Privacy Policy

Cambridge Surgical Models

Effective Date:  01/01/2026

1. Introduction

Cambridge Surgical Models (“we”, “us”, “our”) is committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website or interact with us.

2. Data Controller

Cambridge Surgical Models is the data controller responsible for your personal data.

Contact Details:
Email: cambridgesurgicalmodels@gmail.com
Address: Suite 501 The Nexus Building, Broadway, Letchworth Garden City, Hertfordshire, United Kingdom, SG6 9BL

3. Personal Data We Collect

a) Information You Provide

  • Name

  • Email address

  • Phone number

  • Organisation or institution name

  • Any information submitted through contact forms or communications

b) Cookies

We use cookies and similar technologies to enhance your experience. See Section 9.

4. Special Category Data

We do not intentionally collect special category data (e.g. health or biometric data) through our website.

If such data is provided voluntarily, it will only be processed:

  • With your explicit consent, or

  • Where required for legal obligations

5. How We Use Your Data

We use your data to:

  • Respond to enquiries or requests

  • Provide information about our products and services

  • Improve website functionality and user experience

  • Maintain website security

  • Comply with legal obligations

We will only use your personal data where permitted by law.

6. Lawful Basis for Processing (UK GDPR)

We rely on the following lawful bases:

  • Consent (Article 6(1)(a))
    When you opt in to receive communications or submit forms

  • Legitimate Interests (Article 6(1)(f))
    For operating and improving our business and services

  • Legal Obligation (Article 6(1)(c))
    Where processing is required to comply with legal requirements

Where special category data is involved, we rely on:

  • Explicit Consent (Article 9(2)(a))

7. How We Share Your Data

We store personal data in databases hosted by trusted third-party providers. These providers only use your data to store and retrieve it securely on our behalf.

We do not sell or share your personal data with unaffiliated third parties except:

  • When you give explicit consent

  • As required by law (e.g., court orders or legal investigations)

  • With vendors and service providers performing functions on our behalf

  • In cases of emergency or force majeure

  • To resolve disputes, respond to claims, or where legally authorised

If you interact with us through third-party platforms (e.g., Instagram, Facebook, LinkedIn, Twitter), those services may link your activity on our site with your profile. Please review their privacy policies separately. All third parties are required to process data in accordance with GDPR and maintain appropriate security measures.

8. International Transfers

If your data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:

  • UK adequacy regulations

  • Standard contractual clauses

9. Cookies and Consent

Our website presently does not uses cookies to:

  • Enable essential site functionality

  • Analyze site traffic and usage

You can’t control or disable cookies through your browser settings.

10. Data Retention

We retain personal data only for as long as necessary to:

  • Fulfil the purposes for which it was collected

  • Comply with legal and regulatory obligations

11. Data Security

We implement appropriate technical and organisational measures, including:

  • Secure servers and encryption where appropriate

  • Access controls

  • Regular security monitoring

12. Your Rights Under UK GDPR

You have the following rights:

  • Right of access – request a copy of your data

  • Right to rectification – correct inaccurate data

  • Right to erasure (“right to be forgotten”)

  • Right to restrict processing

  • Right to data portability

  • Right to object to processing

  • Right to withdraw consent at any time

To exercise your rights, contact us at the details above.

13. Automated Decision-Making

We do not use automated decision-making or profiling that significantly affects individuals.

14. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices.

15. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated effective date.