Privacy notice

Medifuse Ltd is a company registered in England & Wales (company number 16024538). Our address is 87 Caledonian Road, London N1 9BT. We are the controller of the personal data described in this notice.

For anything about your personal data, email us at procurement@medifuse.co.uk.

When you send an enquiry through our contact form or by email, we collect:

• your name and email address
• your organisation and country
• the type of enquiry you are making
• your message, and anything you choose to include in it
• your phone number and preferred contact method, if you give them

If we go on to work together, we also hold business contact details and records of our dealings with you, such as quotes, orders and correspondence.

Our website host and email provider may process technical data such as your IP address when you visit the site or send a message. We do not use this data to identify you.

Please do not send us patient-identifiable information through the contact form.

• To reply to your enquiry and send you a confirmation email. Our lawful basis is legitimate interests: it is in our interest, and usually yours, for us to respond to people who contact us.
• To take steps at your request before entering into a contract, such as preparing a quote. Our lawful basis is contract (pre-contract steps).
• To manage and deliver work for customers and partners, and to keep the records we need to do so. Our lawful basis is contract, or legitimate interests where the contact is a person at a customer or partner organisation.
• To meet legal and accounting obligations. Our lawful basis is legal obligation.

We do not use your data for automated decision-making or profiling, and we do not send marketing emails unless you have asked us to.

We do not sell your personal data. We share it only with:

• our email delivery provider, which sends the enquiry to our team and the confirmation email to you
• our website hosting provider
• professional advisers such as accountants and lawyers, where needed
• manufacturers, suppliers or couriers, but only when it is necessary to deliver an order you have asked for
• regulators or law enforcement, where the law requires it

Some of these providers may process data outside the UK. Where they do, we rely on the safeguards required by UK data protection law.

• Enquiries that do not lead to any work: up to 2 years after our last contact with you, then deleted.
• Customer and partner records, including orders, quotes and correspondence: for as long as we work together, and then for 6 years, which is the period we need for accounting, tax and contractual claims.

You can ask us to delete your data sooner (see your rights below).

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you
• ask us to correct data that is wrong or incomplete
• ask us to delete your data, in some circumstances
• ask us to restrict how we use your data, in some circumstances
• object to us using your data where we rely on legitimate interests
• ask for your data in a portable format, where we use it under a contract

To use any of these rights, email procurement@medifuse.co.uk. We will reply within one month.

This site does not set analytics or marketing cookies. If that changes, we will update this notice and ask for your consent first.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

We may update this notice from time to time. The date at the top shows when it was last changed.