1. Home
  3. Privacy Policy

Privacy Policy

Privacy Policy CPAP Supply UK

Effective Date: 13 July 2025
Website: www.cpapsupply.co.uk
Data Controller: Elarix Medical Ltd
Company Number: 16602969
Registered Office: 167–169 Great Portland Street, 5th Floor, London, W1W 5PF
Email: info@cpapsupply.co.uk | support@elarixmedical.co.uk
Phone: +44 (0)330 133 2808

1. Introduction

This Privacy Policy explains how Elarix Medical Ltd, owner and operator of CpapSupply.co.uk, collects, uses, discloses, and protects your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and applicable data protection laws.

We are committed to safeguarding your privacy and ensuring that your personal data is processed lawfully, fairly, and transparently.

2. Data Protection Principles

We adhere to the following principles when processing personal data. Your data will be:

  • Processed lawfully, fairly, and in a transparent manner

  • Collected for specified, explicit, and legitimate purposes

  • Adequate, relevant, and limited to what is necessary

  • Accurate and kept up to date

  • Retained only as long as necessary for the intended purposes

  • Processed securely using appropriate safeguards

3. What Personal Information We Collect

We collect and process the following categories of personal data:

  • Name and contact details (e.g., address, telephone number, email)

  • Order and account history

  • Payment details (handled securely via third-party processors; we do not store card information)

  • IP address, browser and device data (used for analytics and fraud detection)

  • Marketing preferences and communication records

4. Legal Basis for Processing

We process your personal information based on the following legal grounds:

  • Contract: To fulfil your order, manage deliveries, process returns, and provide customer service

  • Legal obligation: For accounting, tax, and regulatory compliance

  • Legitimate interests: To manage and improve our business, prevent fraud, and protect security

  • Consent: For marketing communications, where you have opted in

5. Marketing and Communications

We may use your data to:

  • Send important service updates or product safety information

  • Recommend related products (e.g., replacement parts)

  • Provide promotional offers and newsletters, where consent has been given

You may withdraw your consent or update your marketing preferences at any time by contacting us or using the unsubscribe link in our emails.

6. Cookies and Tracking Technologies

We use cookies and similar tools to:

  • Improve website functionality and performance

  • Monitor website usage through analytics services

  • Provide personalised content and product recommendations

Upon visiting our site, you will be prompted to manage your cookie preferences in accordance with applicable laws.

7. Sharing of Personal Information

Your data may be shared with trusted third parties, including:

  • Payment service providers (e.g., Stripe, PayPal)

  • Delivery and logistics partners

  • IT support, hosting, and website providers

  • Legal or regulatory authorities when required by law

  • Other entities within the Elarix Medical Ltd group, where necessary for fulfilment and support

All third-party partners are subject to contractual obligations to handle your data securely and lawfully.

8. International Data Transfers

Some of our service providers may store or process personal data outside the UK. Where this occurs, we ensure that such transfers comply with the UK GDPR by implementing appropriate safeguards, such as Standard Contractual Clauses or UK adequacy regulations.

9. Data Retention

We retain personal information only as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting obligations.

Anonymised data may be retained for statistical or business analysis. Payment data is processed securely through third parties and is never stored on our servers.

10. Your Data Protection Rights

Under the UK GDPR, you have the following rights:

  • Access your personal data

  • Request correction or deletion

  • Object to or restrict processing

  • Withdraw consent where applicable

  • Request data portability

  • Lodge a complaint with the UK Information Commissioner’s Office (www.ico.org.uk)

To exercise any of these rights, please email: support@elarixmedical.co.uk

11. Data Security

We implement appropriate technical and organisational measures to protect personal data from accidental loss, unauthorised access, misuse, or disclosure. Access to your personal data is limited to authorised personnel who require it for legitimate business functions.

12. Social Media and External Links

Our website may include links to third-party websites or platforms. Please note that we are not responsible for the privacy practices or content of external websites. We recommend reviewing their policies before submitting personal data.

13. Changes to This Policy

We may update this privacy policy periodically to reflect changes in our business practices, technology, or legal requirements. The most recent version will always be available at: www.cpapsupply.co.uk/privacy-policy

For material changes, we will notify users through the website or by direct communication where appropriate.

Last Updated: 13 July 2025