www.pcrdirect.co.uk (the “Website”) is operated by Digital Health Group Ltd (“we”, “us”, “our”).
Please note, our Website may contain links to other websites which are provided for your convenience.
Personally Identifiable Information (PII) / Personal Data
Personal data or PII means any information relating to a person who can be identified either directly or indirectly by that information; it may include but is not restricted to name, address, email address, phone number, credit/debit card number, IP address, location data and purchase history.
The personal data we collect
We may collect and process the following information about you:Information you provide to us
To provide the services you require you may provide us with:
written or verbal information by creating an account with us;
filling in forms on our Website;
using applications; and
by corresponding with us by e-mail, telephone or otherwise.
information you provide when you purchase products and/or services from us;
reply to an email;
when you report a problem with our Website.
The personal information you provide may include:
date of birth;
billing and delivery address
telephone number; and
financial and billing information (including your payment card information if you pay for any order by credit or debit card).
For your security, we will also keep an encrypted record of your login password.
Information we collect about you
We may collect your social media username, if you interact with us through those channels, to help us respond to your comments, questions or feedback.
Information we receive from other sources
We also work closely with third parties (including, for example, business partners, service providers, advertising networks, analytics providers, and search information providers) and may receive information about you from them. This may be combined with other information you provide to us, as described above.
Information about other people
If you give us information about someone other than yourself, you confirm that you have informed that person about how we may collect, use, and disclose their information, why you gave it to us, how they can contact us, and the terms of this policy, and that they have given their consent to such collection, use, and disclosure. How we will use your information
Once you've registered as a customer, you'll need to create and maintain a customer account.;
to process and fulfil any orders that you place with us (through our Website. If we don’t collect your personal data during checkout, we won’t be able to process your order;
to respond to your queries, refund requests and complaints.
We may use your personal data, preferences, and transaction details to keep you informed about relevant products and services, such as targeted special offers, discounts, promotions, events, and competitions, through email, web, text, telephone, and through our contact centres (if you consent). Of course, you have the option to stop receiving communications from us through any of these channels at any time.to resolve any disputes, if you lawfully exercise your rights or if you wish to dispute any part of our service offering;
to process your booking and/or appointment requests (for example, when using our online booking form);to contact you if any of the services you ordered are unavailable, or if you have a question or an issue with your order;
to notify you about changes to our services and to send you service emails relating to the activities you have asked us to undertake on your behalf;
to comply with applicable law, for examples, such as in response to a request from a court or regulatory agency that is made in compliance with the law.
Lawful grounds for the processing
To process your data lawfully we need to rely on one or more valid legal grounds. The grounds we may rely upon for the processing of your Personal Data include:
your consent to particular processing activities. For example, where you have consented to us using your information for marketing purposes;your request for content, products or services necessitating steps including processing of your personal data to be taken prior to entering into a contract with you and any processing that is necessary for the performance of such contract;
legitimate interests we pursue as a business, except where such interests are overridden by your interests and fundamental rights; and
compliance with any legal obligation to which we are subject.
Disclosure of your personal data
There are circumstances where we wish to disclose or are compelled by law to disclose your personal data to third parties. This will only take place in accordance with the applicable law and for the purposes listed above. These scenarios include disclosure to:
our subsidiaries, locations or associated offices;
our company who may contact you by email, phone or post about other products and services (including those from other organisations) in which you may be interested (where you have consented to such communication);
our outsourced service providers or suppliers to facilitate the provision of our products and/or services to you, for example:
- our panel of medical experts, printing companies and mailing houses;
- our data centre provider for the safekeeping of your personal data, Webhosting provider through which your personal data may be collected.
Offers and opportunities
We would like to contact you and/or any person whose information you provide to us, to tell you and/or them about offers and opportunities that are available in several ways, including by post, telephone, text/picture/video message or by email.
We take the security of personal information very seriously. We employ security technology, including firewalls, and Secure Socket Layers to safeguard information and have procedures in place to ensure that our paper and computer systems and databases are protected against unauthorised disclosure, use, loss and damage.
Updating and correcting information
We encourage you to promptly update your personal information if it changes.
International transfer of personal data
We may transfer your personal data to a third party in countries outside the country in which it was originally collected for further processing in accordance with the purposes set out above. In these circumstances, we will, as required by GDPR provisions, ensure that the receiving country provides adequate protection for individuals’ rights and freedoms for their personal data.
Retention of personal data
We may keep an anonymised form of your personal data, which will no longer refer to you, for statistical purposes without time limits, to the extent that we have a legitimate and lawful interest in doing so.
Data protection law provides data subjects with numerous rights, including the right to: access, rectify, erase, restrict, transport, and object to the processing of, their personal data. Data subjects also have the right to lodge a complaint with the relevant data protection authority if they believe that their personal data is not being processed in accordance with applicable data protection law.
Right to rectification. You may request that we rectify any inaccurate and/or complete any incomplete personal data.
Right to withdraw consent. You may, as permitted by applicable law, withdraw your consent to the processing of your personal data at any time. Such withdrawal will not affect the lawfulness of processing based on your previous consent. Please note that if you withdraw your consent, you may not be able to benefit from certain service features for which the processing of your personal data is essential.
Right to object to processing, including automated processing and profiling. You may, as permitted by applicable law, request that we stop processing your personal data. In relation to automated processing and profiling, you may object to the processing and you will have the right to obtain human intervention.
Right to erasure. You may request that we erase your personal data and we will comply unless there is a lawful reason for not doing so. For example, where we are required by law to keep the data.
Right to data portability. In certain circumstances, you may request that we provide your personal data to you in a structured, commonly used and machine-readable format and have it transferred to another provider of the same or similar services. We will comply with such transfer as far as it is technically feasible. Please note that a transfer to another provider does not imply erasure of your personal data which may still be required for legitimate and lawful purposes.