You may have heard about the new General Data Protection Regulation (“GDPR”) that comes into effect on the 25th May 2018. At GBUK Group LTD we always treat your data with respect and work hard to keep your details safe and secure. With this in mind please see below our Privacy Notice aimed at users of all ages. Hopefully this will answer any questions that you may have regarding how we collect, use and store your personal information.
So that we can supply the medical equipment you need, your doctors have given us certain information about you. This notice explains how we deal with your information (called personal data) and what you, or your parents and carers can do if you’re not happy with the way we handle it.
Who are we?
We are GBUK Group Limited. The person responsible for making sure we follow the law when we deal with your personal data is our Data Protection Officer. You, or your parents and carers can contact him:
- by writing to us at Woodland House, Blackwood Hall Business Park, North Duffield, Selby, North Yorkshire, YO8 5DD;
- by emailing us at DPO@GBUKgroup.com; or
- by telephoning us on 01757 288587.
Why we are processing your data?
We have a contract with your Healthcare Provider to supply the medical equipment you need. Your doctors have provided us with your name, address, telephone number, date of birth and patient reference number so that we can send the equipment to you. We only use your personal data to send you the equipment you need.
Why are we allowed to process your data?
We are processing your personal data on the basis of ‘legitimate interest’. This means that we’ve considered the benefits to us against the risks and benefits to you in processing your personal data. We think the most important thing is getting the medical equipment you need to you as quickly as possible. To do that we have to use your personal data so we can deliver the medical equipment to you. We’ll always do our best to keep your personal data safe.
What data do we have?
We only have your name, address, date of birth, telephone number and patient reference number.
Who do we share your personal data with?
In order to send the medical equipment to you we have to share your name, address and telephone number with our couriers. It will also be processed by our IT suppliers. We report back to your Healthcare Provider on the medical equipment that we have supplied to you. We do not transfer your data outside of the UK. If you live in the Channel Islands or the Isle of Man we will share your personal data with our couriers to supply the medical equipment to you and your Healthcare Provider to report on the medical equipment we have supplied.
How long do we keep your information for?
We keep your information for six years as we need to have a full record of all of the contracts we’ve performed to make sure we’ve paid the right amount of tax.
What rights do I have?
You have the following rights under data protection legislation:
- The right to see what personal data we have about you
- The right to have your data corrected if it’s wrong
- The right to be forgotten or to have your personal data erased
- The right to restrict processing of your personal data
- The right to have your personal data transferred to another company
- The right to object to the way your personal data is being used
You can find out more about these rights by going to https://ico.org.uk/fororganisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
Who should you speak to if you’re not happy?
You can speak to our Data Protection Officer. You can contact him by emailing us at DPO@GBUKgroup.com or by telephoning us on 01757 288587.
If you’re still not happy after you’ve spoken to him, you can complain to the Information Commissioner’s Office.
You can contact the Information Commissioner’s Office on their helpline on 0303 123 1113 or you can live chat them on their website https://ico.org.uk/concerns/