Pharmacy Appointment Scheduling: Systems That Actually Work
Transform your pharmacy appointment scheduling from chaos to clarity. Learn best practices for booking systems that reduce no-shows…
Compliance Guide
GPhC Registration for Online Pharmacies
A step-by-step guide to GPhC distance selling registration — with every requirement mapped to RxSure features.
41GPhC Requirements Mapped
32Handled by RxSure
9You Provide
Last updated: June 2026 · Based on published GPhC guidance
Important: This page is an informational guide prepared by RxSure (QASTCO Limited). It does not constitute legal or regulatory advice and does not guarantee GPhC registration approval. Registration decisions are made solely by the General Pharmaceutical Council. Requirements may change — this guide reflects published GPhC guidance current as of June 2026. We recommend verifying all requirements directly with the GPhC and seeking independent professional advice.
What Is GPhC Registration?
If you want to sell or supply medicines online in Great Britain, your pharmacy premises must be registered with the General Pharmaceutical Council (GPhC) as a distance selling pharmacy. This registration confirms that your business meets the standards for safe, effective patient care and that patients using your service are protected.
What GPhC Looks For
GPhC registration requires three things working together. RxSure provides two of them.
Your Website
RxSure builds this for you
- Pharmacy identity on every page
- GPhC registration number + verify link
- Prescriber names, types & registration
- Patient journey explained
- Complaints procedure
- Privacy, Terms, Cookie policies
- Contact details & hours
Clinical Platform
RxSure provides this
- Patient identity verification
- Video consultations + AI notes
- Clinical triage & safety checks
- Prescribing workflow (dm+d)
- Secure prescription dispensing
- Payment processing (PCI-DSS)
- Audit trails & clinical safety
Your Governance
Only you can provide this
- Superintendent Pharmacist
- Responsible Pharmacist procedures
- Standard Operating Procedures
- Professional indemnity insurance
- Clinical governance framework
- Registered premises address
- ICO registration
Every Requirement, Mapped
Click any category to see GPhC requirements and which RxSure feature addresses each one.
Pharmacy name prominently displayed
Your pharmacy name appears in the site header on every page and in the footer with full address.
WebsiteHomepage + Header/Footer
Set automatically through the White-Label Engine — your brand, your name, on every page.
GPhC registration number displayed
Registration number shown in the footer on every page, linked directly to the GPhC online register for patient verification.
WebsiteGlobal Footer + Verify Link
Replaces the old internet pharmacy logo scheme (closed 31 December 2025). Patients click to verify you on the GPhC register.
Physical address of registered pharmacy
Full postal address displayed on the About page, Contact page, and footer across all pages.
WebsiteAbout + Contact + Footer
Your registered premises address — required even for online-only pharmacies.
Name of the pharmacy owner
Legal owner or company name shown on the About page and footer.
WebsiteAbout Page + Footer
Business ownership details clearly stated as required by GPhC distance selling guidance.
Phone numbers and email addresses
Phone and email visible on the Contact page, footer, and optionally header. Operating hours clearly stated.
WebsiteContact Page + Header/Footer
Patients must be able to reach you easily — displayed prominently across the site.
Prescriber names displayed
Dedicated Team page lists every prescriber by full name with professional photo.
WebsiteOur Team Page
Updated February 2025 — GPhC now requires full transparency about who provides clinical services.
Whether prescriber is a doctor or non-medical prescriber
Each prescriber entry states their type — GP, Pharmacist Independent Prescriber, Nurse Prescriber, etc.
WebsiteOur Team Page
Patients must understand the qualifications of who is treating them.
Prescriber registration number and service address
GMC, GPhC, or NMC registration number shown per prescriber, plus prescribing service address.
WebsiteOur Team Page
Professional registration details make your prescribers verifiable and build patient trust.
How to check prescriber registration
Each prescriber entry includes a direct link to the relevant professional register (GMC, GPhC, NMC) so patients can verify independently.
WebsiteOur Team Page — Register Links
One-click verification links to official registers.
Superintendent Pharmacist identified
Superintendent Pharmacist named with GPhC registration number on About and Team pages.
WebsiteAbout + Our Team Page
The Superintendent has legal responsibility for the pharmacy business — patients and GPhC inspectors expect to see them identified.
Photo ID verification before prescribing
Patient registration requires upload of passport or driving licence. Prescriber cannot proceed without a completed ID check.
PlatformID Verification Module
Built into the Patient Portal registration flow. Document stored securely with encryption at rest.
Proof of address verification
Registration requires upload of utility bill, bank statement, or council tax bill as proof of address.
PlatformID Verification Module
Mandatory step — the system blocks progression until both photo ID and proof of address are uploaded.
Video verification for high-risk medicines
High-risk services (e.g. GLP-1 weight loss) require mandatory video consultation. Prescriber verifies photo ID matches the live patient during the call.
PlatformVideo Consultation System
Configurable per service pathway — the system enforces video before a prescription can be issued for flagged services.
Clinical assessment before supply of medicines
Configurable medical questionnaires per service. The engine auto-scores responses, checks for contraindications, and routes patients to the right pathway.
PlatformRAG Triage Engine
Red (declined / refer to GP), Amber (needs video consultation), Green (suitable to proceed). No patient skips triage.
Additional safeguards for high-risk medicines
High-risk medicine pathways are configured to require mandatory video consultation — the prescriber cannot issue a prescription without completing a video session.
PlatformService Management Engine
System-enforced — not optional. Works with the RAG Triage Engine to block questionnaire-only prescribing for flagged services.
Qualified prescriber review and approval
Full clinician review-and-approve workflow. Prescriber sees all patient data, conducts consultation, and must explicitly approve before a prescription is generated.
PlatformPrescribing Workflow
Practitioner Portal gives the prescriber everything in one view — questionnaire answers, ID documents, medical history, triage score.
Video consultation capability
Built-in live video between patient and prescriber with AI-powered transcription that auto-generates structured clinical notes.
No third-party video tools needed. Notes saved directly to the patient record — no manual documentation required.
Drug interaction and safety checking
dm+d integrated formulary with SNOMED CT coding. Automated drug interaction alerts and contraindication warnings.
PlatformAI Clinical Decision Support
AI-powered safety checking flagged as “For Practitioner Review Only” — the clinician always has the final decision.
Patient journey clearly explained
Dedicated “How It Works” page with step-by-step visual explanation of the entire process — from registration to collecting medication.
WebsiteHow It Works Page
Patients must understand exactly what to expect before they use the service — including when they may be referred to their GP instead.
Two-way communication with patients
Encrypted patient-clinician messaging within the portal for ongoing clinical communication. Phone and email on the website for general enquiries.
Website + PlatformSecure Messaging + Contact Page
Prescribers must maintain two-way communication — the platform handles clinical messaging, the website handles general contact.
Secure prescription dispensing mechanism
AES-encrypted one-time QR code prescription token. The patient receives a secure token via their portal. A compliant pharmacy scans the QR to view and dispense.
PlatformQR Prescription Dispensing
Cannot be reused, duplicated, or tampered with — each prescription is a unique encrypted token.
Prescription and order tracking
Patient portal shows real-time prescription status and order tracking with push notifications on status changes.
PlatformPatient Portal — Tracking
Patients can see exactly where their prescription is — issued, pending, dispensed.
Secure data collection, storage, and transmission
All data encrypted at rest (AES-256) and in transit (TLS). Role-based access control limits data access per user role.
PlatformRBAC Module + Infrastructure
Platform holds DSPT “Standards Met” and Cyber Essentials certification.
Secure payment processing
Stripe integration — PCI-DSS Level 1 compliant. No card data touches or is stored on your systems.
PlatformStripe Payment Integration
Handles consultation fees, service charges, and refund workflows. See pricing.
GDPR-compliant privacy policy and consent
Website provides a full Privacy Policy page. Platform collects and records explicit GDPR consent at patient registration. DPIA completed.
Website + PlatformPrivacy Policy + GDPR Consent Module
Privacy Policy covers data controller, legal basis, sharing, retention, patient rights, and ICO contact information.
Cookie consent mechanism
Cookie consent banner on first visit with accept/reject. Dedicated Cookie Policy page listing all cookies by category.
WebsiteCookie Banner + Cookie Policy
PECR compliant — cookies categorised as essential, analytics, and marketing with clear explanations.
SSL / HTTPS across all pages
Valid SSL certificate across website and patient portal. All traffic served over HTTPS with no mixed content.
PlatformPlatform Infrastructure
Standard on every RxSure deployment — no additional setup needed.
Clinical safety management
RxSure is DCB0129 certified — Clinical Risk Management for Health IT Systems. Clinical Safety Officer appointed. Safety case report maintained and reviewed.
PlatformDCB0129 Certification
Your pharmacy operates on clinically certified infrastructure from day one.
Audit trail for all clinical decisions
Every interaction, consultation, clinical decision, prescription, and dispensing event logged with timestamps. Immutable — records cannot be altered or deleted.
PlatformAudit Trail System
Accessible for GPhC inspection. Complete evidence trail for every patient interaction.
Published complaints procedure
Dedicated Complaints page with step-by-step process, contact details, response timeframe, and how to escalate to the GPhC.
WebsiteComplaints Page
Includes a direct link to the GPhC “Reporting Concerns” page for patients who are not satisfied.
Contact details, operating hours, and emergency signposting
Contact page with phone, email, address, and hours. Footer includes emergency notice: “If you need urgent help, call 999 or attend A&E.”
WebsiteContact Page + Footer
Operating hours indicate when the Responsible Pharmacist is on duty.
Multi-role access control
Separate portals for patients, practitioners, and administrators. Granular role-based access with 5 user roles. Staff access fully audited.
PlatformRBAC Module + 3 Portals
Each role sees only what they need — patient data is protected by design, not just policy.
Appoint a Superintendent Pharmacist
A GPhC-registered Superintendent Pharmacist who takes legal responsibility for the pharmacy business.
You ProvideRegistration blocker
GPhC will not process your application without this. RxSure displays their details on your website once appointed.
Responsible Pharmacist procedures
Establish RP sign-in/out procedures and maintain the RP record. A Responsible Pharmacist must be in charge when operating.
You ProvideOperational requirement
Required by Responsible Pharmacist Regulations 2008.
Standard Operating Procedures (SOPs)
Written SOPs for dispensing, prescribing, ID verification, complaints handling, controlled substances, and clinical governance.
You ProvideGovernance document
Written SOPs covering your pharmacy’s specific workflows. Many pharmacists use professional consultants or GPhC guidance to draft these.
Clinical governance framework
Document covering risk management, incident reporting, patient safety reviews, and continuous improvement.
You ProvideGovernance document
GPhC expects a written clinical governance framework. We can help you structure this.
Risk assessment for distance services
A documented risk assessment specific to providing pharmacy services at a distance.
You ProvideRisk assessment document
GPhC requires pharmacies to conduct comprehensive risk assessments for distance selling services.
Professional indemnity insurance
Insurance that explicitly covers distance selling / online pharmacy activities. Must be in place before registration.
You ProvideRegistration blocker
Standard pharmacy insurance may not cover online services — check your policy covers distance selling specifically.
Staff training records
Records of staff training on pharmacy operations, safeguarding, data protection, and platform usage.
You ProvideTraining records
GPhC expects staff to be competent. RxSure provides platform training to get your team up to speed.
ICO registration
Register with the Information Commissioner’s Office before processing personal data.
You ProvideData protection registration
Quick online registration at ico.org.uk. Required under the Data Protection Act 2018.
GPhC premises registration application
Submit the premises registration application to GPhC. A physical premises address is required even for online-only pharmacies.
You ProvideFinal step
Once everything is ready, you submit to GPhC premises registration.
Platform Certifications
When you operate on RxSure, your pharmacy runs on certified infrastructure from day one.
DCB0129
Clinical Risk Management for Health IT Systems
DSPT
NHS Data Security & Protection Toolkit — Standards Met
Cyber Essentials
Government-backed cyber security certification
GDPR / DPIA
UK GDPR compliant with Data Protection Impact Assessment
PCI-DSS
Level 1 payment compliance via Stripe
Your Checklist
RxSure provides the platform and website. These items must come from you as the pharmacy owner.
Registration blocker
Superintendent Pharmacist
GPhC-registered pharmacist appointed as Superintendent. GPhC will not process your application without this.
Registration blocker
Professional Indemnity Insurance
Must explicitly cover distance selling / online pharmacy activities.
Registration blocker
Registered Premises Address
Physical premises address — required even for online-only pharmacies.
Prescriber Details
Full name, type, registration number, and address for each prescriber. Required on your Team page.
SOPs & Governance Documents
Standard Operating Procedures, clinical governance framework, risk assessment. You prepare these for your specific operations.
ICO Registration
Data protection registration with the Information Commissioner’s Office.
Staff Training Records
Training on pharmacy operations, safeguarding, data protection. We provide platform training.
Branding Assets
Logo, colours, fonts for your client-branded website.
Typical Timeline
From first conversation to GPhC application — what to expect.
1
Discovery Call
Week 1We understand your pharmacy business, services, and goals. You tell us what you want to offer — weight loss, men’s health, travel health, or other pharmacy services.
2
Website Build & Platform Configuration
Weeks 2–4We build your GPhC-compliant website and configure the platform — service pathways, questionnaires, prescriber accounts, branding.
3
Governance Setup
Weeks 2–4 (parallel)You appoint your Superintendent Pharmacist, arrange insurance, prepare your SOPs, and register with ICO.
4
Compliance Review
Week 5We walk through every GPhC requirement together — website, platform, and governance — to make sure nothing is missing before you apply.
5
GPhC Application
Week 6You submit your premises registration application to the GPhC. Processing typically takes 4–8 weeks.
Common Questions
Yes. The GPhC requires a registered pharmacy premises address even if all your services are delivered online. This is where your Responsible Pharmacist operates from and where GPhC inspectors will visit.
It depends on the medicine. Since February 2025, the GPhC requires that high-risk medicines (such as GLP-1 weight loss treatments) are not prescribed based on an online questionnaire alone — video or in-person verification is mandatory. Lower-risk services may use questionnaire-based consultation with appropriate safeguards. RxSure lets you configure this per service.
The internet pharmacy logo scheme closed on 31 December 2025. Instead, online pharmacies must now display their GPhC registration number with a link to the GPhC online register so patients can verify the pharmacy directly. RxSure websites include this in the footer of every page.
RxSure provides 32 of the 41 mapped GPhC requirements through our platform and website service — including identity verification, clinical workflows, prescribing, dispensing, data security, and audit trails. You provide 9 items that only a pharmacy owner can: Superintendent Pharmacist, Responsible Pharmacist procedures, SOPs, clinical governance, risk assessment, indemnity insurance, staff training, ICO registration, and the GPhC application itself.
The preparation phase — website, platform, and governance — typically takes 4–6 weeks with RxSure. Once you submit your application, GPhC processing typically takes 4–8 weeks, though this can vary. Start to finish, most clients are operational within 3–4 months.
Yes. RxSure holds DCB0129 clinical safety certification, DSPT (Data Security and Protection Toolkit) “Standards Met” status, Cyber Essentials, and PCI-DSS Level 1 compliance via Stripe. These certifications demonstrate that the platform meets NHS-grade clinical safety and data protection standards.
It depends on your model. If you only prescribe and the patient collects their medication from a separate pharmacy, you would typically need CQC registration (in England) rather than GPhC. However, if you prescribe and supply or dispense medicines directly to patients — which is how most successful online pharmacies operate — you need GPhC registration as a distance selling pharmacy. Talk to us and we can help you decide which model suits your business.
A distance selling pharmacy is a GPhC-registered pharmacy that provides pharmacy services without patients visiting the premises in person. Orders are placed online and medicines are delivered by post or courier. The GPhC published updated guidance in February 2025, introducing stricter requirements around patient identity verification, prescriber transparency, and high-risk medicine safeguards. This page maps all of those requirements.
Online Pharmacies
RxSure for Online Pharmacies
See how RxSure is built specifically for online pharmacy operations.
Learn more → PlatformFull Feature List
Patient Portal, Prescribing Workflow, Video Consultation, AI, and more.
See features → ComplianceCompliance Standards
DCB0129, DSPT, Cyber Essentials, GDPR, and PCI-DSS certifications.
View compliance → PricingPlatform Pricing
Transparent pricing with no platform fees. Website build included on Enterprise plans.
See pricing →
Disclaimer: This page is published by RxSure, a trading name of QASTCO Limited (Company No. registered in England & Wales). The information provided is for general informational purposes only and does not constitute legal, regulatory, or professional advice. While we make every effort to ensure accuracy, we make no warranties about the completeness or reliability of this content. GPhC registration decisions are made solely by the General Pharmaceutical Council based on their own assessment and inspection. Requirements are subject to change — always verify directly with the GPhC. RxSure is a technology platform provider and does not provide pharmacy services, prescribing services, or medical advice.
