Privacy Policy
Please read this website privacy policy carefully, as it tells you about who we are, how we use personal information and your rights in relation to your personal information.
- Who we are
- Our website
- Our collection and use of your personal information
- Transfer of your information out of the EEA
- Cookies and similar technologies
- Marketing
- Your rights
- Keeping your personal information secure
- How to complain
- Changes to this website privacy policy
- How to contact us
Who we are
This website is operated by Blueleaf Limited (“Blueleaf”). We are a leading supplier of consumables, medical equipment, furniture and fit out services to the care sector. We collect, use and are responsible for certain personal information about you. Like all businesses within the UK and the EU, we are regulated under the General Data Protection Regulation. We are responsible as ‘controller’ of that personal information for the purposes of those laws.
How we collect and use personal information
We collect personal information about you when you access our website, open an account with us, contact us, purchase products or services via our website, respond to customer surveys or participate in competitions.
We collect this personal information from you either directly, such as when you purchase products or services, or indirectly, such as your browsing activity while on our website (see ‘Cookies’ below).
We also collect personal information about you from other sources as follows:
- technical data (for example analytics or search information providers)
- contact, financial and transaction data (for example technical, payment and delivery services)
- Identity and contact data (for example data brokers or public sources)
The personal information we collect about you depends on the particular activities we are carrying out, and includes:
- your name, work address and contact details
- Company Bank details
- details of any feedback you give us by phone, email or post.
- information about the products and services we provide to you
- your account details, such as username, login details
We use this personal information to:
- create and manage your account with us
- verify your identity
- provide products and services to you
- customise our website and its content to your particular preferences
- improve our services
Our legal basis for processing your personal information
When we use your personal information we are required to have a legal basis for doing so. This includes:
- consent: where you have given us clear consent for us to process your personal information for a specific purpose
- contract: where our use of your personal information is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
- legal obligation: where our use of your personal information is necessary for us to comply with the law (not including contractual obligations)
- legitimate interests: where our use of your personal information is necessary for our legitimate interests or the legitimate interests of a third party (unless there is a good reason to protect your personal information which overrides our legitimate interests)
The personal information we collect, when and how we use it
For further details on when we collect personal information, what we collect as well as how we use it, please read the following sections:
When information is collected | What information we ask for | How and why we use your information |
|---|---|---|
When you open an account with us | Contact details: your name, phone number and email address | We ask for this: — to create and manage your account with us — to communicate with you about your account We rely on consent and legitimate interest as the lawful bases for collecting and using your personal information. Our legitimate interests are: – where the processing enables us to enhance, modify, personalise or otherwise improve our services/communications for the benefit of our customer or supplier – to identify and prevent fraud – to enhance the security of our networks and information systems – to better understand how people, interact with our web site – to provide postal communications which we think will be of benefit and interest to our customer or supplier – to determine the effectiveness of our promotional campaigns and our advertising We will keep this information until: — you close your account with us — we close your account |
| To process and deliver your order, including managing payments and collecting money owed to us | Identity Contact Financial Transaction Marketing and Communications | Performance of a contract with you Necessary for our legitimate interests (to recover debts due to us) |
| To manage our relationship with you, including notifying you about changes to our terms and asking you to leave a review | Identity Contact Profile Marketing and Communications | Performance of a contract with youNecessary to comply with a legal obligationNecessary for our legitimate interests (to keep our records updated and to study how customers use our products/services) |
| To administer and protect our business, including data analysis, testing, system maintenance, support, reporting and hosting of data | Identity Contact Technical | Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud, for business restructuring Necessary to comply with a legal obligation |
| To deliver relevant website content and advertisements to you and measure or understand the effectiveness of our advertising | Identity Contact Profile Usage Marketing and Communications Technical | Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy) |
To use data analytics to improve our website, products/services, marketing, customer relationships and experience | Technical Usage | Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy |
To make suggestions and recommendations to you about products or services that may be of interest to yo | Identity Contact Technical Usage Profile | Necessary for our legitimate interests (to develop our products/services and grow our business |
Who we share your personal information with
We routinely share personal information with:
- Service providers acting as processors based in the UK and Ireland who provide IT, CRM, E-commerce and system administration services
- Professional advisers acting as processors or joint controllers including accountants, lawyers, auditors and insurers based in the UK who provide professional and consultancy services
- HM Revenue & Customs, regulators and other authorities acting as processors or joint controllers based in the UK who require reporting of processing activities in certain circumstances
- Printers and mailing houses when we send customer letters
- Courier companies for the delivery of orders
- Market or analytical researchers based in the UK who process data for market statistics and analytical purposes
- Fraud Prevention Agencies based in the UK for the control and prevention of fraudulent activities contrary to the law
We may share your personal information with third parties to whom we may choose to merge or sell parts of our business or our assets.
Some of those third-party recipients may be based outside the European Economic Area — for further information including on how we safeguard your personal data when this occurs, see ‘Transfer of your information out of the EEA’.
We will share personal information with law enforcement or other authorities if required by applicable law.
We will not share your personal information with any other third party.
Transfer of your information out of the EEA
We may transfer your personal information to the following which are located outside the European Economic Area (EEA) as follows:
• Canada, in order to provide your name and address details so that our overseas suppliers can send you the goods you have ordered
• Australasia, Switzerland, and Bahrain, in order to provide your name and address details so that our suppliers can send you any goods you have ordered
These countries do not have the same data protection laws as the United Kingdom and EEA. Any transfer of your personal information will be subject to certain protections that are designed to help safeguard your privacy rights.
Such countries do not have the same data protection laws as the United Kingdom and EEA. Any transfer of your personal information will be subject to certain protections that are designed to help safeguard your privacy rights.
We will not otherwise transfer your personal data outside of the United Kingdom OR EEA.
Links
On our website we may link to other websites owned and operated by certain trusted third parties. These other third-party websites may also gather information about you in accordance with their own separate privacy policies. For privacy information relating to these other third-party websites, you will need to look at their own privacy policies.
Cookies
You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. Please see our Cookie Policy for more information about the cookies we use.
Marketing
We would like to send you information about products, services, operational news, such as service over bank holidays, and company news, which may be of interest to you. Where we have your consent or it is in our legitimate interests to do so, we may do this by post, email or telephone.
We will only ask whether you would like us to send you marketing messages when you tick the relevant boxes when you subscribe to our newsletter. Scroll to the bottom of this page to see what this form looks like.
If you previously agreed to being contacted in this way you can unsubscribe at any time by:
—contacting us at info@blueleafcare.com
—using the ‘unsubscribe’ link in emails
– calling us on 03300 55 22 88 or
– writing to us at Blueleaf Limited, Arrowpoint, Unit 1, Churchill Court, Gatwick Road, Manor Royal, Crawley, RH10 9BT
For more information on your rights in relation to marketing, see ‘Your rights’ below.
Your rights
Under the General Data Protection Regulation you have a number of important rights, including rights to:
- access your personal information
- require us to correct any mistakes in your information which we hold
- require the erasure of personal information concerning you in certain situations
- receive the personal information concerning you which you have provided to us, in a structured and machine-readable format
- object at any time to processing of personal information concerning you for direct marketing
- object in certain situations to our continued processing of your personal information
- restrict our processing of your personal information in certain circumstances
For further information on your right, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals rights under the General Data Protection Regulation.
If you would like to exercise any of those rights, please:
- email, call or write to our Data Protection Controller
- let us have enough information to identify you and provide proof of your identity, and
- let us know the information to which your request relates, including any account or reference numbers, if you have them
Keeping your personal information secure
We have appropriate security measures in place to prevent personal information from being accidentally lost, used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
How to complain
We hope that we can resolve any query or concern you raise about our use of your information.
In the UK, you have a right to complain to the Information Commissioner who may be contacted at https://ico.org.uk/concerns/
Changes to this website privacy policy
This website privacy policy was published on 2 July 2018. We may change this website privacy policy from time to time, when we do we will inform you via the website or/and e-mail.
How to contact us
Please contact our Data Protection Controller if you have any questions about this privacy notice or the information we hold about you.
If you wish to contact our Data Protection Controller, please send an email to info@blueleafcare.com, write to Blueleaf Limited, Arrowpoint, Unit 1, Churchill Court, Gatwick Road, Manor Royal, Crawley, RH10 9BT, or call 03300 55 22 88.