Privacy & data protection
This website (Buy Maxilin UK, www.buymaxilin.co.uk) is owned and operated by Maxilin UK Ltd, Company No: NI631913. The geographical business and correspondence address has not yet been supplied. Contact: Email us or +44 7414699290. Hours: 24/7 — online business.
This notice explains how personal information is handled when you visit the site, send an enquiry or access the private administration area. It is intended to explain processing under the UK GDPR and the Data Protection Act 2018, as amended. The trading entity identified above is responsible for deciding how enquiry data is used; its full legal identity must be confirmed before launch.
1. Information we collect
The enquiry form asks for your name, email address, phone number, subject and message. It records your consent, the applicable notice version, submission time, reference, processing status and whether email notifications were sent. You choose what to put in the message; please do not include medical records, special-category personal information or payment card details.
For administrators we store account names, email addresses, securely hashed passwords and access-related records. We record settings changes, enquiry status changes and data exports in an activity log. Hosting and security services may process IP addresses, device information, request logs and error diagnostics to operate and protect the site. A hashed rate-limiting identifier is stored temporarily to prevent excessive requests.
2. Purposes and lawful bases
- Responding to product and order enquiries: taking steps at your request before a possible contract, or our legitimate interest in responding to general enquiries.
- Recording your form acknowledgement: demonstrating that you have received the notice and consented to contact about your enquiry. This is not consent to unrelated marketing.
- Processing any subsequently agreed order, resolving delivery issues and administering returns: performance of a contract and applicable legal obligations.
- Operating, securing and debugging the website: legitimate interests in providing a reliable service and preventing abuse, balanced against your rights.
- Optional analytics or marketing: consent would be requested before enabling such tools. No optional analytics or advertising features have been enabled in this build.
We do not sell enquiry information or use it for automated decisions with legal or similarly significant effects. We do not add you to a marketing list because you submit an enquiry.
3. Sharing and service providers
Authorised staff can read enquiries in the password-protected administration area. Website hosting, database storage and notification email processing are supplied through the Abacus.AI platform and its relevant infrastructure providers. Emails are delivered through mail services and may be retained in the recipient’s mailbox. If an order is later agreed, necessary delivery details may be shared with a carrier and payment information handled by the payment provider identified to you at that stage.
The owner must confirm the applicable processor agreements, subprocessors and processing locations before launch. Where information is transferred outside the UK, an applicable adequacy decision or appropriate safeguards, such as the UK International Data Transfer Agreement or UK Addendum where relevant, must be in place. Contact us to request details of the safeguards actually used; we do not claim that all data is stored in the UK.
4. Retention
Enquiries should normally be reviewed and erased or anonymised within 12 months of their last meaningful correspondence unless needed to resolve a dispute or meet an obligation. This is a retention policy requiring administrative review, not a claim that automatic deletion is configured. Transaction-related records may need to be retained for the applicable statutory accounting period, commonly six years. Security records are retained only as needed for investigation and protection; temporary rate-limit records expire and are removed during subsequent requests.
Administrative activity records should be reviewed at least annually. Backups may retain data for their normal rotation period after deletion from the active system. The owner must include email mailboxes, exports and backups in their retention procedures.
5. Your rights
Depending on the circumstances, you can request access to your information, correction of inaccurate data, erasure, restriction, portability and objection to processing based on legitimate interests. Where consent is relied upon, you can withdraw it without affecting the lawfulness of earlier processing. Some rights have exceptions, including where records must be kept by law.
Use the contact details above and describe your request. We may request proportionate information to verify identity. We normally respond within one month; any lawful extension will be explained within that period. There is normally no fee. You may complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint, and you do not have to contact us first.
6. Security and children
Administrative access is restricted and passwords are hashed. These controls reduce risk but cannot guarantee absolute security. Do not send card details through the enquiry form. The site is intended for adults making purchase enquiries, not children submitting personal information. A parent or guardian should contact us about a child’s product query without sending unnecessary identifying health details.
7. Cookies and changes
See our cookie policy for essential storage and preferences. We may update this notice when our practices change; the date above identifies the current version. Material changes affecting the use of information will be communicated where required.