Privacy Notice

This privacy notice sets out how Med-fx Limited as the data controller, collects and processes your personal information in relation to accounts created on and purchases made on medfx.co.uk.

As part of the DD Group of companies Med-fx Limited complies with the DD Group Data Privacy Standard which can be found here which sets out the detailed information on how we process your personal information.

The DD Group has appointed a Data Protection officer who can deal with any questions you have about the DD Group Privacy Standard or about this notice generally. Details of the DPO can be found in the DD Group Data Privacy Standard.

Or for specific questions relating to this data privacy notice or request to update your data you can contact sales@medfx.co.uk.

The personal information we are collecting

• Identity information including name, registration number (GMC, GDC or NMC), address, email address, phone number.
• Copies of photo ID and Identity documents as proof of qualification.
• Where personal data or health information is provided as part of a prescription, we will hold that in line with required legislation.

How we will use your personal information and the legal basis for its use

Contractual Basis

We will use this information to fulfill your order and to keep you updated with any issues and progress with it.

Legal requirement

Check your identity where required for sales of restricted products.

Legitimate Interest

Unless you have opted out, we will use your information to send you marketing emails and calls about goods and services similar to those you have purchased previously.

Sharing your personal information

Payment processing is carried out by Barclay’s on behalf of medfx – any information you share on the payment site is directly with Barclays.

We may share your personal information with other people or businesses where necessary including other members of our group this may include our hosting companies, accounts, and credit control services as well as logistics services.

As Galderma’s distribution partner, where you are purchasing Galderma Products your personal data may be shared with Galderma and will be stored in accordance with their privacy policy, please see the Galderma privacy policy here to understand how Galderma deal with your personal data.

We require third parties such as Galderma, to respect the security of your personal information and to treat it in accordance with the law. In addition, all our third-party service providers and other entities in our group are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal information for their own purposes.

Retention

Our objective is to only keep your personal information for as long as necessary to fulfil the purposes we collected it.

Unused accounts will be closed after 2 years inactivity or upon request.

We will delete all personal data after 7 years from account closure unless legally required to keep it for longer for us to comply with medical, tax and accountancy rules.

In some circumstances, we may anonymise your personal information (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.