Privacy notice
Last updated 1 August 2026. Written to be read, not to be survived.
Who we are
Test ClinicSoftware is the data controller for this shop. Reach us through the contact page.
What we collect
| You give us | Name, email, phone, delivery and billing addresses, order contents, messages you send us, reviews you write |
|---|---|
| Payment | The last four digits, card brand and expiry. Full card numbers go straight to our payment provider and never reach our servers. |
| Automatically | Pages viewed, device and browser, approximate location from your IP, and what you put in a basket |
| We do not collect | Health records. If you tell a practitioner something clinical, that lives in the clinic system, not in the shop. |
Why, and on what basis
To take and deliver your orders, and to handle returns and refunds — that is performance of our contract with you. To keep records for tax and consumer law — legal obligation. To prevent fraud, keep the site working, and improve it — our legitimate interests, and we have weighed those against your interests. To send you marketing — your consent, which you gave at a specific moment we record and can show you.
Marketing
If you leave items in a basket and we have your email, we send one reminder six hours later, and at most two more after that. You can switch that off in your notification settings or with the link at the bottom of the email. We cap all marketing at one message a day and four a week across email, text and WhatsApp together. Texts and WhatsApp messages wait until the morning if they would land at night.
How long we keep it
| Orders and invoices | Six years after the order — we are required to |
|---|---|
| Account details | Until you close the account |
| Abandoned baskets and marketing contacts | Twelve months from your last interaction, then deleted |
| Back-in-stock requests | Until we notify you, or six months, whichever comes first |
| Support messages | Two years |
Who else sees it
Our payment provider, the couriers who deliver to you, the services that send our email, text and WhatsApp messages, our hosting and search providers, and our accountants. Each is bound by contract to use your data only for the job we gave them. When a product page shows AI-written guidance, that text was generated once by us at publish time from our own documentation and reviewed by a person — your questions are not used to train anyone’s model.
Your rights
See what we hold, correct it, delete it, take a copy elsewhere, object to how we use it, and withdraw consent at any time. Two of those are buttons in your details; for the rest, email us and we answer within a month, usually within days. If you are unhappy with how we handle it, you can complain to the Information Commissioner’s Office.
Cookies
Strictly necessary ones keep you signed in and hold your basket. Everything else — analytics, advertising measurement — only runs if you agree, and you can change your mind from the footer link on any page.