Privacy Policy

NYSHealth Ltd ("NYSHealth", "we", "us", "our") operates the website at nyshealth.co.uk. We are the data controller for personal information collected through this website.

If you have any questions about this policy or how we handle your data, please contact us at [email protected].

We may collect the following types of personal information:

• Contact information — your name and email address when you submit our contact form or sign up for our newsletter.
• Order information — name, delivery address, email address and payment details when you place an order. Payment card details are processed securely by our payment provider and are not stored by NYSHealth.
• Usage data — information about how you use our website, including pages visited, time spent on pages and referring URLs, collected via cookies and analytics tools.
• Device and technical data — IP address, browser type, operating system and device identifiers.

We use your personal information to:

• Process and fulfil your orders and send order confirmations.
• Respond to your enquiries and provide customer support.
• Send you marketing communications where you have given your consent, such as our newsletter.
• Improve our website and understand how visitors use it.
• Comply with our legal and regulatory obligations.

We process your personal data on the following legal bases:

• Contract — processing necessary to fulfil an order you have placed with us.
• Consent — where you have opted in to receive marketing communications or agreed to the use of non-essential cookies.
• Legitimate interests — for website analytics and improving our services, where this does not override your rights.
• Legal obligation — where we are required to process data to comply with applicable law.

We do not sell your personal data. We may share your information with trusted third-party service providers who assist us in operating our website and fulfilling orders, including:

All third parties are required to handle your data securely and in accordance with applicable data protection law.

• Payment processors to handle transactions securely.
• Delivery and logistics providers to fulfil your orders.
• Email and marketing platforms where you have consented to communications.
• Analytics providers to help us understand website usage.

We use cookies and similar technologies on our website. For full details of the cookies we use and how to manage your preferences, please read our Cookie Policy.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements.

Order records are typically retained for six years in accordance with UK tax and accounting requirements. Contact enquiries are retained for up to two years.

Under UK data protection law, you have the following rights in relation to your personal data:

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.

• The right to access the personal data we hold about you.
• The right to have inaccurate data corrected.
• The right to request erasure of your data in certain circumstances.
• The right to restrict or object to processing in certain circumstances.
• The right to data portability.
• The right to withdraw consent at any time where processing is based on consent.

Where we transfer personal data outside the United Kingdom, we ensure that appropriate safeguards are in place in accordance with applicable data protection law, such as standard contractual clauses or adequacy decisions.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.