This privacy notice sets out how Med-fx Limited as the data controller, collects and processes your personal information in relation to accounts created on and purchases made on medfx.co.uk.
As part of the DD Group of companies Med-fx Limited complies with the DD Group Data Privacy Standard which can be found here which sets out the detailed information on how we process your personal information.
The DD Group has appointed a Data Protection officer who can deal with any questions you have about the DD Group Privacy Standard or about this notice generally. Details of the DPO can be found in the DD Group Data Privacy Standard.
Or for specific questions relating to this data privacy notice or request to update your data you can contact email@example.com.
We will use this information to fulfill your order and to keep you updated with any issues and progress with it.
Check your identity where required for sales of restricted products.
Unless you have opted out, we will use your information to send you marketing emails and calls about goods and services similar to those you have purchased previously.
Payment processing is carried out by Barclay’s on behalf of medfx – any information you share on the payment site is directly with Barclays.
We may share your personal information with other people or businesses where necessary including other members of our group this may include our hosting companies, accounts, and credit control services as well as logistics services.
We require third parties such as Galderma, to respect the security of your personal information and to treat it in accordance with the law. In addition, all our third-party service providers and other entities in our group are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal information for their own purposes.
Our objective is to only keep your personal information for as long as necessary to fulfil the purposes we collected it.
Unused accounts will be closed after 2 years inactivity or upon request.
We will delete all personal data after 7 years from account closure unless legally required to keep it for longer for us to comply with medical, tax and accountancy rules.
In some circumstances, we may anonymise your personal information (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.