Pharmacy Staff Document Collection: Stop the Chase
End the frustration of chasing staff for compliance documents. Learn streamlined approaches to collecting certificates, training records, and…
Compliance Guide
GPhC Registration for Online Pharmacies
A step-by-step guide to GPhC distance selling registration, with every requirement mapped to RxSure features.
41GPhC Requirements Mapped
32Handled by RxSure
9You Provide
Last updated: July 2026 · Based on published GPhC guidance
Important: This page is an informational guide prepared by RxSure (QASTCO Limited). It does not constitute legal or regulatory advice and does not guarantee GPhC registration approval. Registration decisions are made solely by the General Pharmaceutical Council. Requirements may change; this guide reflects published GPhC guidance current as of July 2026. We recommend verifying all requirements directly with the GPhC and seeking independent professional advice.
What Is GPhC Registration?
If you want to sell or supply medicines online in Great Britain, your pharmacy premises must be registered with the General Pharmaceutical Council (GPhC) as a distance selling pharmacy. This registration confirms that your business meets the standards for safe, effective patient care and that patients using your service are protected.
What GPhC Looks For
GPhC registration requires three things working together. RxSure provides two of them.
Your Website
RxSure builds this for you
- Pharmacy identity on every page
- GPhC registration number + verify link
- Prescriber names, types & registration
- Patient journey explained
- Complaints procedure
- Privacy, Terms, Cookie policies
- Contact details & hours
Clinical Platform
RxSure provides this
- Patient identity verification
- Video consultations + AI notes
- Clinical triage & safety checks
- Prescribing workflow (dm+d)
- Secure prescription dispensing
- Payment processing (PCI-DSS)
- Audit trails & clinical safety
Your Governance
Only you can provide this
- Superintendent Pharmacist
- Responsible Pharmacist procedures
- Standard Operating Procedures
- Professional indemnity insurance
- Clinical governance framework
- Registered premises address
- ICO registration
Every Requirement, Mapped
Click any category to see GPhC requirements and which RxSure feature addresses each one.
Pharmacy name prominently displayed
Your pharmacy name appears in the site header on every page and in the footer with full address.
WebsiteHomepage + Header/Footer
Set automatically through the White-Label Engine: your brand, your name, on every page.
GPhC registration number displayed
Registration number shown in the footer on every page, linked directly to the GPhC online register for patient verification.
WebsiteGlobal Footer + Verify Link
Replaces the old internet pharmacy logo scheme (closed 31 December 2025). Patients click to verify you on the GPhC register.
Physical address of registered pharmacy
Full postal address displayed on the About page, Contact page, and footer across all pages.
WebsiteAbout + Contact + Footer
Your registered premises address, required even for online-only pharmacies.
Name of the pharmacy owner
Legal owner or company name shown on the About page and footer.
WebsiteAbout Page + Footer
Business ownership details clearly stated as required by GPhC distance selling guidance.
Phone numbers and email addresses
Phone and email visible on the Contact page, footer, and optionally header. Operating hours clearly stated.
WebsiteContact Page + Header/Footer
Patients must be able to reach you easily, displayed prominently across the site.
Prescriber names displayed
Dedicated Team page lists every prescriber by full name with professional photo.
WebsiteOur Team Page
Updated February 2025: GPhC now requires full transparency about who provides clinical services.
Whether prescriber is a doctor or non-medical prescriber
Each prescriber entry states their type: GP, Pharmacist Independent Prescriber, Nurse Prescriber, etc.
WebsiteOur Team Page
Patients must understand the qualifications of who is treating them.
Prescriber registration number and service address
GMC, GPhC, or NMC registration number shown per prescriber, plus prescribing service address.
WebsiteOur Team Page
Professional registration details make your prescribers verifiable and build patient trust.
How to check prescriber registration
Each prescriber entry includes a direct link to the relevant professional register (GMC, GPhC, NMC) so patients can verify independently.
WebsiteOur Team Page: Register Links
One-click verification links to official registers.
Superintendent Pharmacist identified
Superintendent Pharmacist named with GPhC registration number on About and Team pages.
WebsiteAbout + Our Team Page
The Superintendent has legal responsibility for the pharmacy business, and patients and GPhC inspectors expect to see them identified.
Photo ID verification before prescribing
Patient registration requires upload of passport or driving licence. Prescriber cannot proceed without a completed ID check.
PlatformID Verification Module
Built into the Patient Portal registration flow. Integrated with NHS Personal Demographics Service (PDS) for verified patient identity lookup. Documents stored securely with encryption at rest.
Proof of address verification
Registration requires upload of utility bill, bank statement, or council tax bill as proof of address.
PlatformID Verification Module
Mandatory step: the system blocks progression until both photo ID and proof of address are uploaded.
Video verification for high-risk medicines
High-risk services (e.g. GLP-1 weight loss) require mandatory video consultation. Prescriber verifies photo ID matches the live patient during the call.
PlatformVideo Consultation System
Configurable per service pathway: the system enforces video before a prescription can be issued for flagged services.
Clinical assessment before supply of medicines
Configurable medical questionnaires per service. The engine auto-scores responses, checks for contraindications, and routes patients to the right pathway.
PlatformRAG Triage Engine
Red (declined / refer to GP), Amber (needs video consultation), Green (suitable to proceed). No patient skips triage.
Additional safeguards for high-risk medicines
High-risk medicine pathways are configured to require mandatory video consultation, so the prescriber cannot issue a prescription without completing a video session.
PlatformService Management Engine
System-enforced, not optional. Works with the RAG Triage Engine to block questionnaire-only prescribing for flagged services.
Qualified prescriber review and approval
Full clinician review-and-approve workflow. Prescriber sees all patient data, conducts consultation, and must explicitly approve before a prescription is generated.
PlatformPrescribing Workflow
Practitioner Portal gives the prescriber everything in one view: questionnaire answers, ID documents, medical history, triage score.
Video consultation capability
Built-in live video between patient and prescriber with AI-powered transcription that auto-generates structured clinical notes.
No third-party video tools needed. Notes saved directly to the patient record, so no manual documentation is required.
Drug interaction and safety checking
dm+d integrated formulary with SNOMED CT coding. Automated drug interaction alerts and contraindication warnings.
PlatformAI Clinical Decision Support
AI-powered safety checking flagged as “For Practitioner Review Only”, so the clinician always has the final decision.
Patient journey clearly explained
Dedicated “How It Works” page with step-by-step visual explanation of the entire process, from registration to collecting medication.
WebsiteHow It Works Page
Patients must understand exactly what to expect before they use the service, including when they may be referred to their GP instead.
Two-way communication with patients
Encrypted patient-clinician messaging within the portal for ongoing clinical communication. Phone and email on the website for general enquiries.
Website + PlatformSecure Messaging + Contact Page
Prescribers must maintain two-way communication: the platform handles clinical messaging, and the website handles general contact.
Secure prescription dispensing mechanism
AES-encrypted one-time QR code prescription token. The patient receives a secure token via their portal. A compliant pharmacy scans the QR to view and dispense.
PlatformQR Prescription Dispensing
Cannot be reused, duplicated, or tampered with; each prescription is a unique encrypted token.
Prescription and order tracking
Patient portal shows real-time prescription status and order tracking with push notifications on status changes.
PlatformPatient Portal: Tracking
Patients can see exactly where their prescription is: issued, pending, or dispensed.
Secure data collection, storage, and transmission
All data encrypted at rest (AES-256) and in transit (TLS). Role-based access control limits data access per user role.
PlatformRBAC Module + Infrastructure
Platform holds DSPT “Standards Met” and Cyber Essentials certification.
Secure payment processing
Stripe integration: PCI-DSS Level 1 compliant. No card data touches or is stored on your systems.
PlatformStripe Payment Integration
Handles consultation fees, service charges, and refund workflows. See pricing.
GDPR-compliant privacy policy and consent
Website provides a full Privacy Policy page. Platform collects and records explicit GDPR consent at patient registration. DPIA completed.
Website + PlatformPrivacy Policy + GDPR Consent Module
Privacy Policy covers data controller, legal basis, sharing, retention, patient rights, and ICO contact information.
Cookie consent mechanism
Cookie consent banner on first visit with accept/reject. Dedicated Cookie Policy page listing all cookies by category.
WebsiteCookie Banner + Cookie Policy
PECR compliant, with cookies categorised as essential, analytics, and marketing and clear explanations for each.
SSL / HTTPS across all pages
Valid SSL certificate across website and patient portal. All traffic served over HTTPS with no mixed content.
PlatformPlatform Infrastructure
Standard on every RxSure deployment, so no additional setup is needed.
Clinical safety management
RxSure is DCB0129 certified for Clinical Risk Management for Health IT Systems. Clinical Safety Officer appointed. Safety case report maintained and reviewed.
PlatformDCB0129 Certification
Your pharmacy operates on clinically certified infrastructure from day one.
Audit trail for all clinical decisions
Every interaction, consultation, clinical decision, prescription, and dispensing event logged with timestamps. Records are immutable and cannot be altered or deleted.
PlatformAudit Trail System
Accessible for GPhC inspection. Complete evidence trail for every patient interaction.
Published complaints procedure
Dedicated Complaints page with step-by-step process, contact details, response timeframe, and how to escalate to the GPhC.
WebsiteComplaints Page
Includes a direct link to the GPhC “Reporting Concerns” page for patients who are not satisfied.
Contact details, operating hours, and emergency signposting
Contact page with phone, email, address, and hours. Footer includes emergency notice: “If you need urgent help, call 999 or attend A&E.”
WebsiteContact Page + Footer
Operating hours indicate when the Responsible Pharmacist is on duty.
Multi-role access control
Separate portals for patients, practitioners, and administrators. Granular role-based access with 5 user roles. Staff access fully audited.
PlatformRBAC Module + 3 Portals
Each role sees only what they need, so patient data is protected by design, not just policy.
Appoint a Superintendent Pharmacist
A GPhC-registered Superintendent Pharmacist who takes legal responsibility for the pharmacy business.
You ProvideRegistration blocker
GPhC will not process your application without this. RxSure displays their details on your website once appointed.
Responsible Pharmacist procedures
Establish RP sign-in/out procedures and maintain the RP record. A Responsible Pharmacist must be in charge when operating.
You ProvideOperational requirement
Required by Responsible Pharmacist Regulations 2008.
Standard Operating Procedures (SOPs)
Written SOPs for dispensing, prescribing, ID verification, complaints handling, controlled substances, and clinical governance.
You ProvideRxSure provides templates
SOP templates are included with the platform, ready for you to customise for your specific operations.
Clinical governance framework
Document covering risk management, incident reporting, patient safety reviews, and continuous improvement.
You ProvideGovernance document
GPhC expects a written clinical governance framework. We can help you structure this.
Risk assessment for distance services
A documented risk assessment specific to providing pharmacy services at a distance.
You ProvideRisk assessment document
GPhC requires pharmacies to conduct comprehensive risk assessments for distance selling services.
Professional indemnity insurance
Insurance that explicitly covers distance selling / online pharmacy activities. Must be in place before registration.
You ProvideRegistration blocker
Standard pharmacy insurance may not cover online services, so check that your policy covers distance selling specifically.
Staff training records
Records of staff training on pharmacy operations, safeguarding, data protection, and platform usage.
You ProvideTraining records
GPhC expects staff to be competent. RxSure provides platform training to get your team up to speed.
ICO registration
Register with the Information Commissioner’s Office before processing personal data.
You ProvideData protection registration
Quick online registration at ico.org.uk. Required under the Data Protection Act 2018.
GPhC premises registration application
Submit the premises registration application to GPhC. A physical premises address is required even for online-only pharmacies.
You ProvideFinal step
Once everything is ready, you submit to GPhC premises registration.
Platform Certifications
When you operate on RxSure, your pharmacy runs on certified infrastructure from day one.
NHS PDS
Integrated with NHS Personal Demographics Service for patient identity verification
DCB0129
Clinical Risk Management for Health IT Systems
DSPT
NHS Data Security & Protection Toolkit: Standards Met
Cyber Essentials
Government-backed cyber security certification
GDPR / DPIA
UK GDPR compliant with Data Protection Impact Assessment
PCI-DSS
Level 1 payment compliance via Stripe
Your Checklist
RxSure provides the platform and website. These items must come from you as the pharmacy owner.
Registration blocker
Superintendent Pharmacist
GPhC-registered pharmacist appointed as Superintendent. GPhC will not process your application without this.
Registration blocker
Professional Indemnity Insurance
Must explicitly cover distance selling / online pharmacy activities.
Registration blocker
Registered Premises Address
Physical premises address, required even for online-only pharmacies. Must have secure storage, private RP area, IT infrastructure, and health & safety compliance.
Prescriber Details
Full name, type, registration number, and address for each prescriber. Required on your Team page.
SOPs & Governance Documents
Standard Operating Procedures, clinical governance framework, risk assessment. You prepare these for your specific operations.
ICO Registration
Data protection registration with the Information Commissioner’s Office.
Staff Training Records
Training on pharmacy operations, safeguarding, data protection. We provide platform training.
Branding Assets
Logo, colours, fonts for your client-branded website.
How Long Does Setup Typically Take?
From first conversation to GPhC application, here is what to expect.
1
Onboarding
Week 1You select the services you want to offer (weight loss, men’s health, travel health, or other pharmacy services) and provide your branding, prescriber details, and premises information.
2
Website Build & Platform Configuration
Weeks 2–4We build your GPhC-compliant website and configure the platform: service pathways, questionnaires, prescriber accounts, and branding.
3
Governance Setup
Weeks 2–4 (parallel)You appoint your Superintendent Pharmacist, arrange insurance, prepare your SOPs, and register with ICO.
4
Compliance Review
Week 5We walk through every GPhC requirement together (website, platform, and governance) to make sure nothing is missing before you apply.
5
GPhC Application
Week 6You submit your premises registration application to the GPhC. Processing typically takes 4–8 weeks.
Common Questions
Yes. The GPhC requires a registered pharmacy premises address even if all your services are delivered online. It does not need to be a high-street retail location; an office or workspace is acceptable. The premises must have secure medicine storage (if dispensing), a private area for the Responsible Pharmacist, appropriate IT infrastructure, and health & safety compliance. This is where your Responsible Pharmacist operates from and where GPhC inspectors will visit. The premises address is displayed on your website as required by GPhC.
It depends on the medicine. Since February 2025, the GPhC requires that high-risk medicines (such as GLP-1 weight loss treatments) are not prescribed based on an online questionnaire alone; video or in-person verification is mandatory. Lower-risk services may use questionnaire-based consultation with appropriate safeguards. RxSure lets you configure this per service.
The internet pharmacy logo scheme closed on 31 December 2025. Instead, online pharmacies must now display their GPhC registration number with a link to the GPhC online register so patients can verify the pharmacy directly. RxSure websites include this in the footer of every page.
RxSure provides 32 of the 41 mapped GPhC requirements through our platform and website service, including identity verification, clinical workflows, prescribing, dispensing, data security, and audit trails. You provide 9 items that only a pharmacy owner can: Superintendent Pharmacist, Responsible Pharmacist procedures, SOPs, clinical governance, risk assessment, indemnity insurance, staff training, ICO registration, and the GPhC application itself.
The preparation phase (website, platform, and governance) typically takes 4–6 weeks with RxSure. Once you submit your application, GPhC processing typically takes 4–8 weeks, though this can vary. Start to finish, most clients are operational within 3–4 months.
Yes. RxSure holds DCB0129 clinical safety certification, DSPT (Data Security and Protection Toolkit) “Standards Met” status, Cyber Essentials, and PCI-DSS Level 1 compliance via Stripe. These certifications demonstrate that the platform meets NHS-grade clinical safety and data protection standards.
It depends on your model. If you only prescribe and the patient collects their medication from a separate pharmacy, you would typically need CQC registration (in England) rather than GPhC. However, if you prescribe and supply or dispense medicines directly to patients, you need GPhC registration as a distance selling pharmacy. The prescribe-and-dispense model is how most online pharmacies operate as it provides control of the full patient journey from consultation to delivery. RxSure supports both models. Talk to us and we can help you decide which model suits your business.
A distance selling pharmacy is a GPhC-registered pharmacy that provides pharmacy services without patients visiting the premises in person. Orders are placed online and medicines are delivered by post or courier. The GPhC published updated guidance in February 2025, introducing stricter requirements around patient identity verification, prescriber transparency, and high-risk medicine safeguards. This page maps all of those requirements.
Yes. GPhC premises registration (including distance selling pharmacies) is open and accepting applications on an ongoing basis. What closed was the internet pharmacy logo scheme: a voluntary badge that online pharmacies used to display. That scheme closed to new applications in June 2025 and was fully discontinued on 31 December 2025. The actual premises registration process is unaffected. You can apply now through the myGPhC portal at pharmacyregulation.org.
The GPhC premises registration fee is £261 (one-off), with an annual retention fee of £261. You’ll also need professional indemnity insurance (£500–£2,000/year) and ICO registration (£40–£2,900/year depending on organisation size). Total typical startup for a prescribing-only model is £5,000–£15,000 including platform, website, and regulatory costs. Fees shown are from the 2024/25 fee schedule; always verify at pharmacyregulation.org.
The old myGPhCpharmacy platform permanently closed on 18 June 2026. All registration tasks (including new premises applications, renewals, payments, and delegate user management) are now handled through the main myGPhC portal. If you had an account on the old platform, you need to set up delegate users in myGPhC as existing accounts did not transfer automatically. All communications from GPhC are now email-only (postal notices ended).
Registration Fees & Startup Costs
What you’ll pay to get registered and operational. RxSure platform fees are separate; see pricing.
| Item | Cost | Frequency | Notes |
|---|---|---|---|
| GPhC Premises Registration | £261 | One-off | Paid when you submit your application |
| GPhC Annual Retention | £261 | Annual | Due each year to maintain registration |
| Professional Indemnity Insurance | £500 – £2,000 | Annual | Must explicitly cover distance selling / online services |
| ICO Registration | £40 – £2,900 | Annual | Tier-based on organisation size and turnover |
| Independent Prescriber Course | £1,500 – £4,000 | One-off | Only if your prescriber needs IP qualification |
| Typical Total Startup | £5,000 – £15,000 | N/A | Prescribing-only model (lowest capital entry point) |
Fees shown are from the 2024/25 GPhC fee schedule. Always verify current fees at pharmacyregulation.org.
Which Service Model Is Right for You?
Online pharmacies can operate under different models. Your choice determines your capital requirements and registration needs.
Lowest Barrier
Prescribing Only
Online consultations and prescriptions. No medicine stock needed, so patients collect from any pharmacy or you partner with a dispensing pharmacy. Lowest startup cost (£5k–£15k). May need CQC registration (England) rather than GPhC if not supplying medicines.
Dispensing Only
NHS and/or private prescription dispensing. Requires a dispensary, medicine stock, and delivery logistics. GPhC registration required. Higher capital needed.
Most Common
Prescribing + Dispensing
Full service: consult, prescribe, dispense, and deliver. You control the entire patient journey. This is the model most RxSure clients use. Requires both dispensary and GPhC registration.
Hybrid (Physical + Online)
Existing brick-and-mortar pharmacy adding online services. Your premises are already registered, so you notify GPhC of distance selling services.
How Do You Apply, Step by Step?
The practical process for submitting your GPhC premises registration application.
1
Appoint Your Superintendent Pharmacist
Must be GPhC-registered with no restrictive conditions. The GPhC will not process your application without this. This is your first priority.
2
Secure Physical Premises
A physical premises address is required even for online-only pharmacies. It does not need to be a high-street retail location; an office or workspace is acceptable provided it meets GPhC standards: secure medicine storage area (if dispensing), a private consultation area for the responsible pharmacist, appropriate IT infrastructure, and health & safety compliance.
3
Prepare Governance Documents
SOPs, clinical governance framework, distance selling risk assessment, responsible pharmacist procedures, staff training records. SOP templates are included with the RxSure platform.
4
Obtain Insurance & ICO Registration
Professional indemnity insurance must explicitly cover online/distance selling services. Register with the ICO for data protection. Both must be in place before you apply.
5
Create a myGPhC Account
Go to pharmacyregulation.org and create a myGPhC account. Since June 2026, all registration tasks are handled through the main myGPhC portal (the old myGPhCpharmacy portal has closed).
6
Complete the Application Form
The 40+ question form asks you to demonstrate how you meet the GPhC’s five principles for registered pharmacies. You’ll need to show your website, clinical platform, and governance documents are in place.
7
Pay £261 Registration Fee & Submit
Payment is made through the myGPhC portal when you submit. Go to GPhC premises registration →
8
GPhC Assessment & Possible Inspection
GPhC reviews your application (30–60 working days). They may conduct a pre-registration inspection of your premises. Complex applications (dispensing + prescribing, high-risk medicines) may take longer.
9
Registration Granted: Go Live
Once approved, display your GPhC registration number with a verification link on every page of your website. RxSure does this automatically in your site footer. You’re now a registered distance selling pharmacy.
Official Resources & GPhC Contact
Verify everything directly with the GPhC. These are the links you need.
GPhC Premises Registration →
Providing Services Online →
Distance Selling Guidance (Feb 2025 PDF) →
Search Pharmacy Register →
Registration & Renewal Hub →
Contact the GPhC Directly
Website: pharmacyregulation.org
Phone: 020 3713 8000
Email: info@pharmacyregulation.org
Portal: myGPhC (create account)
Online Pharmacies
RxSure for Online Pharmacies
See how RxSure is built specifically for online pharmacy operations.
Learn more → PlatformFull Feature List
Patient Portal, Prescribing Workflow, Video Consultation, AI, and more.
See features → ComplianceWebsite Requirements
What your pharmacy website needs to display for GPhC compliance.
View requirements → PrescribingElectronic Private Prescriptions
Digital prescribing workflow with dm+d formulary, SNOMED CT, and clinical safety checks.
Learn more →
Disclaimer: This page is published by RxSure, a trading name of QASTCO Limited (Company No. registered in England & Wales). The information provided is for general informational purposes only and does not constitute legal, regulatory, or professional advice. While we make every effort to ensure accuracy, we make no warranties about the completeness or reliability of this content. GPhC registration decisions are made solely by the General Pharmaceutical Council based on their own assessment and inspection. Requirements are subject to change, so always verify directly with the GPhC. RxSure is a technology platform provider and does not provide pharmacy services, prescribing services, or medical advice.
