Compliance Guide

GPhC Registration for Online Pharmacies

A step-by-step guide to GPhC distance selling registration, with every requirement mapped to RxSure features.

41GPhC Requirements Mapped
32Handled by RxSure
9You Provide

Last updated: July 2026 · Based on published GPhC guidance

Important: This page is an informational guide prepared by RxSure (QASTCO Limited). It does not constitute legal or regulatory advice and does not guarantee GPhC registration approval. Registration decisions are made solely by the General Pharmaceutical Council. Requirements may change; this guide reflects published GPhC guidance current as of July 2026. We recommend verifying all requirements directly with the GPhC and seeking independent professional advice.

GPhC Premises Registration Is Open

New online pharmacy premises applications are accepted on an ongoing basis through the myGPhC portal. Registration fee: £261. Processing time: 30–60 working days.

What Is GPhC Registration?

If you want to sell or supply medicines online in Great Britain, your pharmacy premises must be registered with the General Pharmaceutical Council (GPhC) as a distance selling pharmacy. This registration confirms that your business meets the standards for safe, effective patient care and that patients using your service are protected.

What GPhC Looks For

GPhC registration requires three things working together. RxSure provides two of them.

Your Website

RxSure builds this for you

  • Pharmacy identity on every page
  • GPhC registration number + verify link
  • Prescriber names, types & registration
  • Patient journey explained
  • Complaints procedure
  • Privacy, Terms, Cookie policies
  • Contact details & hours

Clinical Platform

RxSure provides this

  • Patient identity verification
  • Video consultations + AI notes
  • Clinical triage & safety checks
  • Prescribing workflow (dm+d)
  • Secure prescription dispensing
  • Payment processing (PCI-DSS)
  • Audit trails & clinical safety

Your Governance

Only you can provide this

  • Superintendent Pharmacist
  • Responsible Pharmacist procedures
  • Standard Operating Procedures
  • Professional indemnity insurance
  • Clinical governance framework
  • Registered premises address
  • ICO registration
14
Platform Features
13
Website Service
5
Website + Platform
9
You Provide

Every Requirement, Mapped

Click any category to see GPhC requirements and which RxSure feature addresses each one.

Pharmacy name prominently displayed

Your pharmacy name appears in the site header on every page and in the footer with full address.

WebsiteHomepage + Header/Footer
Set automatically through the White-Label Engine: your brand, your name, on every page.
GPhC registration number displayed

Registration number shown in the footer on every page, linked directly to the GPhC online register for patient verification.

WebsiteGlobal Footer + Verify Link
Replaces the old internet pharmacy logo scheme (closed 31 December 2025). Patients click to verify you on the GPhC register.
Physical address of registered pharmacy

Full postal address displayed on the About page, Contact page, and footer across all pages.

WebsiteAbout + Contact + Footer
Your registered premises address, required even for online-only pharmacies.
Name of the pharmacy owner

Legal owner or company name shown on the About page and footer.

WebsiteAbout Page + Footer
Business ownership details clearly stated as required by GPhC distance selling guidance.
Phone numbers and email addresses

Phone and email visible on the Contact page, footer, and optionally header. Operating hours clearly stated.

WebsiteContact Page + Header/Footer
Patients must be able to reach you easily, displayed prominently across the site.
Prescriber names displayed

Dedicated Team page lists every prescriber by full name with professional photo.

WebsiteOur Team Page
Updated February 2025: GPhC now requires full transparency about who provides clinical services.
Whether prescriber is a doctor or non-medical prescriber

Each prescriber entry states their type: GP, Pharmacist Independent Prescriber, Nurse Prescriber, etc.

WebsiteOur Team Page
Patients must understand the qualifications of who is treating them.
Prescriber registration number and service address

GMC, GPhC, or NMC registration number shown per prescriber, plus prescribing service address.

WebsiteOur Team Page
Professional registration details make your prescribers verifiable and build patient trust.
How to check prescriber registration

Each prescriber entry includes a direct link to the relevant professional register (GMC, GPhC, NMC) so patients can verify independently.

WebsiteOur Team Page: Register Links
One-click verification links to official registers.
Superintendent Pharmacist identified

Superintendent Pharmacist named with GPhC registration number on About and Team pages.

WebsiteAbout + Our Team Page
The Superintendent has legal responsibility for the pharmacy business, and patients and GPhC inspectors expect to see them identified.
Photo ID verification before prescribing

Patient registration requires upload of passport or driving licence. Prescriber cannot proceed without a completed ID check.

Built into the Patient Portal registration flow. Integrated with NHS Personal Demographics Service (PDS) for verified patient identity lookup. Documents stored securely with encryption at rest.
Proof of address verification

Registration requires upload of utility bill, bank statement, or council tax bill as proof of address.

Mandatory step: the system blocks progression until both photo ID and proof of address are uploaded.
Video verification for high-risk medicines

High-risk services (e.g. GLP-1 weight loss) require mandatory video consultation. Prescriber verifies photo ID matches the live patient during the call.

Configurable per service pathway: the system enforces video before a prescription can be issued for flagged services.
Clinical assessment before supply of medicines

Configurable medical questionnaires per service. The engine auto-scores responses, checks for contraindications, and routes patients to the right pathway.

Red (declined / refer to GP), Amber (needs video consultation), Green (suitable to proceed). No patient skips triage.
Additional safeguards for high-risk medicines

High-risk medicine pathways are configured to require mandatory video consultation, so the prescriber cannot issue a prescription without completing a video session.

System-enforced, not optional. Works with the RAG Triage Engine to block questionnaire-only prescribing for flagged services.
Qualified prescriber review and approval

Full clinician review-and-approve workflow. Prescriber sees all patient data, conducts consultation, and must explicitly approve before a prescription is generated.

Practitioner Portal gives the prescriber everything in one view: questionnaire answers, ID documents, medical history, triage score.
Video consultation capability

Built-in live video between patient and prescriber with AI-powered transcription that auto-generates structured clinical notes.

No third-party video tools needed. Notes saved directly to the patient record, so no manual documentation is required.
Drug interaction and safety checking

dm+d integrated formulary with SNOMED CT coding. Automated drug interaction alerts and contraindication warnings.

AI-powered safety checking flagged as “For Practitioner Review Only”, so the clinician always has the final decision.
Patient journey clearly explained

Dedicated “How It Works” page with step-by-step visual explanation of the entire process, from registration to collecting medication.

WebsiteHow It Works Page
Patients must understand exactly what to expect before they use the service, including when they may be referred to their GP instead.
Two-way communication with patients

Encrypted patient-clinician messaging within the portal for ongoing clinical communication. Phone and email on the website for general enquiries.

Website + PlatformSecure Messaging + Contact Page
Prescribers must maintain two-way communication: the platform handles clinical messaging, and the website handles general contact.
Secure prescription dispensing mechanism

AES-encrypted one-time QR code prescription token. The patient receives a secure token via their portal. A compliant pharmacy scans the QR to view and dispense.

Cannot be reused, duplicated, or tampered with; each prescription is a unique encrypted token.
Prescription and order tracking

Patient portal shows real-time prescription status and order tracking with push notifications on status changes.

Patients can see exactly where their prescription is: issued, pending, or dispensed.
Secure data collection, storage, and transmission

All data encrypted at rest (AES-256) and in transit (TLS). Role-based access control limits data access per user role.

Platform holds DSPT “Standards Met” and Cyber Essentials certification.
Secure payment processing

Stripe integration: PCI-DSS Level 1 compliant. No card data touches or is stored on your systems.

Handles consultation fees, service charges, and refund workflows. See pricing.
GDPR-compliant privacy policy and consent

Website provides a full Privacy Policy page. Platform collects and records explicit GDPR consent at patient registration. DPIA completed.

Website + PlatformPrivacy Policy + GDPR Consent Module
Privacy Policy covers data controller, legal basis, sharing, retention, patient rights, and ICO contact information.
Cookie consent mechanism

Cookie consent banner on first visit with accept/reject. Dedicated Cookie Policy page listing all cookies by category.

WebsiteCookie Banner + Cookie Policy
PECR compliant, with cookies categorised as essential, analytics, and marketing and clear explanations for each.
SSL / HTTPS across all pages

Valid SSL certificate across website and patient portal. All traffic served over HTTPS with no mixed content.

PlatformPlatform Infrastructure
Standard on every RxSure deployment, so no additional setup is needed.
Clinical safety management

RxSure is DCB0129 certified for Clinical Risk Management for Health IT Systems. Clinical Safety Officer appointed. Safety case report maintained and reviewed.

Your pharmacy operates on clinically certified infrastructure from day one.
Audit trail for all clinical decisions

Every interaction, consultation, clinical decision, prescription, and dispensing event logged with timestamps. Records are immutable and cannot be altered or deleted.

Accessible for GPhC inspection. Complete evidence trail for every patient interaction.
Published complaints procedure

Dedicated Complaints page with step-by-step process, contact details, response timeframe, and how to escalate to the GPhC.

WebsiteComplaints Page
Includes a direct link to the GPhC “Reporting Concerns” page for patients who are not satisfied.
Contact details, operating hours, and emergency signposting

Contact page with phone, email, address, and hours. Footer includes emergency notice: “If you need urgent help, call 999 or attend A&E.”

WebsiteContact Page + Footer
Operating hours indicate when the Responsible Pharmacist is on duty.
Multi-role access control

Separate portals for patients, practitioners, and administrators. Granular role-based access with 5 user roles. Staff access fully audited.

Each role sees only what they need, so patient data is protected by design, not just policy.
Appoint a Superintendent Pharmacist

A GPhC-registered Superintendent Pharmacist who takes legal responsibility for the pharmacy business.

You ProvideRegistration blocker
GPhC will not process your application without this. RxSure displays their details on your website once appointed.
Responsible Pharmacist procedures

Establish RP sign-in/out procedures and maintain the RP record. A Responsible Pharmacist must be in charge when operating.

You ProvideOperational requirement
Required by Responsible Pharmacist Regulations 2008.
Standard Operating Procedures (SOPs)

Written SOPs for dispensing, prescribing, ID verification, complaints handling, controlled substances, and clinical governance.

You ProvideRxSure provides templates
SOP templates are included with the platform, ready for you to customise for your specific operations.
Clinical governance framework

Document covering risk management, incident reporting, patient safety reviews, and continuous improvement.

You ProvideGovernance document
GPhC expects a written clinical governance framework. We can help you structure this.
Risk assessment for distance services

A documented risk assessment specific to providing pharmacy services at a distance.

You ProvideRisk assessment document
GPhC requires pharmacies to conduct comprehensive risk assessments for distance selling services.
Professional indemnity insurance

Insurance that explicitly covers distance selling / online pharmacy activities. Must be in place before registration.

You ProvideRegistration blocker
Standard pharmacy insurance may not cover online services, so check that your policy covers distance selling specifically.
Staff training records

Records of staff training on pharmacy operations, safeguarding, data protection, and platform usage.

You ProvideTraining records
GPhC expects staff to be competent. RxSure provides platform training to get your team up to speed.
ICO registration

Register with the Information Commissioner’s Office before processing personal data.

You ProvideData protection registration
Quick online registration at ico.org.uk. Required under the Data Protection Act 2018.
GPhC premises registration application

Submit the premises registration application to GPhC. A physical premises address is required even for online-only pharmacies.

You ProvideFinal step
Once everything is ready, you submit to GPhC premises registration.

Platform Certifications

When you operate on RxSure, your pharmacy runs on certified infrastructure from day one.

NHS PDS
Integrated with NHS Personal Demographics Service for patient identity verification
DCB0129
Clinical Risk Management for Health IT Systems
DSPT
NHS Data Security & Protection Toolkit: Standards Met
Cyber Essentials
Government-backed cyber security certification
GDPR / DPIA
UK GDPR compliant with Data Protection Impact Assessment
PCI-DSS
Level 1 payment compliance via Stripe

Your Checklist

RxSure provides the platform and website. These items must come from you as the pharmacy owner.

Registration blocker

Superintendent Pharmacist

GPhC-registered pharmacist appointed as Superintendent. GPhC will not process your application without this.

Registration blocker

Professional Indemnity Insurance

Must explicitly cover distance selling / online pharmacy activities.

Registration blocker

Registered Premises Address

Physical premises address, required even for online-only pharmacies. Must have secure storage, private RP area, IT infrastructure, and health & safety compliance.

Prescriber Details

Full name, type, registration number, and address for each prescriber. Required on your Team page.

SOPs & Governance Documents

Standard Operating Procedures, clinical governance framework, risk assessment. You prepare these for your specific operations.

ICO Registration

Data protection registration with the Information Commissioner’s Office.

Staff Training Records

Training on pharmacy operations, safeguarding, data protection. We provide platform training.

Branding Assets

Logo, colours, fonts for your client-branded website.

How Long Does Setup Typically Take?

From first conversation to GPhC application, here is what to expect.

1

Onboarding

Week 1

You select the services you want to offer (weight loss, men’s health, travel health, or other pharmacy services) and provide your branding, prescriber details, and premises information.

2

Website Build & Platform Configuration

Weeks 2–4

We build your GPhC-compliant website and configure the platform: service pathways, questionnaires, prescriber accounts, and branding.

3

Governance Setup

Weeks 2–4 (parallel)

You appoint your Superintendent Pharmacist, arrange insurance, prepare your SOPs, and register with ICO.

4

Compliance Review

Week 5

We walk through every GPhC requirement together (website, platform, and governance) to make sure nothing is missing before you apply.

5

GPhC Application

Week 6

You submit your premises registration application to the GPhC. Processing typically takes 4–8 weeks.

Common Questions

Yes. The GPhC requires a registered pharmacy premises address even if all your services are delivered online. It does not need to be a high-street retail location; an office or workspace is acceptable. The premises must have secure medicine storage (if dispensing), a private area for the Responsible Pharmacist, appropriate IT infrastructure, and health & safety compliance. This is where your Responsible Pharmacist operates from and where GPhC inspectors will visit. The premises address is displayed on your website as required by GPhC.
It depends on the medicine. Since February 2025, the GPhC requires that high-risk medicines (such as GLP-1 weight loss treatments) are not prescribed based on an online questionnaire alone; video or in-person verification is mandatory. Lower-risk services may use questionnaire-based consultation with appropriate safeguards. RxSure lets you configure this per service.
The internet pharmacy logo scheme closed on 31 December 2025. Instead, online pharmacies must now display their GPhC registration number with a link to the GPhC online register so patients can verify the pharmacy directly. RxSure websites include this in the footer of every page.
RxSure provides 32 of the 41 mapped GPhC requirements through our platform and website service, including identity verification, clinical workflows, prescribing, dispensing, data security, and audit trails. You provide 9 items that only a pharmacy owner can: Superintendent Pharmacist, Responsible Pharmacist procedures, SOPs, clinical governance, risk assessment, indemnity insurance, staff training, ICO registration, and the GPhC application itself.
The preparation phase (website, platform, and governance) typically takes 4–6 weeks with RxSure. Once you submit your application, GPhC processing typically takes 4–8 weeks, though this can vary. Start to finish, most clients are operational within 3–4 months.
Yes. RxSure holds DCB0129 clinical safety certification, DSPT (Data Security and Protection Toolkit) “Standards Met” status, Cyber Essentials, and PCI-DSS Level 1 compliance via Stripe. These certifications demonstrate that the platform meets NHS-grade clinical safety and data protection standards.
It depends on your model. If you only prescribe and the patient collects their medication from a separate pharmacy, you would typically need CQC registration (in England) rather than GPhC. However, if you prescribe and supply or dispense medicines directly to patients, you need GPhC registration as a distance selling pharmacy. The prescribe-and-dispense model is how most online pharmacies operate as it provides control of the full patient journey from consultation to delivery. RxSure supports both models. Talk to us and we can help you decide which model suits your business.
A distance selling pharmacy is a GPhC-registered pharmacy that provides pharmacy services without patients visiting the premises in person. Orders are placed online and medicines are delivered by post or courier. The GPhC published updated guidance in February 2025, introducing stricter requirements around patient identity verification, prescriber transparency, and high-risk medicine safeguards. This page maps all of those requirements.
Yes. GPhC premises registration (including distance selling pharmacies) is open and accepting applications on an ongoing basis. What closed was the internet pharmacy logo scheme: a voluntary badge that online pharmacies used to display. That scheme closed to new applications in June 2025 and was fully discontinued on 31 December 2025. The actual premises registration process is unaffected. You can apply now through the myGPhC portal at pharmacyregulation.org.
The GPhC premises registration fee is £261 (one-off), with an annual retention fee of £261. You’ll also need professional indemnity insurance (£500–£2,000/year) and ICO registration (£40–£2,900/year depending on organisation size). Total typical startup for a prescribing-only model is £5,000–£15,000 including platform, website, and regulatory costs. Fees shown are from the 2024/25 fee schedule; always verify at pharmacyregulation.org.
The old myGPhCpharmacy platform permanently closed on 18 June 2026. All registration tasks (including new premises applications, renewals, payments, and delegate user management) are now handled through the main myGPhC portal. If you had an account on the old platform, you need to set up delegate users in myGPhC as existing accounts did not transfer automatically. All communications from GPhC are now email-only (postal notices ended).

Registration Fees & Startup Costs

What you’ll pay to get registered and operational. RxSure platform fees are separate; see pricing.

ItemCostFrequencyNotes
GPhC Premises Registration£261One-offPaid when you submit your application
GPhC Annual Retention£261AnnualDue each year to maintain registration
Professional Indemnity Insurance£500 – £2,000AnnualMust explicitly cover distance selling / online services
ICO Registration£40 – £2,900AnnualTier-based on organisation size and turnover
Independent Prescriber Course£1,500 – £4,000One-offOnly if your prescriber needs IP qualification
Typical Total Startup£5,000 – £15,000N/APrescribing-only model (lowest capital entry point)

Fees shown are from the 2024/25 GPhC fee schedule. Always verify current fees at pharmacyregulation.org.

Which Service Model Is Right for You?

Online pharmacies can operate under different models. Your choice determines your capital requirements and registration needs.

Lowest Barrier

Prescribing Only

Online consultations and prescriptions. No medicine stock needed, so patients collect from any pharmacy or you partner with a dispensing pharmacy. Lowest startup cost (£5k–£15k). May need CQC registration (England) rather than GPhC if not supplying medicines.

Dispensing Only

NHS and/or private prescription dispensing. Requires a dispensary, medicine stock, and delivery logistics. GPhC registration required. Higher capital needed.

Most Common

Prescribing + Dispensing

Full service: consult, prescribe, dispense, and deliver. You control the entire patient journey. This is the model most RxSure clients use. Requires both dispensary and GPhC registration.

Hybrid (Physical + Online)

Existing brick-and-mortar pharmacy adding online services. Your premises are already registered, so you notify GPhC of distance selling services.

How Do You Apply, Step by Step?

The practical process for submitting your GPhC premises registration application.

1

Appoint Your Superintendent Pharmacist

Must be GPhC-registered with no restrictive conditions. The GPhC will not process your application without this. This is your first priority.

2

Secure Physical Premises

A physical premises address is required even for online-only pharmacies. It does not need to be a high-street retail location; an office or workspace is acceptable provided it meets GPhC standards: secure medicine storage area (if dispensing), a private consultation area for the responsible pharmacist, appropriate IT infrastructure, and health & safety compliance.

3

Prepare Governance Documents

SOPs, clinical governance framework, distance selling risk assessment, responsible pharmacist procedures, staff training records. SOP templates are included with the RxSure platform.

4

Obtain Insurance & ICO Registration

Professional indemnity insurance must explicitly cover online/distance selling services. Register with the ICO for data protection. Both must be in place before you apply.

5

Create a myGPhC Account

Go to pharmacyregulation.org and create a myGPhC account. Since June 2026, all registration tasks are handled through the main myGPhC portal (the old myGPhCpharmacy portal has closed).

6

Complete the Application Form

The 40+ question form asks you to demonstrate how you meet the GPhC’s five principles for registered pharmacies. You’ll need to show your website, clinical platform, and governance documents are in place.

7

Pay £261 Registration Fee & Submit

Payment is made through the myGPhC portal when you submit. Go to GPhC premises registration →

8

GPhC Assessment & Possible Inspection

GPhC reviews your application (30–60 working days). They may conduct a pre-registration inspection of your premises. Complex applications (dispensing + prescribing, high-risk medicines) may take longer.

9

Registration Granted: Go Live

Once approved, display your GPhC registration number with a verification link on every page of your website. RxSure does this automatically in your site footer. You’re now a registered distance selling pharmacy.

Official Resources & GPhC Contact

Verify everything directly with the GPhC. These are the links you need.

Contact the GPhC Directly

Ready to Launch Your Online Pharmacy?

See how RxSure’s platform addresses 32 of 41 GPhC requirements out of the box, from clinical workflows to patient identity verification.

Get in Touch
Disclaimer: This page is published by RxSure, a trading name of QASTCO Limited (Company No. registered in England & Wales). The information provided is for general informational purposes only and does not constitute legal, regulatory, or professional advice. While we make every effort to ensure accuracy, we make no warranties about the completeness or reliability of this content. GPhC registration decisions are made solely by the General Pharmaceutical Council based on their own assessment and inspection. Requirements are subject to change, so always verify directly with the GPhC. RxSure is a technology platform provider and does not provide pharmacy services, prescribing services, or medical advice.

From Our Blog

Related Reading