Privacy Policy

This policy explains how Optimised Medical Supplies Ltd (“we”, “us”) collects, uses and protects your personal data when you use our website or buy from us. We are the data controller for the purposes of UK GDPR and the Data Protection Act 2018. Registered office: 11 Deakins Road, Birmingham, B25 8DX, United Kingdom.

1. What we collect

We collect: contact and account details (name, email, phone, delivery and billing address, company); order and transaction details (products, order history, correspondence); trade-account information where you apply for credit; and technical/usage data (IP address, device and browser, and analytics about how you use the site). We do not store full card details — payments are handled by our payment provider, Stripe.

2. How we use it and our legal basis

• To fulfil your order — process payment, dispatch goods, arrange delivery (including passing delivery details to the fulfilling supplier), and provide support. Basis: performance of a contract.
• To run and secure our business — accounts, fraud prevention, analytics and improving the site. Basis: legitimate interests.
• To meet legal obligations — tax, accounting and record-keeping, and product/traceability requirements. Basis: legal obligation.
• To send marketing — updates about products and services, where you have opted in or where we have a legitimate interest to contact existing business customers. You can opt out at any time.

3. Who we share it with

We share personal data only as needed to run our service: our fulfilment suppliers (delivery name and address only, so they can ship your order), our payment provider (Stripe), our email and hosting providers, couriers, and professional advisers. We may disclose data where required by law or a competent authority. We do not sell your personal data.

4. International transfers

Some of our providers process data outside the UK. Where they do, we rely on appropriate safeguards (such as UK adequacy regulations or the International Data Transfer Agreement) to protect your data.

5. How long we keep it

We keep personal data only as long as necessary: order and transaction records for up to 7 years to meet tax and accounting obligations; account data while your account is active; and marketing data until you unsubscribe.

6. Your rights

Under UK GDPR you have the right to access, correct, delete or restrict your data, to object to certain processing (including direct marketing), and to data portability. To exercise any of these, email info@optimisedmedicalsupplies.com. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

7. Cookies

We use cookies and similar technologies as described in our Cookie Policy.

8. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit and access controls. No transmission over the internet is completely secure, but we take reasonable steps to safeguard your information.