Privacy Notice
Privacy Notice
Welcome to the Privacy Policy of Thompson Orthopaedics Limited.
At Thompson Orthopaedics Limited, your privacy is paramount. This document outlines how we handle the personal information you provide when you engage with our website from any location. It also details your rights concerning your personal information and the protections afforded to you under the law.
This policy is structured in sections for ease of navigation. We encourage you to refer to the Glossary at the end for definitions of specific terms used herein.
Sections:
- Overview and Who We Are
- Information We Gather
- Collection Methods
- Utilisation of Your Information
- Sharing Your Information
- Cross-border Data Transfers
- Safeguarding Your Information
- Retaining Your Information
- Your Rights
- Glossary
- Overview and Who We Are
Purpose of This Policy
This document serves to inform you about how Thompson Orthopaedics Limited manages your personal information through your interaction with our website, including any information you submit when you subscribe to our newsletter, purchase a product or service, or participate in a promotional event.
Please be aware that this site is not designed for children, and we do not intentionally collect information from children.
It’s important to read this privacy notice alongside any other privacy or processing notices we may provide on specific occasions so that you are aware of how and why we are using your information. This notice adds to, rather than replaces, other notices.
Data Controller
This notice is issued on behalf of Thompson Orthopaedics Limited. The term "Thompson Orthopaedics," "we," "us," or "our" refers to the specific entity within the Thompson Orthopaedics Limited responsible for processing your data. We are the primary controller of your data related to consultations and website management.
For any questions regarding this policy, including any requests to exercise your privacy rights, please contact our Data Privacy Officer through the provided contact methods.
Contact Details:
- Legal Entity: Thompson Orthopaedics Limited
- Email: privacy@ThompsonOrthopaedics.com
You can also lodge a complaint with the Information Commissioner's Office (ICO), the UK’s supervisory body for data protection issues (www.ico.org.uk). However, we would appreciate the opportunity to address your concerns before you approach the ICO.
Updates to This Notice
To ensure our records are accurate and current, please inform us of any changes to your personal data during your relationship with us.
External Links
Our website may have links to third-party sites, which might collect personal data independently. We advise reading the privacy policies of any site you access through ours, as we do not control these third-party resources.
- Information We Gather
Definition of Personal Data
Personal data refers to any information that can identify you as an individual. The following categories highlight the types of personal data we might collect, store, and process:
- Identity Information: Includes but is not limited to names, titles, and other identifiers.
- Medical Information: May include weight, height, prescription details, and historical medical data.
- Contact Information: Such as billing and delivery addresses, email addresses, and phone numbers.
- Financial Information: Covers details like bank account and payment card specifics.
- Transactional Details: Pertains to payments and other transactions involving our products and services.
- Technical Information: Relates to digital interactions such as IP addresses and device types.
- Usage Data: Concerns the specifics of how you interact with our website and services.
- Marketing Preferences: Your choices regarding promotional communications from us and our partners.
Aggregated data, which might be derived from your personal data but cannot on its own identify you, may also be used for various purposes.
Special Categories of Personal Data
We do not collect sensitive personal data relating to your ethnic background, religious beliefs, or biometric data. Additionally, we do not gather information regarding criminal convictions.
Failure to Provide Personal Data
Should you not provide necessary information required for us to fulfill our contractual obligations or comply with legal requirements, we may be unable to provide you with our products or services.
- Collection Methods
How We Obtain Your Data
Your data can be collected in various ways:
- Direct Interactions: You may provide data by filling in forms or communicating with us by mail, phone, email, or otherwise. This includes data you provide when you:
-
- Sign up for our services or treatments.
- Create an account on our site.
- Subscribe to our newsletters or other publications.
- Request marketing to be sent to you.
- Participate in a contest, promotion, or survey.
- Provide feedback.
- Automated Interactions: As you navigate through our site, we may automatically collect technical data about your equipment, browsing actions, and patterns. We collect this data using cookies, server logs, and other similar technologies.
- Third-Party Sources: We may receive data about you from various third parties, including:
-
- Analytics providers that help us understand how you use our site.
- Payment and delivery services that facilitate your transactions.
- Public databases that provide identity and contact data.
- Utilisation of Your Information
Basis for Processing
We process your personal data lawfully, fairly, and transparently. We will only use your data when the law allows us to, most commonly in the following scenarios:
- To fulfill a contract we are about to enter into or have entered into with you.
- Where it is necessary for our legitimate interests (or those of a third party) and not overridden by your interests.
- To comply with a regulatory or legal obligation.
Purposes for Processing
Below is a list of the ways we plan to use your personal data and the legal bases we rely on to do so. We may process your data for more than one lawful ground depending on the purpose for which we are using your data:
- To register you as a new customer (Legal basis: Performance of a contract).
- To process and deliver your orders including managing payments and collecting money owed to us (Legal basis: Performance of a contract and legitimate interests to recover debts owed).
- To manage our ongoing relationship which will include notifying you about changes to our policy or asking you to leave a review (Legal basis: Performance of a contract, necessary to comply with a legal obligation, and legitimate interests to keep our records updated).
- Sharing Your Information
Disclosures of Your Personal Data
For business and operational purposes, we may share your personal data with internal or external parties such as:
- Service Providers: Companies that provide IT and system administration services.
- Professional Advisers: Including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services.
- Regulatory Authorities: As required by law, we may have to share your data with authorities that enforce regulations.
- Cross-border Data Transfers
Your personal data may be transferred and stored outside the European Economic Area (EEA) in the course of our international operations. We ensure such transfers are legally compliant and secure.
- Safeguarding Your Information
We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. We limit access to your personal data to those who have a legitimate business need to know it. They will only process your personal data on our orders and are subject to a duty of confidentiality.
- Retaining Your Information
Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including the purposes of satisfying any legal, accounting, or reporting requirements.
- Your Rights
You have rights under data protection laws regarding your personal data, including the right to access, correct, erase, restrict, transfer, or object to its processing, and to withdraw consent.
- Glossary
Legal Basis
- Legitimate Interest: Refers to the interest of our business in conducting and managing our business to enable us to give you the best service and secure experience.
- Performance of Contract: Processing your data where necessary for the performance of a contract you have with us.
- Compliance with a Legal or Regulatory Obligation: Processing your personal data where it's necessary for compliance with a legal or regulatory obligation that we are subject to.
Your Legal Rights: Detailed information about your rights under data protection law.
