Privacy Policy
Last Updated: March 24, 2024
Grab Medical Innovations Ltd. (“we”, “our”, “us”) operates the website www.grabmedin.co.uk and related services including medical education, digital platforms, healthcare services, and product sales. We are committed to protecting your privacy and handling your personal data responsibly in accordance with the UK GDPR and Data Protection Act 2018.
Information We Collect
We may collect and process the following personal data:
We collect information to provide better services to our users and ensure the professional delivery of medical supplies. The types of personal information we collect include:
- • Information you provide: Name,Email address,Phone/WhatsApp number,Delivery address,Professional details (e.g. doctor, trainee, student),Payment information (processed securely via third-party payment providers),Messages sent via contact forms, email, or WhatsApp
- • Automatically collected data: IP address,Browser type and device information,Pages visited on our website,Cookies and usage data
How We Use Your Information
We use your information to:
- • Provide and manage our services
- • Process orders and deliveries
- • Respond to enquiries
- • Provide educational content and updates
- • Improve website functionality and user experience
- • Comply with legal obligations
- • Send service-related communications
We do not sell your personal data.
Legal Basis for Processing
We process personal data under the following lawful bases:
- • Consent
- • Contractual necessity
- • Legal obligation
- • Legitimate interests (e.g. improving services, fraud prevention)
We do not sell your personal data.
Customer Confidentiality
We treat your health-related purchase history with the same level of confidentiality as clinical records. Your wellness journey is private, and we employ strict access controls to ensure only authorized fulfillment staff view your order details.
International Data Transfers
Some services may involve data processing outside the UK/EU (e.g. cloud hosting). Where this occurs, appropriate safeguards are in place to protect your data in line with UK GDPR requirements.
Data Retention
We retain personal data only for as long as necessary for the purposes stated, or as required by law.
Your Rights
You have the right to:
- • Access your data
- • Correct inaccurate data
- • Request deletion of your data
- • Object to processing
- • Withdraw consent
- • Request data portability