Privacy Policy

DIOMED DEVELOPMENTS PRIVACY POLICY

Diomed Developments Limited, and companies within the group controlled by Diomed Developments Limited (“Diomed”, “we” or “us”), are committed to protecting your privacy and personal information. The companies within the Diomed Group include:

This Privacy Policy, together with our Terms of Use and other associated documents, applies to information, including personal information, that is collected and used by Diomed. This information may be provided by yourself or disclosed by someone you duly authorise to act on your behalf. This information could be collected electronically or otherwise via, although not exclusively, the following means:

This Privacy Policy applies to all Diomed websites where this Privacy Policy is referenced, regardless of how you access or use the websites, including through mobile devices.

In this Privacy Policy, the terms “personal data”, “processing”, “data controller” and “data processor” have the meaning given to them within the General Data Protection Regulation (GDPR) ((EU) 2016/679).

By using Diomed websites, mobile applications or otherwise providing your personal information to Us, you agree to the collection, use, sharing and storage of that information in accordance with this Policy. Please read this Policy carefully and contact us via dataprivacy@diomed.co.uk if you have any questions.

We do not intend to collect data from minors under the age of 16 and we do not knowingly collect any data from minors. If you are under 16 years of age, please do not create an account with us or provide any information about yourself to us.

1. What is Personal Data?

Personal data is ‘any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier.’ This may include name, location data (e.g. IP address), telephone number among others.

Data are considered to be ‘sensitive personal data’ if they relate to special categories such as health, genetic data, sexuality among others.

2. Data We Collect

We will only collect data from you where we have a legal basis to do so, or where you give us your explicit consent. Outlined below are the points of data collection, the data we collect and why we collect this data.

2.1 Data you actively provide to us

Places/instances where you might actively provide us with some of your personal data include, but are not limited to:

The types of personal data you may provide to us include, but are not limited to:

2.2 Data we may automatically collect from you

Places where we may automatically collect your personal data:

For more information on how we collect your information via Cookies, please see our Cookie Policy.

The type of data we may collect automatically from you:

3. How we use your data

We may process your personal data for a number of reasons, but we will always ensure we have a valid legal basis to do so.

Purposes for processing your personal data:

Where you provide us with personal data, we will use this data to:

Where we collect personal data automatically from you, we will use this data to:

4. How we share information

We never sell your personal data. However, we may disclose your personal data to third parties who we rely on to help us perform a variety of functions, such as (but not limited to):

5. How long we keep your personal data

We store your data for as long as is required in order for us to provide the services you have requested from us or in order for us to perform the purposes outlined within this Privacy Policy. We may also store your information for other essential purposes such as complying with our legal obligations, resolving and complaints or enquiries or in the interest of public safety.

We will take all reasonable steps to securely destroy or anonymise any data that is no longer required for any purpose and where we are no longer required to keep for any regulatory or legal reason.

6. How we protect your personal data

We take all reasonable steps to keep your personal data secure. We and our business partners and service providers have implemented technical, administrative and physical procedures designed to protect personal information from loss. We always do our best to protect your personal data and keep it secure and so we use strict procedures and policies when handling your data and to try to prevent unauthorised access.

We will process your personal data in accordance with the following six data protection principles. All personal data will be:

7. Third Parties

Before we share any of your personal data with a third party, we aim to ensure that the third party will protect your data and process it in accordance with applicable privacy regulations and this Privacy Policy. Our third parties are restricted in their use of the personal data we share with them and shall only process this information for the purpose for which it was provided.

8. Social Media

Interaction, communication and any actions with external Social Media platforms and pages run by Diomed are subject to the Terms of Use and Privacy Policies of these specific Social Media platforms.

Where you provide us with any personal data through the private messaging function on these Social Media platforms, we will collect and process that data in accordance with this Privacy Policy.

9. Outside links

Our websites involve linking to, or using assets from other websites (for example, the Electronic Medicines Compendium, patient support groups or embedded videos from YouTube). Where you choose to follow the links to any of these websites, please note that the content on those external websites are subject to their own individual Privacy Policies and we do not accept any responsibility or liability for these Privacy Policies or the manner by which these outside sources collect or process the personal data they collect from you. You should always check the Privacy Policy specific to the website you are using.

10. Your rights

Under the current data protection laws, you have the right to access, correct, request deletion or request restriction of our usage of your personal information. To protect your privacy, we may ask you to provide a suitable form of ID such as your passport or driving licence to verify your identity before taking any action in response to any request. We also work to ensure that we only hold information we have a legitimate reason for and that we only store this data for a suitable period of time.

It is important to be aware that if you were to request deletion of your data before we have completed our contractual obligations to you (e.g. delivered goods that you have ordered), we may be unable to fulfil your original request. It is also important to be aware that there may be some instances, for example if we have a legal obligation or some other legitimate reason, where we are unable to delete your data.

11. How to contact us

If you have any questions or concerns regarding the data we hold about you, the way in which you believe that data is being used or this Privacy Policy, you can contact us by emailing dataprivacy@diomed.co.uk.

This Privacy Policy is subject to review and amendment regularly and when necessary. Any changes we make to this policy will be posted on the website. It is your responsibility to check this Policy frequently to identify any changes. You may be required to read and accept any updated versions of this Policy to continue your use of the Site.