Introduction:

The privacy of our website users is important to us and we take care to safeguard it. This policy explains how we use the personal information that we may hold about you.

The Medical World Group ltd respects the privacy of every individual who visits our websites, and /or transacts with us.

We only collect personal information on a voluntary basis. We do not require this information for you to obtain access to our website, unless you are a health care professional, we will need further information so you are able to login to your personal secured account.

The GDPR (General Data Protection Regulation) regulates the processing of personal data gathering and protects the rights and privacy of all living individuals throughout the EEA, for example by giving all individuals who are the subject of personal data a general right of access to the personal data which relates to them. Individuals can exercise the right to gain access to their information by means of a ‘subject access request’. Personal data is information relating to an individual and may be in hard or soft copy (paper/manual files; electronic records; photographs; CCTV images).

We have obligations imposed on us by the General Data Protection Regulation (GDPR) to ensure that all information about individuals is collected and used fairly, stored safely and securely, and not disclosed to any third party unlawfully. We must ensure that our policies are written in a clear, plain way that everyone will understand.

Data Protection Officer:

Our Data Protection Officer is Martin Aldridge. For further information, subject access requests or complaints please contact martin@medical-world.biz:

In order to comply with its obligations, Medical World Group undertakes to adhere to the GDPR principles:

1) Process personal data fairly, lawfully and transparently

We will make all reasonable efforts to ensure that individuals who are the focus of the personal data (data subjects) are informed of the purposes of the processing, any disclosures to third parties that are envisaged; given an indication of the period for which the data will be kept, and any other information which may be relevant.

2) Data collected for a specified and legitimate purpose

We will ensure that the reason for which the data was originally collected is the only reason for which we process that data, unless the individual is informed of any additional processing before it takes place.

3) Ensure that the data is adequate, relevant and not excessive in relation to the purpose for which it is processed

We will not seek to collect any personal data which is not strictly necessary for the purpose for which it was obtained. Forms for collecting data will always be drafted with this in mind.

If any irrelevant data is given by individuals, it will be destroyed immediately.

4) Keep personal data accurate and, where necessary, up to date

We will review and update all data on a regular basis. It is the responsibility of the individuals giving their personal data to ensure that this is accurate, and each individual should notify us if, for example, a change in circumstances mean that the data needs to be updated. It is the responsibility of the company to ensure that any notification regarding the change is noted and acted on.

5) Only keep personal data for as long as is necessary

We undertake not to retain personal data for longer than is necessary to ensure compliance with the legislation, and any other statutory requirements. This means we will undertake a regular review of the information held and implement a weeding process.

6) Put appropriate technical and organisational measures in place against unauthorised or unlawful processing of personal data, and against accidental loss or destruction of data

The Data Protection Officer Martin Aldridge is responsible for ensuring that any personal data which is held is kept securely and not disclosed to any unauthorised third parties we will not share or sell your information at any time with anyone not working for Medical World Group.

We will ensure that all personal data is accessible only to those who have a valid reason for using it.

We will have in place appropriate security measures:

• keeping all personal data in a lockable cabinet with key-controlled access.

• protecting personal data held electronically, with passwords

In addition, we have put in place appropriate measures for the deletion of personal data - manual records will be shredded or disposed of as ‘confidential waste’ Hard drives of redundant PCs will be wiped clean before disposal or if that is not possible, destroyed physically.

Currently the only 3rd party data processers who can access our data and back office systems are Wildesoft.net who are our web development company and MFM IT support who are our hardware support company. We have a non-disclosure agreement in place with these companies.

Communications

Information which you choose to give us via our websites may be added to our marketing database. We may also use your contact details to communicate with you and send offers and information we feel may interest you. This contact may be by means of post, email, telephone or fax. We will ensure that if you choose to opt-out of such communication that your wishes will be followed. You may unsubscribe to marketing emails at any time via the unsubscribe button on the bottom of our emails, or by contacting a member of our sales team on 0121 580 6600 or at sales@medical-world.biz who will be happy to assist you. Our healthcare professional customers will be required to let us have a valid form of contact in case of product recalls of pharmaceuticals or medical devices. This is a requirement of the MHRA, and is a requirement for Medical World Ltd and our customers.

We use Mailchimp to store our communication data, which includes name and email address. These details will be deleted if you unsubscribe to our communications.

This information is not passed onto any other third party.

Opening an account

In order to open an account with us you are asked to complete an "Account "Form which will detail whether or not you wish to receive communications from the company. As a customer you will automatically be added to our Customer Data files, and Sage accounting system used to place orders, process orders and deliveries.

The Account Form once processed is not retained by the business and is confidentially shredded or deleted.

On-Line Ordering

Any information you give to Medical World Limited, by telephone or the Internet, is stored on a secure server.

This website uses the following cookies:

	Cookies/Purpose
Google Analytics	_utma _utmb _utmc _utmz*	Collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited. Google Analytics privacy policy states you can choose to opt out.

These cookies are provided by a third party who could change their cookies in future outside of our control. We will review this policy regularly for any such changes.

Most web browsers allow some control of most cookies through the browser settings.

How can I change, correct, or update the information on my account?

Internet buyer – Edit my account to change details of address or telephone number.

Credit account buyer - ring 0121 580 6600 to change your details.

Our web site contains links to other web sites outside of our control and which are not covered by this Privacy Policy.

Automatic information collection and use

We may collect certain information automatically as you navigate around the Service. Our websites offer you the chance to not have cookies used. To disable cookies, click on the button to not use them. If you do not disable them and continue to use our Service, we will infer your consent to their use. See what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org

We may also automatically collect and use information in the following ways:

Through your browser:

Certain information is collected by most browsers, such as your Media Access Control (MAC) address, computer type (Windows or Mac), screen resolution, operating system name and version, and Internet browser type and version. We may collect similar information, such as your device type and identify if you access the Service through a mobile device. We use this information to ensure that the Service functions properly.

IP address:

Your IP address is a number that is automatically assigned to your computer by your Internet Service Provider. An IP address is identified and logged automatically in our server log files whenever a user visits the Service, along with the time of the visit and the pages visited. Collecting IP addresses is standard practice and is done automatically by many online services. We use IP addresses for purposes such as calculating Service usage levels, diagnosing server problems, and administering the Service.

Device Information:

We may collect information about your mobile device, such as a unique device identifier, to understand how you use the Service.

We use World pay, all major credit cards, or a 30-day credit account, for all of our transactions. No internet payment details are processed or stored by the company without your permission. Personal credit account details are stored in our Sage Accounting software.

Information Security and Storage:

Emails using "Mailchimp" are secure and maintained by our marketing department and Directors.

Our Sage database holds the data we require to prosses your orders and is only accessible by authorised employees, and are password protected with further security measures in place.

We review our security regularly and take all necessary cyber precautions, to protect your data.

Third party:

Medical World will not pass your data onto any third party without your consent. Transparency and Choice:

You may at any time contact the company and ask what information we hold on you.

You may ask us to update this information if it is incorrect, which we will strive to do as quickly as possible.

You may ask for your information to be deleted from our communication lists at any time. There is an unsubscribe button at the bottom of all mailings, however you may contact the company directly in order to unsubscribe at sales@medical-world.biz or telephone 0121 580 6600

We must have a contact e-mail address that will be used for product recalls of pharmaceuticals and medical devices. This is a mandatory MHRA requirement that patient lives depend upon.

Law Enforcement

We reserve the right to cooperate with law enforcement officials in the investigation of alleged unlawful activities of our website users or relating to our website users. We will have no legal liability for such disclosures of your personal information. Unless we suspect fraud, we do not use your IP address to identify you personally.

Changes:

We may change this Privacy Policy. Any changes to this Privacy Policy will become effective when we post the revised Privacy Policy on the Service. Your use of the Service following these changes means that you accept the revised Privacy Policy. We recommend that you regularly review the Privacy Policy when you visit the Service

Compliance:

We regularly review this Privacy Policy to ensure that it complies with current legislation.