Privacy Policy – Elarix Medical Ltd

Effective Date: 13 July 2025
Websites: www.elarixmedical.co.uk | www.cpapsupply.co.uk | www.defibcentre.co.uk | www.selfimed.co.uk
Data Controller: Elarix Medical Ltd
Company Number: 16602969
Registered Office: 167–169 Great Portland Street, 5th Floor, London, W1W 5PF
Email: support@elarixmedical.co.uk
Phone: +44 (0)330 133 2808

1. Introduction

This Privacy Policy explains how Elarix Medical Ltd, owner and operator of CpapSupply.co.uk, DefibCentre.co.uk, and SelfiMed.co.uk, collects, uses, and protects your personal data in line with the UK GDPR and applicable data protection laws.

We are committed to handling your personal information lawfully, fairly, and transparently.

2. Data Protection Principles

Your personal data will be:

• Processed lawfully, fairly, and transparently

• Collected for specified, explicit, and legitimate purposes

• Adequate, relevant, and limited to what is necessary

• Accurate and kept up to date

• Retained no longer than necessary

• Secured with appropriate technical and organisational measures

3. What Personal Information We Collect

We may collect and process the following categories of data:

• Name and contact details (address, phone, email)

• Order history and account details

• Payment details (processed via third-party providers; card data not stored by us)

• Device, browser, and IP address data (for analytics and fraud detection)

• Marketing preferences and communication records

4. Legal Basis for Processing

We process personal data under the following grounds:

• Contract: To fulfil orders, deliver goods, and provide customer support

• Legal obligation: For tax, accounting, and regulatory compliance

• Legitimate interests: To improve services, prevent fraud, and maintain security

• Consent: For marketing communications (where you have opted in)

5. Marketing and Communications

We may use your data to:

• Provide order updates and product safety notices

• Recommend related products or replacement consumables

• Send promotional offers and newsletters (only with consent)

You may opt out at any time using the unsubscribe link in emails or by contacting us directly.

6. Cookies and Tracking

Our websites use cookies and similar technologies to:

• Improve website functionality

• Track usage via analytics tools

• Provide personalised recommendations

When visiting our sites, you will be asked to set your cookie preferences.

7. Sharing of Personal Data

We may share your data with trusted third parties, including:

• Payment processors (e.g., PayPal, Stripe)

• Delivery partners (UPS, DHL, FedEx, DPD, Royal Mail)

• IT and hosting service providers

• Regulatory or legal authorities (where required by law)

• Other entities within the Elarix Medical group (for order fulfilment and support)

All partners are contractually required to handle your data securely.

8. International Transfers

Some service providers may process or store data outside the UK. Where this occurs, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses, adequacy decisions).

9. Data Retention

• Personal data is retained only as long as necessary for fulfilment, legal, or reporting obligations.

• Payment details are not stored on our servers.

• Anonymised data may be retained for statistical and business analysis.

10. Your Data Protection Rights

Under UK GDPR, you have the right to:

• Access your personal data

• Request correction or deletion

• Restrict or object to processing

• Withdraw consent (where processing is based on consent)

• Request data portability

• Lodge a complaint with the ICO (www.ico.org.uk)

Requests should be sent to: support@elarixmedical.co.uk

11. Data Security

We employ technical and organisational safeguards to protect personal data against loss, misuse, unauthorised access, or disclosure. Access is restricted to authorised staff only.

12. Social Media & External Links

Our websites may include links to third-party sites or social platforms. We are not responsible for their privacy practices. Users should review external policies before providing data.

13. Changes to This Policy

We may update this policy from time to time. The latest version will always be available on our websites. Significant changes will be communicated directly where appropriate.

Last Updated: 13 July 2025