Privacy Policy

G&M Medical Supply operates this digital portal and website, including all related information, content, features, tools, products, and procurement services, with the primary goal of providing your business with a streamlined, highly efficient commercial purchasing experience (collectively referred to as the "Services"). These Services are powered by our e-commerce platform provider and core software partner, whose infrastructure enables us to deliver these critical procurement functionalities directly to your organization. This Privacy Policy outlines our practices regarding the collection, use, and disclosure of personal and professional information when you visit, utilize, or execute a commercial transaction through our Services, or when you otherwise engage in professional communications with our team. In the event of any conflict between our standard Terms of Service and this document, this Privacy Policy shall control with respect to the collection, processing, and disclosure of your information. By accessing and utilizing our Services, you acknowledge that you have read this policy thoroughly and understand our data practices as described herein.

Information We Collect and Process

When we utilize the term "personal information" within this B2B context, we are referring specifically to information that identifies, or can reasonably be linked to, an individual representing a business entity. This definition explicitly excludes anonymized or aggregated corporate data that cannot be traced back to a specific person. To facilitate our commercial relationship, we collect several categories of information. First and foremost, we gather essential business contact details, which include the names and corporate titles of your representatives, alongside your company name, billing addresses, shipping addresses, and professional email networks.

To process your corporate orders and manage accounts, we also collect commercial financial information. This may encompass corporate credit card numbers, financial account identifiers, payment terms, and comprehensive transaction histories. As your team navigates our platform, we securely maintain account credentials, such as corporate usernames, passwords, and specific permissions tailored to your organization's hierarchy. Furthermore, our systems automatically log device and network information to ensure platform stability. This includes tracking the types of business devices and browsers used, corporate network connections, IP addresses, and detailed usage logs that map how and when your representatives interact with our procurement portal.

Information Sources

The information we process is gathered from a variety of secure and reliable sources to ensure accurate and efficient service delivery. Primarily, we collect data directly from you or your authorized personnel when your organization registers a business account, submits purchase orders, requests commercial quotes, or engages in direct communications with our procurement and support teams.

Additionally, information is collected automatically through our digital portal via cookies, tracking technologies, and secure system logs as you navigate our digital services. We also receive vital data flows from our software and platform partners, who provide the underlying e-commerce architecture necessary to manage your transactions securely. In certain instances, particularly during client onboarding or when establishing credit terms, we may verify business details and collect supplementary information from commercial credit agencies or official business registries.

How We Use Your Information

We utilize the information we collect across several core commercial functions vital to our operations. Primarily, this data is essential for the fulfillment of our procurement services. It allows us to seamlessly execute purchase contracts, process business payments, manage bulk corporate orders, coordinate complex logistics, and manage your ongoing business account. Beyond basic fulfillment, we leverage this information for platform optimization, allowing us to tailor the portal experience, remember your corporate preferences, efficiently manage user permissions within your organization, and continually improve our digital interface.

We also utilize professional contact details for targeted B2B marketing and communication. This ensures your organization receives critical commercial updates, product availability notices, pricing adjustments, and relevant industry insights, though your representatives retain the right to opt out of promotional messaging at any time. Finally, this data plays a vital role in our security protocols and legal compliance. We continuously monitor access to authenticate user accounts, ensure the security of corporate transactions, detect and prevent fraudulent activity, and fulfill our obligations under applicable commercial laws, tax regulations, and valid legal processes.

How We Disclose Information

To maintain our operations and deliver our services effectively at scale, there are specific circumstances where we must disclose information to trusted third parties for legitimate commercial purposes. Most notably, we share necessary data with our e-commerce platform partner and various software providers who host this system. These partners perform vital back-end services on our behalf, including secure cloud hosting, payment processing, advanced data analytics, and complex order management.

Furthermore, we collaborate closely with logistics and fulfillment partners—such as freight forwarders, couriers, and warehouse operators—sharing the information required to ensure the prompt and accurate execution of your product deliveries. We may also share specific financial and corporate details with commercial credit institutions to assess creditworthiness or facilitate corporate financing and billing terms. In the event of a broader corporate restructuring, such as a merger, acquisition, or asset sale, or to comply with statutory legal obligations and official subpoenas, your information may be disclosed to relevant legal or corporate entities to protect our commercial rights and infrastructure.

Integration with Platform Partner Software

Our Services are hosted using specialized partner e-commerce software, which acts as our primary, secure infrastructure provider. This partner software actively collects and processes information regarding portal usage to maintain, secure, and continuously optimize system performance. Any information submitted through our portal is securely encrypted, transmitted to, and processed by our platform partner and their verified sub-processors, which may operate across global jurisdictions to ensure system redundancy.

To enhance our B2B offerings and fortify our system security, we utilize advanced features provided by this platform partner. These features frequently evaluate broad transaction patterns across multiple commercial networks to improve fraud detection algorithms and overall system reliability. Our platform partner processes this diagnostic and transactional data securely, acting strictly in accordance with rigorous enterprise privacy standards and applicable global data protection regulations.

Third-Party Websites and Integrations

Our procurement portal may occasionally contain links to third-party websites or deep supply chain integrations, such as external supplier catalogs, manufacturer specification databases, or independent freight tracking systems. We do not control, and cannot be held responsible for, the privacy practices or data security protocols of these external platforms. We strongly recommend that your organization reviews the specific privacy policies and terms of service of any third-party service your business interacts with through our portal.

Data Security and Retention

We implement robust administrative, technical, and physical security controls designed specifically to protect sensitive business data and intellectual property from unauthorized access or disclosure. However, no transmission of data over the internet or any digital storage system can be guaranteed as completely secure. We retain your corporate and personal information only for as long as is strictly necessary to maintain your active corporate account, fulfill ongoing procurement contracts, satisfy stringent legal or tax retention obligations, and resolve any commercial disputes that may arise.

Your Rights and Choices

Depending on your specific jurisdiction, such as within the United Kingdom or the European Economic Area (EEA), the individuals representing our corporate clients may possess explicit statutory rights regarding their personal data under applicable data protection laws. These rights generally include the ability to request formal access to the data we hold, demand the correction of any inaccuracies, request the portability of data to another service, or request the restriction or complete erasure of personal information from our systems.

We are committed to facilitating these rights in a timely and compliant manner. If you wish to exercise any of these rights on behalf of yourself or your organization, or if you need to inquire further about how our software partner manages data infrastructure on our behalf, you may submit a formal request to our team. We handle all such requests in strict accordance with applicable legal timelines and internal verification protocols to ensure data security is not compromised.

Contact Information

For any questions regarding our privacy practices, corporate data management strategies, or to formally exercise your privacy rights, please direct your inquiries to our designated data controller team. You can reach us via email at hello@gm-med.co.uk or by standard mail at our corporate office located at 30 Doreen Avenue, Congleton, CW12 3JE, United Kingdom.