Terms of Service
1. Agreement to Terms
By accessing or using RxSure© ("the Platform"), you agree to be bound by these Terms of Service ("Terms"). If you disagree with any part of these Terms, you may not access the Platform.
These Terms constitute a legally binding agreement between you and RxSure© regarding your use of our pharmacy compliance and private services platform.
2. Description of Service
RxSure© provides a digital platform for UK pharmacies to:
- Manage appointment bookings for private clinical services
- Conduct guided clinical consultations
- Generate compliant documentation (prescriptions, certificates, GP notifications)
- Track compliance requirements (training, DBS, insurance)
- Maintain audit trails for GPhC inspections
- Process patient payments (via your own payment accounts)
3. NHS Integrated Services
RxSure integrates with NHS England digital services to enable pharmacy organisations to deliver NHS clinical services. When using NHS-integrated features, the following additional terms apply:
- a) NHS Data Access: Access to NHS patient data (via the Personal Demographics Service, MESH, and other NHS APIs) is provided through authenticated sessions using NHS Care Identity Service 2 (CIS2). Users must authenticate with valid NHS credentials to access NHS data.
- b) Permitted Use: NHS patient data accessed through the platform must only be used for the delivery of direct patient care in connection with NHS pharmacy services. Use of NHS data for marketing, research (without appropriate approvals), or any purpose other than direct patient care is strictly prohibited.
- c) NHS Data Handling: Patient data retrieved from NHS services must be handled in accordance with NHS data sharing agreements, the NHS Code of Practice on Confidential Information, and the Caldicott Principles. You must not share, export, or transfer NHS patient data outside of the platform except through approved NHS pathways (e.g., MESH messaging to GP practices).
- d) CIS2 Authentication: Healthcare professionals accessing NHS-integrated features must authenticate using NHS CIS2. You are responsible for ensuring that only appropriately registered healthcare professionals (e.g., GPhC-registered pharmacists) use NHS-authenticated features within your organisation.
- e) Service Availability: NHS-integrated features depend on the availability of NHS England services (PDS, CIS2, MESH). We do not guarantee the availability of NHS services as they are operated by NHS England. In the event of NHS service unavailability, non-NHS features of the platform will continue to operate normally.
- f) Compliance Obligations: Pharmacy organisations using NHS-integrated features must maintain current DSPT (Data Security and Protection Toolkit) compliance and comply with all NHS information governance requirements applicable to their use of NHS data.
- g) NHS Acceptable Use Policy: Pharmacy organisations using NHS-integrated features will be provided with the NHS Connection Agreement End User Acceptable Use Policy and must comply with its terms as a condition of accessing NHS data through the Platform. By using NHS-integrated features, you confirm that you have read, understood, and agree to comply with the NHS Acceptable Use Policy as provided to you.
4. Eligibility
To use the Platform, you must:
- Be a registered pharmacy or healthcare professional in the United Kingdom
- Hold valid GPhC registration (or equivalent professional registration)
- Have the legal authority to bind your organisation to these Terms
- Be at least 18 years of age
5. Account Registration
5.1 Account Creation
You must provide accurate and complete information when creating an account. You are responsible for maintaining the confidentiality of your account credentials.
5.2 Account Security
You must:
- Keep your login credentials secure and confidential
- Notify us immediately of any unauthorised access
- Not share your account with unauthorised users
- Log out after each session on shared devices
6. Subscription and Payment
6.1 Pricing
- Pharmacy Website: £1,800 one-time (excl. VAT)
- Private Prescribing: £199/month (excl. VAT) with 1 month free trial
- Enterprise: Custom pricing
- University & Education: £50/student/year
6.2 Payment Terms
- Subscriptions are billed monthly or annually in advance
- All prices are in GBP and exclude VAT where applicable
- Payment is due upon invoice
- We accept major credit/debit cards and bank transfers
6.3 Cancellation
- You may cancel your subscription at any time
- Cancellation takes effect at the end of the current billing period
- No refunds for partial billing periods
- Data export is available for 30 days after cancellation
7. Use of the Platform
7.1 Permitted Use
You may use the Platform only for lawful purposes related to your pharmacy or healthcare practice, in accordance with all applicable laws and regulations.
7.2 Prohibited Activities
You must not:
- Use the Platform for any illegal purpose
- Violate any applicable healthcare regulations
- Transmit viruses, malware, or harmful code
- Attempt to gain unauthorised access to systems
- Interfere with the Platform's operation
- Scrape, copy, or harvest data without permission
- Sublicense or resell access to the Platform
- Misrepresent your identity or professional status
7.3 NHS Data Restrictions
When accessing NHS patient data through the platform, you must not:
- Access patient records without a legitimate clinical relationship with the patient
- Share NHS patient data with unauthorised third parties
- Use NHS patient data for purposes other than direct patient care
- Attempt to access NHS services using another person's CIS2 credentials
- Store NHS patient data outside of the RxSure platform
- Export bulk patient data from NHS services
- Use NHS data for commercial purposes unrelated to NHS service delivery
8. Clinical Responsibility
Important: RxSure© is a platform tool only. All clinical decisions, prescribing, and patient care remain the sole responsibility of the registered healthcare professional using the Platform.
- The Platform provides workflow guidance based on clinical protocols
- Questionnaires are based on SmPC and clinical guidelines but are tools, not clinical advice
- You must exercise independent clinical judgement
- You are responsible for ensuring appropriate patient care
- You must maintain appropriate professional indemnity insurance
9. Data Protection
9.1 Your Responsibilities
As a data controller for patient information, you are responsible for:
- Obtaining valid consent from patients
- Ensuring lawful basis for processing
- Responding to patient data subject requests
- Maintaining appropriate data security practices
9.2 Our Responsibilities
As a data processor, we will:
- Process data only on your instructions
- Implement appropriate security measures
- Assist with data subject requests
- Notify you of any data breaches
Please refer to our Privacy Policy for full details.
9.3 Data Processing Agreement
A Data Processing Agreement (DPA) is available and required for all pharmacies and prescribers processing patient data through the Platform. The DPA sets out:
- The scope and purpose of data processing
- Obligations of both controller (pharmacy) and processor (RxSure)
- Sub-processor arrangements and approvals
- Data subject rights handling procedures
- Data breach notification obligations
- Data return and deletion on termination
To request a copy of the DPA, contact contact@rxsure.co.uk.
9.4 Data Breach Notification
In the event of a personal data breach affecting your data:
- We will notify you (as data controller) without undue delay and no later than 72 hours after becoming aware of the breach
- Notification will include: nature of the breach, categories and approximate number of records affected, likely consequences, and measures taken
- We will cooperate with you to fulfil your obligations to the ICO and affected individuals
Full details of our breach notification process are set out in our Privacy Policy.
10. Service Level Commitment
10.1 Availability
We target 99.9% uptime for the Platform, measured monthly, excluding scheduled maintenance windows. Scheduled maintenance will be carried out during off-peak hours (typically between 02:00 and 06:00 GMT) with at least 48 hours' notice for planned downtime.
10.2 Support Response Times
- Critical issues (Platform unavailable, data loss risk): Response within 4 hours during business hours
- High priority (major feature unavailable): Response within 8 hours during business hours
- Standard issues (general queries, minor bugs): Response within 2 business days
10.3 Data Backup & Recovery
- Automated daily backups of all platform data
- Backups retained for a minimum of 30 days
- Recovery point objective (RPO): 24 hours
- Recovery time objective (RTO): 4 hours for critical services
11. Intellectual Property
11.1 Our Property
The Platform, including all software, content, trademarks, and materials, is owned by RxSure© and protected by intellectual property laws.
11.2 Your Content
You retain ownership of your data and content. You grant us a limited licence to process your data solely for providing the Platform services.
11.3 Restrictions
You may not:
- Copy, modify, or create derivative works
- Reverse engineer or decompile the Platform
- Remove any proprietary notices
- Use our trademarks without permission
12. Limitation of Liability
To the maximum extent permitted by law:
- We are not liable for any indirect, incidental, or consequential damages
- Our total liability is limited to fees paid in the 12 months prior to the claim
- We are not liable for clinical outcomes or patient care decisions
- We are not liable for third-party services (payment processors, etc.)
Nothing in these Terms excludes liability for death, personal injury, or fraud.
12.1 NHS Service Limitations
We are not liable for any loss or damage arising from:
- Unavailability or interruption of NHS England services (PDS, CIS2, MESH, ODS)
- Inaccuracies in data provided by NHS services
- Changes to NHS service specifications, APIs, or access requirements
- Suspension or revocation of NHS API access by NHS England
Our liability for NHS-integrated features is limited to the extent that such features depend on third-party NHS services outside our control.
13. Indemnification
You agree to indemnify and hold harmless RxSure©, its officers, directors, and employees from any claims arising from:
- Your use of the Platform
- Your clinical decisions and patient care
- Your breach of these Terms
- Your violation of any laws or regulations
- Your infringement of third-party rights
14. Termination
14.1 By You
You may terminate your account at any time by contacting us or through your account settings.
14.2 By Us
We may suspend or terminate your access if you:
- Breach these Terms
- Fail to pay fees when due
- Engage in prohibited activities
- No longer meet eligibility requirements
14.3 Effect of Termination
Upon termination:
- Your access to the Platform will cease
- You may request data export within 30 days
- We may retain data as required by law
- Provisions that should survive will remain in effect
15. Dispute Resolution
15.1 Informal Resolution
Before initiating formal proceedings, you agree to contact us to attempt informal resolution.
15.2 Governing Law
These Terms are governed by the laws of England and Wales.
15.3 Jurisdiction
The courts of England and Wales have exclusive jurisdiction over any disputes.
16. Changes to Terms
We may update these Terms periodically. We will notify you of material changes by:
- Email notification
- In-app notification
- Posting on our website
Continued use after changes constitutes acceptance of the new Terms.
17. General Provisions
- Entire Agreement: These Terms constitute the entire agreement between us
- Severability: If any provision is unenforceable, the remainder stays in effect
- Waiver: Failure to enforce a provision does not waive the right to do so
- Assignment: You may not assign these Terms without our consent
- Force Majeure: Neither party is liable for delays due to circumstances beyond reasonable control
18. AI-Assisted Features
Please read this section carefully. By using any AI-assisted feature within the Platform, you acknowledge and agree to the terms set out in this section.
18.1 Nature of AI Functionality
RxSure© incorporates an AI-assisted feature known as the "Consultation Assistant" (and such other AI-assisted tools as may be introduced from time to time). The Consultation Assistant is designed solely as a supplementary clinical support tool to assist registered healthcare professionals in organising consultation notes, surfacing reference information, and streamlining documentation workflows.
The Consultation Assistant:
- Does not diagnose, treat, or prescribe
- Does not make or substitute for clinical decisions
- Does not constitute medical advice
- Is not a replacement for professional clinical training, competency, or judgement
- Is not classified as a medical device under the UK Medical Devices Regulations 2002 (as amended)
18.2 Clinical Responsibility
Notwithstanding any AI-generated output produced by the Platform, all clinical responsibility remains solely and entirely with the registered healthcare professional using the Platform. RxSure© accepts no clinical liability of any kind in connection with AI-assisted features. This includes, without limitation:
- Patient assessment, diagnosis, and treatment decisions
- Prescribing decisions and dosage calculations
- Drug interaction and contraindication checks
- Patient counselling, follow-up, and adverse event monitoring
- Any action taken or not taken in reliance on AI-generated output
18.3 Practitioner Obligations
When using AI-assisted features, you agree to:
- Independently verify all AI-generated output before acting upon it
- Apply your own professional clinical judgement to every consultation
- Override, disregard, or supplement AI output whenever clinically appropriate
- Not present AI-generated content to patients as a clinical determination
- Maintain competency in all services you deliver through the Platform
- Ensure your professional indemnity insurance expressly covers the use of AI-assisted clinical tools
18.4 Accuracy and Limitations
AI systems, including the Consultation Assistant, have inherent limitations. You acknowledge that:
- AI-generated output may be inaccurate, incomplete, outdated, or inappropriate for a specific patient
- The Consultation Assistant may not reflect the most current clinical guidelines, drug information, or regulatory requirements
- AI output is generated probabilistically and does not constitute verified clinical information
- The Platform does not warrant the accuracy, completeness, or fitness for purpose of any AI-generated content
- All AI output must be treated as a starting point for professional review, not a final clinical determination
18.5 Limitation of Liability for AI Features
To the maximum extent permitted by law, RxSure©'s total aggregate liability arising out of or in connection with any AI-assisted feature — including but not limited to any claim based on AI-generated output — is limited to the lesser of: (a) the fees paid by you in the three (3) months immediately preceding the claim, or (b) £5,000.
RxSure© accepts no liability for:
- Clinical harm, patient injury, or adverse outcomes arising from reliance on AI-generated output
- Regulatory sanctions, fitness-to-practise proceedings, or professional disciplinary action
- Prescribing errors or adverse drug events attributable to AI-generated suggestions
- Loss of revenue, loss of reputation, or any indirect or consequential loss
- Third-party claims brought against you by patients or others arising from your use of AI features
Nothing in this clause limits liability for death or personal injury caused by RxSure©'s own negligence, or for fraud or fraudulent misrepresentation.
18.6 Data Use for AI Improvement
To improve the accuracy and effectiveness of AI-assisted features, RxSure© may use strictly anonymised and aggregated platform usage data. This means:
- No personally identifiable patient data is used for AI training or improvement
- No identifiable practitioner data is used without express consent
- All data used for AI improvement is de-identified and aggregated in accordance with ICO anonymisation guidance and NHS DSPT standards
- You may opt out of contributing anonymised data to AI improvement by contacting us — this does not affect your access to AI features
18.7 Indemnification for AI Feature Use
In addition to the general indemnification obligations in Section 13, you agree to indemnify, defend, and hold harmless RxSure©, its officers, directors, employees, and agents from and against any claim, liability, loss, damage, or expense (including reasonable legal fees) arising from:
- Your use of, or reliance upon, AI-generated output
- Any clinical decision made in connection with AI-assisted features
- Patient harm or third-party claims attributable to your use of the Consultation Assistant
- Your failure to independently verify AI-generated content before acting upon it
18.8 Acknowledgement of Risk
By activating or using any AI-assisted feature, you expressly acknowledge and agree that:
- You have read and understood this Section 19 in its entirety
- You are using AI features voluntarily and at your own professional risk
- The AI Consultation Assistant is a supplementary tool and not a substitute for clinical expertise
- You accept full clinical and professional responsibility for all decisions made during or following use of AI-assisted features
- Your professional indemnity insurer has been informed of, or covers, your use of AI-assisted clinical tools
18.9 Regulatory Compliance
The AI Consultation Assistant has been assessed and implemented in accordance with RxSure©'s clinical safety obligations under DCB0129 (Clinical Risk Management: its Application in the Manufacture of Health IT Systems). Specifically:
- AI-related clinical hazards are documented in the platform's hazard log
- Risk mitigations are in place to ensure AI output cannot be automatically applied without practitioner review
- The Clinical Safety Officer has reviewed and approved the inclusion of AI-assisted features within the platform's safety case
- AI features are reviewed as part of the ongoing clinical risk management process required by DCB0129
Any clinical safety concern relating to an AI-assisted feature should be reported to contact@rxsure.co.uk and will be investigated under our clinical risk management process.
19. Contact Information
For questions about these Terms:
Email: contact@rxsure.co.uk
Phone: 0161 383 0950
Address: 934 Stockport Rd, Manchester M19 3AB, UK