Privacy, data
and your rights.

Who we are

Astflick Group Ltd operates and develops a portfolio of specialist businesses serving healthcare, medical, veterinary, scientific, workwear and industrial markets.

For personal information collected directly through this corporate website, Astflick Group Ltd is normally the data controller. This means that it decides why and how that information is processed.

Group brands and other websites

This policy applies to personal information collected through the Astflick Group corporate website and through direct corporate communications with Astflick Group Ltd.

Websites operated by group brands, subsidiaries, divisions or associated trading businesses may collect information independently and publish their own privacy and cookie policies. The legal entity identified on the relevant website, order confirmation or invoice will normally be responsible for that processing.

Links to another group website or third-party website do not automatically make Astflick Group Ltd the controller of information collected there. You should review the privacy notice shown on the website you are using.

What we may collect

Depending on how you interact with us, we may collect the following categories of personal information:

We normally collect information directly from you, automatically through website technologies, from the organisation you represent, or from legitimate public and business sources.

Please do not submit unnecessary health, financial, payment-card or other sensitive information through the general contact form.

How and why we use information

Where we rely on legitimate interests, those interests may include operating and protecting our businesses, responding to genuine enquiries, maintaining professional relationships, improving our website and preventing misuse.

We consider whether those interests are overridden by your rights and freedoms before relying on this basis.

We do not sell personal information. We do not use information collected through this corporate website to make solely automated decisions that produce legal or similarly significant effects.

Sharing and international transfers

We only disclose personal information where reasonably necessary for the purposes described in this policy. Recipients may include:

• Astflick Holdings Ltd or another relevant group business where necessary to deal with your enquiry;
• website hosting, IT, security, analytics, communications and professional-service providers acting under appropriate obligations;
• banks, insurers, auditors, accountants, legal advisers and other professional advisers;
• regulators, law-enforcement bodies, courts or public authorities where disclosure is legally required; and
• a purchaser, investor or adviser involved in a genuine corporate transaction, subject to appropriate confidentiality arrangements.

Some service providers may process information outside the United Kingdom. Where UK data protection law requires safeguards, we use an applicable adequacy regulation, approved contractual protections or another lawful transfer mechanism.

You may contact us for further information about the safeguards relevant to your information.

Cookies and analytics

This website may use cookies and similar technologies to operate securely, remember choices, measure performance and understand how visitors use the website.

Where consent is legally required, non-essential cookies should not be used until you have made a choice. You can manage available choices through the website’s cookie controls and can also restrict cookies through your browser.

Blocking some cookies may affect website functionality.

Retention and security

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to respond to enquiries, maintain appropriate business records, resolve disputes and meet legal, regulatory, tax, accounting and reporting requirements.

Retention periods differ according to the nature of the information, the relationship involved, legal limitation periods, contractual requirements and whether information is needed to establish, exercise or defend legal claims.

When information is no longer required, we delete it, anonymise it or securely restrict further use.

We use reasonable technical and organisational measures designed to protect information against accidental loss, unauthorised access, misuse, alteration or disclosure. Access is limited to people and providers who need it for legitimate purposes.

No internet transmission or storage system can, however, be guaranteed completely secure.

Your rights

Depending on the circumstances and the lawful basis used, UK data protection law may give you the right to:

Rights are not absolute and may not apply in every situation. We may need to request information to confirm your identity and understand your request.

We will normally respond within one month, although the law permits an extension for certain complex or multiple requests.