Pinnacle Physiques
Privacy
This policy explains how personal data is used when someone visits the website or submits a business enquiry.
Pinnacle Physiques is the trading name used on this website. Before launch, insert the controller's full legal name, company number, postal address and monitored privacy email here. Those details identify the organisation responsible for the processing described below.
We may collect names, work contact details, organisation and role information, country, requested products, intended-use information, declarations, correspondence, technical security logs and records created while assessing or administering an enquiry. Please do not send patient information, medical records or other special-category personal data.
We use data to respond to enquiries, assess buyer and intended-use eligibility, provide requested documents, prevent misuse and fraud, maintain business records, establish or defend legal claims, and comply with legal or regulatory obligations.
Depending on the activity, processing is based on steps requested before entering a possible contract, our legitimate interests in operating a secure and compliant business-enquiry service, and compliance with legal obligations. Where consent is specifically requested, it may be withdrawn without affecting earlier lawful processing.
Website enquiries are transmitted through FormSubmit and delivered to our Google Gmail inbox. Those providers process the information to transmit, protect and deliver the enquiry. Data may also be shared where necessary with hosting, IT security, professional-adviser, compliance, accounting, logistics or payment providers, and with authorities where legally required.
FormSubmit states that it retains form submissions for 30 days. Copies delivered to our inbox and enquiries that do not proceed are retained only for a documented, proportionate period. Transaction, compliance and accounting records may need to be retained longer where required by law or reasonably necessary to establish or defend legal claims.
We use proportionate technical and organisational safeguards, but no internet transmission is completely secure. Do not include confidential research data or sensitive personal data unless a secure channel has been agreed.
Subject to applicable law, individuals may have rights to access, correct, erase or restrict their data, object to certain processing, and receive portable data. Requests should be sent to the privacy contact listed above. Individuals may also complain to the UK Information Commissioner's Office.
If a provider processes data outside the UK, an approved transfer mechanism and appropriate safeguards will be used where required. We may update this policy and will publish the revised date on this page.