Privacy notice
How NovaPharm Healthcare Ltd processes personal data across its website, business relationships, applications and secure systems.
Controller and contact
NOVAPHARM HEALTHCARE LTD, company number 16716501, is the controller for the processing described here. Use the corporate contact route and mark the enquiry for the Privacy Lead. NovaPharm has not formally appointed a Data Protection Officer and does not claim otherwise.
People and data covered
The notice covers visitors, business enquirers, applicants, customers, suppliers, partners, portal users, employees and applicants, board members, advisers, regulatory contacts, email recipients, SharePoint users, business documents, security events, cookies and device data. The general website does not invite patient-identifiable information.
Purposes and lawful bases
Business enquiries are processed to respond, protect the service and preserve an accountable record, usually under legitimate interests or requested pre-contract steps. Account due diligence may also support contract, legal and regulatory obligations. Portal security, audit, employment, governance and quality records use the basis appropriate to the real purpose. Optional marketing remains separate and uses consent where required.
- Business relationship administration
- Account due diligence
- Portal identity and security
- Employment and governance
- Regulatory and quality work
- Separate optional marketing
Recipients and international transfers
Access is limited by role and need. Approved providers may include Microsoft Azure, Microsoft 365, Entra ID, SharePoint and the enabled transactional-email provider. A prospective provider is not described as a recipient until a real data flow exists. Transfers outside the UK require destination review, an adequacy basis or appropriate contractual safeguards and a transfer risk assessment where needed.
Retention, security and rights
Records are retained according to purpose, contract, company, tax, quality, regulatory, security and legal requirements recorded in NovaPharm's retention schedule. Rights may include access, correction, erasure, restriction, portability, objection and consent withdrawal. Identity may need verification. Individuals may complain to the Information Commissioner's Office.
Make a complaint to the ICOAutomated decisions and children
NovaPharm does not currently use this website for solely automated decisions with legal or similarly significant effects. The B2B website is not directed to children and does not knowingly seek children's data. Material changes update the version and review record.