Privacy Policy 

Last updated: 150526 

This Privacy Policy explains how UKExpertMedical Ltd, trading as Medexxa, collects, uses and protects personal data. 

UKExpertMedical Ltd is the data controller for personal data collected through this website and in connection with our services, unless we tell you otherwise. 

Our contact details are: 

UKExpertMedical Ltd 
Trading as Medexxa 
55 Spring Gardens 
Manchester 
M2 2BY 
United Kingdom 
Telephone: 0161 515 0452 

Personal data we collect 

We may collect and process personal data when you contact us, use our website, make an enquiry, instruct us, use our services, or communicate with us. 

This may include: 

• name;  

• job title;  

• organisation;  

• email address;  

• telephone number;  

• postal address;  

• enquiry details;  

• case or instruction details;  

• information contained in correspondence;  

• billing and payment information;  

• website usage information;  

• technical information, such as IP address, browser type and device information.  

Depending on the nature of our services and your instruction, we may also receive or process special category personal data, including health or medical information. We will only process this type of information where we have a lawful basis to do so and where appropriate safeguards are in place. 

How we collect personal data 

We may collect personal data: 

• directly from you when you complete a form, email us, call us or otherwise contact us;  

• from your employer or organisation;  

• from solicitors, insurers, case managers, clinicians, experts or other professional representatives;  

• from documents, records or materials provided to us as part of an instruction;  

• automatically when you use our website, through cookies or similar technologies.  

How we use personal data 

We may use personal data to: 

• respond to enquiries;  

• provide information about our services;  

• manage client relationships;  

• provide and administer our services;  

• review, process or organise documents and records;  

• communicate with clients, professional representatives, experts, suppliers and service users;  

• manage billing, payments and accounts;  

• maintain business records;  

• improve our website and services;  

• comply with legal, regulatory and professional obligations;  

• protect our business, website, systems and users.  

Lawful bases for processing 

We rely on different lawful bases depending on the purpose of processing. These may include: 

• Contract — where processing is necessary to provide services or take steps before entering into a contract.  

• Legal obligation — where we must process personal data to comply with the law.  

• Legitimate interests — where processing is necessary for our business interests, provided your rights and freedoms do not override those interests.  

• Consent — where you have given us clear consent, for example for certain optional cookies or marketing communications.  

• Vital interests — in rare cases, where processing is necessary to protect someone’s life.  

Where we process special category data, such as health information, we will also rely on an additional legal condition under data protection law. This may include processing necessary for legal claims, health or social care purposes, or where explicit consent has been provided, depending on the circumstances. 

Sharing personal data 

We may share personal data with: 

• solicitors, insurers, case managers, medical experts or other professionals involved in a matter;  

• clients and organisations who instruct us;  

• IT, hosting, software and cloud service providers;  

• payment and accounting providers;  

• professional advisers, such as accountants or legal advisers;  

• regulators, courts, public authorities or law enforcement bodies where required;  

• third parties where necessary to provide our services or protect our legal rights.  

We will not sell your personal data. 

International transfers 

Some of our service providers may process personal data outside the UK. 

Where personal data is transferred outside the UK, we will take steps to ensure that appropriate safeguards are in place, such as adequacy regulations or approved contractual protections. 

How long we keep personal data 

We will only keep personal data for as long as necessary for the purpose for which it was collected. 

Retention periods may vary depending on the type of information, the nature of the service, contractual requirements, legal obligations, limitation periods, and our legitimate business needs. 

When personal data is no longer needed, we will delete it, anonymise it or securely archive it. 

Security 

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. 

However, no website, email system or online transmission is completely secure. You should take care when sending sensitive information electronically. 

Marketing 

We may use your contact details to send you information about our services where permitted by law. 

You can opt out of marketing communications at any time by contacting us or using any unsubscribe option provided. 

We will not send you marketing emails where consent is required unless you have provided that consent. 

Your data protection rights 

Under UK data protection law, you may have the right to: 

• access your personal data;  

• correct inaccurate or incomplete personal data;  

• request deletion of your personal data;  

• restrict how we use your personal data;  

• object to certain types of processing;  

• request transfer of your personal data;  

• withdraw consent where we rely on consent;  

• complain to the Information Commissioner’s Office.  

These rights are not absolute and may depend on the circumstances. 

To exercise your rights, contact us at: enquiries@medexxa.co.uk 

Complaints 

If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve the issue. 

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection matters. 

ICO website: ico.org.uk 

Links to other websites 

This website may contain links to other websites. We are not responsible for the privacy practices or content of third-party websites. 

Changes to this Privacy Policy 

We may update this Privacy Policy from time to time. The latest version will be published on this website.