Your data rights

Salma Medical Supplies Co, trading as Salma Med, based in Ramallah, Palestine, is the controller of the personal data described on this page.

You can reach us about your data at salmamedical9@gmail.com, by phone on 0569 588 000, or on WhatsApp on 0569 588 000. We have not appointed a separate data protection officer; these are the contacts for data requests.

Rosey Co. builds and maintains the website on our behalf and acts on our instructions.

We only collect what you send us, what your browser sends when it loads a page, and, if you allow it, analytics:

• Enquiry forms: your name, email address and phone number, and anything you add such as your licence number, the product or topic you are asking about, and your message.
• Job applications: the same contact details, the role you apply for, your message and anything you attach.
• Invitation replies: your name, email address, phone number and licence number.
• The stay in touch sign-up in the footer: your name, email address and phone number.
• Analytics, only after you allow it: Google Analytics records which pages are visited and how visitors arrive, and Microsoft Clarity records how pages are used, including heatmaps and recordings of clicks and scrolling.
• Technical data that hosting and security systems need to deliver and protect the site, such as your IP address and browser type.

• Answering your enquiry and arranging supply or training: taking steps at your request before an agreement, and performing that agreement.
• Checking that a professional licence is appropriate before supply: our legitimate interest in running a safe professional supply business, and any legal obligation that applies.
• Considering a job application: taking steps at your request before a possible employment contract.
• Keeping the site secure and working: our legitimate interest in protecting the site and the people who use it.
• Analytics with Google Analytics and Microsoft Clarity: your consent, given through the cookie controls. You can withdraw it at any time.
• Keeping records we are required to keep: compliance with a legal obligation.

Enquiries, invitation replies and job applications are kept for as long as we are dealing with them and for a reasonable period afterwards for follow-up, accounting, legal claims and regulatory obligations. We then delete or anonymise them.

Analytics data is kept by Google and Microsoft under the retention settings of those services. Your cookie choice stays in your browser until you change it or clear the site's data.

Where the GDPR applies, you have the right to:

• Access: ask for a copy of the personal data we hold about you.
• Rectification: ask us to correct data that is wrong or incomplete.
• Erasure: ask us to delete your data, unless we are required to keep it or have an overriding lawful reason to retain it.
• Restriction: ask us to limit how we use your data while a question about it is resolved.
• Objection: object to processing based on our legitimate interests, and to direct marketing at any time.
• Portability: receive data you gave us in a structured, commonly used format, or have it sent to someone else, where the processing is based on consent or a contract.
• Withdrawing consent: change your analytics choice at any time from the cookie settings link in the footer. This does not affect processing that happened before.

Email salmamedical9@gmail.com and say which right you want to use. You can also call or message us on the numbers above.

We may ask you to confirm your identity before we act, so that we do not hand your data to someone else. We aim to respond without undue delay and normally within one month. There is no charge for a normal request.

If you are unhappy with how we have handled your data, please tell us first so we can put it right.

Where the GDPR applies, you also have the right to complain to a data protection supervisory authority, in particular in the EU or EEA country where you live, work or where you think the problem happened. In the UK, that is the Information Commissioner's Office.