Privacy policy

Last updated: 9 August 2026

1. Who this policy covers

This policy applies to personal data collected through maidmedicals.com, including data submitted in a quotation request, sent to us by email, or shared with us over WhatsApp. It applies to professional buyers and their representatives. This site is not directed at consumers or patients, and we do not knowingly collect patient data.

2. Data controller and contact

Supply is arranged by a licensed wholesale distributor established in the Republic of Cyprus, which acts as the controller for personal data collected through this site. For any privacy matter, including a request to exercise your rights, contact info@maidmedicals.com. We respond to privacy requests within one month, as required under the GDPR.

3. What we collect

When you submit a quotation request we collect the information you provide: your name, the clinic or company you represent, your professional role, your country, your medical licence or company registration reference where you supply one, your email address, your telephone number where provided, your preferred language, and the details of your requirement including product, quantity and delivery window, together with any notes you add.

We also record technical and source information automatically: the pages you arrived from and viewed on this site, the campaign or referrer that brought you here, your browser user agent, and the country associated with your connection. We use this to understand which markets and channels generate genuine professional enquiries.

We do not collect special category health data about you, and you should not include patient information in an enquiry.

4. Why we use it, and our legal basis

We use your enquiry data to qualify you as a professional buyer, prepare and issue a quotation, confirm the documentation applicable to your product and destination market, and arrange supply. The legal basis for this is the performance of a contract, or taking steps at your request before entering into one.

We use your data to meet our regulatory obligations as a licensed wholesale distributor, including keeping records of who we supply and verifying eligibility. The legal basis for this is compliance with a legal obligation.

We use source and attribution information to measure which markets and channels produce qualified enquiries, and to improve this website. The legal basis for this is our legitimate interest in operating and improving a business-to-business supply service, balanced against your interests.

Where we send you information about products or supply beyond responding to your enquiry, we do so on the basis of your consent, which you can withdraw at any time.

5. Who we share it with

We share personal data only where necessary: with the service providers who operate this website and our systems, including our hosting provider, our database provider and our transactional email provider; with the brand owner or manufacturer where a specific order requires it; with regulators and competent authorities where we are legally required to do so; and with professional advisers where necessary. We do not sell personal data, and we do not share it for third-party advertising.

6. Where your data is stored

Enquiry data is stored within the European Union, in a database hosted in Frankfurt, Germany. Some of our service providers may process data outside the European Economic Area. Where that happens, transfers are made under an adequacy decision or the European Commission's standard contractual clauses.

7. How long we keep it

We keep quotation requests that do not lead to supply for two years from your last contact with us, so we can recognise a returning buyer and avoid re-qualifying you unnecessarily. Where supply proceeds, we keep transaction and qualification records for the period required of a licensed wholesale distributor under applicable pharmaceutical legislation, which is longer. Attribution data is kept in aggregate.

8. Your rights

Under the GDPR you have the right to access the personal data we hold about you, to have inaccurate data corrected, to have your data erased where we have no overriding obligation to keep it, to restrict or object to our processing, to receive your data in a portable format, and to withdraw consent where processing is based on consent. Exercise any of these by writing to info@maidmedicals.com.

You also have the right to lodge a complaint with a supervisory authority. In Cyprus this is the Office of the Commissioner for Personal Data Protection. You may also complain to the authority in your own country of residence.

9. Cookies and similar technologies

This site does not use advertising cookies. We store a small amount of information in your browser's local storage to remember your theme preference and to record how you first reached the site, so that an enquiry can be attributed to the right market and channel. This information stays in your browser until you clear it, and it is sent to us only if you submit an enquiry.

10. Security

Enquiry data is transmitted over an encrypted connection and stored in a database that is not publicly readable. Access is restricted to the people who need it to prepare your quotation and arrange supply.

11. Changes to this policy

We update this policy when our processing changes. The date at the top reflects the most recent revision.