Privacy Policy

Purpose and scope of this policy

Cambridge Healthcare Supplies Ltd and Torbet Laboratories Ltd are committed to keeping your data secure and safe. The purpose of this Privacy Policy is to provide you, as our data subject, with a statement regarding the Data Protection and Privacy practices and obligations of Cambridge Healthcare Supplies Ltd and an explanation of your rights as a data subject.

 

This Data Protection and Privacy Policy and Notice applies to our business practices, our websites, which are accessible from www.cambridge-healthcare.co.uk, www.effercitrate.co.uk and www.goldeneyecare.co.uk

 

As the Organisation is established in the United Kingdom, this document is written in the vein of UK Data Protection Law, and Cambridge Healthcare Supplies Ltd. falls under the jurisdiction of the Information Commissioner’s Office. This Privacy Policy sets out what personal data we collect and process about you in connection with the services and functions of the organisation. We are not responsible for the content or the privacy notices for any websites to which we may provide external links. 

Data controller

“Data controllers” are the people or organisations that determine the purposes for which, and the manner in which, any Personal Data is processed, and make independent decisions in relation to the Personal Data and/or who/which otherwise control that Personal Data.

Cambridge Healthcare Supplies Ltd is the registered data controller,

Our registered data protection controller can be contacted by:

Post: Unit 1 Wymondham Business Park, Chestnut Drive, Wymondham, Norfolk NR18 9SB

Tel: 01953 607856             Fax: 01953 713649

Email: customerservices@cambridge-healthcare.co.uk

Laws that apply to us

  • General Data Protection Regulation (EU Regulation 679/2016)
  • United Kingdom Data Protection Acts 1984 to 2018
  • Regulations flowing from DPA 2018
  • EU Privacy and Electronic Communications Directive 2002/58/EC on Privacy and Electronic Communications, otherwise known as ePrivacy Directive (ePD)

How do we ensure compliance

Data protection and privacy laws provide rights to individuals with regard to the use of their Personal Data by organisations, including our organisation. UK and EU laws on data protection govern all activities we engage in with regard to our collection, storage, handling, disclosure and other uses of Personal Data.

We must comply with data protection and privacy laws because the law requires us to but we also would like you to have confidence in dealing with us, and compliance with data protection law helps us to maintain a positive reputation in relation to how we handle Personal Data.

We are required to demonstrate accountability for our data protection obligations. This means that we must be able to show how we comply with the applicable data protection and privacy laws, and that we have in fact complied with the laws.

We do this, among other ways, by our written policies and procedures, by building data protection and privacy compliance into our systems and business rules, by internally monitoring our data protection and privacy compliance and keeping it under review, and by acting if our employees or contractors, fail to follow the rules.

We also have certain obligations in relation to keeping records about our data processing.

What types of personal data will we process?

We will collect personal data from you in accordance with the purposes outlined in this document. This will be basic or regular personal data used to facilitate a consultant/client type relationship.

Ways in which Cambridge Healthcare Supplies Ltd may process your Personal Data:

  • To report an adverse event or product quality complaint
  • To respond to a medical query
  • To deliver a medical sample to you
  • Combine data about you from various sources, including the information you provide to us and personal data, which is collected during your relationship with Cambridge Healthcare Supplies Ltd. This data may come directly from you or from other parties, including from your usage of our websites and applications and is used to perform data analyses, market research and segmentation in order to understand your preferences, personalize your experience when interacting with us, improve the content and functionality of our products and services and websites, and identify which products, services, and offers may be relevant for you or of interest to you, or identify our possibilities for collaboration, news, and the latest scientific developments.
  • When Cambridge Healthcare Supplies responds to your queries or when we believe our products and services may be of interest to you. If we intend to share electronic marketing with you, we will ask for your consent, where required, and you can opt out at any time.
  • To send you invitations or offers to participate in scientific meetings, events, and surveys and obtain insight about your experience with our products or services and/or disease areas and activities and the effectiveness of our information channels
  • Identify and maintain information about healthcare professionals working in disease areas of interest to Cambridge Healthcare Supplies and who are considered to be key opinion leaders in their medical specialty with whom we may wish to collaborate on scientific initiatives such as clinical trials, advisory boards, and educational activities
  • Evaluate and classify your scientific expertise and skills to improve our communication with you
  • To meet our legal and regulatory obligations.

Data Sharing

We will never share, sell or trade your personal information to any third parties for marketing purposes. We can only share data under the following circumstance:

  • We have a duty to disclose or share your Personal Data in order to comply with any legal obligation,
  • to enforce or apply any contract or other agreements with you
  • to protect our rights, property, or safety of our employees, customers, or others.

How your information is stored

Your information will be stored in a restricted secure server environment. Only individuals that need to, will be allowed to access your data and this access is limited to the requirements of the individual’s job role and task.

We require written agreements in place with all of our service providers and, before we sign each agreement, we need to have vetted and be satisfied with the service provider’s data security. The agreements also need to contain specific clauses that deal with data protection. We require all third parties to have appropriate technical and operational security measures in place to protect your Personal Data, in line with UK and EU laws on data protection. We ensure that all individuals and staff members of any third party have been trained to understand their requirements in keeping your data safe.

Any hard copy paper records which may be sent to the organisation are stored in a secure environment and where relevant transferred into electronic format.

Your Rights

You have the right to:

  1. Be informed about the personal data we hold and why we hold it.
  2. Access a copy of your data that we hold by contacting us directly.
  3. Check the information we hold about you is correct and to make corrections if not.
  4. Have your data erased in certain circumstances.
  5. Transfer your data to someone else if you tell us to do so and it is safe and legal to do so.
  6. Tell us not to actively process or update your data in certain circumstances.
  7. Object to automated decision-making including profiling, that is not to be subject of any automated decision-making by us using your Personal Data or profiling of you.

How long is your Personal Data stored for?

We will only keep your data for as long as it is necessary, however;

  1. We will store all pharmacovigilance data for ten years, as per Good Pharmacovigilance Practice Guidelines. We will archive your data (that is, store it without further action) for as long as is required for legal purposes.
  2. We must store Employment data for six years after an employee has left.
  3. We must store Contractors’ data for seven years after the contract is ended.
  4. We must store Clients’ data for ten years after the contract is ended.

 

For areas that you have withdrawn your consent, or, asked for your data to be removed, it will be destroyed as soon as possible. If we decide not to destroy your data, we will inform you as to why we have made this decision.

Your rights to raise a complaint

We have appointed a Data Protection Coordinator to monitor compliance with our data protection obligations and with this policy and our related policies. If you have any questions about this policy or about our data protection compliance, please contact the Data Protection Coordinator:

Post: Unit 1 Wymondham Business Park, Chestnut Drive, Wymondham, Norfolk NR18 9SB

Tel: 01953 607856             Fax: 01953 713649

Email: customerservices@cambridge-healthcare.co.uk

If you wish to exercise your rights, please contact our Data Protection Coordinator who will respond to the request within 30 days.

You as the Data Subject have the right to complain at any time to a supervisory authority in relation to any issues related to our processing of your Personal Data.

The supervisory authority is the ICO (Information Commissioner) and comments and concerns can be raised with them at www.ico.org.uk/concerns or by calling 0303 123 1113.

Further information on data protection regulations and laws can be found: https://ico.org.uk/for-the-public

How we make updates to this policy

Our practices as described in this Privacy Policy may be changed, but any changes will be posted, and changes will only apply to activities and information on a going forward, not retroactive basis.

You are encouraged to review this Privacy Policy periodically to make sure that you understand how any personal information you provide will be used.

We may also email you in certain circumstances to let you know if and when we update this Privacy Policy to ensure you are informed.

Any changes to this Privacy Policy will be posted on this website so you are always aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it. If at any time we decide to use Personal Data in a manner significantly different from that stated in this Privacy Policy, or otherwise disclosed to you at the time it was collected, we will notify you by email, and you will have a choice as to whether or not we use your Personal Data in the new manner.