Who we are

PrecisionDermal is a trading name of Astflick Group Limited. Astflick Group Limited is the controller responsible for the personal information described in this policy.

• Company number: 05950580
• ICO registration number: ZB229240
• Email: hello@precisiondermal.co.uk

In this policy, “PrecisionDermal”, “we”, “us” and “our” refer to Astflick Group Limited.

Who this policy covers

This policy applies to personal information relating to:

• Customers, prospective customers and account applicants;
• Directors, employees and representatives of business customers;
• Sole traders, partners and healthcare professionals;
• Suppliers, manufacturers, couriers and professional advisers;
• People who contact us, subscribe to marketing or use our website;
• Credit-account applicants, guarantors and authorised account users;
• Job applicants and other business contacts, where applicable.

This policy applies whether you interact with us through our website, email, telephone, social media, a credit application, an order or another business communication.

Information we collect

Depending on your relationship with us, we may collect:

We do not normally receive or store your complete payment-card details. Card payments are handled through authorised payment-service providers, subject to their own security and privacy arrangements.

Where your information comes from

We may obtain personal information:

• Directly from you when you contact us, order, register or apply for credit;
• From your employer, clinic, business partner or authorised colleague;
• From our website, ecommerce platform, cookies and similar technologies;
• From payment providers, couriers and other order-service providers;
• From manufacturers or suppliers dealing with a warranty or safety matter;
• From public sources such as Companies House and professional directories;
• From credit-reference, identity-verification and fraud-prevention services;
• From marketing, review, customer-support and communications platforms.

Where we receive information indirectly, we will provide appropriate privacy information within the period required by law unless an exemption applies.

How and why we use personal information

UK data protection law requires us to have a lawful basis for each use of personal information. The basis depends on the circumstances.

Legitimate interests

Where we rely on legitimate interests, we consider the purpose, necessity and potential effect on the individual. We will not rely on this basis where the individual’s rights and interests override ours.

Consent

Where we rely on consent, you may withdraw it at any time. Withdrawal will not affect processing that took place lawfully before consent was withdrawn.

If information is not provided

Where information is required to create an account, complete an order, assess credit, comply with law or resolve a safety concern, we may be unable to provide the requested service if that information is not supplied.

Direct marketing

We may send relevant business marketing to contacts at companies and other corporate bodies where permitted by law and where our legitimate interests are not overridden by the individual’s rights.

Sole traders and certain partnerships are treated differently under electronic marketing rules. Where those rules require it, we will obtain consent or rely only on an applicable existing-customer exemption.

Every electronic marketing message will provide a simple way to unsubscribe. You may also object at any time by contacting hello@precisiondermal.co.uk.

Your right to object to the use of your personal information for direct marketing is absolute. After an opt-out, we may retain a minimal suppression record so that we can respect your preference.

Cookies and similar technologies

Our website uses cookies and similar technologies. These may include:

• Strictly necessary cookies needed for security, checkout, baskets and core website functions;
• Functional cookies that remember choices and improve website features;
• Analytics cookies that help us understand website performance and usage;
• Advertising cookies used to measure or personalise marketing where enabled.

Strictly necessary technologies do not require consent. Where consent is legally required, non-essential technologies should not be activated until you have made a choice through our cookie-consent tool.

You can accept, reject or change non-essential cookie choices through the cookie-preference control displayed on our website. Browser controls may also remove or block cookies, although this can affect website operation.

Who we share information with

We disclose personal information only where reasonably necessary and permitted by law. Recipients may include:

• Ecommerce, website-hosting and IT-service providers;
• Payment, banking, invoice-finance and fraud-prevention providers;
• Warehouses, couriers and delivery-service providers;
• Manufacturers and suppliers handling fulfilment, warranties or safety matters;
• Email, CRM, review, chat and customer-support platforms;
• Analytics and advertising providers where the required consent has been obtained;
• Credit-reference, identity-verification and debt-recovery providers;
• Accountants, auditors, lawyers, insurers and other professional advisers;
• Companies within our corporate group where necessary and lawfully permitted;
• Regulators, courts, law enforcement, tax authorities and other public bodies;
• A prospective purchaser, investor or successor in connection with a business transaction.

Service providers acting for us must only use information in accordance with our instructions, applicable contractual safeguards and data protection law. Some recipients, such as payment providers, financial institutions or authorities, may act as independent controllers for their own legal purposes.

We do not sell personal information as a standalone commercial product.

International transfers

Some service providers may process personal information outside the United Kingdom. Where a transfer is restricted under UK data protection law, we use an approved safeguard, such as:

• A UK adequacy regulation covering the destination;
• The UK International Data Transfer Agreement;
• The UK Addendum to approved standard contractual clauses; or
• Another legally recognised transfer mechanism.

Where required, we assess the destination, recipient and safeguards and adopt supplementary protections appropriate to the risk.

You may contact us for further information about the safeguards relevant to your personal information. Some contractual information may be redacted to protect confidential or commercially sensitive material.

Security and data breaches

We use proportionate organisational and technical measures designed to protect personal information against accidental or unlawful loss, misuse, alteration, disclosure or access.

Measures may include:

• Access controls and account authentication;
• Encryption in transit and appropriate platform security;
• Restricted staff and service-provider access;
• Backups, monitoring and security updates;
• Confidentiality and data-processing agreements;
• Procedures for managing suspected personal-data breaches.

No internet service can be guaranteed completely secure. If a breach creates a legally reportable risk, we will notify the Information Commissioner’s Office and affected individuals within the periods required by law.

How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, product-safety, regulatory and dispute-resolution requirements.

At the end of the applicable period, information is deleted, securely destroyed or anonymised unless continued retention is legally required.

Your data protection rights

Depending on the circumstances, you may have the right to:

• Access your personal information and receive a copy;
• Correct inaccurate or incomplete information;
• Erase information where there is no lawful reason to retain it;
• Restrict how information is used in certain circumstances;
• Object to processing based on legitimate interests;
• Object absolutely to direct marketing;
• Receive or transfer eligible information in a portable format;
• Withdraw consent where processing relies on consent;
• Challenge certain automated decisions with significant effects;
• Complain to us or the Information Commissioner’s Office.

These rights are not all absolute. A legal exemption may apply, for example where information must be retained for tax, product-safety or legal-claim purposes.

To exercise a right, email hello@precisiondermal.co.uk. Please use the subject line Data Protection Request.

We may request proportionate evidence of identity or authority before disclosing information. We normally respond within one calendar month. If a request is complex or multiple requests are made, the law may permit an extension, in which case we will explain the reason and expected timescale.

There is normally no fee. We may charge a reasonable fee or refuse to act where a request is manifestly unfounded or excessive, as permitted by law.

Automated decision-making

We do not ordinarily make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.

Automated tools may assist with fraud screening, payment checks, security or account administration. Where a solely automated significant decision is made, we will provide the information and safeguards required by law, including any applicable right to human review and to challenge the decision.

Children

Our website, professional products and services are intended for businesses and adults aged 18 or over. We do not knowingly market to or seek to collect personal information from children.

If you believe a child has provided information to us, please contact us so that we can investigate and take appropriate action.

External websites and services

Our website may contain links to websites, platforms or services operated by other organisations. Those organisations are responsible for their own privacy practices. We recommend reviewing their privacy information before providing personal information.

Changes to this policy

We may update this policy to reflect changes to our operations, service providers, technology or legal obligations. The latest version will be published on this page and identified by the “Last updated” date.

Where a change materially affects how we use personal information, we will take reasonable steps to provide additional notice where required.