Background 

Credenhill Ltd has been supplying compression garments, compression devices and associated products to Retail Pharmacy, Hospitals, Clinics and to the end user via Daylong Direct for more than 60 years. The Credenhill /Daylong Direct team aim to provide you with the highest quality of products and services. To do this we need to keep records about you and the products that we have provided or plan to provide to you. In accordance with the General Data Protection Regulation (GDPR) and related UK data protection legislation, we are committed to protecting the confidentiality and security of the information that you provide to us. This Privacy Notice is intended to help you understand how we collect and use your information.

Why we need and how we use your Information

We only collect, use and store your information where we have lawful grounds and legitimate business reasons to do so and such information may include:

• Basic details about you, such as name, mailing address, email address, phone contact numbers, sizing information and date of birth.
• Details of all transactions and customer care requests with Daylong Direct , including items purchased from the Daylong Direct website or by mail order.
• Where applicable records of items you have been prescribed by your doctor or another qualified prescriber and which have been supplied by the Daylong Direct Dispensing Appliance Contractor prescription service (DAC). When using this service, we will need to know whether you pay for your prescription and the reason why not which may be a medical exemption. There may be instances where we keep information about your health where these are relevant to the products that we are providing to you. The law and NHS regulations set out how we can record and use this information
• For those customers using our website and mail order service we would like to keep you updated about our relevant products and services by email, SMS or post. When we use your data for such purposes we will only do so with your consent. If you have already consented and wish us to stop using your information for this purpose or any other purpose, then please contact us.
• To process and manufacture made to measure stockings a person’s name and limb measurements are required to ensure that the correct size is produced and that the garment is easily identifiable for the specific user.
• When using our website, we may collect information such as information about your browser, which areas of our website that you visit and what links that you click on. We may use this information, after making it anonymous, to create statistics.

All the personal information that we collect about you is stored by us or by our service providers on our behalf.

Sharing Information

We do not share your data with third party suppliers except under the following circumstances:

• You ask us to do so.
• We ask and you give us specific permission.
• We are required by law, for example prescribers must be notified where a patient presents a repeat prescription and the Daylong Direct team member becomes aware of significant issues or questions arising from that prescription.
• We are permitted by law, for example, where public interest overrides the need to keep the information confidential.
• To process and manufactures the products that you have requested including made to measure compression garments.
• Daylong Direct also uses external service providers such as marketing, IT support, Accountants, lawyers, and website providers. When providing such services, these providers may have access to and or may process your personal data.
• When supplying made to measure garments it is necessary for Credenhill Ltd / Daylong Direct to share a person’s name and limb dimensions with the selected manufacturer. These suppliers are situated either within the European Economic Area (EEA), or Switzerland.
• Credenhill Ltd /Daylong Direct may transfer in compliance with applicable data protection law personal data to law enforcement agencies, government authorities, such as the NHS Business Services Authority and others in the wider NHS, external consultants or business partners. In case of a company merger or acquisition, personal data may be transferred to third parties being involved in the merger or acquisition.

Anyone who receives information from us also has a legal duty to keep this information confidential, subject to legally recognised exceptions.

Your Rights

The right to confidentialityunder the General Data Protection Regulation and (the Data Protection Act 2018) and the common-law duty confidence (confidentiality). All our team members contracts of employment contain a requirement to keep personal information confidential. We also comply with the NHS Code of Practice on Confidential Information.The right to be informedabout our data processing activities, including through Privacy Policies such as this.The right of accessto the personal information we hold about you. To request a copy of this information you must make a subject access request in writing to us. You will need to give adequate information for us to identify you and you will be required to provide evidence to confirm your identity before any information is released to you.The right of rectification.You may ask us to correct any inaccurate or incomplete data within one month.The right to erasure and to restrict processing. You have the right to have your personal data erased and to prevent processing except where we have a legal obligation to process your personal information. You should bear in mind that by exercising this right you may hinder or prevent our ability to provide products and services.The right to data portability. On your request, we will provide you with your personal data in a structured format.The right to object.You have rights in relation to automated decision making and profiling to reduce the risk that a potentially damaging decision is taken without human intervention. You can object to your personal data being used for profiling, direct marketing or research purposes. If you want to invoke any of these rights, please contact us in writing.How long we keep information about you.We will keep your information for as long as you consent, and it is required to enable us to continue to provide products and services to you. This will usually be a minimum period of seven years after the last transaction or otherwise as determined by law or regulation.

Contact Us

If you have questions or concerns regarding this privacy policy, please contact:

via Email: dpo@daylongdirect.co.uk

via Phone: 0115 932 0144

via Post/Mail:

Data Protection Officer
Credenhill/Daylong Direct (Reg. 00547046)
Heritage House
Cossall Industrial Estate
Ilkeston
Derbyshire
DE7 5UD
United Kingdom

Should we not resolve concerns to your satisfaction you have the right to lodge a complaint with the Information Commissioner’s Office, Wycliffe House, Water Lane Wilmslow Cheshire SK9 5AF.