Privacy Policy

Winncare UK Privacy Policy

At Winncare UK, we are committed to maintaining the trust and confidence of our customers, suppliers, visitors to our website, and subscribers to our newsletter. In particular, we want you to know that Winncare UK does not sell, rent, or trade email lists with other companies and businesses for marketing purposes. In this Privacy Policy, you’ll find information on how we treat your personal information when you contact us, use one of our services, or buy a product from us.

To ensure products/services are delivered to you, Winncare UK must process personal data – in doing so, we act as a data controller.

On occasion, Winncare UK may also act as a data processor on instruction from data controllers.

We will only use your personal data in accordance with the terms outlined in our contracts and our privacy notice.

Customers

1.0 Collection of Personal Data

You may give your personal details to Winncare UK directly, such as by purchasing a product or service from us. This information may be collected on paper, online forms, by telephone, or email.

In some circumstances, where purchases/services are provided in a B2B context, your personal details may have been provided to us by another person in your company to offer and/or perform a contractual obligation.

Where a company purchases a product/service on behalf of a client, limited details may have been provided to us about the client (e.g., name, delivery address).

The types of data we collect may include:

Always (if a purchase is made):

Contact name
Delivery/Invoice address
Contact email/phone number
Bank account details

May include:

Client’s name
Client’s age (if age-restricted products)
Name of directors (for credit accounts)
Health condition (for VAT exemption)

1.1 Purpose of Processing and Legal Basis

Legal Base	Example of Purpose
Legal Obligation	To comply with laws, e.g. HMRC, Tax & VAT
Contractual Obligation	To perform a contract between Winncare UK and you/your company
Legitimate Interest	Marketing and public relations regarding our products/services
Consent	Where you have given explicit permission, e.g. newsletter signup
Vital Interest	Rare – e.g., in emergencies during visits to our offices

1.2 Sharing Your Information

We do not sell or pass on personal data to third parties, except in the following circumstances:

Governing or certification bodies as required by law
Software providers
Emergency services (only if vital)
Marketing technology platforms
Data processors for credit checks and delivery

1.3 Data Access, Restriction, and Retention

We store data in both electronic and paper formats. Paper is stored in locked cabinets; access is restricted.

Staff are granted system access only to the level required for their role. Off-site servers are GDPR-compliant.

We retain data:

10 years for medical product traceability
7 years for tax/legal purposes
For the lifetime of a product, to support warranties, service, and repairs

Suppliers

2.0 Collection of Personal Data

Your data may be collected during the course of supplier engagement — via email or phone — or provided by your colleagues.

We may collect:

Contact name
Contact email/phone number
Bank account details

2.1 Purpose of Processing and Legal Basis

Legal Base	Example of Purpose
Legal Obligation	HMRC, VAT, tax compliance
Contractual Obligation	To perform a contract or defend legal claims
Vital Interest	Emergency situations during visits

2.2 Sharing Your Information

Your data may be shared with:

Governing or legal authorities
Software providers
Emergency services (only if vital)

2.3 Data Access, Restriction, and Retention

Electronic data only. Stored securely. Access restricted.

Data is retained for the duration of your service provision to Winncare UK and for legally required durations.

Website Visitors

3.0 Collection of Personal Data

We use Google Analytics to collect anonymous browsing data for site improvement.

If you submit a form, we may collect your:

Name
Email
Phone number

We do not sell, trade, or rent this information.

3.1 Purpose of Processing and Legal Basis

Legal Base	Purpose
Legitimate Interest	To respond to your query
Consent	Newsletter or follow-up consent

3.2 Sharing Your Information

Only shared with:

Our software providers

3.3 Data Access, Restriction, and Retention

We store data electronically and retain it for up to 6 months unless a service relationship is established.

E-Newsletter Subscribers

4.0 Collection of Personal Data

We collect your email during newsletter registration. We do not sell or rent email lists.

We use Mailchimp to send newsletters and track open/click rates.

4.1 Purpose of Processing and Legal Basis

Legal Base	Purpose
Legitimate Interest	Informing you of products/services related to your business
Consent	You have opted-in to receive communications

4.2 Sharing Your Information

Only shared with:

Email delivery software providers (e.g., Mailchimp)

4.3 Data Access, Restriction, and Retention

Stored securely. Data is reviewed periodically. You may unsubscribe at any time via the unsubscribe link.

Office Visitors

We request visitors sign in with name and vehicle registration. This is kept for safety and emergency purposes, then shredded monthly.

Job Applicants

CVs are stored securely for 12 months unless otherwise agreed.

Links to Other Websites

This Privacy Policy does not cover external links on our website. Please refer to their individual privacy policies.

Winncare UK as a Data Processor

5.0 Collection of Personal Data

When acting on behalf of another organisation (as data processor), we may receive limited personal data via secure email, such as:

Contact name
Delivery address

5.1 Sharing Your Information

We do not subcontract or share personal data unless necessary for delivery. Courier partners are GDPR-compliant.

5.2 Data Access, Restriction, and Retention

Paper records are securely stored. Access to databases is limited to essential staff only.

We retain data for 10 years to meet regulatory requirements for medical devices.

Security

We protect your data with:

Encryption
Staff access controls
Locked storage
Paper shredding
Internal security policies
Regular review of processes

Your Rights

You have the right to:

Be informed about personal data we process
Access your data
Rectify incorrect data
Request erasure (in some cases)
Restrict processing
Data portability
Object to certain processing
Withdraw consent at any time
Not be subject to automated decision making

To exercise your rights, contact our Data Protection Officer.

Complaints or Queries

To raise concerns or request information, contact:

Data Protection Officer

Winncare UK Unit 2, Interchange Way, Oakenshaw Bradford BD12 7AZ

You may also contact the ICO (Information Commissioner’s Office):
📞 0303 123 1113
🌐 https://ico.org.uk/concerns

Access to Your Personal Information

To request access to your data, contact:

Data Protection Officer
Winncare UK Unit 2, Interchange Way, Oakenshaw Bradford BD12 7AZ

Changes to This Privacy Policy

We review our privacy notice regularly.

Last updated: September 2025

Cookies Policy (Summary)

We use cookies to:

Improve user experience
Track anonymous analytics via Google Analytics
Remember your preferences

You can control cookies through your browser settings. Disabling cookies may impact website functionality.