivery | Photographs taken at the point of delivery and captured recipient signatures. | To evidence that a delivery was completed, and to resolve disputes. |
| Location | Device location of a driver while they are on an active delivery shift. | To sequence routes, provide live delivery tracking, and confirm deliveries were made at the correct place. |
| Communications | Delivery notifications we send to recipients by SMS and/or WhatsApp on the pharmacy’s behalf, and support messages you send us. | To keep recipients informed and to provide support. |
| Device & technical | Device model and operating system, app version, push-notification token, IP address, and app log/diagnostic data. | To deliver push notifications, keep the app working, and diagnose problems. |
| Crash & performance | Crash reports and performance diagnostics collected via Firebase Crashlytics. | To detect and fix stability and performance issues. |
Because deliveries relate to prescriptions and medicines, some data may reveal information about a person’s health. We treat this as “special category” data and apply additional care to it; where RxWise acts as processor, this data is handled strictly on the pharmacy’s instructions.
Under the UK GDPR we rely on the following legal bases:
The RxWise Partner app collects a driver’s location only in connection with delivery work — primarily while a driver is signed in and on an active shift — to enable route sequencing and live delivery tracking. You can disable location permission at any time in your device settings, but some delivery and tracking features may not work correctly without it. We do not use location data for advertising and we do not sell it.
We do not sell personal data. We share it only as needed to run the Services:
We aim to store and process personal data in the United Kingdom / European Economic Area. Some of our service providers may process limited data outside the UK/EEA (for example, certain diagnostic data). Where that happens, we rely on appropriate safeguards recognised under UK data protection law, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
We use technical and organisational measures to protect personal data, including encryption of data in transit (HTTPS), access controls and role-based permissions, hashed passwords, and hosting with a reputable cloud provider. No system can be guaranteed to be completely secure, but we work to protect your data and to respond promptly to any security incident.
Subject to conditions and exemptions in UK data protection law, you have the right to:
To exercise these rights, contact us at admin@rxwise.io. If your request concerns delivery/patient data, we may direct you to the relevant pharmacy (the controller) and assist them in responding. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.
We may update this policy from time to time. When we make material changes we will update the “Last updated” date above and, where appropriate, notify you through the Services.
HEUJ Logistics Solutions Ltd
167-169 Great Portland Street, London, England, W1W 5PF
Email: admin@rxwise.io