Privacy Notice

This Privacy Notice sets out the data processing practices of AYMES International. Any data we may capture is used in accordance with the UK GDPR and Data Protection Act 2018.

AYMES is a company that produces and sells Oral Nutritional Supplements (ONS) to the NHS. ONS are an effective and non-invasive solution to tackling malnutrition.

AYMES International is the controller and our Data Protection Officer is Rodrigo Teixeira. If you have any requests concerning your personal data or any queries with regard to how we handle your data you can contact the DPO by phone on +44 (0) 800 678 5145, email rteixeira@aymes.com or write to us at Rodrigo Teixeira, AYMES International, Unit B, Sunnyhills Road, Leek, England, ST13 5RJ

Purpose of processing your personal data

The lawful bases we rely on are:

Contract – processing is necessary for us to administer the pre-contract and contractual relationship between ourselves and our suppliers/customers/potential employees in connection with the performance of a contract. 

Legitimate interests – processing is necessary to allow us to provide service and product updates, to which you are able to opt out of at any time.

Marketing

We would like to use your personal data from time to time to provide you with information about the products and services likely to be of interest to you. No personal data will be passed to any third parties for marketing purposes.

We may from time to time obtain information from third parties for those who have agreed to receive information relevant to them in their professional capacity. 

If at any point you would like to opt-out of receiving communications, you can unsubscribe using the links provided on all of our electronic marketing communication. Alternatively, if you would like to change the channels (such as email or post) that we use to contact you, please contact Rodrigo Teixeira, AYMES International, PO Box 853, Haywards Heath, RH16 9PL, or by phone on +44 (0) 800 678 5145, or email rteixeira@aymes.com

Recipients/categories of recipients

In carrying out our business including our obligations to you, we may use sub-contractors. These will be mailing houses, delivery companies, software service companies, market researchers and email broadcasters. We will ensure that they respect your privacy and abide by all data protection laws.

Retention periods

We will keep your personal data in connection with the services/products you have used/ordered for 2 years after the last order.

In terms of personal data we use for marketing, we will keep this data for 1 year or until you choose to opt-out of marketing communications, whichever is soonest. In some cases, we may keep your contact details only to ensure that we do not contact you again for marketing purposes.

Certain patient data is kept for up to 6 months for batch traceability purposes. The data retained includes patient initials, house number and postcode.

Data subject’s rights

You have rights in respect of your personal data. We will need to confirm your identity before we can consider your request to review the data we hold on you. If you wish to exercise any of these rights, we will require passport, driving licence or utility bill details.

The right to be informed -you have the right to be told about the collection and use of the personal data you provide. This privacy notice sets out the purpose for which we process your personal data, how long we will keep your data and who we will share your data with. If you have any questions on how and why we process your data, please contact the DPO.

Right of access — you have the right to know whether we are processing your personal data, and to request a copy of that data. We may request further information to enable us to locate your data. We will respond to your request within 28 days of receipt of your request. If you want to exercise this right, please contact the DPO at the contact details above.

Right to rectification — you have the right to have any incorrect personal data corrected or completed if it is incomplete. You can make this request verbally or in writing. We will need as much information as possible to enable us to locate your data. We will look at any request and inform you of our decision within 28 days of receiving the request. If you want to exercise this right, please contact the DPO at the contact details above.

Right to erasure — This right, often referred to as the right to be forgotten allows you to ask us to erase personal data where there is no valid reason for us to keep it. We will look at any request and inform you of our decision within 28 days of receiving the request. If you want to exercise this right, please contact the DPO at the contact details above.

Right to restrict processing — you have the right to ask us to restrict processing of your data. We will look at any request and inform you of our decision within 28 days of receiving the request. If you want to exercise this right, please contact the DPO at the contact details above.

Right to data portability — you have the right to move, copy or transfer your personal data from one IT environment to another. This right applies to data that you have provided to us and that we are processing on the legal basis of consent or in the performance of a contract and that processing is by automated means. We will respond to your request within 28 days of receipt of your request. If you want to exercise this right, please contact the DPO at the contact details above.

Right to object — you have the right to object to our processing of your personal data based on (i) legitimate interests, or for the performance of a task in the public interests/exercise of official authority (including profiling); (ii) direct marketing (including profiling).

Legitimate interests — your objection should be based on your particular situation. We can continue to process the data if we can demonstrate compelling legitimate grounds which override your interests.

Direct marketing — you have an absolute right to ask us to stop processing for the purposes of direct marketing. We will action your request as soon as possible.

If you want to exercise this right, please contact the DPO at the contact details above.

The right to lodge a complaint to the supervisory authority

If you are unhappy with any aspect of our handling of your data, you can make a complaint to the Information Commissioner’s Office - https://ico.org.uk/concerns/

Statutory/contractual requirement to provide personal data.

The personal data that you provide to us is necessary for us to carry out the contract you have entered into with us or for us to perform our obligations under Statute.

The right to lodge a complaint to the supervisory authority

If you are unhappy with any aspect of our handling of your data you can make a complaint to the Information Commissioner’s Office - https://ico.org.uk/concerns/

Third party websites

Our website may contain links to other websites that are outside our control and are not covered by this Privacy Notice. If you access other sites using the links provided, the operators of these sites may collect information from you that will be used by them in accordance with their privacy policy, which may differ from ours.

Changes to the privacy policy

This privacy policy is regularly reviewed and will be updated when necessary. This policy was last reviewed July 2021.