Privacy Policy

Last updated: May 2025 | MedFriend Ltd (trading as HESKM)

    Summary: We collect only the personal data we need to run our service and respond to your enquiries. We do not sell your data. We comply with the UK GDPR and the Data Protection Act 2018.
  

1. Who we are

This website is operated by MedFriend Ltd, a company incorporated in England and Wales (the "Company", "we", "us", "our"). HESKM is a procurement intelligence platform developed by MedFriend Ltd.

For data protection purposes, MedFriend Ltd is the data controller of personal data collected through this website.

2. What data we collect and why

a) Enquiry and demo request data

When you complete our "Request a demo" form, we collect:

Your name and work email address
Your company name
Any information you choose to share about your project

Lawful basis: Legitimate interests (responding to a business enquiry you initiated) and, where you have ticked the consent checkbox, your explicit consent.

b) Communications data

If you email us directly, we will process your email address and the content of your message in order to respond to you.

Lawful basis: Legitimate interests.

c) Website usage data (analytics)

If you accept optional analytics cookies, we may collect anonymised information about how you navigate the website (pages visited, time on site, referrer). We use this data solely to improve the website. We do not use advertising cookies or share this data with third parties for marketing.

Lawful basis: Consent (via our cookie banner).

3. How long we keep your data

Enquiry data: up to 24 months from last contact, unless you ask us to delete it sooner.
Email communications: up to 24 months.
Analytics data: as configured in our analytics tool (typically 14 months).

4. Who we share your data with

We do not sell your personal data. We may share it with:

Service providers who help us operate the website and business (e.g. email hosting, CRM), under data processing agreements.
Legal or regulatory authorities where required by law.

All processors are either based in the UK/EEA or operate under appropriate transfer safeguards (e.g. UK Adequacy Regulations or Standard Contractual Clauses).

5. Your rights under UK GDPR

You have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data ("right to be forgotten")
Restrict or object to processing
Data portability (where processing is based on consent or contract)
Withdraw consent at any time (this does not affect prior lawful processing)

To exercise any of these rights, email us at sales@medfriend.health. We will respond within one calendar month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

6. Cookies

We use cookies as described in our Cookie Policy. You can manage your preferences at any time via the cookie banner at the bottom of this page.

7. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will always reflect the most recent version. Continued use of the website after changes constitutes acceptance of the updated policy.

8. Contact

MedFriend Ltd
Email: sales@medfriend.health
Website: www.medfriend.health