Data & Payment Security

Data security (Express Healthcare Ltd) uses high-level data encryption to ensure our customer's data is not compromised in transit or 'at rest' on the server.

Data entry and retrieval are encrypted using an SSL certificate from Cloudflare, a leading SSL Certificate Authority. This ensures that no one else can read or change information as it travels over the internet. SSL certificates give users the confidence they are interacting with a trusted website, and their information is secure. 

Look for the locked padlock in your browser to indicate a secure and encrypted connection to

Our server software is continually monitored and updated by our hosting company.


Personal online security

Patients using the Pharmacy Online service take responsibility for their personal online security. For advice, please visit the Get Safe Online service.

If your email account is compromised, it can be used to gain access to your Pharmacy Online account. Pharmacy Online does not send sensitive personal details by email. However, it is recommended to delete any emails no longer needed.

Use unique passwords, with a mix of numbers, letters (lower and uppercase), preferably at least 12 characters long.

Change passwords regularly.

Install anti-virus software on your computer, and keep this up-to-date.

Keep the operating system and browser software up-to-date.

Do not save passwords on the web browser on shared computers.

Remember to log-out of your Pharmacy Online account when finished.

Use a pin code or fingerprint ID to access your personal devices.

Check your security and privacy settings on your browser, paying particular attention to saving of websites visited.

Carefully check the URL (shown in the browser address bar) of any website you visit to determine it is authentic.


PCI Compliant is 'Payment Card Industry Data Security Standards' (PCI DSS) compliant and is regularly scanned for server vulnerabilities that could be exploited by hackers in security audits by Sysnet. Click the here to verify.

Customer's payment card details are not stored on our servers.


Personal and private information

We fully understand that our customers are concerned with the security of their personal and private data, and we take every measure possible to ensure it is never at risk.

Express Healthcare Ltd abides by the Data Protection Act - our Information Commissioner's Office's Register Entry Report certificate registration number is ZA478899 (renews 4 December annually).

The new GDPR law came into force in May 2018, and Express Healthcare Ltd is compliant.


Payment Security

The Pharmacy Online website uses Mollie, the UK's leading payment service provider, to process credit and debit card payments. All sensitive payment card information is encrypted using the most sophisticated e-payment software available and is sent to the bank for instant authorisation via the Mollie network of payment gateways. Transactions typically take a few seconds to be processed and at no time are your payment card details at risk from cybercriminals.

For more information about Mollie, please visit their website at

We accept payments by debit or credit card: American Express, Visa, Mastercard, Electron and Maestro. If for any reason your order is declined by the prescriber, or you cancel the order after making a payment, then a refund will be automatically made to the same payment card.

No Paypal option?

Unfortunately, Paypal currently operates a policy of not allowing online pharmacies to have Paypal accounts, so Pharmacy Online cannot accept payments by Paypal.