Privacy Policy

Privacy Policy

We take your privacy very seriously. The below policy explains how we use your information to ensure you and your orders are dealt with efficiently, without bias and giving you the best customer service we can offer.

What this Privacy Policy covers

We are committed to putting our customers (you) first and therefore we are transparent on how we collect, use and protect your details.

We at Simon White Medical Ltd, are data controllers and are referred to in this policy as “we”, “us” or “our”. Here’s a breakdown of what our Privacy Policy explains:

• The data we collect and why;

• How we use your data;

• When and why we will disclose your data to other organisations;

• Why we process your data;

• The rights and choices you have when it comes to your data;

• How long we will hold your data for;

• Data Breach and how we will respond;

• How we protect your data and;

• How you can contact us.

What we collect and why

As a supplier of goods we ask for certain details (data) that enables us to function as a company in the completion of orders.

The data collected for customers and their orders is accessible by us at our offices in Bradford, West Yorkshire and our warehouse in Leeds so orders can be completed in a satisfactory manner.

Below are details (data) we collect and then hold on you:

1. Your contact name of the person who conducts business with us, including the shipping contact name.

2. The contact name of the person responsible for paying invoices (if different from your above).

3. Your business address/es, including billing and shipping address/es.

4. Your contact telephone number/s, including shipping contact telephone number/s

5. Your contact email address/es, including when consent is given, the delivery email address.

6. Your web address (if necessary).

We collect no other personal data on you as a customer or in conjunction with your order. For card payments we process these in SagePay or PayPal either online when supplied by you, or by our staff over the telephone to SagePay via Sage 200 or direct to PayPal. No payment card details are stored by us at all.

Delivery email addresses and/or mobile telephone numbers will be entered on delivery instructions as these are used by our courier networks to inform you when your delivery may be expected.

Where orders are placed on your account we keep the following necessary information on transactions:

1. Detail of items ordered, quantities and values

2. Notes relating to your order and the person ordering, made up of: i. Notes detailing the conversation with you when the order was placed. ii. Notes detailing telephone or email contact with you. iii. Notes detailing order queries and questions. iv. Notes detailing the progression of order queries. v. Notes detailing resolution of order queries. vi. Any other correspondence in relation to orders placed.

Your data and other organisations

The data we hold for each customer and their orders also enables us to enquire on your behalf when the goods ordered may have been lost in transit by the delivery company, incorrectly picked in our warehouse or arrive damaged. Where goods are lost or arrive damaged, the data we hold will be passed to the delivery services used. This typically means the delivery full name, delivery company name (if applicable), delivery address and items ordered. This is essential to complete investigations for errors to be rectified.

Besides ourselves the data we hold on our servers is accessible by third-party data controllers – KR Digital who have access to your data but do not use your data as they provide our I.T. security and network infrastructure, Sage for Sage 200, These third parties provide software and support used by us in our day-to-day operation as a company where orders are taken verbally and imported electronically. These third party organisations also have their own privacy policies and are not connected in any way to this privacy policy. Written confirmation of their privacy policies can be supplied on request by emailing

If you have given your consent to receive email marketing, only your email address will be used by our email service. No other personal information is kept on this website as it is not required.

When using our following e-commerce website we use a third party provider and hosting company IONOS. Data used on these websites falls under their privacy policy at the time of collection. When that data is passed to us for order fulfilment we then become the controller and your data will fall under our privacy policy.

We will also disclose your data for legal reasons to collection agencies and/or legal representatives if payment is outstanding on orders for goods purchased, which under our Terms and Conditions, still remain the property of Simon White Medical Ltd. Your data will also be disclosed to legal authorities if required to do so by Law.

Why we process your data

We will only collect and use your data (as described above “What we collect and why” and “Your data and other organisations”) in accordance with data protection laws. Our grounds for processing your personal information are as follows:

Consent – Where necessary we will only collect and process your data if you have consented for us to do so in business operation or buying goods for sole use. For example, when you create an account with us for ordering purposes we will use your data to provide the services and goods as mentioned in “What we collect and why”. Company marketing correspondence via email to you will only be made with your consent. We will never assume you want to receive emails of which an order is not associated. Our websites will ask you for specific permission to receive marketing emails. Also our staff will ask you via the telephone if you would like to receive marketing emails and a record of consent is kept alongside customer data.

Legitimate Interests – We may use and process some of your details (data) where we have sensible and legitimate business reasons for doing so. Under European privacy laws there is a concept of “legitimate interests” as a justification for processing your data. Our legitimate interests for processing your data are:

a. to contact potential customers by telephone about our products and services that will not infringe their fundamental rights and freedoms.

b. to enable you to access and use our websites for ordering goods at

c. to fulfil orders placed either online (website listed above) or by email and telephone contact with our sales office.

Use of children’s personal information

We do not knowingly collect or store any personal information about children under the age of 16. If you are aged under 16 please get your parent’s or guardian’s permission before you provide any personal information to us.

Your rights and choices

You have the following data rights under GDPR legislation which will apply from May 25th 2020:

1. To request the data we hold on you at any time, whereupon we can supply you the data in an easily accessible format and easy to read, within a month (30 day period).

2. To request your data to be deleted at any time which will be replied to within a 30 day period (month). The request for deletion of data must be made verbally or in writing along with an explanation as to why you have requested it.

3. To complain to the ICO if you think we have used your data beyond the lawful basis of operation. For ICO contact information please visit

4. To be informed of any changes we make to the data we hold on you.

5. To rectify any data we hold on you.