Can you run a pharmacy on Shopify?

Can a pharmacy legally use Shopify?

Yes. The confusion comes from conflating two different gates. The first gate is Shopify the platform, governed by its Acceptable Use Policy. Lawful businesses selling lawful products are permitted, and UK pharmacies operate on Shopify today — ours among the builds. The second gate is Shopify Payments, the platform's built-in payment processor, and its terms and conditions are stricter than the platform itself. Shopify's own help centre lists regulated products and services requiring regulatory approval — with prescription drugs named explicitly — among the categories Shopify Payments cannot support. Online pharmacy models also appear in the prohibited lists for the Payments service. The two gates resolve cleanly. A pharmacy can build its store on Shopify, but it processes payments through a third-party payment gateway rather than Shopify Payments. The platform explicitly accommodates this for merchants whose products comply with the Acceptable Use Policy but fall outside the Payments terms.

That settles the legality question in a paragraph. The rest of this article is about what the platform does and does not do once you are on it.

What Shopify does brilliantly out of the box

The case for Shopify is everything a pharmacy should never build itself. Hosting, uptime and scaling are handled: the store that survives a television mention without falling over is the platform's problem, not yours. Security and PCI compliance around the checkout are the platform's engineering, maintained continuously by people whose whole job it is. The checkout itself is among the most conversion-optimised on the internet, refined across millions of merchants. And the catalogue machinery — products, variants, collections, inventory, discounts, search — is mature retail infrastructure a custom build would spend six figures approximating badly.

Around the core sits the leverage. Themes give a professional storefront in days rather than months. The app ecosystem covers review capture — the operational habit our SEO playbook identifies as the measurable trust engine — plus email flows, subscriptions and search enhancements, without custom development. The content engine, pages and blog, carries the condition-led editorial architecture that YMYL organic growth demands. And the admin is genuinely usable by a pharmacy team, which matters more than owners expect. A platform staff can operate without a developer on retainer keeps the routine work in-house: price changes, new products, content edits. For the retail catalogue half of a pharmacy business — the GSL lines, the health and beauty range, the travel accessories — Shopify out of the box is close to the whole answer. That is exactly why the incompleteness on the clinical half catches people.

The payments gate: Shopify Payments versus your pharmacy

The payments architecture deserves its own section. It is the most common nasty surprise in pharmacy Shopify projects, usually discovered after the theme is chosen and the launch date set. The practical rules are these. Budget from day one for a third-party gateway, because the default Payments option is not available to the model. Third-party processing typically carries different fee structures than the platform's headline rates. That belongs in the margin arithmetic from our pricing guide, not in a post-launch shock. Choose a provider that serves regulated healthcare knowingly. Complete their enhanced due diligence honestly and keep the correspondence, because your payments file is part of your supplier-assurance file. And design the catalogue with the gate in mind. The cleaner your separation between retail products, P medicines with controls and clinical services, the more legible your business is to a payments risk team. Legibility is what keeps accounts open.

One alignment simplifies everything. The payments terms' hostility to card-not-present prescription sales points the same direction as UK advertising law and the GPhC's guidance: away from POMs as products in a checkout, and towards assessment-led clinical services.

What needs building: the compliance layer

Shopify ships with none of the display and content layer UK pharmacy regulation requires. Every item is a build task. The GPhC registration number goes on every page, linked to the pharmacy's entry on the register. In Great Britain that is now the entire badge layer, since the logo schemes closed. The distance services guidance requires ownership, premises and superintendent transparency. Wherever online consultations lead to prescriptions, add full prescriber identity, registration and how-to-verify information. Service descriptions must be written against the February 2025 guidance, describing assessment before supply rather than promising frictionless dispatch. And advertising discipline applies across every product page and collection: no POM names in promotional contexts, P medicine content carrying the required information and the read-the-label convention, no efficacy claims beyond licences. All of it sits inside the sign-off process our SEO guide specifies, because a Shopify page is an advert in law however it renders.

None of this is technically difficult on Shopify. Themes are editable and the sections are buildable in days. The failure mode is not capability but omission. Agencies without pharmacy law build beautiful stores with none of it — the compliance wall from our analysis of why pharmacy websites fail, hit on launch day.

What needs building: the clinical journey

The clinical half of a pharmacy does not fit the product-and-checkout paradigm Shopify is made of. Forcing it in is the mistake that generates both regulatory and payments exposure. Prescription-only treatment is not a product a patient adds to a basket. It is a service journey: condition entry, clinical assessment, identity verification, prescriber decision, then supply. On Shopify that journey runs as an integration — the assessment embedded in the storefront, completed before payment, with the case landing in the clinical system as structured data. This is precisely the architecture our PMR connection guide maps, and the model Dataforge PMR runs natively on Shopify. The patient stays on your pages, live ID and selfie verification fires at submission, and the order arrives in the PMR ready for prescriber review — not as a Shopify order email someone re-keys.

P medicines sit in between. They are lawful products for the catalogue, but they need the control layer our P medicines guide details built around them. That means quantity caps enforced at sale and again at review, structured suitability questions at the point of sale, and pharmacist oversight before dispatch with interventions and refusals recorded. It also means duplicate visibility across every channel you sell through: a buyer defeating per-listing limits across your Shopify store and a marketplace is exactly what cross-channel order history exists to catch. Shopify provides none of this natively, and apps provide fragments. The coherent version is the PMR doing the clinical work with Shopify as its storefront — the division of labour both systems were built for.

What needs building: the quiet technical layer

Three unglamorous configurations decide whether the store is quietly correct or quietly wrong. VAT mapping: pharmacy is the rare catalogue spanning 0%, 5% and 20% on one shelf. Prescription-dispensed lines are zero-rated, contraceptives and smoking cessation sit at the reduced rate, and most retail is standard. Shopify applies whatever rates the products are assigned. So the assignment work from our pricing guide is a launch task and a periodic audit, because miscoded VAT is invisible on screen and expensive in an HMRC review. Consent and pixels: a stock Shopify build arrives eager to fire marketing tags. On a pharmacy site nothing advertising-related fires before consent, anywhere. Take a hard look at whether ad pixels belong on condition and service pages at all, per the health-inference analysis in our UK GDPR guide. Configure the consent platform properly, then verify technically, because the fine ceiling for getting tracking wrong is now £17.5 million. Delivery logic: cold chain lines need despatch rules, service constraints and packaging costs of their own, and P medicines may warrant signature services. The GPhC's delivery findings make the courier configuration part of the governance file, not just the shipping settings.

Shopify or custom: the honest decision

We build pharmacy sites on both Shopify and Next.js, so the comparison is genuine rather than a funnel. Shopify wins where the business is catalogue-led: a substantial retail range, speed to market measured in weeks, app-ecosystem leverage for reviews and marketing, and a team that will run the store themselves. Its costs are the payments gate, a slice of platform dependency — policies can change, checkout customisation has boundaries — and the integration work to make the clinical journey feel native rather than bolted on. Custom wins where the business is journey-led: clinical services as the core with retail incidental or absent, total control of every step from condition page to prescriber handoff, no platform policy exposure and performance tuned to conversion. The price is longer builds, developer dependency for changes, and owning the security and infrastructure burden Shopify would have carried.

The pattern in our own client base is consistent. Retail-heavy community pharmacies going online choose Shopify and integrate the clinical layer. Clinical-first distance operations and clinics lean custom. Hybrids genuinely go either way on the weight of the catalogue. Both routes end at the same standard: the compliance layer, the clinical journey and the technical layer above. That is why the platform choice matters less than most owners fear, and the build order matters more.

The build checklist

Key takeaways

FAQs