Privacy Policy

Astflick Group Ltd trading as Medical Sutures

Last Updated: 2025

1. Introduction

Astflick Group Ltd trading as Medical Sutures (“we”, “us”, “our”) respects your privacy and is committed to protecting personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store and protect personal data when you use www.medicalsutures.co.uk (“our Site”).

Business Use Only:
Our Site is intended for business and professional customers only. We do not knowingly collect personal data from consumers acting in a private capacity.

2. Data Controller

Astflick Group Ltd trading as Medical Sutures is the data controller responsible for your personal data.

Registered in England & Wales
Company Number: 05950580

3. What This Policy Covers

This Privacy Policy applies only to your use of our Site.

Our Site may contain links to third-party websites. We do not control these websites and are not responsible for their privacy practices. Please review their policies separately.

4. Your Rights Under UK GDPR

You have the following rights under UK GDPR:

The right to be informed about how your data is used

The right of access to your personal data

The right to rectification of inaccurate data

The right to erasure (where legally applicable)

The right to restrict processing

The right to data portability

The right to object to processing

Rights relating to automated decision-making and profiling

If you believe your data has been handled incorrectly, you have the right to complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.

5. Personal Data We Collect

Depending on how you interact with our Site, we may collect:

Name

Business or company name

Job title

Email address

Telephone number

Business address and postcode

IP address

Browser type and version

Operating system

Website usage data (pages visited, referring URLs, timestamps)

6. Lawful Basis for Processing

We process personal data only where we have a lawful basis, including:

Contractual necessity – to process orders and provide services

Legal obligation – accounting, tax, regulatory requirements

Legitimate interests – operating and improving our business, fraud prevention, customer service

Consent – where required for marketing communications

7. How We Use Your Data

We use personal data to:

Manage customer accounts

Process and fulfil orders

Provide delivery updates and transactional communications

Respond to enquiries

Improve website performance and security

Send marketing communications only where consent has been given

Request feedback or reviews relating to completed orders

We do not sell personal data.

8. Data Retention

We retain personal data only for as long as necessary:

Order and transactional data: 6 years (legal/accounting requirement)

Pharmaceutical-related data: up to 10 years where required

Marketing data: until consent is withdrawn

Data is securely deleted or anonymised when no longer required.

9. Data Storage & Security

Personal data is stored securely within the UK and European Economic Area (EEA).

Security measures include:

Firewalls and intrusion detection

PCI-compliant payment processing

Regular security updates

Staff training on data protection

Access controls and monitoring

10. Sharing Your Data

We may share personal data with trusted third-party processors where necessary, including:

Royal Mail, DPD, FedEx (couriers)

PayPal, Braintree, Amazon Payments (payment processing)

Signifyd (fraud prevention)

AfterShip (parcel tracking notifications)

Trustpilot (review invitations)

Remarkety (email marketing – opt-in only)

Intercom / Front (customer support)

JustUno (on-site optimisation)

All processors are required to comply with UK GDPR and process data only on our instructions.

We may also disclose data where legally required.

11. Business Transfers

If our business or part of it is sold or transferred, relevant personal data may be transferred to the new owner for the same purposes set out in this policy.

12. Marketing Preferences

You may opt out of marketing communications at any time by:

Using the unsubscribe link in emails

Contacting us directly

Preference services such as TPS, CTPS and MPS may help reduce unsolicited marketing but do not override consent you have given.

13. Cookies

Our Site uses cookies. Please refer to our Cookie Policy for full details of how cookies are used and how you can manage your preferences.

14. Accessing Your Data

You may request access to your personal data at any time.

Requests are free of charge and will be responded to within one month, in accordance with UK GDPR.

15. Contact Us

For privacy-related enquiries, please contact us via the website.

16. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be published on our Site.