Website Privacy Notice

DermBiopsy Solutions Ltd is a CQC-registered provider of consultant-led skin biopsy and minor skin surgery services for adult patients, principally delivered within NHS hospital facilities. Our company number is 16829911.

For the processing described in this notice, DermBiopsy Solutions will normally act as the data controller. You can contact us at info@dermbiopsysolutions.co.uk or at 19 Marsh Road, Luton, England, LU3 2QF.

• your name, job title, organisation and professional contact details;
• information provided in website contact forms, emails, telephone calls or other correspondence;
• records of enquiries, meetings, procurement discussions and prospective contractual relationships;
• technical information such as internet protocol address, browser type, device information, website usage and cookie preferences;
• information needed to protect our website, systems and business from misuse, fraud or cyber-security threats; and
• any other information you choose to provide to us.

Most information is provided directly by you when you complete a form, email us, telephone us or meet with us. We may also receive professional contact information from a colleague or referral, an NHS procurement or framework portal, a publicly available professional source, or our website and security providers.

The lawful basis depends on the purpose and circumstances of the processing.

We use cookies and similar technologies to operate the website, remember choices, understand use of the website and, where enabled, support embedded or marketing services. Non-essential technologies will only be used where the visitor has provided the required consent. More information is available in our Cookie Policy.

We may share relevant information with organisations that help us operate our business, provided that appropriate confidentiality and data-protection arrangements are in place. These may include:

• website hosting, information technology, cyber-security and communications providers;
• professional advisers, insurers, auditors and accountants;
• NHS organisations, procurement bodies and framework operators where this is relevant to an enquiry or contractual relationship;
• regulators, law-enforcement bodies or public authorities where disclosure is required or permitted by law; and
• a purchaser, investor or professional adviser involved in a genuine corporate transaction, subject to appropriate safeguards.

We do not sell personal information.

Some technology suppliers may process information outside the United Kingdom. Where this occurs, we will use an appropriate lawful transfer mechanism and proportionate contractual and security safeguards.

We retain information only for as long as it is reasonably needed for the purpose for which it was collected, to manage a business relationship, to meet legal or regulatory requirements, or to establish, exercise or defend legal claims. Routine website enquiries will normally be reviewed for deletion after 24 months if no continuing relationship develops. Contract, tax and governance records may be retained for longer in accordance with applicable requirements.

• to ask for access to your personal information;
• to ask us to correct inaccurate or incomplete information;
• to ask us to erase information in certain circumstances;
• to ask us to restrict processing in certain circumstances;
• to object to processing based on legitimate interests or to direct marketing;
• to receive certain information in a portable format where the right applies; and
• to withdraw consent at any time where consent is the lawful basis.

These rights are not absolute and may be subject to legal exemptions. We may need to verify your identity before responding.

You can make a data protection complaint by emailing info@dermbiopsysolutions.co.uk and using the subject line “Data protection complaint”, or by writing to our registered office. We will acknowledge the complaint within 30 days, take appropriate steps to investigate it, keep you informed where further time is needed and communicate the outcome without undue delay.

You also have the right to complain to the Information Commissioner’s Office. Current contact details and guidance are available at www.ico.org.uk.

We do not use the personal information covered by this notice to make decisions based solely on automated processing that produce legal or similarly significant effects.

We may update this notice when our website, services or legal obligations change. The current version and review date will be displayed on our website.