How to start an online pharmacy in the UK.

Most people starting out assume the hard part is the website. It is not. The hard part is that you are opening a pharmacy, and the pharmacy rules apply in full whether the patient walks through a door or taps a button. Everything below is the shape of the work, not legal advice. Take your own advice from a regulatory consultant or solicitor before you trade.

1. Decide what you actually are

There are three different businesses that all get described as "an online pharmacy", and they carry very different obligations.

• A registered pharmacy that dispenses and supplies medicines itself.
• A prescribing service, staffed by independent prescribers, that issues prescriptions and passes them to a pharmacy to dispense.
• A brand that markets and sells, with a registered pharmacy partner doing the clinical and dispensing work behind it.

The third route is how most consumer health brands start, because it does not require you to register a pharmacy or employ a superintendent. It is covered in selling prescription medication from an existing brand.

2. Registration and named people

A pharmacy in Great Britain registers with the General Pharmaceutical Council, and the registration attaches to premises as well as to the business. You will need a superintendent pharmacist accountable for the way medicines are handled, and a responsible pharmacist in charge of the operating day. Services supplying to patients in England that involve prescribing may also fall within Care Quality Commission registration, and the equivalents differ in Scotland, Wales and Northern Ireland. Establish which regulators you sit under before you design anything, because it determines what you have to be able to prove later.

3. The clinical model comes before the tech

Decide, per product, who is allowed to be treated and on what evidence. That means the questions you ask, the answers that stop an order, the checks that need a photo or an ID confirmation, the situations where a prescriber must speak to the patient, and the point at which you refuse. Write it down before it becomes software. A questionnaire that exists only in someone's head cannot be inspected, and a rule that is not written cannot be applied consistently by three different prescribers on a Friday afternoon.

4. Distance selling changes the risk, not the standard

Supplying at a distance removes the pharmacist's ability to look at the person in front of them, so the safeguards have to make up the difference: verified identity, checks against the information the patient gives you, a way to contact the prescriber, and a real ability to decline. Regulators have been consistent that high risk categories, weight management among them, need more than a tick-box form. That is covered in GPhC expectations for online prescribing.

5. Records are the product

When an inspector arrives, or a complaint lands, or a patient asks what you hold about them, you are judged on the record. At minimum you need to be able to produce, for any given order: what the patient was asked and answered, what checks ran and what they returned, who reviewed it, what they decided and why, the prescription as issued, who dispensed it, and where it went. Retain it for years, not months, and make sure nobody can quietly edit it after the fact.

6. The operational pieces people forget

• Identity verification, and what happens to the order when a check fails or comes back inconclusive.
• Notifying the patient's GP where that is appropriate, and keeping a copy of what was sent.
• Labelling, patient information leaflets, and shipping documents that match the dispense.
• Subscriptions: dose changes, missed payments, cancellations, and how each one is reflected in the clinical record. Consumer law here is also moving: the Digital Markets, Competition and Consumers Act 2024 brings in a stricter regime for subscription contracts, covering reminders before a renewal, an easy exit, and cooling-off rights. Commencement has slipped more than once, so treat it as coming rather than dated, and build subscriptions so reminders and cancellation are configuration rather than a rebuild.
• Complaints, incidents, and a register that shows what you did about them.
• Data protection: lawful basis, retention, and a working process for access and erasure requests.

7. Build, buy, or partner

Building this yourself is possible and usually more expensive than it looks, because the clinical workflow, the audit trail, the integrations and the ongoing regulatory changes never stop being your problem. Sync-RX exists so that you can put your effort into the brand and the clinical model rather than into the plumbing: configurable assessment flows, prescriber review and signing, dispensing documents, order management, subscriptions and a seven year audit trail, wired into the storefront you already use.

If you want to see how that looks against your own model, get in touch or read the FAQ.

Sources and registers

• GPhC, Guidance for registered pharmacies providing pharmacy services at a distance, including on the internet (February 2025), the core document for everything on this page.
• GPhC, Providing services online, and the GPhC registers for pharmacies and professionals.
• Care Quality Commission in England, with Healthcare Improvement Scotland, Healthcare Inspectorate Wales and RQIA covering the other nations.
• MHRA, Register for the distance selling logo, and the medicine seller register.
• Digital Markets, Competition and Consumers Act 2024, the subscription contract regime referred to above. Commencement has moved more than once, so check the current position before you rely on a date.
• ICO guidance for organisations, for lawful basis, retention and subject access.

Repeats and cancellation

Ongoing supply is where most services come unstuck. See repeat supply, reassessment and cancellation for the reassessment gate, the record each cycle needs, and how to handle failed payments and cancellations.