1. Who We Are

ITL Health Ltd (“ITL Health”, “we”, “us”, or “our”) is committed to protecting your personal data and respecting your privacy.

This privacy policy explains how we collect, use, and safeguard your information when you visit our website, place an order, or interact with us.

ITL Health operates in accordance with the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR).

If you have questions about this policy or your personal data, please contact:

Data Protection Lead: Valerio Lupo
Email: valerio@itlhealth.com

2. What Personal Data We Collect

We may collect the following types of personal data:

Identity Information

• Name

• Billing and shipping address

• Email address

• Phone number

Transaction Information

• Order history

• Payment information (processed securely by third-party payment providers)

• Invoices and receipts

Technical Information

• IP address

• Browser type

• Device information

• Website usage data (via cookies or analytics)

Marketing Information

• Email preferences

• Marketing subscription status

We only collect data that is necessary to provide our services.

3. How We Use Your Data

We use personal data to:

• Process and fulfil orders

• Deliver products to you

• Provide customer service and respond to enquiries

• Maintain financial and accounting records

• Send marketing communications if you have opted in

• Improve our website and services

4. Legal Basis for Processing

Under GDPR, we process personal data based on the following lawful bases:

Contractual necessity

Processing your data to complete purchases and deliver products.

Legal obligation

Maintaining financial records to comply with tax and accounting laws.

Legitimate interests

Operating and improving our business, preventing fraud, and maintaining website functionality.

Consent

Sending marketing communications where you have chosen to receive them.

You may withdraw consent for marketing at any time.

5. Marketing Communications

We only send marketing emails to individuals who have opted in to receive them.

You may unsubscribe at any time by:

• Clicking the unsubscribe link in emails

• Contacting us directly

Unsubscribes are processed immediately.

6. How Long We Keep Your Data

We retain personal data only as long as necessary.

Customer purchase records

Customer information connected to completed purchases (including name, address, contact details, invoices, and order history) is retained for 6 years to comply with statutory accounting requirements.

Marketing data

Marketing contact information may be removed after 36 months of inactivity or immediately upon unsubscribe.

Where deletion is not technically feasible, personal identifiers may be anonymized.

Secure system backups may temporarily retain deleted data until those backups are cycled in the normal course of business.

7. Sharing Your Data

We do not sell personal data.

However, we may share necessary information with trusted service providers who help operate our business, including:

• Payment processors

• Shipping and logistics providers

• Email marketing platforms

• Website hosting and analytics services

These providers only process personal data according to our instructions and must comply with applicable data protection laws.

8. International Data Transfers

Some of our service providers may operate outside the UK or European Economic Area (EEA).

When this occurs, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses

• GDPR-compliant data processing agreements

9. Your Data Protection Rights

Under UK GDPR and EU GDPR, you have the right to:

• Request access to your personal data

• Request correction of inaccurate information

• Request deletion of your data where legally permitted

• Restrict or object to certain processing activities

• Request transfer of your data to another provider (data portability)

• Withdraw consent for marketing communications

To exercise these rights, contact us at: info@itlhealth.com

10. Cookies and Website Analytics

Our website uses cookies and similar technologies to:

• Enable website functionality

• Understand how visitors use our website

• Improve user experience

You can control cookies through your browser settings.

More details are available in our Cookie Policy.

11. Data Security

We take appropriate technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, or destruction.

Access to customer data is limited to authorized personnel who require it to perform their duties.

12. Changes to This Policy

We may update this privacy policy periodically to reflect regulatory or operational changes.

The latest version will always be available on our website.