Legal

Privacy Policy

Last updated: September 2026

This Privacy Policy explains how Vetrixo collects, uses, stores and protects personal information.

1. Who is responsible for your information

Vetrixo is operated by VETRIXO LTD, a company registered in England and Wales under company number 17444709.

Vetrixo processes personal data to operate the prescription service. Its precise data-protection role can depend on the processing activity and its relationship with the relevant practice, pharmacy or other organisation. Further governance information is set out in the Data Processing Information.

2. What Vetrixo is

Vetrixo is a UK veterinary written prescription management and verification platform. It helps authorised veterinary professionals create and manage prescriptions, and helps authorised pharmacies or suppliers verify and record fulfilment activity.

3. Information we may collect

Account and professional information

• Name.
• Email address.
• RCVS registration number.
• Professional qualifications.
• Practice name.
• Practice address and contact details.
• Account status and verification status.

Prescription and animal information

• Owner or keeper name.
• Owner or keeper address.
• Animal name, species and identifying details.
• Prescription date and validity information.
• Medicine name, strength, form, quantity and directions.
• Warnings, notes, cascade declarations and controlled drug information where relevant.
• Prescribing veterinary surgeon details.

Pharmacy and fulfilment information

• Pharmacy or supplier name.
• Pharmacist or responsible person name.
• Professional registration number where provided.
• Fulfilment dates.
• Quantity supplied and remaining quantity.
• Prescription status updates.

Technical and security information

• Authentication records.
• User identifiers.
• Device, browser and operating-environment information.
• IP address and standard network connection information that may be received by Vetrixo and its service providers.
• Audit logs and security logs.
• Actions taken within the platform.
• Technical error details, such as error type, time, sanitised page or network path, relevant source-file and line information, release and environment.
• Application performance timings and random event, trace or correlation identifiers used to investigate a particular technical failure or operation.

Browser error and performance monitoring

Vetrixo uses Sentry on the public homepage and current application entry pages for technical error monitoring and application performance tracing. Monitoring may include browser, device and operating-environment details, timestamps, error types and handling mechanisms, sanitised stack-frame file paths and line information, sanitised page and network paths, navigation breadcrumbs, performance timings, environment details and random event, trace or correlation identifiers. Session Replay, release-health session tracking, Sentry Logs, Sentry Application Metrics, feedback injection, pageview analytics, behavioural analytics and profiling are not enabled.

Vetrixo configures the browser SDK not to send default personal information and applies additional redaction before error or tracing events are sent. Vetrixo is configured to redact sensitive prescription, identity, authentication, QR, passkey, Didit, email, phone and address data, including names, Firebase user IDs, form contents, credentials, access tokens, URL query strings and URL fragments. Redaction reduces the risk of sensitive information being transmitted but is not described as an absolute guarantee.

Sentry and other network service providers may receive an IP address and standard connection information when a browser communicates with them. IP-address storage or scrubbing within Sentry, Sentry retention settings and processing location are controlled outside this website's source code and must be confirmed from the applicable production account and contractual records.

Prescription verification and pharmacy fulfilment technical operation

The pharmacy page sends prescription verification and fulfilment information to Vetrixo's same-origin server endpoints. It uses session storage for a pending fulfilment request identifier, prescription identifier and a one-way submission fingerprint so a failed submission can be retried safely. It does not store readable supplying-premises details or staff names in that record. If a pharmacy chooses to sign in to an optional Vetrixo pharmacy account, the page uses Google Firebase Authentication to recognise that session, and Vetrixo stores the account's saved premises name, premises type and premises registration number so they can be applied when that pharmacy records supply. These saved details are provided by the pharmacy and are not independently verified by Vetrixo. The same Sentry redaction and restricted-breadcrumb configuration applies to this page.

4. How we use information

We use personal information to:

• Provide and operate Vetrixo.
• Create, issue, verify and manage prescription records.
• Support pharmacy or supplier fulfilment workflows.
• Verify professional users.
• Maintain audit trails.
• Prevent fraud, misuse and unauthorised access.
• Investigate security incidents or suspected misuse.
• Detect, diagnose and resolve unexpected technical errors and faults.
• Respond to support requests.
• Comply with legal, regulatory and professional obligations.
• Improve the reliability and safety of the service.

5. Legal bases for processing

We process personal information under one or more of the following legal bases:

• Legitimate interests: operating and securing Vetrixo, detecting and resolving unexpected technical faults, preventing fraud and maintaining prescription audit trails, subject to an assessment of necessity and impact on individuals.
• Performance of a contract: providing access to the service and account related functionality.
• Legal obligation: where we must process or retain information to comply with applicable law or regulatory requirements.
• Consent: where consent is required for a specific activity.

6. Sharing information

We may share information with:

• Authorised pharmacies or suppliers involved in prescription fulfilment.
• Google Firebase, which supports hosting, the pharmacy page's same-origin server endpoints and parts of the authenticated application's authentication, data and server-side functionality.
• Sentry for restricted technical error monitoring and application performance tracing.
• Other authentication and identity verification providers used for professional-user onboarding.
• Professional regulators or public authorities where required or appropriate.
• Law enforcement agencies where legally required.
• Professional advisers where necessary for legal, accounting or operational purposes.

Vetrixo does not sell personal information.

7. International transfers

Some technology providers may process information outside the United Kingdom. Where this happens, appropriate safeguards will be used as required by UK data protection law.

8. Data retention

We retain information only for as long as reasonably necessary for the purposes described in this policy.

Prescription records, fulfilment records, verification records and audit logs may be retained after a prescription is fulfilled, cancelled, replaced or expired where retention is needed for regulatory compliance, record keeping, fraud prevention, dispute handling, security or audit purposes.

Technical error and fault records are retained only for as long as needed to investigate reliability and security issues. Any provider-specific retention period, including Sentry's configured event retention, must be confirmed from the relevant production account rather than inferred from this policy.

9. Security

We use appropriate technical and organisational measures to protect personal information. These may include authentication controls, access controls, encryption, audit logging, secure hosting and monitoring for misuse.

No digital service can guarantee absolute security.

10. Your rights

Subject to applicable law, you may have the right to:

• Access your personal information.
• Ask for inaccurate information to be corrected.
• Ask for information to be erased.
• Restrict or object to processing.
• Request data portability.
• Withdraw consent where processing is based on consent.

Some rights may be limited where information must be retained for legal, regulatory, audit, security or fraud prevention reasons.

11. How to contact us

To exercise your rights or ask questions about this policy, contact hello@vetrixo.co.uk.

12. Complaints

You can complain to the Information Commissioner's Office if you are unhappy with how your information is handled. We ask that you contact us first so we can try to resolve the issue.

13. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will be published on Vetrixo.