Chaneco – Privacy Policy – Your Right To Be Informed

Privacy Statement:

Chaneco are committed to the processing of personal data transparently, responsibly, and in compliance with UK GDPR - the latest legislation surrounding data protection.

Effective date: 18/03/2026
Last reviewed: 18/03/2026

1. Who We Are

Chaneco Limited is a manufacturer and supplier of orthotic products and medical devices.

We are the data controller for the personal data we process.

Registered address: 4 Kilvey Road, Brackmills, Northampton NN4 7BQ, United Kingdom
ICO registration: ZA559378
Email: info@chaneco.co.uk
Telephone: +44 (0)1604 709999

2. What Data We Collect

We may collect and process the following types of personal data:

Customers & Business Contacts

  • name, job title and organisation
  • business contact details (email, telephone, address)
  • order, delivery and invoicing information
  • communications and correspondence

Patient-Related Data (Limited)

We do not provide direct clinical care. However, we may process limited patient-related data where necessary to manufacture or supply products, such as:

  • reference numbers and/or patient names (for order tracking purposes)
  • measurements, scans or fitting data

We do not request or process unnecessary clinical or diagnostic information.

Website Users

  • IP address and device information 
  • website usage data (via cookies) 
  • account login details (where applicable) 
  • shopping basket and transaction history 
  • preferences and interactions with our website 

We may also collect information relating to incomplete or abandoned transactions in order to improve user experience and support order completion.

3. How We Use Your Data

We use personal data to:

  • fulfil contracts and supply goods and services
  • communicate with customers and stakeholders
  • meet legal and regulatory obligations (including NHS requirements)
  • manage accounts, invoicing and payments
  • improve our products and services
  • maintain security and prevent fraud
  • provide and improve website functionality and user experience 
  • analyse website usage and performance (via analytics tools) 
  • contact users regarding incomplete or abandoned transactions (where appropriate) 
  • send relevant marketing communications where permitted by law 

4. Lawful Basis for Processing

We process personal data under the following lawful bases:

  • Contract – to supply goods and services
  • Legal obligation – to meet regulatory requirements
  • Legitimate interests – to manage business relationships, improve our services, and conduct proportionate marketing activities 

Where required, we will obtain consent (for example, for certain types of electronic marketing or non-essential cookies).

Where we process limited patient-related (health) data, this is done under conditions relating to the provision of healthcare products and services.

5. Data Sharing

We may share personal data with trusted third parties where necessary, including:

  • delivery and logistics providers
  • IT and system providers
  • payment and financial service providers
  • professional advisers and auditors

These organisations process data on our behalf and are required to keep it secure.

We do not sell personal data.

5A. Direct Marketing

We may use business contact details to provide information about our products and services where this is relevant to your role or previous interactions with us.

We will only send marketing communications where permitted by law, and you have the right to opt out at any time.

You can unsubscribe from marketing communications by:

- clicking the unsubscribe link in emails

- contacting us using the details provided in this notice

We do not sell personal data to third parties for marketing purposes.

6. International Transfers

Where personal data is transferred outside the UK, appropriate safeguards are applied in line with UK GDPR.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet legal and regulatory requirements.

Retention periods are defined within our internal Data Retention Schedule.

We do not retain personal data indefinitely and ensure retention periods are regularly reviewed.

8. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse.

9. Your Rights

You have the right to:

  • access your personal data
  • request correction of inaccurate data
  • request deletion (where applicable)
  • object to or restrict processing
  • request data portability (where applicable)
  • lodge a complaint with the ICO
  • withdraw consent at any time (where processing is based on consent)

10. Cookies

Our website uses cookies and similar technologies to improve functionality, analyse performance and support user experience.

Where required, we will request your consent before placing non-essential cookies on your device.

Further details are available in our separate Cookie Notice.

11. Contact Us

If you have any questions about this notice or how your data is handled, please contact:

Compliance & Corporate Affairs Director (Data Protection Lead)
Email: info@chaneco.co.uk

12. Changes to This Notice

We may update this notice from time to time. The latest version will always be available on our website