Last Updated: December 2025
Introduction
MSD Sales and Supplies (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website msdsalesandsupplies.com or use our services.
Please read this Privacy Policy carefully. By accessing or using our website, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our website.
Information We Collect
Personal Information
- Register on the website
- Place an order
- Subscribe to our newsletter
- Contact us via email, phone, or contact forms
- Participate in surveys or promotions
This personal information may include:
- Name
- Email address
- Telephone number
- Billing and delivery addresses
- Payment information
- Company name and VAT number (if applicable)
Automatically Collected Information
When you visit our website, we may automatically collect certain information about your device, including:
- IP address
- Browser type and version
- Operating system
- Referring website addresses
- Pages viewed and navigation patterns
- Date and time of your visit
We collect this information using cookies and similar tracking technologies.
How We Use Your Information
We use the information we collect to:
- Process and fulfil your orders
- Communicate with you about your orders, including order confirmations and delivery updates
- Provide customer support and respond to your enquiries
- Send you marketing communications (with your consent)
- Improve our website, products, and services
- Prevent fraudulent transactions and protect against security threats
- Comply with legal obligations
- Analyse website usage and trends
Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:
- Contract Performance: Processing necessary to fulfil our contract with you when you place an order
- Legitimate Interests: To improve our services, prevent fraud, and ensure website security
- Consent: For marketing communications and non-essential cookies
- Legal Obligation: To comply with applicable laws and regulations
Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device that help us:
- Remember your preferences
- Analyse website traffic and usage patterns
- Provide personalised content
- Enable certain website functionality
You can control cookie preferences through your browser settings. However, disabling cookies may affect your ability to use certain features of our website.
For more information, please see our Cookie Policy.
Sharing Your Information
Service Providers
We may share your information with trusted third-party service providers who assist us in:
- Processing payments
- Delivering orders
- Hosting our website
- Email marketing services
- Analytics and website optimisation
These service providers are contractually obligated to protect your information and use it only for the purposes we specify.
Legal Requirements
We may disclose your information if required to do so by law or in response to:
- Valid legal processes (such as court orders or subpoenas)
- Requests from law enforcement or government authorities
- Protection of our rights, property, or safety, or that of others
Business Transfers
Data Security
We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Secure Socket Layer (SSL) encryption for data transmission
- Secure servers and databases
- Regular security assessments
- Access controls and authentication procedures
- Employee training on data protection
However, no method of transmission over the internet or electronic storage is 100% secure. Whilst we strive to protect your personal information, we cannot guarantee absolute security.
Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Typically, we retain:
- Order and transaction data: 7 years (for tax and accounting purposes)
- Marketing consent records: Until consent is withdrawn
- Website analytics data: 26 months
- Customer account information: Until account deletion is requested
Your Rights Under GDPR
As a data subject in the UK/EU, you have the following rights:
- Right of Access: Request copies of your personal data
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data (subject to certain exceptions)
- Right to Restrict Processing: Request limitation of how we process your data
- Right to Data Portability: Request transfer of your data to another organisation
- Right to Object: Object to processing based on legitimate interests or for direct marketing
- Right to Withdraw Consent: Withdraw consent for processing at any time
To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month.
Marketing Communications
With your consent, we may send you marketing communications about our products, services, and special offers. You can opt out of receiving marketing emails at any time by:
- Clicking the “unsubscribe” link in any marketing email
- Contacting us directly
- Updating your preferences in your account settings
Please note that even if you opt out of marketing communications, we will still send you transactional emails related to your orders and account.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.
Children's Privacy
International Data Transfers
Your information may be transferred to and processed in countries outside the UK/EU. When we transfer your data internationally, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions by the UK/EU authorities
- Other legally approved transfer mechanisms
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:
- Posting the updated policy on our website
- Updating the “Last Updated” date at the top of this policy
- Sending you an email notification (for significant changes)
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.