Privacy Policy

1. Who we are

IRX Medical ("we", "us", "our") is a UK-based distributor of clinical radiation protection equipment. Our registered trading address is available on request. We are the data controller for personal data collected through this website (irxmed.co.uk).

If you have any questions about this policy or how we handle your data, please contact us at info@irxmed.co.uk.

2. What data we collect and why

We collect personal data in the following circumstances:

a) Enquiries and contact forms — When you submit an enquiry, request a quote, or contact us, we collect your name, email address, telephone number, organisation name, and the content of your message. Legal basis: legitimate interests (Article 6(1)(f) UK GDPR).

b) Account registration — If you create an account, we collect your name, email address, password (stored as a secure hash), organisation name, and sector. Legal basis: performance of a contract (Article 6(1)(b) UK GDPR).

c) Orders and payments — When you place an order, we collect your name, email address, billing and delivery address, and order details. Payment card data is processed directly by Stripe and is never stored on our servers. Legal basis: performance of a contract (Article 6(1)(b) UK GDPR).

d) Prescription and clinical information — If you request prescription lead glasses, you may provide optical prescription data. This constitutes health data under UK GDPR and is processed solely to fulfil your order with your explicit consent (Article 9(2)(a) UK GDPR).

e) Website analytics — We may collect anonymised usage data to understand how visitors use our site. Legal basis: legitimate interests (Article 6(1)(f) UK GDPR).

3. How we store and protect your data

Your data is stored on secure servers located within the United Kingdom or the European Economic Area. We implement appropriate technical and organisational measures including encrypted data transmission (TLS), hashed password storage, and access controls.

Retention periods: Enquiry and contact data — up to 2 years from last contact. Account data — duration of account plus 12 months after closure. Order and transaction records — 7 years (UK tax obligations). Prescription data — up to 2 years from order fulfilment.

4. Who we share your data with

We do not sell or rent your personal data. We may share it with: Stripe Inc. for payment processing (PCI DSS Level 1 certified); email delivery providers for transactional emails; glazing and fulfilment partners where prescription glazing is required; and legal or regulatory authorities where required by law.

All third-party processors are bound by data processing agreements and are required to handle your data in accordance with UK GDPR.

5. Cookies

Our website uses strictly necessary cookies required for the website to operate (e.g. session management, shopping cart). These cannot be disabled.

We may also use analytics cookies to understand how visitors interact with the site. These are only set with your consent. You can manage your cookie preferences via the cookie consent banner or your browser settings.

6. Your rights under UK GDPR

You have the right to: access a copy of your personal data; rectification of inaccurate data; erasure where there is no lawful reason to continue processing; restriction of processing in certain circumstances; data portability where processing is based on consent or contract; object to processing based on legitimate interests; and withdraw consent at any time.

To exercise any of these rights, please contact us at info@irxmed.co.uk. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. International transfers

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or adequacy decisions. Our primary service providers are based in the UK or EEA, or operate under equivalent protections.

8. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects when it was last revised. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

9. Contact us

For any privacy-related queries, to exercise your rights, or to raise a concern, please contact IRX Medical at info@irxmed.co.uk or visit irxmed.co.uk.