Two pharmacies can show a similar adjusted profit and carry very different risks. One may have transferable systems, a stable team, clear account ownership and dependable local demand. The other may rely on the seller's personal logins, undocumented workarounds, a fragile patient-ordering route and suppliers that can change terms after completion.
Buying a pharmacy is therefore more than agreeing a valuation and transferring premises. The buyer needs to understand what is being acquired, what must be replaced, which approvals and notifications apply, how service continuity will be protected and where the first hundred days will create value. This guide focuses on the digital and operational due diligence that sits alongside specialist legal, financial, tax, property and regulatory advice.
What should you check before buying a pharmacy?
Verify the earnings, NHS and private-service position, regulatory transition, people, premises, contracts, stock, data, technology and digital assets as one operating system. Agree what transfers, who owns each account, how access changes and what happens if a supplier or approval is delayed. Turn the findings into price protections, completion conditions and a costed first-100-day plan with your professional advisers.
- Reconcile reported performance with source records and repeatable operating capacity.
- Map every approval, contract, person, dataset and system needed on day one.
- Value digital assets only when ownership, access, data and performance can be verified.
Start with the deal perimeter
Before reviewing folders of documents, write down exactly what the proposed transaction includes. A share purchase and an asset purchase can transfer different rights, liabilities and relationships. Premises may be freehold, leasehold or excluded. Stock, fixtures, goodwill, website assets, telephone numbers and trading names need explicit treatment. Employment, supplier and service arrangements may not move in the way a buyer assumes.
Ask the legal and financial advisers to turn the heads of terms into a transaction map. For each component, show the current owner, proposed owner, required consent, evidence supplied, dependency and deadline. A pharmacy-specific adviser should also confirm the current market-entry, change-of-ownership and regulatory route for the nation and deal structure involved.
NHS England's current Pharmacy Manual includes application and change-of-ownership processes for pharmaceutical services in England. Do not treat a commercial completion date as proof that every required contractual or regulatory step has completed. Build the timetable from verified requirements and obtain advice for the actual transaction.
Test the quality of earnings, not only the headline
Adjusted earnings are a starting claim. Reconcile management accounts to bank receipts, VAT records, NHS statements, merchant reports, payroll, supplier ledgers and the underlying service activity. Identify owner costs that will continue under new ownership, work currently performed without a market-rate salary, one-off income, temporary rebates and costs deferred before sale.
Separate revenue by source and test whether it is repeatable. Prescription volume, service income, retail sales, delivery charges, online activity and private clinics carry different margins and operational demands. Review seasonality, local commissioning, service accreditation, room capacity, staffing and the referral or marketing route that produces each income stream.
Do not value a growth opportunity as though it already exists. If the proposition depends on new prescribing, a clinic, an ecommerce channel or more appointments, cost the governance, people, training, technology, stock, premises, acquisition and working capital needed to deliver it. Pharmacy Mentor's pharmacy data analytics guide shows how operational and commercial measures can be joined without confusing activity with completed value.
Build an operational due-diligence map
Walk through a normal week rather than relying on policy documents. Observe prescription receipt, dispensing, queries, owing items, deliveries, collections, private services, stock ordering, controlled processes, complaints and end-of-day reconciliation. Compare the written procedure with what people actually do and note every point where a person, spreadsheet or shared password holds the process together.
| Area | Evidence to inspect | Completion question |
|---|---|---|
| Services | Contracts, accreditations, activity, claims and capacity | Can the buyer lawfully and practically continue each service? |
| People | Roles, contracts, rotas, training, absence and key-person dependencies | Who must be present for the pharmacy to operate safely? |
| Premises | Lease, repair, security, accessibility, consultation rooms and equipment | Which works, consents or costs arise after completion? |
| Suppliers | Terms, rebates, minimums, finance, notice and assignment clauses | Which commercial terms survive the transaction? |
| Continuity | Backups, downtime routes, incident records and emergency contacts | How will patients and staff be protected during handover? |
The GPhC's standards for registered pharmacies put governance, empowered and competent staff, safe premises, service delivery and equipment at the centre of pharmacy operation. Its published change-of-ownership example illustrates the value of early visits, structured transition, SOP review, PMR training and clear communication. Use current regulatory advice rather than treating any example as a checklist that guarantees compliance.
Understand the people and knowledge that transfer
A rota can look adequately staffed while depending on one pharmacist, technician, delivery driver or administrator who knows every exception. Review roles, working patterns, vacancies, turnover, sickness, training, performance processes, locum reliance and relationships with local surgeries, care homes and commissioners. Ask which tasks are documented and which live only in someone's memory.
The government's TUPE overview explains that employee protections can apply when a business changes owner. Its guidance on employee information during a transfer covers information the old employer must provide and timing. Employment advice is essential: do not make assumptions about who transfers, proposed changes or consultation obligations.
Plan the communication sequence with care. Staff need enough certainty to support continuity, but confidentiality and transaction rules still matter. Name who will lead the pharmacy, answer employment questions, approve rotas, access systems and respond to incidents from the first trading day.
Inventory every system, dataset and digital asset
Digital due diligence should cover more than the PMR. List the PMR, EPS-related services, NHSmail, booking, website, domain, hosting, ecommerce, payment accounts, telephone system, broadband, delivery tools, CCTV, alarm, EPOS, stock, accounting, payroll, email marketing, SMS, analytics, Google Business Profile, advertising and social accounts.
For each item, record:
- the legal owner, contracting entity and named administrator;
- renewal date, notice period, finance obligation and assignment route;
- users, permissions, multifactor authentication and recovery contact;
- data held, lawful purpose, retention, processors and export format;
- integrations, dependencies, support level and outage history;
- hardware ownership, software licensing and remaining useful life; and
- the tested handover, deletion and fallback plan.
A website that exists under an agency account, a domain registered to an individual or analytics visible only through the seller's login is not yet a controlled asset. The same applies to a Google Business Profile, which carries local visibility and reviews. Google's Business Profile ownership guidance explains the primary-owner transfer and the temporary restrictions that can affect new owners and managers. Start changes early enough to test them without disrupting discovery.
Use Pharmacy Mentor's pharmacy cybersecurity framework to check privileged access, backups, devices, suppliers and incidents. Do not circulate passwords in a completion spreadsheet. Transfer accounts through their supported ownership route, issue named access, enforce multifactor authentication and remove leavers only when continuity is confirmed.
Handle personal data as a controlled transaction
Patient, staff, customer and marketing data cannot be treated as an unqualified part of goodwill. Identify the parties' roles, the purpose and lawful basis for each disclosure, what the buyer genuinely needs, how information will be secured and when people must be informed. Restrict data-room access and avoid copying entire systems when a narrower evidence set is enough.
The ICO's due-diligence guidance says organisations should establish the data being shared, purpose, lawful basis, governance, security and transparency arrangements. The guidance is under review following changes in data-protection law, so confirm the current position with advisers and document the decision made for this deal.
Inspect local demand and digital reputation
Historic sales do not explain how resilient future demand will be. Map nearby pharmacies, GP practices, service provision, population needs, planned developments, parking and public transport. Review which searches and referrals produce calls, directions, bookings and online orders. Separate brand demand from service demand and organic visibility from paid activity.
Check the accuracy and ownership of branch listings, website content, service pages, reviews, citations and tracking. Read reviews for repeated operational themes, not just the average score. A strong rating may hide a recent change; a weaker rating may expose fixable issues around queues, communication or availability. Do not ask the seller to suppress legitimate reviews or create a new listing merely to escape history.
Compare Search Console, analytics, call tracking, booking and advertising data against invoices and claimed results. Confirm date ranges, consent mode, conversion definitions and account access. A screenshot of traffic is not evidence that the business owns the source account or that visits become profitable activity.
Convert findings into the price and completion plan
A red flag is useful only when it changes a decision. Classify each finding as acceptable, needing evidence, needing a contractual protection, needing price adjustment, needing completion action or severe enough to stop the deal. Give it an owner and deadline.
Typical completion dependencies include regulatory and contractual approvals, landlord or lender consent, supplier novation, employee information, insurance, stock procedures, account ownership, system access, payment routing, data-transfer steps, website and telephone continuity and public communication. Test the first morning in sequence: who opens, who is responsible, which login works, where funds settle, how a prescription flows and who responds if any step fails.
Build a first-100-day plan before completion
The first phase should protect service continuity, people, cash, access and patient communication. Avoid changing the brand, website, suppliers and core workflow simultaneously unless a verified risk requires it. Stabilise first, measure the baseline and sequence improvements around available capacity.
- Days 1–30: confirm governance, staff responsibilities, account access, cash controls, incidents, stock, service capacity and patient-facing accuracy.
- Days 31–60: remove critical shared accounts, document exception routes, resolve supplier gaps, establish reporting and prioritise the clearest operational constraint.
- Days 61–100: begin the validated growth plan, improve the highest-value patient journey and review actual performance against the investment case.
Pharmacy Mentor can help a buyer assess the website, account ownership, data, local visibility and growth system around a target pharmacy. Explore our pharmacy strategy service, review pharmacy website ownership and design, or book a confidential discovery call before the digital handover is fixed in the completion timetable.
This guide is general information for pharmacy owners and is not legal, financial, tax, valuation, employment, property or regulatory advice. Use appropriately qualified advisers for the transaction, jurisdiction and pharmacy involved.
Frequently asked questions
What due diligence is needed when buying a pharmacy?
Review financial performance, NHS and private services, regulatory transition, people, premises, contracts, stock, data, systems, digital assets, local demand and continuity. The exact scope depends on the deal structure and jurisdiction, so agree it with pharmacy-experienced legal, financial and regulatory advisers.
How long does buying a pharmacy take?
There is no dependable universal timetable. Funding, due diligence, property, employment, regulatory and contractual processes can move at different speeds. Build a dependency plan from current requirements and do not set an operational handover date that assumes outstanding approvals will arrive.
Does a pharmacy website transfer with the business?
Only if ownership and transfer are explicitly established. Confirm the domain registrant, hosting contract, source files, content rights, supplier terms, analytics, search accounts, forms, integrations and administrator access. A visible website is not proof that the seller controls every underlying asset.
What should happen to patient data during a pharmacy sale?
The parties should identify their data-protection roles, the information required, purpose and lawful basis, security, transparency, retention and deletion. Share only what is necessary through controlled routes and obtain current legal and data-protection advice for the transaction.
Saam Ali
Founder & CEO, Pharmacy Mentor · MRPharmSSaam Ali is a pharmacist, digital strategist and the founder of Pharmacy Mentor. He has worked across community pharmacy, healthcare marketing and digital product development since 2012, helping independent pharmacies build modern online services and reach more patients.