Wren Laboratories Ltd, Company Registered Number: 5094520 and Medipharma Limited, Company Registered Number: 2658133. Registered office address for both: 21 & 22 Mayfield Avenue Industrial Park, Andover, Hampshire SP11 8HU, UK.

This privacy policy sets out the basis for processing any personal data we collect from you or that you provide to us. Throughout this policy we refer to ‘the Company’ and ‘we’ or ‘our’, which means Wren Laboratories Ltd and/or Medipharma Ltd.

1. We may collect data from you when:

  • you access our Website (www.optibacprobiotics.co.uk);
    you place an online order;
  • you take part in an online survey or market research exercise;
  • you subscribe to any of our services, newsletters, online promotions or competitions;
  • you email us or speak to us on the telephone to enquire about or access any of our services or place orders for our products;
  • you correspond with us via post;
  • we meet you at a fair or event and we ask you to complete a customer information form in order to access any of our products or services or take part in a customer survey or market research exercise;
  • you apply for a job with us;
  • you write a review about our products or services on our website;
  • you interact with us on social media;

Please read the following carefully to understand our practices regarding your personal data. By using our website www.optibacprobiotics.co.uk (our ‘Website’) you are accepting and consenting to the practices described in this policy.

Depending on the purpose for which you are providing your personal data, for the purpose of the General Data Protection Regulation and the Data Protection Act 2018, the data controller (or entity responsible for the data collected) will be either Wren Laboratories Ltd and/or Medipharma Ltd.

2. What data do we collect about you?

We may collect and process the following data about you:

  • Your personal contact details including your full name, postal and billing addresses, telephone number(s), title and date of birth.
  • Personal account information when you register to use our services or purchase our products, including user-names and passwords and security information.
  • Information acquired/provided through our Website www.optibacprobiotics.co.uk. This includes information provided at the time of registering to use the Website, subscribing to our services, personalising the Website with your preferences, participating in discussion boards or other social media functions, posting material or requesting further services. We may also ask you for information when you enter a competition/promotion sponsored by either Wren Laboratories Ltd or Medipharma Ltd, or when you respond to a survey and/or when you report a problem with the Website.
  • Information about your online purchases (for example, what you have bought, when and where you bought it and how you paid for it).
  • Information about your online browsing behaviour on our Website and Mobile Apps and information about when you click on one of our adverts (including those shown on other organisations’ websites).
  • Information about any devices you have used to access our services (including the make, model and operating system, IP address, browser type and mobile device identifiers).
  • If you contact us either by telephone, email or letter, we may keep a record of that correspondence or make a note of our discussion. If you send us personal information which identifies you via email, we may keep your email and email address. We may also collect information that is available from your browser.
  • We may ask you to complete optional surveys for research purposes.
  • Details of transactions you carry out through the website and of the fulfilment of your orders.
  • Details of your visits to the Website including, but not limited to, traffic data, location data, web logs and other communication data, and the resources that you access.
  • Details of your access to our online resources or other materials.
  • Your personal details, contact details, CV and details of your skills, qualifications or experience if you are applying for a job with us either via our website, by email or letter or via a recruitment agent.
    We may collect information about your computer or device, including where available your IP address, operating system and browser type, to enable us to offer technical support and detect fraud. This is statistical data about our users’ browsing actions and patterns and does not identify any individual.

3. How we may use your data

Your data will only be used for the purposes indicated when you submit the data or as detailed under this privacy policy.

We use personal information held about you in the following ways:

  • to update and enhance our records and ensure their continuing accuracy
  • to compile information relating to your use of our products and services and make recommendations about goods and services and other areas that may interest you
  • to ensure the content from the Website is presented in the most effective manner for you and your device
  • to carry out our obligations arising from any contracts entered into between you and us to provide you with the information, products and services that you request from us
  • to provide you with information about similar goods and services which may interest you. If you are an existing customer, we will only contact you by electronic means (e-mail or SMS) with information about goods and services similar to those which were the subject of a previous sale to you. If you are a new customer, we will contact you by electronic means only if you have consented to this. You can opt-in/out of such notifications by following the instructions on the relevant forms set out on this Website (or elsewhere as applicable) or at any time after providing your information
  • inviting you to participate in research studies and/or market research activities
  • we may analyse your data to create a profile of your interests and preferences so that we can contact you in the most appropriate way and with the most relevant information;
  • to respond to queries from members of the public about your membership status

4. Disclosure of your data

Wren Laboratories Ltd and Medipharma Ltd may share your data between the two companies. We will not transfer any of your data to any third parties without your permission or unless indicated in this privacy policy or agreed by you on a form on the Website.

Our employees, agents and consultants will have access to your data in order to carry out lawful processing in accordance with this Privacy Policy.

We may disclose your personal information to third parties without obtaining further consent from you including:

  • to our business partners, suppliers and subcontractors for the performance of any contract we enter into with you, for example this could include our couriers who deliver products that you have purchased
  • where we outsource any of our business functions under which we collect or store your data, in which case we will ensure that any such service provider adheres to at least the same obligations of security with regard to your data as undertaken by us
  • where we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets
  • if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our Website Terms & Conditions and other agreements; or to protect our rights, property, or safety of our employees, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

We will never sell your data to third parties.

5. Where we store your data

The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (‘EEA’). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff may be engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. By submitting your personal data to us, you agree to this transfer, storing or processing.

6. How we protect your data

We know how important it is to protect and manage your personal data. This section sets out some of the measures we have in place. We commit to putting appropriate technological and organisational measures in place to protect your data, and to reviewing these measures to ensure they remain effective.

We protect the security of your information while it is stored and being transmitted by encrypting it.

We enforce physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of personal data. We may occasionally ask for proof of identity before we share your personal data with you.

Please note that whilst we take appropriate technical and organisational measures to safeguard your personal data, we cannot guarantee the security of any personal data that you transfer over the internet before it gets to us.

The personal data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by companies operating outside the EEA who work for us or for one of our service providers. We will put in place appropriate protection to make sure your personal data remains adequately protected and is treated in line with this Policy.

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

The Website may, from time to time, contain links to and from the websites of selected third parties whose websites may contain relevant information about probiotic products, services and scientific research or information. If you follow a link to any of these websites, please note that these websites should have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

7. How long we will keep your data for

We keep different types and categories of information for different periods and according to different legal obligations and operational or administrative requirements. We will not keep any data that we do not need or that is excessive for the purpose that it was collected for. We will regularly review the data that we keep in order to ensure that it is accurate and up to date (although you will be responsible for informing us of any change to data you may have given us). For more specific information about how long we keep data for, please ask to see our Data Retention Policy.

8. Your rights

8.1 Accessing your data

You have the right to ask us to provide you with details of the personal data that we may hold about you and what processing activities we carry out on that data. This is called a ‘Subject Access Request’. You may make a Subject Access Request by writing to us, either by email or by post. If you would like to request a copy of your personal data or have any other related queries, please email us at: [email protected].

You must identify yourself and specify what information you wish to access. We may need to make additional and reasonable identity checks before we release any data. Although there is no automatic fee applicable to a request for access to the data we hold about you, we may charge a reasonable fee if, in our opinion, your request is unreasonably excessive or repetitive.

8.2 Asking us to amend your data and keeping it up to date

You have the right to contact us and ask us to amend your personal data in order to keep it accurate and up to date. We may ask you to confirm the accuracy of the personal data that we hold about you when we contact you or when you contact us. We will take reasonable steps to create an accurate record of any personal data you have submitted. However, we do not assume responsibility for confirming the ongoing accuracy of your personal data. You can update your personal data by making amendments in the ‘My Account’ section of our Website, or by emailing us at [email protected]. Please note that it may take up to 21 days for the changes to come into effect.

8.3 Asking us to erase your data

You have the right to ask us to erase some or all of the personal data that we hold about you. This may not apply in all circumstances, and we may reasonably refuse this request, for example if there is a legal obligation to retain some or all of your personal data. You may contact us at [email protected].

8.4 Restricting processing of your data

You have the right to ask us not to process your personal data for marketing or other purposes. We will always inform you (before collecting your data) if we wish to use your data for such purposes or if we intend to disclose your information to any third party for such purposes and request your consent to these activities. If you wish to change your mailing preferences or opt-out of specific marketing communications sent from the Company, you will find an ‘unsubscribe’ link on all marketing communications. If this does not work for whatever reason, or if you prefer to contact us directly you may email us at [email protected].

9. Cookies

Our Website uses cookies to distinguish you from other users. This helps us to provide you with a good experience when you browse our Website and also allows us to improve it.

A cookie is a text-only string of information that a website transfers to the cookie file of the browser on your device so that the website can remember who you are. A cookie will typically contain the name of the domain from which the cookie has come, the lifetime of the cookie and a value, usually a randomly generated unique number. Cookies can help a website to arrange content to match your preferred interests more quickly and are used by major websites. Cookies cannot be used by themselves to identify you.

Disabling/enabling cookies

You have the ability to accept or decline the cookies by modifying the settings in your browser. However, you may not be able to use all the interactive features of our site if cookies are disabled.

Cookies and Google Analytics

Our website also uses Google Analytics, a web analytics service provided by Google Inc. (‘Google’). Google Analytics uses cookies to help our Websites analyse how users use the sites. The information generated by the cookie about your use of our Websites (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will not associate your IP address with any other data held by Google.

Consenting to the use of cookies

By using our Websites, you consent to the processing of data about you by the Company and Google in the manner and for the purposes set out above.

10. Changes to our privacy policy

Any changes we may make to our privacy policy in the future will be updated and reflected here. By continuing to use our Website you will be deemed to have accepted such changes.

11. Contact

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to [email protected] or at the Registered Office address by contacting the Data Protection Officer, 21 & 22 Mayfield Avenue Industrial Park, Andover, SP11 8HU, UK.