Haddenham Healthcare Ltd’s registered office is at 30 Upper High Street, Thame, Oxfordshire, OX9 3EZ and we are a company registered in England and Wales under company number 3591270. We are registered on the Information Commissioner's Office Register registration number ZA319979. We act as Data Controller in respect of our Customer Relationship Management system (CRM) and Direct Marketing activities. We act as Data Processor in all other circumstances. Our designated Data Protection Officer/Appointed Person for the organization is Tim Gabb, who can be contacted at Haddenham Healthcare Ltd, Drakes Drive, Long Crendon, HP18 9BA, United Kingdom or by email to GDPR@hadhealth.com
Haddenham Healthcare Ltd processes your personal information to meet our legal, statutory and contractual obligations and to provide you with our products and services.
The sort of personal data that we may collect is:
• Name
• Address
• Contact Number and/or Email
• Special Category Data in the form of health/medical information
We receive this information from you directly or from your clinic/therapist/pharmacy in order to be able to fulfil an order we have received.
We will never disclose, share or sell your data; unless required to do so by law.
We collect your personal data in the performance of a contract or to fulfil your direct request. Where in the performance of a contract the information needed has usually been provided by your clinic, therapist or pharmacy.
Sometimes it is necessary for your data to be transferred to our factories in Germany or Denmark in order to fulfil the order. In such cases the transfer is by secure encrypted code and the factories will not hold your data for any longer than is necessary to fulfil that order and/or comply with their applicable laws. We retain your data on our secure servers for seven years to comply with UK Accounting law.
Where we act as Data Controller for our CRM, we hold limited information on the legal basis of legitimate interest (e.g. to maintain contact). Where we act as Data Controller for our direct marketing purposes, personal information is only kept if full consent has been given.
Where we act as Data Processor (all other scenarios), the legal basis on which we collect process and store this information is on the grounds of legitimate interest; in short to fulfil your request or the clinic/therapist/pharmacy order.
You have the right to access any personal information that Haddenham Healthcare Ltd processes about you and to request information about:
• What personal data we hold about you
• The purposes of the processing
• The categories of personal data concerned
• The recipients to whom the personal data has/will be disclosed
• How long we intend to store your personal data for
• If we did not collect the data directly from you, information about the source
If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information and we will strive to update/correct it as quickly as possible; unless there is a valid reason for not doing so, at which point you will be notified.
You also have the right to request erasure of your personal data or to restrict processing (where applicable) in accordance with data protection laws, to exercise your data portability rights. You also have the right to lodge a complaint with a supervisory authority. We should also inform you that we do not use any automated decision-making system in our processes.
Haddenham Healthcare Ltd takes your privacy seriously and takes every reasonable measure and precaution to protect and secure your personal data. We work hard to protect you and your information from unauthorized access, alteration, disclosure or destruction and have several layers of security measures in place.
Owing to the nature of the products we offer, we sometimes may need to process sensitive personal information (known as special category data) such as measurements or sizing for medical garments. Where we collect such information, we will only request and process the minimum necessary for the specified purpose and identify a compliant legal basis for doing so.