1. Definitions

"Platform" means the MyPharmHub software services, including PharmacyHub, PatientHub, AdminHub, APIs, modules, storefronts, booking, kiosk, clinical workflows, retail, and payment facilitation features.

"Modules" means optional service areas made available on the Platform (including Core NHS pathways, private care, weight-loss clinic, travel clinic, retail, and kiosk).

"Patient Data" means personal data relating to patients or service users processed via the Platform, including special-category health data.

"Clinical Content" means any suggestions, recommendations, schedules, triage routes, alerts, templates, checklists, or other decision-support outputs generated or displayed by the Platform.

"Connected Account" means your Stripe Connect account linked to the Platform for patient or retail payments.

"DPA" means our Data Processing Agreement, which is incorporated into this Agreement by reference.

2. Eligibility and accounts

The Platform is intended for GPhC-registered pharmacy premises and their authorised staff (and such other professional users as we expressly permit in writing).

You warrant that: (a) premises and relevant individuals hold valid GPhC registration where required; (b) you will keep registration and account details accurate and up to date; (c) only authorised users will access clinical and administrative functions; (d) credentials will not be shared; and (e) you will promptly revoke access for leavers and compromised accounts.

You are responsible for all activity under your accounts and for ensuring that each authorised user complies with this Agreement and applicable professional standards.

3. Nature of the service — software only

MyPharmHub provides software tools and related support. We are not a pharmacy, clinic, NHS body, or healthcare provider. We do not prescribe, supply, administer, diagnose, or provide clinical care.

Clinical and retail services delivered using the Platform are provided solely by you (and your registered professionals) to patients under your professional, contractual, and regulatory duties.

Patients contract with you for clinical and retail services. Except where we expressly state otherwise in writing, MyPharmHub has no patient care relationship and does not act as your agent for clinical decisions.

4. Clinical responsibility and decision support

All clinical judgement, prescribing, supply under PGD or protocol, administration, counselling, referral, documentation, and discharge decisions remain solely your responsibility (and that of the relevant registered professional).

Clinical Content — including medication suggestions, dosing or schedule suggestions, vaccination course planning, triage routing, red-flag alerts, templates, and checklists — is non-binding decision support only. It is not medical advice, not a substitute for professional judgement, and may be incomplete, outdated, or unsuitable for a particular patient.

You must independently verify Clinical Content against current professional standards, product licences, PGDs, protocols, and patient-specific information before acting.

You are solely responsible for configuration of clinical blueprints, PGDs, protocols, eligibility rules, pricing, storefront content, and patient-facing terms.

Online triage or booking may decline or redirect a patient. That is a software pathway operated under your configuration, not a clinical assessment by MyPharmHub.

5. Regulatory compliance

You are solely responsible for compliance with applicable law and standards, including (as relevant): GPhC standards; superintendent and responsible pharmacist duties; MHRA requirements; PGD authorisation and use; advertising of medicines; NHS contractual and referral requirements; yellow fever and travel certification rules; and consumer and distance-selling rules for retail.

You must not use the Platform to unlawfully advertise, offer, or supply POM or other restricted medicines.

Nothing in this Agreement transfers regulatory accountability for pharmacy practice to MyPharmHub.

6. Licence and intellectual property

Subject to this Agreement and payment of applicable fees, we grant you a non-exclusive, non-transferable, non-sublicensable licence to access and use the Platform for your internal pharmacy operations during the subscription term.

We and our licensors own all intellectual property in the Platform. No ownership is transferred to you.

You must not: reverse engineer the Platform except to the extent permitted by law; copy or create derivative works of the Platform; resell or white-label without our prior written consent; probe, scan, or attack the Platform; or remove proprietary notices.

You retain ownership of your data and content you upload. You grant us a licence to host, process, transmit, and display that content solely to provide, secure, support, and improve the Platform (including security monitoring, support, and aggregated anonymised analytics that do not identify patients).

7. Acceptable use

You must not use the Platform to: violate law; process data without a lawful basis; upload malware or unlawful content; attempt unauthorised access; interfere with other tenants; use another organisation's credentials; or misrepresent GPhC or professional status.

We may suspend access immediately where we reasonably suspect material breach, fraud, security risk, or regulatory risk, and will notify you as soon as practicable.

8. Data protection

For Patient Data, you are the controller and MyPharmHub is the processor, except where we determine the purposes and means of processing as an independent controller (for example account administration, billing, security logs, or our own marketing contacts).

Processing of Patient Data is governed by the DPA. If there is a conflict between this Agreement and the DPA on data protection matters, the DPA prevails.

You warrant that you have a lawful basis (and any required conditions for special-category data) for instructing us to process Patient Data via the Platform, and that you will provide required privacy notices to patients.

We may use sub-processors (including hosting, email, payments, and monitoring providers). Current sub-processors include Vercel (hosting), Stripe (payments), Brevo (transactional email), and Sentry (error monitoring), as updated in our notices from time to time.

International transfers of personal data will use appropriate UK GDPR safeguards.

Retention of Patient Data will follow your lawful instructions and applicable retention requirements (including NHS-aligned retention where applicable), subject to the DPA and technical constraints.

9. Payments, subscriptions, and Stripe Connect

Subscription fees are billed as selected at signup or in your order form (for example monthly or annual) and are non-refundable except where required by law or expressly agreed in writing.

Where you enable Stripe Connect: (a) you must accept Stripe's Connected Account Agreement and related Stripe terms; (b) patient payments for your services and products are paid to your Connected Account (subject to Stripe's rules); (c) MyPharmHub may charge a platform application fee as disclosed in-product or in your order form; (d) you are responsible for tax, VAT, invoicing to patients, refunds, chargebacks, and disputes for your transactions, except to the extent caused by our proven payment-routing error.

We may suspend paid features for overdue fees after reasonable notice.

10. Service levels and availability

We aim to provide a reliable service but do not guarantee uninterrupted or error-free operation. Planned maintenance and emergency downtime may occur.

You are responsible for contingency arrangements for clinical operations if the Platform is unavailable.

Unless a separate written SLA is agreed, no service credits apply.

11. Warranties and disclaimers

Each party warrants that it has capacity to enter into this Agreement.

Except as expressly stated in this Agreement, the Platform and Clinical Content are provided "as is" and "as available". To the maximum extent permitted by law, we disclaim all implied warranties, including merchantability, satisfactory quality, and fitness for a particular clinical or commercial purpose.

We do not warrant that Clinical Content is accurate, complete, current, or suitable for any patient or clinical decision.

12. Indemnity

You will indemnify and hold harmless Doctortosity Ltd (trading as MyPharmHub) and its officers, employees, and agents against claims, losses, damages, costs (including reasonable legal fees), and liabilities arising out of or related to: (a) your clinical acts or omissions; (b) patient claims concerning care, supply, counselling, or outcomes; (c) your configuration of Modules, PGDs, protocols, storefronts, or patient terms; (d) your breach of law or this Agreement; (e) Patient Data processed under your instructions; and (f) chargebacks, refunds, or tax obligations for your transactions; except to the extent caused by our wilful misconduct or proven material breach of this Agreement.

13. Limitation of liability

Nothing in this Agreement excludes or limits liability for: death or personal injury caused by negligence; fraud or fraudulent misrepresentation; or any other liability that cannot be excluded or limited under English law.

Subject to the preceding paragraph, we are not liable for: loss of profits, revenue, business, goodwill, or anticipated savings; loss or corruption of data (except to the extent caused by our failure to implement agreed security measures in the DPA); or any indirect or consequential loss, whether or not foreseeable.

Subject to the non-excludable liabilities above, our total aggregate liability arising out of or in connection with this Agreement in any rolling 12-month period is limited to the total subscription fees (excluding platform application fees collected for remittance or fee calculation, taxes, and Stripe fees) paid by you to MyPharmHub for that period.

You acknowledge that the fees reflect this allocation of risk and that clinical professional indemnity insurance remains your responsibility.

14. Term, suspension, and termination

This Agreement continues for the subscription term and renews as configured unless cancelled in accordance with in-product controls or written notice.

Either party may terminate for material breach not remedied within 30 days of written notice (or immediately for irremediable breach, insolvency, or serious security or regulatory risk).

On termination: (a) your licence ends; (b) you must stop using the Platform; (c) we will make Patient Data available for export for a reasonable period as set out in the DPA and exit process; then delete or return it in accordance with the DPA, subject to legal retention obligations.

Clauses that by nature should survive (including clinical responsibility, IP, data protection, warranties, indemnity, liability, confidentiality, and governing law) survive termination.

15. Confidentiality

Each party must keep the other's confidential information confidential and use it only to perform this Agreement, except where disclosure is required by law or to professional advisers under confidentiality obligations.

16. Changes

We may update these terms by posting a revised version and/or notifying account administrators. Material adverse changes will take effect after reasonable notice (except where required sooner for legal or security reasons).

Continued use after the effective date constitutes acceptance. If you do not agree, you must stop using the Platform and may terminate under clause 14.

The version identifier shown at the top of this Agreement is the version you accept at signup or upon later re-acceptance.

17. General

This Agreement (including the DPA, order form or pricing schedule, Privacy Policy where incorporated, and any accepted policies) is the entire agreement and supersedes prior negotiations on the subject matter.

If any provision is unenforceable, the remainder continues in force. No waiver is effective unless in writing.

You may not assign this Agreement without our prior written consent; we may assign to an affiliate or successor.

No third-party rights are conferred under the Contracts (Rights of Third Parties) Act 1999, except as expressly stated.

Notices may be sent to legal@mypharmhub.com and your primary admin email.

18. Governing law and jurisdiction

This Agreement and any dispute or claim (including non-contractual disputes or claims) are governed by the laws of England and Wales. The courts of England and Wales have exclusive jurisdiction.