Privacy Policy

Chelmer Surgical Supply Ltd Privacy Policy

1. Introduction
Chelmer Surgical Supply Ltd (“CSS Ltd”, “we”, “our”, or “us”) respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy outlines how we collect, use, disclose, and protect your information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Policy applies to personal data collected through our website, business operations, and communications with customers, suppliers, and stakeholders.

2. Who We Are
Chelmer Surgical Supply Ltd
Unit 2, Park Farm Industries
Witham Road, Black Notley
Braintree, Essex, CM77 8JX
United Kingdom
Tel: 01376 550280
Email: chelmer@talk21.com
CSS Ltd is registered with the Information Commissioner’s Office (ICO) as a data controller.

3. What Data We Collect
We may collect and process the following types of personal data:
•    Identification and contact details: name, company, email address, telephone number
•    Enquiry data: correspondence submitted via our contact forms, emails, or calls
•    Business relationship data: contractual or supplier information related to our regulatory and commercial operations
•    Website usage data: IP address, browser type, operating system, and pages visited (collected through cookies; see Section 9)
We do not knowingly collect special category (sensitive) personal data or data from individuals under 18 years of age.

4. How We Use Your Data
We process personal data only where necessary and in accordance with lawful bases under UK GDPR:
Purpose    Lawful Basis
Responding to website and product enquiries    Legitimate interest
Providing you with goods and services (e.g. processing your order, delivery, invoicing)    Contract performance
Managing business relationships with customers, NHS procurement teams, and suppliers    Contract performance
Maintaining compliance with medical device regulations (e.g. complaint handling, PMS)    Legal obligation
Managing our website and IT security    Legitimate interest
Record-keeping for audits and certification (UKCA)    Legal obligation / Contract

5. Data Sharing and Disclosure
We do not sell your personal data. We may share data with:
•    Regulatory bodies (e.g. MHRA) for compliance purposes
•    Professional advisers (e.g. legal, IT, or audit support)
•    Service providers and subcontractors under contract (e.g. sterilisation, packaging)
We use trusted third-party service providers to support our business operations. For example, we use software to generate and send customer invoices. These providers may process personal data such as name, contact details, and invoice history solely for the purposes of service delivery to CSS Ltd.
All such processors are bound by contract to only process your data in accordance with our instructions and UK GDPR requirements. Our supplier is ISO 27001 certified, complies with UK data protection law, and stores data securely in encrypted environments.

6. International Transfers
CSS Ltd does not transfer personal data outside of the UK. Where external processing is required (e.g. secure hosting providers), we ensure appropriate safeguards are in place (e.g. standard contractual clauses).

7. Data Security
We take the security of your personal information seriously. Chelmer Surgical Supply Ltd implements appropriate technical, administrative, and physical safeguards to protect your data from loss, theft, unauthorised access, disclosure, alteration, or destruction. These measures include controlled system access, secure backups, and encrypted communications where appropriate.
We regularly review our data handling and storage practices to ensure they remain appropriate to the level of risk and the sensitivity of the data we hold.

8. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, regulatory, or audit requirements (e.g. 10 years for medical device traceability under UK MDR 2002).


9. Your Rights
Under UK GDPR, you have rights including to:
•    Access your data
•    Request correction or erasure
•    Object to or restrict processing
•    Data portability
•    Withdraw consent where processing is based on consent
•    Lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk
To exercise your rights, contact: chelmer@talk21.com

10. Cookies and Website Analytics
Our website may use cookies or similar technologies for essential functionality and usage statistics. By using our site, you consent to the use of these cookies. You can manage cookie preferences in your browser settings.

11. Changes to this Policy
This policy is reviewed and updated when necessary.


Last reviewed: 9 October 2025.
We reserve the right to amend this Privacy Policy at our sole discretion and without prior notice. Any changes will be posted on this page with the updated effective date. Your continued use of our services or website following the posting of changes constitutes your acceptance of those changes.