What we collect, and what we never do with it.

Who runs this site

Pharmacy Margin Audit is operated by BidCurate (Aaron Crowley), an independent consultancy. There is no third-party sales team, no data broker, and no advertising network behind any of this. If you have a question about anything on this page, email aaron@bidcurate.com and you will get an answer from the person who wrote it.

What we collect

Everything we hold about you comes from the audit intake form, and you type all of it yourself. Nothing is bought from a list and nothing is inferred from your browsing.

• Contact details: pharmacy name, your name, your role, email address, and phone number if you give one.
• Business context: pharmacy type, prescription volume band, pharmacy management system, any platforms running alongside it, PSAO, buying group or GPO, banner or franchise program, primary and secondary wholesalers, specialty distributors if applicable, and secondary sourcing share.
• What is worrying you: your free-text answers about margin pressure, appeal history, clawback impact, and how well you feel you understand your contracts.
• Your choices: the confidentiality acknowledgement, and whether you opted into benchmark use, an NDA, or the Margin Watch waitlist.
• How you found us, if you tell us.

What we do not collect

This site accepts no file uploads of any kind. It does not receive dispensing data, claims data, remittance files, or anything else containing protected health information. It does not use advertising trackers, third-party analytics pixels, or cross-site cookies.

If we later work together, your claims data is exchanged by separate arrangement, de-identified before it leaves your building, on terms agreed with you in advance. We ask for the economics — drug, quantity, cost, reimbursement, plan, date. We do not ask for, and do not want, patient names.

Why we hold it

That is the complete list. Your intake does not enter a marketing automation sequence and you will not be added to a newsletter you did not ask for.

• To reply to you, confirm whether an audit is a sensible fit, and tell you which export to run.
• To deliver the audit and the walkthrough if we proceed.
• To keep an accurate record of what you agreed to — the confidentiality acknowledgement, the NDA request, the benchmark consent.
• To let you know when Margin Watch opens, if you asked to be told.

Benchmarks, and the consent that governs them

The intake includes an optional, unticked checkbox allowing de-identified findings to be used in aggregate industry benchmarks. If you leave it unticked, your data is never used that way. If you tick it, only aggregated and de-identified figures are used — never your pharmacy name, never your contact details, and never anything that would let a reader identify you or your business. You can withdraw that consent at any time by email.

We do not sell your data

Your information is never sold, rented, licensed, or traded. It is not shared with PBMs, wholesalers, buying groups, or any other pharmacy vendor. The only third parties who touch it are the infrastructure providers that make the form work — a hosting provider, a database provider, and an email delivery provider — each acting on our instructions and holding nothing of their own.

How long we keep it

Lead records are kept while a conversation or engagement is live, and for a reasonable period afterwards so we can honour commitments we made to you. Any claims data supplied for an audit is deleted after delivery, on the schedule agreed with you before you send it. Consented de-identified benchmark figures are retained in aggregate form only.

You can ask for your record to be deleted at any time, for any reason or none. Email us and it is done.

Your choices

• Ask what we hold about you, and we will tell you.
• Ask for corrections, and we will make them.
• Ask for deletion, and we will delete it.
• Withdraw benchmark consent or leave the Margin Watch waitlist at any time.

Security

Form submissions are transmitted over an encrypted connection and stored in a database configured so that the public site can write records but cannot read them back. Access to the stored records is restricted to the operator. No system is perfect, and we will not pretend otherwise — but the design principle here is to hold as little sensitive information as the job allows.

Changes and contact

If this policy changes materially, the updated date at the top of this page changes with it. Questions, requests, and complaints all go to the same place: aaron@bidcurate.com.