Privacy Policy

1. Who we are

VHI Global Health (company number 14358896), registered at 71–75 Shelton Street, Covent Garden, WC2H 9JQ, London, United Kingdom, is the data controller for personal data processed through this website. This notice explains how we collect and use personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

2. Personal data we collect

• Enquiry data — the name, organisation, job role, email address, phone number and project details you choose to send us by email.
• Technical data — IP address, browser and device type, operating system and referring pages, collected through server logs and cookies.
• Usage data — pages visited and time spent on the site, where you have consented to analytics cookies.

We do not seek to collect special category data (including health data) through this website, and we ask that you do not send us patient-identifiable clinical information by email.

3. Lawful bases for processing

• Legitimate interests — responding to business enquiries, managing supplier and client relationships, and keeping our website secure.
• Consent — non-essential cookies and any marketing communications you opt into. You may withdraw consent at any time.
• Contract — where processing is necessary to negotiate or perform a contract with you or your organisation.
• Legal obligation — where we must retain records for tax, regulatory or medical device compliance purposes.

4. How we use personal data

We use personal data to respond to enquiries and prepare proposals, to administer and protect the website, to comply with our legal and regulatory obligations, and — with your consent — to understand how the website is used so we can improve it.

5. Sharing your data

We share personal data only where necessary with: our IT, hosting, email and analytics service providers acting as processors under contract; manufacturing and delivery partners where required to scope or fulfil a project; and professional advisers, regulators or law enforcement where we are legally required to do so. We do not sell personal data.

6. International transfers

As we operate across the UK, Europe, the Middle East and Africa, personal data may be transferred outside the UK. Where it is, we rely on UK adequacy regulations or appropriate safeguards such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with a transfer risk assessment.

7. Retention

We keep enquiry correspondence for up to 24 months after our last contact unless a contractual or regulatory relationship requires longer. Contract and financial records are retained for at least six years. Cookie and analytics data are retained for the periods set out in our Cookie Policy.

8. Security

We maintain technical and organisational measures appropriate to the risk, informed by our ISO 27001-aligned information security management framework, including access control, encryption in transit and staff confidentiality obligations.

9. Your rights

Under the UK GDPR you have the right to be informed, and to request access, rectification, erasure, restriction, portability, and to object to processing based on legitimate interests or used for direct marketing. Where processing relies on consent, you may withdraw it at any time. To exercise a right, email info@vhiglobalhealth.com. We respond within one month.

You may also complain to the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF — ico.org.uk. We would appreciate the chance to address your concerns first.

10. Changes to this notice

We review this notice regularly and will publish any updates on this page with a revised "last updated" date.