Privacy Policy

1. Who We Are

Company Name: Lifespan Medical Ltd
Registered in: United Kingdom
Business Activity: Medical equipment supply and distribution

2. What Personal Data We Collect

We may collect and process the following types of personal data:

A. Information You Provide Directly

• Name
• Job      title
• Organisation      name
• Email      address
• Telephone      number
• Enquiry      details submitted via contact form or email

B. Technical Information (Automatically Collected)

• IP      address
• Browser      type and version
• Device      type
• Pages      visited
• Website      usage data (via cookies)

3. How We Use Your Information

We use your data to:

• Respond      to enquiries
• Provide      quotes and product information
• Manage      supplier or customer relationships
• Deliver      contracted services
• Improve      our website
• Comply      with legal or regulatory requirements

We do not sell personal data.

4. Lawful Basis for Processing

Under UK GDPR, we rely on:

• Legitimate      Interest – responding to business enquiries
• Contractual      Necessity – fulfilling supply contracts
• Legal      Obligation – complying with tax and regulatory duties
• Consent     – where required (e.g., marketing communications)

5. Patient Data

Lifespan Medical Ltd does not currently process patient-identifiable data.

If we begin processing such data in the future (for example under NHS contracts), we will:

• Implement      enhanced security controls
• Update      this Privacy Policy
• Enter      into appropriate Data Processing Agreements
• Comply      with NHS Data Security & Protection Toolkit requirements

6. Data Sharing

We may share data with:

• IT      service providers (including Microsoft 365)
• Accountants      and professional advisers
• Logistics      and courier partners
• Regulatory      authorities where legally required

All third-party providers are required to maintain appropriate security measures.

7. International Transfers

We primarily store data within the UK or EEA.

Where data is transferred outside the UK, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses).

8. Data Retention

We retain personal data only as long as necessary:

• Enquiries:      up to 12 months
• Contractual      records: 6 years (for legal and tax purposes)
• Supplier      documentation: as required for compliance

9. Data Security

We implement appropriate technical and organisational measures, including:

• Microsoft      365 security controls
• Multi-factor      authentication
• Device      encryption
• Access      controls
• Secure      password management

10. Your Rights

Under UK GDPR, you have the right to:

• Access      your personal data
• Request      correction of inaccurate data
• Request      erasure (“right to be forgotten”)
• Restrict      processing
• Object      to processing
• Data      portability
• Lodge      a complaint with the UK Information Commissioner’s Office (ICO)

You can contact the ICO at:
https://ico.org.uk

11. Cookies

Our website may use cookies to:

• Improve      user experience
• Analyse      website traffic
• Enable      core website functionality

You can control cookies through your browser settings.

A separate Cookie Policy may be provided where required.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be published on our website.