Privacy Policy

Your privacy matters to us.
Viveca Biomed Limited is committed to protecting your personal data and handling it with respect. This Privacy Policy explains what information we collect, why we collect it, how we use it, and what your rights are. We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1.  Who We Are

Viveca Biomed Limited is a company registered in England and Wales (company number 10707038). We design and supply the Contrelle Activgard product range.

For all data protection queries  including subject access requests,— please use the contact details above. We will respond within one calendar month.

2.  What This Policy Covers

This Privacy Policy applies to your use of our websites (www.vivecabiomed.co.uk and www.contrelle.com), our emails, and any associated pages or communications. It does not apply to third-party websites linked from our site – we recommend you read their privacy policies before providing any personal data to them.

3.  What Data We Collect and How

We may collect and hold the following personal data:

We do not collect personal data surreptitiously. Where you choose not to provide information we request, we may be unable to provide our products or services or respond to your enquiry.

If you are aged 13 or under, you must obtain a parent or guardian’s consent before providing personal data to us.

4.  Our Lawful Basis for Processing

UK GDPR requires us to have a lawful basis for processing your personal data. Depending on the purpose, we rely on:

Where we process special category data (health information), we rely on your explicit consent or another condition permitted under Schedule 1 of the Data Protection Act 2018.

5.  How We Use Your Personal Data

We use your personal data only for the purpose(s) for which it was collected. We will inform you and explain the legal basis if we ever need to use it for a materially different purpose. Our uses include:

• Processing and fulfilling orders for Contrelle products
• Managing your account and providing customer services
• Sending you order confirmations, dispatch updates and important notices
• Processing payments securely via Stripe
• Sending marketing communications (product news, offers, events) by email, post or other means – to existing customers on the basis of the PECR soft opt-in (Regulation 22), where you were given a clear opportunity to opt out at the point of purchase; or to new contacts where you have given explicit consent
• Retargeting advertising on third-party platforms (e.g. Facebook, Instagram, Pinterest) using cookies and ad tags – subject to your cookie consent
• Personalising and improving your experience on our website
• Conducting credit and fraud prevention checks where you apply for an instalment payment option
• Carrying out customer satisfaction surveys and market research
• Internal auditing, data analysis and product development
• Complying with our legal and regulatory obligations as a manufacturer of a Class IIa medical device
• Displaying testimonials and reviews you provide (first name only, with your consent)

You may opt out of marketing communications at any time by clicking the unsubscribe link in any email or by contacting us at info@contrelle.com.

You may also register with the Telephone Preference Service (TPS), the Corporate Telephone Preference Service (CTPS) or the Mailing Preference Service (MPS) to limit unsolicited marketing communications generally.

6.  How Long We Keep Your Data

We will not keep your personal data for longer than is necessary for the purpose for which it was collected. We maintain an internal data retention schedule setting out indicative retention periods by data type. You may request a copy by contacting us at info@vivecabiomed.co.uk.

As a general guide:

We will delete your data sooner if: (a) it is no longer required for the purpose collected; (b) we are no longer lawfully entitled to process it; or (c) you ask us to delete it and no overriding legal obligation requires us to retain it.

7.  Who We Share Your Data With

We do not sell, rent or share your personal data with third parties for their own marketing purposes. We may share your data with trusted third parties in the following circumstances:

For details of how Stripe handles your payment data, please see: https://stripe.com/gb/privacy

All third-party processors are contractually required to handle your data securely and only for the purposes we specify.

8.  International Data Transfers

Where we transfer your personal data outside the United Kingdom, we ensure appropriate safeguards are in place in accordance with UK GDPR. These may include:

• Transfers to countries that benefit from UK adequacy regulations;
• Use of the International Data Transfer Agreement (IDTA) approved by the UK Information Commissioner’s Office; or
• Other lawful transfer mechanisms as approved by the ICO.

If you would like further information about the specific safeguards in place, please contact us.

9.  How We Protect Your Data

We take the security of your personal data seriously. Our measures include:

• Secure servers with access controls to prevent unauthorised use or disclosure
• Limiting access to personal data to employees, agents and contractors with a legitimate need to know, subject to confidentiality obligations
• Documented procedures for identifying and responding to data breaches, including notifying you and/or the ICO where we are legally required to do so
• Use of SSL/TLS encryption for data transmitted via our website

No electronic security system is entirely immune to risk. We cannot guarantee the complete security of our systems, but we will always act promptly to investigate and address any breach.

10.  Cookies and Tracking Technologies

Our website uses cookies and similar technologies (such as pixel tags and mobile identifiers). We use these to make our website work, understand how it is used, and deliver relevant advertising.

We only set non-essential cookies where you have given prior, informed consent through our cookie consent tool. You can manage or withdraw your consent at any time via the cookie settings link in the footer of our website.

Please note that third-party providers (such as Google and Meta) may also place cookies via our site. We do not control those cookies directly — please refer to those providers’ own privacy policies.

To opt out of Google Analytics tracking across all websites, visit: https://tools.google.com/dlpage/gaoptout

For more information about cookies generally, visit: www.aboutcookies.org

11.  Your Rights

Under UK data protection law, you have the following rights. We will work to uphold them and will respond to any request within one calendar month (or up to three months for complex requests, in which case we will explain why).

To exercise any of these rights, please contact us at info@vivecabiomed.co.uk or write to us at our registered address. We do not charge for subject access requests unless they are manifestly unfounded or excessive.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

12.  Withholding Information

You may access parts of our website without providing personal data. However, to place orders, create an account, or use certain features of our site, you may be required to provide specific information.

You may restrict our use of cookies at any time via the cookie settings tool in the footer of our website, or through your browser settings. Blocking all cookies may affect the functionality of our site.

13.  External Websites

Our website contains links to third-party websites. We have no control over those sites and accept no responsibility for their content or privacy practices. This Privacy Policy does not apply to any third-party website. We recommend you review the privacy policy of any website before providing personal data.

14.  Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our business practices or the services we provide. Any changes will be posted on this page with an updated review date. We recommend you check this page periodically. Where changes are material, we will notify you directly where we are able to do so.

This Privacy Policy was last reviewed in March 2026.

15.  How to Contact Us

For any questions about this Privacy Policy, to exercise your data protection rights, or to make a subject access request, please contact us:

We will acknowledge your request within 5 working days and respond in full within one calendar month.