Your privacy matters to us.
Viveca Biomed Limited is committed to protecting your personal data and handling it with respect. This Privacy Policy explains what information we collect, why we collect it, how we use it, and what your rights are. We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Viveca Biomed Limited is a company registered in England and Wales (company number 10707038). We design and supply the Contrelle Activgard product range.
| Registered address | Unit 1 & 2, Wansbeck Network Centre, Wansbeck Business Park, Rotary Parkway, Ashington, NE63 8QU |
| Websites | www.vivecabiomed.co.uk | www.contrelle.com |
| Contact | info@contrelle.com |
For all data protection queries including subject access requests,— please use the contact details above. We will respond within one calendar month.
2. What This Policy Covers
This Privacy Policy applies to your use of our websites (www.vivecabiomed.co.uk and www.contrelle.com), our emails, and any associated pages or communications. It does not apply to third-party websites linked from our site – we recommend you read their privacy policies before providing any personal data to them.
3. What Data We Collect and How
We may collect and hold the following personal data:
| Category | Examples | How collected |
| Identity | Name, title, date of birth | Provided by you when ordering or registering |
| Contact | Email, address, telephone number | Provided by you when ordering, contacting us or signing up to our newsletter |
| Financial | Debit/credit card details, billing address | Provided by you at checkout (processed via Stripe see Section 7) |
| Health (special category) | Health information relevant to product use | Provided by you voluntarily; only collected where necessary for product or service |
| Technical/Traffic | IP address, browser type, operating system, referrer URL | Collected automatically when you visit our website |
| Profile/Usage | Purchase history, preferences, account details, search queries | Collected through your use of our site and account |
| Communications | Enquiries, survey responses, testimonials, competition entries | Provided by you directly |
We do not collect personal data surreptitiously. Where you choose not to provide information we request, we may be unable to provide our products or services or respond to your enquiry.
If you are aged 13 or under, you must obtain a parent or guardian’s consent before providing personal data to us.
4. Our Lawful Basis for Processing
UK GDPR requires us to have a lawful basis for processing your personal data. Depending on the purpose, we rely on:
| Lawful Basis | When we rely on it | What this means for you |
| Contract performance | Fulfilling your order; managing your account | Processing is necessary to deliver the products or services you have requested |
| Legal obligation | Complying with tax, regulatory or legal requirements | We are required by law to process your data in certain circumstances |
| Legitimate interests | Fraud prevention; improving our services; direct marketing to existing customers under the PECR soft opt-in (Regulation 22); retargeted advertising | We balance our business interests against your rights — you may object at any time |
| Consent | Direct marketing to new contacts (where soft opt-in does not apply); use of non-essential cookies; processing health data | You have given us clear, specific consent — you may withdraw it at any time by emailing info@vivecabiomed.co.uk |
Where we process special category data (health information), we rely on your explicit consent or another condition permitted under Schedule 1 of the Data Protection Act 2018.
5. How We Use Your Personal Data
We use your personal data only for the purpose(s) for which it was collected. We will inform you and explain the legal basis if we ever need to use it for a materially different purpose. Our uses include:
- Processing and fulfilling orders for Contrelle products
- Managing your account and providing customer services
- Sending you order confirmations, dispatch updates and important notices
- Processing payments securely via Stripe
- Sending marketing communications (product news, offers, events) by email, post or other means – to existing customers on the basis of the PECR soft opt-in (Regulation 22), where you were given a clear opportunity to opt out at the point of purchase; or to new contacts where you have given explicit consent
- Retargeting advertising on third-party platforms (e.g. Facebook, Instagram, Pinterest) using cookies and ad tags – subject to your cookie consent
- Personalising and improving your experience on our website
- Conducting credit and fraud prevention checks where you apply for an instalment payment option
- Carrying out customer satisfaction surveys and market research
- Internal auditing, data analysis and product development
- Complying with our legal and regulatory obligations as a manufacturer of a Class IIa medical device
- Displaying testimonials and reviews you provide (first name only, with your consent)
You may opt out of marketing communications at any time by clicking the unsubscribe link in any email or by contacting us at info@contrelle.com.
You may also register with the Telephone Preference Service (TPS), the Corporate Telephone Preference Service (CTPS) or the Mailing Preference Service (MPS) to limit unsolicited marketing communications generally.
6. How Long We Keep Your Data
We will not keep your personal data for longer than is necessary for the purpose for which it was collected. We maintain an internal data retention schedule setting out indicative retention periods by data type. You may request a copy by contacting us at info@vivecabiomed.co.uk.
As a general guide:
| Type of data | Indicative retention period |
| Order and transaction records | 7 years (statutory accounting requirements) |
| Customer account data | Duration of account + 3 years after closure |
| Marketing preferences / consent records | Duration of relationship + 3 years |
| Product complaint / medical device vigilance records | 10 years (regulatory requirement) |
| Technical / traffic data | Up to 26 months (analytics purposes) |
| Health information | As required for product or service + statutory minimum |
We will delete your data sooner if: (a) it is no longer required for the purpose collected; (b) we are no longer lawfully entitled to process it; or (c) you ask us to delete it and no overriding legal obligation requires us to retain it.
7. Who We Share Your Data With
We do not sell, rent or share your personal data with third parties for their own marketing purposes. We may share your data with trusted third parties in the following circumstances:
| Recipient | Purpose | Location |
| Stripe Payments | Secure payment processing | UK / EEA / USA (under IDTA safeguards) |
| Delivery and logistics partners | Order fulfilment and dispatch | UK |
| IT and website service providers | Website hosting, analytics, CRM | UK / EEA |
| Credit reference / fraud prevention agencies | Easy Pay instalment option applicants only | UK |
| Advertising platforms (e.g. Google, Meta) | Targeted and retargeted advertising (consent-based) | USA (under IDTA safeguards) |
| Legal and regulatory authorities | Where required by law, court order or regulatory obligation | As required |
| Successor business / acquirer | In the event of a merger, acquisition or sale of assets | As applicable |
For details of how Stripe handles your payment data, please see: https://stripe.com/gb/privacy
All third-party processors are contractually required to handle your data securely and only for the purposes we specify.
8. International Data Transfers
Where we transfer your personal data outside the United Kingdom, we ensure appropriate safeguards are in place in accordance with UK GDPR. These may include:
- Transfers to countries that benefit from UK adequacy regulations;
- Use of the International Data Transfer Agreement (IDTA) approved by the UK Information Commissioner’s Office; or
- Other lawful transfer mechanisms as approved by the ICO.
If you would like further information about the specific safeguards in place, please contact us.
9. How We Protect Your Data
We take the security of your personal data seriously. Our measures include:
- Secure servers with access controls to prevent unauthorised use or disclosure
- Limiting access to personal data to employees, agents and contractors with a legitimate need to know, subject to confidentiality obligations
- Documented procedures for identifying and responding to data breaches, including notifying you and/or the ICO where we are legally required to do so
- Use of SSL/TLS encryption for data transmitted via our website
No electronic security system is entirely immune to risk. We cannot guarantee the complete security of our systems, but we will always act promptly to investigate and address any breach.
10. Cookies and Tracking Technologies
Our website uses cookies and similar technologies (such as pixel tags and mobile identifiers). We use these to make our website work, understand how it is used, and deliver relevant advertising.
| Category | Purpose | Consent required? |
| Strictly necessary | Core website functionality (e.g. session management) | No – these cannot be disabled without breaking the site |
| Analytics / performance | Understanding how visitors use our site (e.g. Google Analytics) | Yes – only set with your prior consent |
| Targeting / marketing | Delivering relevant advertising on our site and third-party platforms | Yes – only set with your prior consent |
We only set non-essential cookies where you have given prior, informed consent through our cookie consent tool. You can manage or withdraw your consent at any time via the cookie settings link in the footer of our website.
Please note that third-party providers (such as Google and Meta) may also place cookies via our site. We do not control those cookies directly — please refer to those providers’ own privacy policies.
To opt out of Google Analytics tracking across all websites, visit: https://tools.google.com/dlpage/gaoptout
For more information about cookies generally, visit: www.aboutcookies.org
11. Your Rights
Under UK data protection law, you have the following rights. We will work to uphold them and will respond to any request within one calendar month (or up to three months for complex requests, in which case we will explain why).
| Your right | What it means |
| Right to be informed | To know what data we hold and how we use it — this policy provides that information |
| Right of access (SAR) | To request a copy of the personal data we hold about you, free of charge in most cases |
| Right to rectification | To have inaccurate or incomplete data corrected |
| Right to erasure | To ask us to delete your data where there is no overriding reason for us to retain it |
| Right to restrict processing | To ask us to pause processing of your data in certain circumstances |
| Right to object | To object to processing based on legitimate interests or for direct marketing purposes |
| Right to data portability | To receive a copy of data you provided to us in a machine-readable format, where processing is automated and based on consent or contract |
| Right to withdraw consent | To withdraw consent at any time where we rely on consent as our lawful basis — this does not affect the lawfulness of prior processing |
To exercise any of these rights, please contact us at info@vivecabiomed.co.uk or write to us at our registered address. We do not charge for subject access requests unless they are manifestly unfounded or excessive.
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):
| ICO website | https://ico.org.uk/ |
| ICO helpline | 0303 123 1113 |
12. Withholding Information
You may access parts of our website without providing personal data. However, to place orders, create an account, or use certain features of our site, you may be required to provide specific information.
You may restrict our use of cookies at any time via the cookie settings tool in the footer of our website, or through your browser settings. Blocking all cookies may affect the functionality of our site.
13. External Websites
Our website contains links to third-party websites. We have no control over those sites and accept no responsibility for their content or privacy practices. This Privacy Policy does not apply to any third-party website. We recommend you review the privacy policy of any website before providing personal data.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in the law, our business practices or the services we provide. Any changes will be posted on this page with an updated review date. We recommend you check this page periodically. Where changes are material, we will notify you directly where we are able to do so.
This Privacy Policy was last reviewed in March 2026.
15. How to Contact Us
For any questions about this Privacy Policy, to exercise your data protection rights, or to make a subject access request, please contact us:
| info@contrelle.com |
| Post | Viveca Biomed Limited, Unit 2, Wansbeck Network Centre, Wansbeck Business Park, Rotary Parkway, Ashington, NE63 8QU |
We will acknowledge your request within 5 working days and respond in full within one calendar month.
