Privacy Notice

About this notice

This privacy notice explains how iEthico Limited ("iEthico", "we", "us" or "our") collects and uses personal information when you use our public website, use MedSupply Intelligence, contact us, request a demonstration or white paper, become a customer, or otherwise interact with us.

iEthico Limited is the data controller for the personal information described in this notice. We are registered in England and Wales under company number 13124384. Our registered office is Binley Business Park, Harry Weston Road, Binley, Coventry, CV3 2TX. You can contact us at support@iethico.com.

Information we may collect

The personal information we process depends on how you interact with us. It may include:

• your name, work email address, telephone number, job title, organisation and sector;
• information you include in enquiries, demo requests, white paper requests and other correspondence;
• account and access information used to provide MedSupply Intelligence, such as your business email address, user role, authentication and access records;
• customer and contract administration information, including billing contacts and records of the services supplied to your organisation;
• business data or files supplied by you or your organisation for use with our services. These may include personal information if your organisation includes personal information in the material it provides to us;
• technical and security information such as IP address, browser and device information, timestamps, service logs and security events; and
• your communication and marketing preferences.

Our website and MedSupply Intelligence are intended for business and professional users. We do not knowingly collect personal information from children.

How we obtain information

We obtain personal information directly from you, from your organisation where it creates or manages your access to our services, and automatically from the systems used to deliver and secure our website and services. We may also receive business contact information from people who introduce you to us or from publicly available business sources where it is lawful and appropriate to do so.

How we use personal information

We may use personal information to:

• respond to enquiries and arrange demonstrations;
• provide, administer, support and secure MedSupply Intelligence and other services;
• create and manage authorised user access;
• manage customer relationships, contracts, billing and support;
• process requests for research and white papers;
• communicate service, security and administrative information;
• understand and improve the operation, reliability and usability of our services;
• protect our systems, users, intellectual property and business from misuse, fraud or security threats;
• send relevant business communications where permitted by law, and honour any request to stop those communications; and
• comply with legal, regulatory, accounting and contractual obligations and establish or defend legal claims.

Our lawful bases

Under UK data protection law, we must have a lawful basis for processing personal information. Depending on the circumstances, we rely on one or more of the following:

• Contract: where processing is necessary to enter into or perform a contract with you.
• Legitimate interests: where processing is necessary for our legitimate business interests, or those of a third party, and those interests are not overridden by your rights. This includes operating, securing and improving our services, managing business relationships and responding to business enquiries.
• Legal obligation: where we need to process information to comply with the law.
• Consent: where we ask for and rely on your consent. You may withdraw consent at any time, without affecting processing that took place before withdrawal.

Who we share information with

We do not sell personal information. We may share it where necessary with trusted service providers that help us operate and secure our website and services, process website forms, provide communications or other business infrastructure, and with professional advisers such as lawyers, accountants and insurers. We may also disclose information where required by law, to regulators or public authorities, or in connection with a corporate transaction.

Service providers are only given the information needed for their role and are required to protect it appropriately.

International transfers

Some service providers may process information outside the United Kingdom. Where UK data protection law requires safeguards for an international transfer, we use an appropriate lawful transfer mechanism or rely on another permitted basis for the transfer.

How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to provide services, maintain appropriate business and security records, meet legal or accounting obligations and resolve disputes. Retention periods vary according to the type of information and the relationship involved.

When information is no longer required, we delete or anonymise it where reasonably practicable, subject to backup, legal and record-keeping requirements.

Security

We use organisational and technical measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. Access is limited to people and service providers who need it for their work and who are subject to appropriate confidentiality and security obligations.

No internet transmission or storage system can be guaranteed to be completely secure. If we become aware of a personal data breach, we will assess it and make any notifications required by law.

Cookies and similar technologies

Information about cookies and similar technologies used by our website and MedSupply Intelligence is set out in our Cookie Policy.

Your data protection rights

Depending on the circumstances, UK data protection law gives you rights in relation to your personal information. These can include the right to be informed, to access your personal information, to correct inaccurate information, to request erasure or restriction, to object to certain processing, to data portability, and rights relating to solely automated decision-making. These rights are subject to legal conditions and exemptions.

You can exercise a privacy right by emailing support@iethico.com. We may need to verify your identity before acting on a request.

Complaints

If you have a concern about how we use personal information, please contact us first so that we can try to resolve it. You also have the right to complain to the UK Information Commissioner's Office (ICO). Information about making a complaint is available at ico.org.uk.

Changes to this notice

We may update this notice from time to time to reflect changes in our services, technology, business practices or legal requirements. The current version will be published on this page with its last-updated date.

Contact us

iEthico Limited
Binley Business Park
Harry Weston Road
Binley, Coventry
CV3 2TX
United Kingdom

Email: support@iethico.com