QR Codes in Pharmacies and Clinics: Useful, With One Rule That Cannot Bend

Healthcare has the two conditions that make QR codes worth it: paper everywhere, and people who need to reach something on a phone while standing in a corridor. It also has the one condition that makes them dangerous if handled casually — the content is about people's health.

So the rule comes first, and everything else follows from it.

The rule: a printed code is public

Anything a code leads to can be reached by anyone who photographs the code. A code on a leaflet, a door, a bottle, an appointment card — a passer-by can scan it, and so can the next person to pick that leaflet up.

Which means, without exception:

• No patient names, appointment details, or record numbers behind a printed code. Not in the URL, not on the page. An unlisted address is not privacy — a printed code hands it out.
• A code that must reach one specific patient's information belongs behind a login, in the practice's own system, exactly as it would without a code.
• Codes on anything a patient takes home are the same — a discharge sheet or a medication label leaves the building and is seen by family, carers and strangers.

The useful test before printing anything: would I be comfortable if this code were photographed and posted publicly? If not, it is the wrong content for a code.

Where a code genuinely helps a pharmacy

• Shelf edges and product bays. A code to the plain-language information for a product category, or to a video showing how a device is used — an inhaler, a monitor, a test kit. This is where staff repeat themselves most.
• The door and the window. Opening hours, the duty rota, the nearest out-of-hours pharmacy. A code on the window works when the door is locked, which is exactly when it is needed.
• Repeat prescription requests. A code to the practice's own request form saves a phone queue.
• Counter positions. A code beside the till to the delivery service, the loyalty scheme, the flu clinic booking.
• Translation. A code to the same instructions in the languages your customers actually speak. Printed leaflets can only carry one; a page can carry six.

Where it helps a clinic or practice

• Waiting room. Forms to fill in before being called — a code beats handing over a clipboard, and the patient uses their own phone.
• Wayfinding. A code at the entrance to a floor plan is more useful than another arrow, especially in a building that has been extended twice.
• Aftercare instructions. A code on the discharge sheet to the same guidance in full, with a video where a video is clearer. People forget spoken instructions within the hour; the sheet goes home with them.
• Appointment cards. A code to the general "how to prepare / how to cancel" page — not to a specific appointment.
• Feedback. A code at the exit, to the practice's own form. Answers collected on the way out are more honest than a survey emailed a week later.
• Staff-facing. A code on equipment to its cleaning or calibration procedure, where people look when they need it rather than in a binder somewhere.

The patients who will not scan

This audience skews older and includes people with impaired sight and shaking hands. That has practical consequences, and they are not optional:

• Always print the address as text too. Large enough to read and short enough to type. A code as the only route excludes exactly the patients most likely to need the information.
• Say what it is. "Scan for how to use your inhaler" earns scans; a bare square beside a medicine looks like packaging.
• Keep the destination readable. Plain language, large type, no PDF that needs pinching. A leaflet scan that lands on an unreadable page has failed twice.
• Never make it the only way to book, cancel or complain. A phone number stays on the sign.

What we record, since a clinic will be asked

Each scan stores the time, which code, the device type, the operating system and browser as the request reports them, the referrer if the browser sends one, and a salted hash of the IP address used to count unique visitors.

No identity, no account, and no location at all — not a city, not a country. A scan cannot be tied to a person, and there is no field that would allow it.

The destination is a separate question and the more important one: if the code points at a third-party booking or survey service, that service's data practices apply, and those are the ones your data protection officer needs to read. We are telling you exactly what exists on our side so the question can be put precisely.

Practical points that decide whether it works

• Size for the surface. On a leaflet read at arm's length, about 2 cm. On a door read from two metres, about 20 cm.
• Matte, not gloss. Laminated signage under clinical lighting reflects straight into the camera.
• Dynamic, always. Opening hours change, forms move, services are reorganised, and a printed code with a dead destination in a healthcare setting is worse than no code — it reads as neglect.
• One code per placement. Then the counts tell you whether the waiting-room poster does anything, which is how you decide what to print next year.
• Check placements in person. Public-facing codes get stickers put over them. A code by a pharmacy till is a target worth glancing at.

Quick answers

• Can a QR code carry patient information? Not a printed one. Anything patient-specific belongs behind a login.
• Is scanning safe for patients? The code decodes to text and can do nothing to a phone. What matters is the destination, which the practice chooses.
• What is recorded about the person scanning? Time, device, browser and a hashed IP. No identity, no location.
• Where does a code help most? The instructions staff repeat all day: how to use a device, opening hours, how to prepare for an appointment.
• What size on a leaflet? About 2 cm; on a door, about 20 cm.
• Should the code be the only route? No. Print the address and keep the phone number.