Homecare Medical Supplies ("Homecare Medical", "we", "us", "our") respects your privacy and is committed to protecting the personal information that we collect and process. This Privacy Policy explains how Homecare Medical collects, uses, stores and protects personal data when you visit our website, use our Trade Portal, purchase products or services from us, request rental services, contact us, or otherwise interact with our business. We process personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Data Protection Act 2018. This Privacy Policy explains how we process personal data and does not form part of any contractual terms between Homecare Medical and its customers.

Homecare Medical Supplies is the data controller responsible for your personal data. As a data controller, we are responsible for deciding how and why your personal information is collected and used and for ensuring that your information is processed securely and lawfully. Privacy Contact — Email: dataprotection@homecaremedical.ie

The information we collect depends on how you interact with Homecare Medical and may include the following. Business and Contact Information: when you contact us, register for a Trade Portal account, purchase products or services, or communicate with us on behalf of an organisation, we may collect your name, job title or role, organisation or business name, business address, delivery and billing addresses, email address, telephone number, VAT registration details, company details, account information, and details of authorised users or purchasing contacts. Where you purchase from us on behalf of an organisation, we may process personal information relating to individuals within that organisation, including employees, authorised purchasers, finance contacts and delivery contacts. Trade Portal Account Information: when you create or manage a Homecare Medical Trade Portal account, we may collect account details, login information, user permissions and authorised users, account preferences, saved delivery addresses, order history, purchasing activity, and account communications. This information allows us to provide Trade Portal functionality and support business purchasing requirements. Order and Transaction Information: we may collect information relating to purchases, including products or services purchased, order details, delivery information, invoice information, and payment-related information, along with communications relating to orders, enquiries, returns or support requests. Payment card details are processed securely by our payment service providers and are not stored by Homecare Medical. Rental Service Information: where you request rental services, we may collect information relating to rental enquiries, rental agreements, delivery arrangements, installation requirements, equipment servicing, and communications relating to rental services. Website and Portal Usage Information: when you use our website or Trade Portal, we may collect technical information including your IP address, browser type, device information, website activity, security and access logs, and information collected through cookies and similar technologies.

We collect personal information when you contact us by phone, email or through our website; create or manage a Trade Portal account; place an order or request information about our products or services; request a quotation or rental service; communicate with our customer service, sales or support teams; subscribe to receive marketing communications; or visit and interact with our website or Trade Portal. We may also receive information from organisations where an individual is authorised to act on behalf of that organisation.

Homecare Medical uses personal information for purposes including creating and managing Trade Portal accounts, processing and fulfilling orders, providing rental services where requested, managing customer relationships, providing customer support, responding to enquiries and quotation requests, managing invoices and business transactions, maintaining accurate business records, improving our products, services and website experience, managing purchasing activity through the Trade Portal, maintaining the security and operation of our systems, preventing fraud, misuse or security incidents, managing product recalls, servicing or warranty support where applicable, and meeting legal and regulatory requirements. Where permitted by law, we may also use your information to provide relevant information about our products, services and updates.

Under GDPR, we process personal data using the following legal bases. Contractual Necessity: we process information where necessary to provide products and services, manage business relationships, process orders, provide rental services and fulfil agreements with our customers. Legitimate Interests: we may process information where necessary for our legitimate business interests, including managing customer relationships, providing and improving our services, managing our Trade Portal, maintaining website and system security, communicating with existing customers and business contacts, and protecting our business against fraud or misuse. Legal Obligations: we may process and retain information where required to comply with legal and regulatory obligations, including financial, tax, product safety and medical device requirements. Consent: where required, we will obtain your consent before processing personal information for specific purposes, such as certain marketing activities.

Homecare Medical supplies a wide range of healthcare products, including medical devices, consumables and equipment. Where applicable, under medical device legislation including the EU Medical Device Regulation (EU) 2017/745, we may be required to maintain records relating to the supply chain and distribution of certain medical devices. These records may include information necessary to identify suppliers and manufacturers, customers or organisations supplied with relevant products, products supplied, and transaction details. Such information will be retained for the period required by applicable legislation.

We may share personal information with trusted third parties where necessary to provide our services or meet legal obligations. These third parties may include delivery and logistics providers, payment providers where applicable, manufacturers and suppliers where required for product support, servicing, warranty claims, recalls or regulatory obligations, technology and software providers supporting our business systems, website and Trade Portal service providers, professional advisers, and regulatory authorities or government bodies where required by law. Some service providers may process personal data on our behalf under appropriate agreements and safeguards. We only share personal information where necessary and take appropriate steps to ensure that your information remains protected. We do not sell personal information to third parties.

Some of our service providers may process personal data outside the European Economic Area (EEA). Where this occurs, we ensure that appropriate safeguards are in place in accordance with applicable data protection laws, including the use of European Commission adequacy decisions, where applicable, and approved contractual safeguards, such as Standard Contractual Clauses, where required.

Homecare Medical takes appropriate technical and organisational measures to protect personal information against unauthorised access, accidental loss, misuse, unauthorised disclosure, and unlawful processing. Access to personal information is limited to authorised employees and trusted service providers who require access for legitimate business purposes.

We retain personal information only for as long as necessary for the purposes for which it was collected. Some information may be retained for longer periods where required by law, including obligations relating to financial records, business transactions, medical device traceability, product safety requirements, and regulatory requirements. When information is no longer required, it will be securely deleted or anonymised.

Our website and Trade Portal use cookies and similar technologies to support website functionality, security and performance. Cookies may be used for essential website functionality, website security, remembering preferences, understanding how visitors use our website, measuring website performance, improving marketing communications and campaigns, and analytics, advertising and customer communication activities where applicable. Where required by law, we will request consent before placing non-essential cookies on your device. You can manage cookie preferences through your browser settings or available cookie management tools. For more information, please see our Cookie Policy.

Where permitted under applicable data protection and electronic communications laws, Homecare Medical may send business-related marketing communications to customers and business contacts about products, services, offers and updates that may be relevant to their organisation. You can unsubscribe from marketing communications at any time by following the instructions included in our emails or by contacting us. Please note that we may still contact you regarding essential matters such as orders, account administration, invoices, deliveries or service-related communications.

You have rights regarding your personal data, including the right to access your personal information, the right to request correction of inaccurate information, the right to request deletion of your information where applicable, the right to restrict processing, the right to object to certain processing activities, the right to withdraw consent where processing is based on consent, and the right to request transfer of your personal data where applicable. To exercise your rights, please contact our Privacy Contact — Email: dataprotection@homecaremedical.ie. We may need to verify your identity before responding to your request. If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Data Protection Commission (DPC), Ireland's supervisory authority for data protection matters.

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or business practices. The latest version of this Privacy Policy will always be available on our website.

If you have any questions about this Privacy Policy, how we handle your personal information, or wish to exercise your data protection rights, please contact Homecare Medical Supplies — Email: dataprotection@homecaremedical.ie