Rosemont Website Privacy Policy
Introduction
This privacy policy gives you information about how Rosemont Pharmaceuticals Limited (we, us or our) collects and uses your personal data through www.rosemontpharma.com website (Website), including any data you may provide when you communicate with us through the Website or register with us to purchase a product.
We are the operator of the Website and are responsible for your personal data. This Website is not intended for children, and we do not knowingly collect data relating to children.
If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact us by email on legal@rosemontpharma.com or by post to the Legal team, Rosemont House, Yorkdale Industrial Park, Braithwaite Street, Leeds, England LS11 9XE.
1. The types of personal data we collect about you
We may collect, use, store and transfer different types of your personal data such as:
-
- Identity Data which may include first name, last name, username or similar identifier, and title;
- Contact Data which may include work address, email address and telephone number(s);
- Transaction Data which may include details about products you have purchased from us;
- Technical Data may include internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device ID and other technology on the devices you use to access this website;
- Profile Data which may include your username and password, job title, your employer/organisation name, your orders, your preferences, and any feedback and survey responses;
- Usage Data which may include information about how you interact with and use our website, products and services; and
- Marketing and Communications Data which may include your preferences in receiving marketing from us and your communication preferences.
We also collect, use and share aggregated data such as statistical or demographic data which is not personal data as it does not directly (or indirectly) reveal your identity. For example, we may aggregate individuals’ Usage Data to calculate the percentage of users accessing a specific website feature in order to analyse general trends in how users are interacting with our website to help improve the website and our service offering.
2. How is your personal data collected?
We collect your personal data through:
a) Your interactions with us.
You may give us your personal data by filling in online forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:
-
- apply for our products or services;
- create an account on our website;
- request marketing to be sent to you; or
- give us feedback or contact us about product or general enquiries.
b) Automated technologies or interactions. As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies. Please see our cookies page for further details.
3. How and why we use your personal data
3.1 Why we use your personal data
The law requires us to have a legal basis for collecting and using your personal data. We rely on one or more of the following legal bases:
a) performance of a contract with you;
b) legitimate interests when it is necessary to conduct our business, for example to prevent fraud and to give you secure customer experience. We consider and balance any potential impact on you and your rights before we process your personal data;
c) legal obligation where use of your personal data is necessary for compliance with our legal requirements; and/or
d) consent obtained via your active agreement to use your personal data for a specified purpose, for example to share marketing communications.
3.2 Purposes for which we will use your personal data
We will only use your personal data for the purpose for which we collected it, and this includes the following:
-
- to register you as a new customer;
- to process and deliver your order;
- to manage your relationship with us, e.g. to provide updates regarding your order;
- to enable you to complete a survey;
- to improve our website, products/services, marketing or customer relationships; or
- to recommend products or services which may be of interest to you.
3.3 Direct marketing
You will receive marketing communications from us only where you have agreed to receive the marketing. We may analyse your Identity, Contact, Technical, Usage and Profile Data to form a view which product, services and offers may be of interest to you so that we can then send you relevant marketing communications. We will not do this unless you have consented to receive this type of marketing.
3.4 Third-party marketing
We do not share your personal data with any third party for their own direct marketing purposes.
3.5 Opting out of marketing
You can ask us to stop sending you marketing communications at any time by updating your preferences on the ‘My Account’ section of the website, by emailing marketing@rosemontpharma.com or by following the opt-out links within any marketing communication sent to you. The opt-out will not affect the lawfulness of any processing carried out before you withdraw your consent.
If you opt out of receiving marketing communications, you will still receive service-related communications that are essential, such as updates on your order.
3.6 Cookies
You can find information about the cookies we use and how to change your cookie preferences here. For further information about cookies and how to disable them please go to: https://allaboutcookies.org/ or https://ico.org.uk/your-data-matters/online/cookies/.
3.7 Third-Party Links
This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.
4. Sharing of your personal data
If necessary, we may share your personal data with the parties set out below:
a) other companies in the Rosemont Pharmaceuticals Group;
b) external third parties, which may include:
-
- service providers such as IT and website providers, delivery carriers;
- HM Revenue and Customs, regulators and other authorities; and
- professional advisers such as legal advisers, insurers, or auditors, and
c) third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy.
We require all third parties to comply with data security and protection laws when using your data solely for the specified purposes above, and in accordance with our instructions.
5. International transfers
The data we collect through the Website may be stored and processed in any country where we have facilities or in which we engage service providers, including in the U.S. where our affiliates operate.
Some non-EEA countries are recognised by the European Commission as providing an adequate level of data protection according to EEA standards (the full list of these countries is available here: Data protection adequacy for non-EU countries (europa.eu). For transfers from the EEA to countries not considered adequate by the European Commission, we have put in place adequate measures, including contractual obligations to comply with UK Data Protection laws.
6. Data security
We use a number of security measures and procedures including the use of firewalls to keep personal information as secure as possible against access by unauthorised persons and against unlawful processing, accidental loss, destruction and damage. We also limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.
We have procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
7. Data retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, such to process and deliver your orders. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
8. Your legal rights
You have the right to:
a) have access to your personal data (commonly known as a “subject access request”);
b) correction of any incomplete or inaccurate data we hold about you. It is your responsibility to keep us informed if your personal data changes;
c) erasure whereby you can ask us to delete or remove your personal data;
d) object to processing of your personal data;
e) transfer of your personal data to you or to a third party; and
f) request restriction of processing of your personal data.
The above rights are not absolute, and we may not be able to process your request due to specific legal reasons, which will be communicated to you at the time of your request. For more information about your rights, please visit the Information Commissioner’s Office’s website (www.ico.org.uk). To exercise any of the rights set out above, please contact us by post or email legal@rosemontpharma.com.
9. Complaints
If you have any concerns regarding how we use or handle your data, please contact us on legal@rosemontpharma.com (or by post) and we will review your complaint.
You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
10. Changes to the privacy notice
We may amend this Privacy Notice from time to time. If we make substantial changes in the way we use your personal information we will notify you by posting a prominent notice on our Website.
Last updated: 7 August 2024