UK B2B privacy notice — last updated 9 October 2026. Retention arrangements, service providers and transfer safeguards must be completed and reviewed before publication. This notice is not a guarantee of legal compliance.
1. Who we are
HerWell Supply supplies menstrual-care products to UK workplaces and works with European manufacturers. The controller responsible for your personal information is V2M Healthcare Group Limited, trading as HerWell Supply, registered in England & Wales.
Company number: 13186204.
Registered address: Symbosis House, Bestmans Lane, Kempsey, Worcester, England, WR5 3QA.
Privacy contact: hello@herwellsupply.co.uk.
This notice covers website enquiries and related business correspondence. We handle personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended.
2. Information we collect
- Workplace enquiries: your name, work email, company, optional phone number, number of sites, approximate employee count, sector and message.
- Supplier enquiries: company, country, contact name, email, website, product categories, minimum order quantity, mixed-pallet capability, message and any catalogue PDF you choose to upload.
- Follow-up correspondence and information needed to discuss your requirements or a proposed supply arrangement.
- Technical connection information, such as IP address and request or error details, processed by hosting and website service providers for delivery and security, and your cookie preference stored on your device.
Most enquiry information comes directly from you. Please do not include health information, other sensitive personal data, or personal information about others unless necessary and you are authorised to share it. Business contact details can still be personal data.
3. Why we use it and our lawful bases
- Responding to corporate enquiries and maintaining business relationships: legitimate interests under Article 6(1)(f) UK GDPR. Our interests are communicating with business contacts, understanding workplace needs, arranging quotations and developing supplier partnerships. We must assess necessity and balance these interests against your rights and reasonable expectations.
- Steps towards a contract with you personally: Article 6(1)(b), where you are an individual contracting party (for example, a sole trader) and ask us to take steps before entering a contract. This basis does not automatically cover an employee acting for a company.
- Legal obligations: Article 6(1)(c), where applicable record-keeping, tax or other laws require processing.
- Security and legal claims: legitimate interests in protecting our website, preventing abuse and establishing or defending claims.
Sending an enquiry does not subscribe you to a marketing mailing list. We do not sell enquiry information. Any future marketing or optional tracking must be assessed separately and use consent where required.
4. Who receives your information
Access is limited to authorised people who need it to handle your enquiry and to service providers acting on our behalf, including website hosting, Lovable Cloud enquiry storage and business email providers. Supplier PDFs are stored privately and submitted enquiries are not publicly readable through the website.
Professional advisers, regulators or law-enforcement bodies may receive information where necessary and lawful. Manufacturers or delivery partners may receive relevant information if needed to arrange a supply proposal or fulfil an agreed order; we limit what is shared.
Provider details to confirm before publication: [insert legal names, service roles and relevant privacy information for hosting, storage, email and other processors]. Google Fonts is used to display typefaces and receives connection information such as your IP address when fonts load.
5. International transfers
Some providers may process information outside the UK. Before publication, confirm the processing locations and identify any restricted transfers: [insert countries, providers and applicable safeguards, or confirm that no restricted transfers occur].
Where required, transfers must rely on UK adequacy regulations or appropriate safeguards, such as the UK International Data Transfer Agreement or UK Addendum to approved standard contractual clauses, with the necessary transfer assessment. Contact us for information about applicable safeguards and how to obtain a copy.
6. How long we keep information
We keep enquiry information only while it is needed to respond, follow up and consider a genuine business opportunity. When discussions end and there is no continuing need, we delete or anonymise it. Where an enquiry becomes a business relationship, relevant records may be kept for the relationship and applicable legal retention periods.
Retention decisions consider whether discussions are active, when contact last occurred, statutory duties and any actual or reasonably anticipated legal claim. Unrelated information should not be retained merely because another record must be kept.
Retention schedule to approve and implement: [insert enquiry review/deletion period, supplier catalogue retention, contractual/legal record periods and backup deletion arrangements]. No automatic enquiry deletion schedule is currently represented by this template.
7. Security
We use proportionate access controls and private storage to protect enquiries and uploaded catalogues. No online service is completely secure. Please send only the information needed for your enquiry.
8. Your rights
Depending on the circumstances, you may ask us to:
- Provide access to your personal information and a copy.
- Correct inaccurate or incomplete information.
- Erase information or restrict how it is used.
- Object to processing based on legitimate interests; we must stop unless we demonstrate compelling lawful grounds or need it for legal claims.
- Provide portable data where processing is automated and based on consent or a contract.
You have an absolute right to object to use of your personal data for direct marketing. Where processing relies on consent, you can withdraw it at any time without affecting earlier lawful processing. Not all rights apply to every use, and legal exceptions may apply.
Email hello@herwellsupply.co.uk to exercise your rights. We normally respond within one month; permitted extensions for complex or multiple requests will be explained. We may need proportionate identity checks. Requests are normally free of charge.
9. Complaints
Please contact us if you have a concern. You can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or call 0303 123 1113. You do not have to contact us first.
10. Other information
Enquiry details are provided voluntarily, not because of a statutory requirement. Without required contact and enquiry details, we may be unable to respond or prepare a quote. We do not use enquiry information for solely automated decisions producing legal or similarly significant effects, or for profiling.
See our Cookie Policy for device storage and choices. We may update this notice when our practices or the law change; the date above will show when it was last revised.