How we use your information: for administrative and business purposes (particularly to contact you and process orders you place on our website), to improve our business and website, to fulfil our contractual obligations, to advertise our goods and services, to analyse your use of our website, and in connection with our legal rights and obligations.

​

Do we sell your information to third parties (other than in the course of a business sale or purchase or similar event): No.

​

 How long we retain your information: for no longer than necessary, taking into account any legal obligations we have (e.g. to maintain records for tax purposes), any other legal basis we have for using your information (e.g. your consent, performance of a contract with you or our legitimate interests as a business). For specific retention periods in relation to certain information which we collect from you, please see the main section below entitled Criteria for determining retention periods.

​

How we secure your information: using appropriate technical and organisational measures such as storing your information on secure servers, encrypting transfers of data to or from our servers using Secure Sockets Layer (SSL) technology, encrypting payments you make on or via our website using Secure Sockets Layer (SSL) technology, only granting access to your information where necessary and by only trusted individuals that have been trained and briefed on appropriate handling of personal information. We take appropriate technical and organisational measures to secure your information and to protect it against unauthorised or unlawful use and accidental loss or destruction, including:

• only sharing and providing access to your information to the minimum extent necessary, subject to confidentiality restrictions where appropriate, and on an anonymised basis wherever possible;

• using secure servers to store your information;

• verifying the identity of any individual who requests access to information prior to granting them access to information;

• using Secure Sockets Layer (SSL) software to encrypt any information you submit to us via any forms on our website and any payment transactions you make on or via our website;

• only transferring your information via closed system or encrypted data transfers

​

Criteria for determining retention periods:

In any other circumstances, we will retain your information for no longer than necessary, taking into account the following:

• the purpose(s) and use of your information both now and in the future (such as whether it is necessary to continue to store that information in order to continue to perform our obligations under a contract with you or to contact you in the future);

• whether we have any legal obligation to continue to process your information (such as any record-keeping obligations imposed by relevant law or regulation);

• whether we have any legal basis to continue to process your information (such as your consent);

• how valuable your information is (both now and in the future);

• any relevant agreed industry practices on how long information should be retained;

• the levels of risk, cost and liability involved with us continuing to hold the information;

• how hard it is to ensure that the information can be kept up to date and accurate; and

• any relevant surrounding circumstances (such as the nature and status of our relationship with you).

​

Your rights in relation to your information

Subject to certain limitations on certain rights, you have the following rights in relation to your information, which you can exercise by sending an email to medloungeofficial@gmail.com

• to request access to your information and information related to our use and processing of your information;

• to request the correction or deletion of your information;

• to request that we restrict our use of your information;

• to receive information which you have provided to us in a structured, commonly used and machine-readable format (e.g. a CSV file) and the right to have that information transferred to another data controller (including a third party data controller);

• to object to the processing of your information for certain purposes (for further information, see the section below entitled Your right to object to the processing of your information for certain purposes); and

• to withdraw your consent to our use of your information at any time where we rely on your consent to use or process that information. Please note that if you withdraw your consent, this will not affect the lawfulness of our use and processing of your information on the basis of your consent before the point in time when you withdraw your consent.

​

​

​

​

​

Changes to our Privacy Policy:

We update and amend our Privacy Policy from time to time.