Privacy Policy

Please read this website privacy policy carefully, as it tells you about who we are, how we use personal information and your rights in relation to your personal information.

Who we are
Our website
Our collection and use of your personal information
Transfer of your information out of the EEA
Cookies and similar technologies
Marketing
Your rights
Keeping your personal information secure
How to complain
Changes to this website privacy policy
How to contact us

Who we are

This website is operated by Blueleaf Limited (“Blueleaf”). We are a leading supplier of consumables, medical equipment, furniture and fit out services to the care sector. We collect, use and are responsible for certain personal information about you. Like all businesses within the UK and the EU, we are regulated under the General Data Protection Regulation. We are responsible as ‘controller’ of that personal information for the purposes of those laws.

How we collect and use personal information

We collect personal information about you when you access our website, open an account with us, contact us, purchase products or services via our website, respond to customer surveys or participate in competitions.

We collect this personal information from you either directly, such as when you purchase products or services, or indirectly, such as your browsing activity while on our website (see ‘Cookies’ below).

We also collect personal information about you from other sources as follows:

technical data (for example analytics or search information providers)
contact, financial and transaction data (for example technical, payment and delivery services)
Identity and contact data (for example data brokers or public sources)

The personal information we collect about you depends on the particular activities we are carrying out, and includes:

your name, work address and contact details
Company Bank details
details of any feedback you give us by phone, email or post.
information about the products and services we provide to you
your account details, such as username, login details

We use this personal information to:

create and manage your account with us
verify your identity
provide products and services to you
customise our website and its content to your particular preferences
improve our services

Our legal basis for processing your personal information

When we use your personal information we are required to have a legal basis for doing so. This includes:

consent: where you have given us clear consent for us to process your personal information for a specific purpose
contract: where our use of your personal information is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
legal obligation: where our use of your personal information is necessary for us to comply with the law (not including contractual obligations)
legitimate interests: where our use of your personal information is necessary for our legitimate interests or the legitimate interests of a third party (unless there is a good reason to protect your personal information which overrides our legitimate interests)

The personal information we collect, when and how we use it

For further details on when we collect personal information, what we collect as well as how we use it, please read the following sections:

When information is collected	What information we ask for	How and why we use your information
When you open an account with us	Contact details: your name, phone number and email address	We ask for this: — to create and manage your account with us — to communicate with you about your account We rely on consent and legitimate interest as the lawful bases for collecting and using your personal information. Our legitimate interests are: - where the processing enables us to enhance, modify, personalise or otherwise improve our services/communications for the benefit of our customer or supplier - to identify and prevent fraud - to enhance the security of our networks and information systems - to better understand how people, interact with our web site - to provide postal communications which we think will be of benefit and interest to our customer or supplier - to determine the effectiveness of our promotional campaigns and our advertising We will keep this information until: — you close your account with us — we close your account
To process and deliver your order, including managing payments and collecting money owed to us	Identity Contact Financial Transaction Marketing and Communications	Performance of a contract with you Necessary for our legitimate interests (to recover debts due to us)
To manage our relationship with you, including notifying you about changes to our terms and asking you to leave a review	Identity Contact Profile Marketing and Communications	Performance of a contract with you Necessary to comply with a legal obligation Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services)

To administer and protect our business, including data analysis, testing, system maintenance, support, reporting and hosting of data	Identity Contact Technical	Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud, for business restructuring Necessary to comply with a legal obligation
To deliver relevant website content and advertisements to you and measure or understand the effectiveness of our advertising	Identity Contact Profile Usage Marketing and Communications Technical	Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy)
To use data analytics to improve our website, products/services, marketing, customer relationships and experiences	Technical Usage	Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy)
To make suggestions and recommendations to you about products or services that may be of interest to you	Identity Contact Technical Usage Profile	Necessary for our legitimate interests (to develop our products/services and grow our business)

Who we share your personal information with

We routinely share personal information with:

Service providers acting as processors based in the UK and Ireland who provide IT, CRM, E-commerce and system administration services
Professional advisers acting as processors or joint controllers including accountants, lawyers, auditors and insurers based in the UK who provide professional and consultancy services
HM Revenue & Customs, regulators and other authorities acting as processors or joint controllers based in the UK who require reporting of processing activities in certain circumstances
Printers and mailing houses when we send customer letters
Courier companies for the delivery of orders
Market or analytical researchers based in the UK who process data for market statistics and analytical purposes
Fraud Prevention Agencies based in the UK for the control and prevention of fraudulent activities contrary to the law

We may share your personal information with third parties to whom we may choose to merge or sell parts of our business or our assets.

Some of those third-party recipients may be based outside the European Economic Area — for further information including on how we safeguard your personal data when this occurs, see ‘Transfer of your information out of the EEA’.

We will share personal information with law enforcement or other authorities if required by applicable law.

We will not share your personal information with any other third party.

Transfer of your information out of the EEA

We may transfer your personal information to the following which are located outside the European Economic Area (EEA) as follows:

• Canada, in order to provide your name and address details so that our overseas suppliers can send you the goods you have ordered

• Australasia, Switzerland, and Bahrain, in order to provide your name and address details so that our suppliers can send you any goods you have ordered

These countries do not have the same data protection laws as the United Kingdom and EEA. Any transfer of your personal information will be subject to certain protections that are designed to help safeguard your privacy rights.

Such countries do not have the same data protection laws as the United Kingdom and EEA. Any transfer of your personal information will be subject to certain protections that are designed to help safeguard your privacy rights.

We will not otherwise transfer your personal data outside of the United Kingdom OR EEA.

Links

On our website we may link to other websites owned and operated by certain trusted third parties. These other third-party websites may also gather information about you in accordance with their own separate privacy policies. For privacy information relating to these other third-party websites, you will need to look at their own privacy policies.

Cookies

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. Please see our Cookie Policy for more information about the cookies we use.

Marketing

We would like to send you information about products, services, operational news, such as service over bank holidays, and company news, which may be of interest to you. Where we have your consent or it is in our legitimate interests to do so, we may do this by post, email or telephone.

We will only ask whether you would like us to send you marketing messages when you tick the relevant boxes when you subscribe to our newsletter. Scroll to the bottom of this page to see what this form looks like.

If you previously agreed to being contacted in this way you can unsubscribe at any time by:

—contacting us at info@blueleafcare.com

—using the ‘unsubscribe’ link in emails

- calling us on 03300 55 22 88 or

- writing to us at Blueleaf Limited, Charwood House, Oakhurst Business Park, Wilberforce Way, Southwater, Horsham, RH13 9RT.

For more information on your rights in relation to marketing, see 'Your rights’ below.

Your rights

Under the General Data Protection Regulation you have a number of important rights, including rights to:

access your personal information
require us to correct any mistakes in your information which we hold
require the erasure of personal information concerning you in certain situations
receive the personal information concerning you which you have provided to us, in a structured and machine-readable format
object at any time to processing of personal information concerning you for direct marketing
object in certain situations to our continued processing of your personal information
restrict our processing of your personal information in certain circumstances

For further information on your right, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals rights under the General Data Protection Regulation.

If you would like to exercise any of those rights, please:

email, call or write to our Data Protection Controller
let us have enough information to identify you and provide proof of your identity, and
let us know the information to which your request relates, including any account or reference numbers, if you have them

Keeping your personal information secure

We have appropriate security measures in place to prevent personal information from being accidentally lost, used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

How to complain

We hope that we can resolve any query or concern you raise about our use of your information.

In the UK, you have a right to complain to the Information Commissioner who may be contacted at https://ico.org.uk/concerns/

Changes to this website privacy policy

This website privacy policy was published on 2 July 2018. We may change this website privacy policy from time to time, when we do we will inform you via the website or/and e-mail.

How to contact us

Please contact our Data Protection Controller if you have any questions about this privacy notice or the information we hold about you.

If you wish to contact our Data Protection Controller, please send an email to info@blueleafcare.com, write to Blueleaf Limited, Charwood House, Oakhurst Business Park, Wilberforce Way, Southwater, Horsham, RH13 9RT, or call 03300 55 22 88.