Privacy Policy

Introduction
At Genmedical Ltd, we are dedicated to protecting the privacy and personal data of all our visitors. The following key points highlight the main aspects of our privacy practices, but we recommend reading the full privacy policy for complete details.

Information We Collect
When you visit our website, certain information is automatically recorded, such as your IP address.

If you provide information voluntarily—for example, by completing an online form to access our services—we will also collect and store details including your name, delivery address, email address, date of birth, telephone number, GP address, patient notes, consultation records, payment information, and details of any medications you order.

Use of Your Information

How We Use Your Data
We use the personal information you provide to:

• Deliver our services to you, including medical consultations and the provision of prescription medications, while ensuring compliance with applicable regulatory requirements.

• Provide you with information about our products and services, or those of affiliated companies within the Genmeds group, but only if you have explicitly given consent to receive such communications. Details on marketing use are provided further below.

How We Share Your Data
We may share your personal data with:

• Third parties where necessary to provide the services you have requested.

• Other companies within the Genmeds group for business and operational purposes.

• Third parties for marketing purposes, but only if you have given your consent to receive such communications.

Patient Confidentiality
Certain information we collect is classified as medical data. We treat this information with the highest level of confidentiality at all times. Your medical data will never be shared for marketing purposes without your explicit consent and will only be disclosed where required or permitted by law.

Privacy Policy – Detailed Information
Genmedical Ltd (registered number 16612005), with its registered office at Unit 207 New Wing, The Argent Centre, 60 Frederick Street, Birmingham, B1 3HS (“Genmedical Ltd”, “we”, “us” or “our”) recognises that you care about how your personal information (“Your Data”) is used and shared. We value your trust and are committed to handling Your Data responsibly and securely.

At Genmedical Ltd, we are dedicated to protecting the privacy of our customers and website visitors.

This Privacy Policy (“Policy”) forms part of our website terms and conditions (“Website Terms”) and explains how any personal information you provide to us, or that we collect during your visit to our website, is used and stored.

We may update this Policy from time to time, so please review it regularly to stay informed of any changes.

Important Information About Who We Are
Genmedical Ltd is the data controller and is responsible for all personal data it collects and holds.

• Full Name of Legal Entity: Genmedical Ltd

• Postal Address: Unit 207 New Wing, The Argent Centre, 60 Frederick Street, Birmingham, B1 3HS

• Email Address: help@genmeds.co.uk

• Phone Number: 01218095346

You have the right to lodge a complaint with the Information Commissioner’s Office (“ICO”), the UK supervisory authority for data protection. However, we encourage you to contact us first so that we have the opportunity to address and resolve your concerns.

Information We Collect
When you register with Genmeds, we may collect personal data or personal information. Personal data is any information that can identify an individual, but it does not include information where the identity has been removed (anonymous data).

We may collect, store, use, and transfer different types of personal data, which we have grouped as follows:

• Identity Data – This includes your first name, last name, date of birth, and gender.

• Contact Data – This includes your delivery address, email address, and telephone number(s).

• Financial Data – This includes bank account details, payment records, and payment card information.

• Medical Data – This includes your patient medical records, GP details, patient notes, consultation notes, and details of medicines you have ordered and your order history. This category is considered sensitive personal data under data protection legislation and is only collected with your explicit consent through online forms, medical questionnaires, telephone consultations, secure messaging, or photo assessments.

• Marketing and Communications Data – This includes your preferences for receiving marketing from Genmeds and third parties, as well as your communication preferences.

We may also collect anonymised statistical or demographic data for internal purposes. Aggregated Data does not identify you directly or indirectly. For example, we may use it to analyse website usage patterns or service engagement. If Aggregated Data is combined with your personal information in a way that identifies you, it will then be treated as personal data and handled in accordance with this Policy.

How Your Data is Collected

We collect information about you through various methods, including the following:

• Automated Technologies or Interactions
  When you interact with our website, certain information is collected automatically. This may include details about your device, browsing behaviour, and usage patterns. For example, we may record the pages you visit, the resources you access, and other interactions on the site. This can include Aggregated Data, traffic data, location information, and other communication data.

• Direct Interactions
  You may provide us with your Identity, Contact, Medical, and Financial Data directly when you:

  • Submit an online enquiry.

  • Complete forms or medical questionnaires on our website, including during registration, subscription, consultations, or requests for further services.

  • Make online payments.

  • Subscribe to our services, newsletters, or publications.

  • Request marketing communications.

  • Provide feedback or other information through correspondence by email, phone, post, or secure messaging.

Confidentiality
Your Medical Data is treated with strict confidentiality. Only authorised healthcare professionals, or those with an equivalent duty of confidentiality, may access this information. We will never disclose your Medical Data without your consent, except where legally required or permitted.

Your Medical Data will not be used by Genmeds or any affiliated companies for marketing purposes, such as sending information about products or services, unless you have explicitly provided your consent for this use.

Use of Cookies
You can configure your browser to block or restrict cookies, or to notify you when cookies are being used. Please note that if you choose to disable or refuse cookies, certain features of our website may not function correctly or may become inaccessible.

How We Use Your Information
The personal information we collect may be used for the following purposes:

• To provide you with our healthcare services.

• To ensure compliance with applicable regulatory and legal requirements.

• To communicate with you regarding any queries or issues related to your order.

• To notify you about changes to our website, services, or products.

• For internal record-keeping and administrative purposes.

• To monitor and analyse activity on our website to improve services and user experience.

Marketing Purposes
We will only contact you for marketing purposes if you have explicitly given consent to do so. Once consent is provided, your personal data may be used for one or more of the following purposes:

• To provide information that you have requested about Genmeds’ products or services.

• To inform you about other products or services offered by Genmeds that may be of interest to you.

• To allow selected third parties to use your data to provide information about their unrelated products or services, which we believe may be relevant to you.

Protection and Storage of Your Data
We have implemented appropriate technical and organisational measures to protect your personal data from accidental loss, unauthorised access, misuse, alteration, or disclosure. Access to your information is strictly limited to employees, agents, contractors, and other trusted third parties who require it to perform their duties. These parties process your data solely on our instructions and are bound by strict confidentiality obligations.

We also have procedures in place to detect, investigate, and respond to any suspected personal data breaches. Where legally required, we will notify both you and the relevant regulatory authority in the event of a breach.

Please be aware that transmitting information over the internet is not completely secure. While we take all reasonable precautions, we cannot guarantee the security of any personal information sent electronically, and you do so at your own risk.

Genmeds will only keep your personal data for as long as it is necessary to fulfil the purposes for which it was collected, including meeting any legal, regulatory, accounting, or reporting obligations.

When determining how long to retain your data, we take into account:

• The type, quantity, and sensitivity of the personal data.

• The potential risk of harm from unauthorised access, use, or disclosure.

• The purposes for which the data was collected and whether those purposes can be achieved by other means.

• Any applicable legal or regulatory requirements.

While we are providing services to you, we will retain the data needed to deliver those services effectively. Certain categories of data, including Medical Data, Identity Data, and Contact Data, may need to be kept for specified periods after services end in order to comply with legal obligations.

In some circumstances, it may be necessary to retain your data for longer than the periods outlined above. In such cases, we will assess this on an individual basis and, where applicable, provide you with written confirmation once we have finished providing our services, explaining why extended retention is necessary.

Your Data Protection Rights
Under applicable data protection legislation, you have specific rights in relation to the personal information we hold about you. These rights include:

• Right to Access
  You may request access to the personal data we hold about you (often referred to as a “data subject access request”). This allows you to receive a copy of your information and verify that it is being processed lawfully.

• Right to Rectification
  You can request that we correct or update any personal information that is incomplete, inaccurate, or out of date. We may need to verify the accuracy of the updated information you provide.

• Right to Erasure
  You can ask us to delete or remove your personal data where there is no legitimate reason for us to continue processing it. You may also request erasure if you have successfully exercised your right to object to processing, if we have processed your data unlawfully, or if we are required to erase your data to comply with legal obligations. Please note that in some cases, we may be legally obliged to retain certain information and cannot fully comply with a request for deletion.

• Right to Object
  You have the right to object to the processing of your personal data where we rely on a legitimate interest or that of a third party, particularly if you feel it infringes on your fundamental rights and freedoms. You may also object to processing for direct marketing purposes at any time. In certain situations, we may demonstrate compelling legitimate grounds to continue processing that override your interests.

• Right to Restrict Processing
  You may request that we suspend or limit the processing of your data in the following circumstances:

  • To verify the accuracy of your personal data.

  • If our processing is unlawful, but you do not wish for the data to be erased.

  • Where you need us to retain the data to exercise, establish, or defend legal claims.

  • If you have objected to our processing and we need to determine whether we have overriding legitimate grounds to continue.

• Right to Data Portability
  You may request that we provide your personal data in a structured, commonly used, and machine-readable format, either to you or to a third party you designate. This right applies only to data that was provided by you or processed automatically based on your consent or a contract with you.

• Right to Withdraw Consent
  Where processing is based on your consent, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal. If you withdraw consent, we may be unable to provide certain products or services, and we will advise you if this is the case. In some circumstances, we may still be required by law to retain certain data.

Contact Us
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your data, please contact help@genmeds.co.uk.