Pre Med Health Care Ltd is a registered data controller with the ICO. This privacy policy relates to that of Pre Med Health Care Ltd.

1. The Company

Pre Med Health Care Ltd.(‘we’ or ‘us’ or ‘our’) gather and process your personal information in accordance with this privacy notice and in compliance with the relevant data protection Regulation and laws. This notice provides you with the necessary information regarding your rights and our obligations, and explains how, why and when we process your personal data.

Pre Med Health Care Ltd. registered office 4 The Old Apple Yard. Winnersh. Wokingham. Berkshire. RG41 5RT, and we are a company registered in England and Wales under company number 3887359. We are registered on the Information Commissioner’s Office Register; registration number Z6597319, and act as the data processor when processing your data. Our designated Data Protection Officer is Teresa Evans, who can be contacted at the above address, or by phone on 07786 706646

2. What this policy covers

We respect your privacy and have implemented policies and procedures to remain compliant with data protection regulations including the General Data Protection Regulation (“GDPR”). This privacy and cookies policy:

• Sets out the types of personal data that we collect;
• Explains how and why we use your personal data;
• Explains who we share your personal data with;
• Explains your rights you have about your personal data; and,
• Explains how we use cookies on our websites.

This policy refers to “our services” and “our products”, this means that this policy applies to any quote/sales enquiry or contract of sale either as our customer or our supplier. This policy also applies if you contact us or we contact you about our services or products.

3. The personal data that we collect

Information is collected when you submit online via our site through placing orders, making requests, attending training courses and registering to receive materials, samples or newsletters.  Your personal information may be collected via forms on our websites, Internet cookies, or by corresponding with us by phone, email, post or otherwise.

When you make a sales enquiry to us, enter into a contract of sale, access our website or sell goods to us we may collect some or all of the following:

• Your personal details, including your name, address, email address and     telephone number(s).
• Where relevant, your credit card details or bank account information (this   policy only applies to these data types in your personal capacity if applicable).
• Analytical and tracking cookies (see section 9).

We are aware that your information may be confidential and we will protect the confidentiality of your information in accordance with our normal procedures and legal requirements.

• We only collect and process your personal data for the uses you consent to.
• We will hold your personal information on our systems for as long as needed to meet the service you have requested and remove it in the event that the purpose has been met.
• We will ensure that all personal information supplied is held securely and in accordance with the Data Protection Act 1998.
• We will provide a safe and secure experience for users of this site
• We will ensure that the information you submit to us remains private, and is only used for the purposes set out below.

Pre Med Health Care Ltd processes your personal information to meet our legal, statutory and contractual obligations and to provide you with our products and services. We will never collect any unnecessary personal data from you and do not process your information in any way, other than as specified in this notice. 

4. Fair Processing Principles

• Your personal information is only processed with your knowledge.
• Only information that we actually need is collected and processed.
• Your personal information is only seen by those who need it to do their jobs.
• Personal information is retained only for as long as it is required.
• Decisions affecting you are made on the basis of reliable and up to date information.
• Your information is protected from unauthorised or accidental disclosure.
• Inaccurate or misleading data will be corrected as soon as possible.
• Procedures are in place for dealing promptly with any dispute.

5. How we use your personal data

The table below shows how we use your personal information and our legal basis for processing it. One, several or the entire legal basis for processing may apply to you in each scenario.

How we use your information	Our legal basis for processing
To provide and manage your customer/supplier account and manage our relationship with you.	To fulfil a contract with you. Where it’s in our legitimate business interests to  make sure that our customer and supplier accounts are well managed.
To obtain information from credit reference agencies.	Where it’s in our legitimate business interests to determine whether to accept a sales or purchase contract with you, and to review and manage our accounts on a regular basis.
To handle enquiries and complaints.	Where required by law. To fulfil a contract with you, or to take steps to enter into a contract with you. Where it’s in our legitimate business interests to make sure that complaints are investigated to continually improve our products and services.
To provide our services and/or products to you.	To fulfil a contract with you, or to enter into a contract with you.
To improve our services to you and other customers.	Where it’s in our legitimate business interests to continually improve our products, services and websites to improve customer satisfaction.
To contact you by post, phone, and email to keep you informed about our products and/or services that may be of interest to you.	Where we have agreed to contact you in our contract(s). Where you have provided consent. Where it’s in our legitimate interests to share information with you about products or services that may be relevant and beneficial to you. Where we send you marketing messages, you can inform us if you want to opt-out. You can use the links at the bottom of our marketing emails to update your preferences.
To protect our business interests.	Where it’s in our legitimate business interests to protect our business. To fulfil a contract with you, or to take steps to enter into a contract with you. Where required by law.

6. Who we share your personal data with

We may share your personal data with third parties for the following purposes:

• Partners, suppliers and/or sub-contractors for the fulfilment of any contract we have with you.
• Our software providers to allow storage of your data in a secure manner and within the EEA.
• Credit reference agencies for the purpose of assessing your credit score where this is required for your application of credit terms with us.

7. International transfers

We do not routinely transfer your personal data outside of the EEA. Where we need to investigate a complaint with any of our products that requires us to contact our suppliers located outside of the EEA, we will obtain your permission to transfer such data, or redact it from such communications with our suppliers. For more information about the safeguards we have in place for personal data transfers outside of the EEA, please contact operations@premedhealthcare.ltd.uk.

8. Data security

With the exception of paragraph 7, all information you provide to us is stored on secure servers within the EEA. This includes any backups of such data, which is stored in the EEA and is encrypted for your security.

We cannot accept responsibility for, nor can we guarantee the security of your personal data when transmitted between our respective servers. Such transmission is at your own risk.

9. Data retention

In the absence of a statutory requirement to retain personal data for a longer period, personal data will be retained for the duration of the business relationship plus 6 years.

In some circumstances you can ask us to delete your data. See section 10 below.

10. HOW DO WE KEEP YOUR INFORMATION SECURE?

Our site is hosted by a marketing communications agency. We have a contract with them to ensure that your personal information is adequately protected.

If you have a username, password or other login details, which enable you to access certain parts of our site, you must not allow any other person to use them and must treat them as confidential. If you believe or suspect that someone else knows your login details you must contact us: operations@premedhealthcare.ltd.uk as soon as possible.

To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed. Any payment transactions will be encrypted using SSL technology.

Unfortunately, the transmission of information via the Internet is not completely secure. Although we will apply our normal procedures and comply with legal requirements to protect your information, we cannot guarantee the security of your information transmitted to our site and any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Our site may from time to time contain links to and from other websites.

11. Your rights

Unless subject to an exemption under the data protection laws, you have the following rights with respect to your personal data:

• The right to be informed about the collection and use of your personal data (through this privacy notice).
• The right to access your personal data usually referred to as a subject access request.
• The right to have inaccurate personal data rectified or completed if it is incomplete.
• In certain circumstances, the right to have your personal data erased from our systems and records.
• In certain circumstances, the right to restrict or suppress your personal data (i.e. limit the way in which we use your personal data).
• The right to data portability (i.e. the right to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without affecting it’s usability).
• In certain circumstances, the right to object to us processing your data.
• Rights in relation to automated individual decision-making.

If you wish to exercise any of the rights set out above, please contact Pre Med Health Care Limited, 4 The Old Apple Yard. Winnersh. Berkshire. RG41 5RT.

You will usually not have to pay a fee to exercise any of your rights listed above. However, we may charge a reasonable admin fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

In most cases, we will need to see identification from you to ensure the security of yours and others’ personal data on our systems. We may also contact you to ask you for further information in relation to your request assist in our response and to provide you with the requested data in a quicker timeframe.

We endeavour to respond to all legitimate requests within one month. If we envisage that your request will take longer than this, we will contact you.

12. Cookies

Our website uses cookies. Cookies enable us to tailor your experience on our websites and to monitor traffic to our websites. By continuing to browse the site, you are agreeing to our use of cookies. If your web browser blocks cookies, you may be unable to access parts of our site.

We use two types of cookies on our websites: analytical and targeting cookies. Analytical cookies enable us to track the number of visitors to our websites and how they navigate them. This enables us to optimise our site for a better user experience. Targeting cookies record your visit to our websites and how you have navigated around them, including the links you have clicked. This information allows us to tailor content to you. We may share this information with third parties to enable us to do this.

13. Changes to this notice and your duty to inform us of changes

We reserve the right to make changes to this privacy notice at any time. Where material changes are made, you will be notified accordingly. Minor changes will be updated on this page, therefore please review this notice regularly.

14. YOUR RIGHTS As A DATA SUBJECT

Right to access: You have the right to access your information and should direct any request for your information by contacting us using this email address: operations@premedhealthcare.ltd.uk

Right to rectification: You have the right to rectify inaccurate personal information or supplement incomplete personal information] by contacting us using this email address: operations@premedhealthcare.ltd.uk In case we cannot rectify it, we will delete it.

Right to erasure: You have the right to have your personal information erased, in case:

• Your personal information is no longer necessary for the purpose of collection or processing;
• You withdraw your consent, and there is no other legal ground for processing;
• You have objected to processing under legitimate interests, to which there were no overriding legitimate grounds for us;
• You have objected to processing for direct marketing purposes;
• Your personal data was unlawfully collected and used;
• There is a legal obligation under EU or a national law of an EU Member State which states that your personal information must be erased; or
• if you are a child and your personal information was collected in relation to an offer of an information society services, such as direct marketing, competitions or newsletters.

Right to restriction of processing: You have the right to ask us to restrict usage of your personal information:

• For the period of investigation, if you notified us that the personal information is inaccurate;
• If the collection or usage of your personal data was unlawful, but you do not want us to delete it;
• If we do not need your personal data for any other purpose, than establishment, exercise or defence of legal claims; or
• if you objected to collection and processing based on our legitimate interests, for the duration that we are verifying your case.

Right to objection to processing: You have the right to object to collection and (further) usage of your personal data based on our legitimate interests, if you feel that your interests and your fundamental rights and freedoms are unduly harmed. Furthermore, you have the right to ask us not to process your information (or pass your information to other companies or organisations) for marketing purposes. In case you receive newsletters, which relate to a product or a service you bought from us, you can unsubscribe from the email newsletter at any time by using the Opt-out page.

Right to data portability: In case we collected and use your personal information based on consent or performance of a contract and the processing is carried out by electronic means, you have the right to receive a machine-readable copy of your personal information, which you are free to transmit it to another company.

Right to withdraw consent: If you gave us your consent for the collection and usage of your personal information, you have the right to withdraw this consent at any time. This can be done either by the unsubscribe link or by sending us an e-mail at operations@premedhealthcare.ltd.uk

Right to lodge a complaint at a supervisory authority: If you have a complaint about how we have used your information, you have the right to complain to the Information Commissioner’s Office, or to the supervisory authority of the Member State in which you live, work, or where the alleged infringement took place.

15. HOW TO CONTACT US

For the processing activities specified in this privacy notice, Pre Med Health Care Ltd is the “controller” in terms of the GDPR. Questions, comments or requests concerning this privacy policy are welcomed and should be addressed to us at: operations@premedhealthcare.ltd.uk or via post at 4 The Old Apple Yard. Winnersh. Wokingham. Berkshire. RG41 5RT

This Web site uses tracker technology to collect visitor behavior data. This data is collected anonymously to be used for marketing and optimisation purposes. All visitor data is saved using an anonymous user ID to aggregate a usage profile. Cookies may be used to collect and save this data, but the data remains strictly anonymous. The data will not be used to identify a visitor personally and are not aggregated with any personal data.