Privacy Policy

Last Updated: 1 January 2026

1. Introduction

Basic Grocery Planning ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your information when you visit our website or use our services.

We are based in the United Kingdom and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Information You Provide

When you contact us or use our services, you may provide:

• Name and email address (when submitting contact forms)
• Subject and content of your messages
• Any other information you choose to share with us

2.2 Information We Collect Automatically

When you visit our website, we may automatically collect:

• Browser type and version
• Operating system
• Pages visited and time spent on pages
• IP address (anonymized)
• Referring website

2.3 Cookies and Similar Technologies

We use cookies to improve your experience. See our Cookie Policy for detailed information.

3. How We Use Your Information

We use your personal data for the following purposes:

• To respond to your inquiries and provide customer support
• To improve our website and services
• To send you information you've requested
• To analyze website usage and optimize user experience
• To comply with legal obligations

4. Legal Basis for Processing

Under UK GDPR, we process your personal data based on:

• Consent: When you provide information voluntarily through contact forms
• Legitimate Interests: To improve our services and analyze website performance
• Legal Obligation: When required by law

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your data only in the following circumstances:

• Service Providers: Trusted third parties who help us operate our website (e.g., hosting providers), under strict confidentiality agreements
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In the event of a merger or acquisition, with notice to you

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit using SSL/TLS
• Secure server infrastructure
• Regular security assessments
• Access controls and authentication
• Staff training on data protection

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Contact form submissions: 2 years from last contact
• Website analytics: 26 months
• Legal requirements: As required by law

8. Your Rights

Under UK GDPR, you have the following rights:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at info@cardioheartpump.com

9. Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

10. International Data Transfers

Our website is hosted in the United Kingdom. If you access our website from outside the UK, your data may be transferred to and processed in the UK. We ensure appropriate safeguards are in place for such transfers.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting a notice on our website. The "Last Updated" date at the top indicates when changes were last made.

12. Contact Us

If you have questions about this privacy policy or wish to exercise your rights, contact us:

13. Supervisory Authority

You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe we have not handled your data appropriately:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: www.ico.org.uk