GDPR Compliance

Last Updated: 15 February 2025

Introduction

This document delineates the General Data Protection Regulation (GDPR) compliance measures implemented by Envigore Limited, whose website is accessible at https://envigore.com. The GDPR, a regulation enshrined in UK law, governs data protection and privacy. This document aims to elucidate the collection, processing, and protection of users’ personal data.

Data Controller

The data controller responsible for processing personal data on the website is:

Envigore Limited
23 Melville Street
Edinburgh EH3 7PE
United Kingdom
dataprotectionmanager@envigore.com

Types of Data Collected

Envigore Limited may collect and process the following categories of personal data:

  • Contact Information (e.g. name, email address)
  • Payment Information (where applicable)
  • Website Usage Data (e.g. IP addresses, browser information)
  • Additional Information voluntarily provided by users

Purpose of Data Processing

Personal data is collected and processed for the following purposes:

  • Prescriber Review, Prescriber Approval, Order Processing and Fulfilment
  • Customer Support
  • Marketing and Promotions (subject to user consent)
  • Website Analytics

Legal Basis for Processing

Envigore Limited processes personal data based on one or more legal grounds as defined in the GDPR, including:

  • Necessity for the performance of a contract
  • Compliance with legal obligations
  • Protection of vital interests
  • Consent
  • Performance of tasks carried out in the public interest or exercise of official authority
  • Legitimate interests pursued by the data controller

Data Subject Rights

Users are entitled to the following rights regarding their personal data:

  • Right to Access
  • Right to Rectification
  • Right to Erasure
  • Right to Restriction of Processing
  • Right to Data Portability
  • Right to Object
  • Rights related to Automated Decision Making and Profiling

To exercise these rights, users may contact Envigore Limited using the contact information provided below.

  • Data Security Measures  – Envigore Limited implements appropriate technical and organisational measures to ensure the security of personal data. These measures include encryption, access controls, and regular security assessments.
  • Data Breach Notification – In the event of a data breach that may pose a risk to individuals’ rights and freedoms, Envigore Limited will notify the relevant supervisory authority and affected data subjects in accordance with GDPR requirements.
  • Changes to the Privacy Policy – Envigore Limited reserves the right to amend this GDPR compliance document. Users will be notified of any changes, and the most recent version will be available on the website.
  • Contact Information – For enquiries, concerns, or requests related to GDPR compliance, please contact: dataprotectionmanager@envigore.com