Privacy Policy

About this privacy notice

This privacy notice explains how Prime Global Medical Communications Ltd collects, uses, shares and protects personal data when you use our website, contact us, receive marketing from us, or otherwise interact with us in a business or website-user capacity.

This notice applies to our website at https://primeglobalpeople.com/ and to personal data processed through that website or related business communications.

This notice does not cover employee, worker, contractor, job applicant, candidate, recruitment or HR-related personal data. Those categories of personal data are dealt with under separate privacy information.

Legal framework

This privacy notice has been prepared to comply with applicable UK data protection and privacy laws, including:

  • the UK General Data Protection Regulation;
  • the Data Protection Act 2018;
  • the Privacy and Electronic Communications (EC Directive) Regulations 2003, commonly known as PECR; and
  • the Data (Use and Access) Act 2025, including relevant amendments made by that Act to the UK GDPR, the Data Protection Act 2018 and PECR.

In this privacy notice, we refer to these laws together as the “Data Protection Laws”.

Who we are

Prime Global Medical Communications Ltd is the controller of the personal data described in this privacy notice.

Our details are:

Prime Global Medical Communications Ltd
Mere House
Brook Street
Knutsford
Cheshire
WA16 8GP
United Kingdom
Company number: 03642172

In this privacy notice, “Prime”, “we”, “us” and “our” mean Prime Global Medical Communications Ltd.

You can contact us about this notice or about how we use your personal data by using the details below:

Email: dataprotection@primeglobalpeople.com
Compliance contact: complianceofficer@primeglobalpeople.com
Telephone: +44 (0)1565 752100
Post: Prime Global, Mere House, Brook Street, Knutsford, Cheshire WA16 8GP, United Kingdom

Personal data we collect

We may collect and use the following categories of personal data.

Contact and enquiry information

This may include your name, job title, organisation, email address, postal address, telephone number, and any information you provide when you complete a website form, contact us by email, telephone or post, or otherwise communicate with us.

Business relationship information

This may include information about your organisation, your role, your relationship with us, records of communications with you, meeting notes, business development information, and preferences relevant to our relationship with you or your organisation.

Marketing and communications information

This may include your marketing preferences, communication preferences, records of whether you have opened or engaged with our communications, and information about events, services, publications or updates that may be relevant to you or your organisation.

Website and usage information

When you use our website, we may collect technical and usage information such as your IP address, approximate location, browser type and version, operating system, device information, referral source, pages viewed, links clicked, date and time of visits, length of visits, navigation paths, and information about how you interact with our website.

Cookie and similar technology information

We may collect information through cookies and similar technologies. This may include analytics information, device identifiers, website usage information, and information about your cookie preferences. Further information is provided in our cookie policy https://primeglobalpeople.com/cookie-policy/

Legal and compliance information

This may include information needed to comply with legal, regulatory, tax, accounting, audit, information security, complaints handling, record-keeping or other compliance obligations.

How we collect personal data

We may collect personal data:

  • directly from you when you contact us, complete a form, subscribe to updates, attend an event, request information, send us correspondence or otherwise provide information to us;
  • automatically when you use our website, including through cookies and similar technologies;
  • from your organisation, where it provides information about you in the context of our business relationship;
  • from service providers who support our website, marketing, communications, hosting, analytics, security and business systems;
  • from publicly available sources, such as business websites, Companies House, professional directories, LinkedIn and other professional networking platforms; and
  • from other Prime group companies, where relevant to our business operations or relationship with you.

How and why we use personal data

We will only use personal data where we have a lawful basis under the Data Protection Laws. The table below explains the main purposes for which we use personal data and the lawful bases we rely on.

Purpose Personal Data Used Lawful Basis
To operate and manage our website Website and usage information, cookie information, technical information Our legitimate interests in operating, securing and improving our website. Where required by law, consent for non-essential cookies or similar technologies.
To respond to enquiries and communications Contact and enquiry information, business relationship information Our legitimate interests in responding to enquiries and managing communications. Where the communication relates to a contract or potential contract, processing may be necessary to take steps before entering into a contract or to perform a contract.
To provide information about our services Contact information, business relationship information, marketing and communications information Our legitimate interests in promoting our services to business contacts. Where required by law, consent.
To send marketing communications Contact information, marketing and communications information, business relationship information Consent where required. In some business-to-business contexts, our legitimate interests in marketing relevant services, subject to your right to object and applicable electronic marketing rules.
To analyse and improve our website, services and communications Website and usage information, analytics information, marketing engagement information Our legitimate interests in understanding how our website and communications are used and improving our services. Where required, consent for analytics cookies or similar technologies.
To manage business relationships Contact information, business relationship information, communications records Our legitimate interests in managing relationships with clients, suppliers, professional contacts and business partners.
To handle complaints, including data protection complaints Contact information, complaint information, communications records, relevant evidence Our legal obligations and our legitimate interests in investigating and responding to complaints.
To comply with legal, regulatory and professional obligations Contact information, business relationship information, legal and compliance information Compliance with legal obligations. In some cases, our legitimate interests in demonstrating compliance and protecting our business.
To establish, exercise or defend legal claims Relevant personal data connected with the matter Our legitimate interests in protecting our legal rights, and where necessary, processing for the establishment, exercise or defence of legal claims.
To protect our systems, premises, people and business Technical information, security information, communications records Our legitimate interests in maintaining security, preventing misuse, detecting security incidents and protecting our business.

Legitimate interests

Where we rely on legitimate interests, we will consider and balance any potential impact on you and your rights before processing your personal data.

Our legitimate interests may include:

  • operating and improving our website;
  • responding to enquiries;
  • managing business relationships;
  • promoting relevant services to business contacts;
  • maintaining business records;
  • protecting our legal rights;
  • preventing fraud, misuse or security incidents;
  • ensuring network and information security; and
  • managing complaints and disputes.

You have the right to object to processing based on legitimate interests. You also have an absolute right to object to direct marketing at any time.

Recognised legitimate interests under the Data Protection Laws

The Data (Use and Access) Act 2025 introduced a limited category of “recognised legitimate interests” into UK data protection law. These may include, for example, processing that is necessary for certain specified public interest purposes, such as preventing crime, safeguarding, responding to emergencies or other interests recognised by law.

We do not generally expect to rely on recognised legitimate interests for ordinary website, enquiry or marketing processing. If we rely on this lawful basis in a relevant case, we will do so only where permitted by the Data Protection Laws and where the processing is necessary for the relevant recognised legitimate interest.

Marketing

We may use your contact details to send you information about Prime, our services, events, insights, publications or other updates that may be relevant to you or your organisation.

We will only send electronic marketing where permitted by law. This may be where you have consented, or where we are permitted to contact you in a business-to-business context and you have not opted out.

You can opt out of marketing at any time by:

If you opt out of marketing, we may still send you non-marketing communications, such as service, legal, administrative or transactional messages.

Cookies and similar technologies

Our website may use cookies and similar technologies to operate the site, remember your preferences, understand how visitors use the site, improve user experience, and support analytics or marketing activities.

Some cookies are strictly necessary for the website to work. Other cookies, such as analytics or marketing cookies, will only be used where permitted by law.

You can manage your cookie preferences through the cookie tools available on our website, where provided, and through your browser settings. For more information, please see our cookie policy.

Automated decision-making and profiling

We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significant effects.

If this changes, we will update this privacy notice and provide the information required by the Data Protection Laws, including information about the decision-making, the significance and expected consequences of the processing, and the safeguards available to you.

Research, analytics and statistical purposes

We may use aggregated, anonymised or statistical information to understand how our website and services are used and to improve our business. Where information is truly anonymised, it is not personal data.

Where we use personal data for analytics, research or statistical purposes, we will apply appropriate safeguards, such as data minimisation, access controls, aggregation or pseudonymisation where appropriate, and we will not use the results to make decisions about individuals in a way that causes them harm.

Who we share personal data with

We may share personal data with the following categories of recipients where necessary and lawful:

  • Prime group companies;
  • website hosting providers;
  • IT, cloud storage and business systems providers, including providers such as Microsoft Azure;
  • email, marketing automation and communications platforms, including providers such as Mailchimp;
  • analytics providers;
  • professional advisers, including lawyers, accountants, auditors and insurers;
  • event, webinar or business support providers;
  • regulators, authorities, courts, law enforcement bodies or government agencies, where required or permitted by law;
  • prospective buyers, investors, funders or professional advisers in connection with a business sale, merger, restructuring or similar corporate transaction; and
  • other third parties where you ask us to share your information or where we have another lawful basis to do so.

Where third parties process personal data on our behalf, we require them to protect the data and only use it in accordance with our instructions and applicable law.

International transfers

We are based in the United Kingdom, but we may transfer personal data outside the UK where necessary for the purposes described in this privacy notice.

This may include transfers to:

  • Prime group personnel or offices outside the UK;
  • service providers located outside the UK; and
  • cloud, hosting, email, marketing, analytics or business systems providers that operate internationally.

Where we transfer personal data outside the UK, we will ensure that appropriate safeguards are in place, unless an exemption applies. These safeguards may include:

  • transferring personal data to a country covered by UK adequacy regulations;
  • using the UK International Data Transfer Agreement;
  • using the UK Addendum to the EU Standard Contractual Clauses;
  • relying on another transfer mechanism permitted by UK data protection law; or
  • applying additional technical, contractual or organisational measures where appropriate.

You can contact us for more information about the safeguards we use for international transfers.

How long we keep personal data

We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, regulatory, accounting, reporting, complaints handling or business record requirements.

The period for which we keep personal data will depend on the type of information and the reason we use it. In general:

  • enquiry and correspondence records are kept for as long as necessary to respond to and manage the enquiry, and for a reasonable period afterwards;
  • marketing records are kept while you remain subscribed or while we have a lawful basis to contact you, and suppression records may be kept to respect opt-out requests;
  • website analytics information is kept in accordance with our analytics and cookie settings;
  • business relationship records are kept for the duration of the relationship and for a reasonable period afterwards;
  • complaint records are kept for as long as necessary to investigate, respond to and evidence the handling of the complaint; and
  • legal and compliance records are kept for the period required or permitted by applicable law.

When personal data is no longer required, we will delete it, anonymise it or securely archive it.

Your data protection rights

Subject to certain conditions and exemptions, you have the following rights under the Data Protection Laws.

Right of access

You can ask us for a copy of the personal data we hold about you and for information about how we use it.

When responding to an access request, we may ask you for information to confirm your identity or to help us clarify the request. Where permitted by law, the response period may pause while we wait for clarification that we reasonably need in order to respond. We are required to carry out reasonable and proportionate searches when responding to access requests.

Right to rectification

You can ask us to correct personal data that is inaccurate or incomplete.

Right to erasure

You can ask us to delete your personal data in certain circumstances. This right does not apply in all cases, for example where we need to keep information to comply with a legal obligation or to establish, exercise or defend legal claims.

Right to restriction

You can ask us to restrict the use of your personal data in certain circumstances.

Right to object

You can object to our processing of your personal data where we rely on legitimate interests. We will consider your objection and stop processing unless we have compelling legitimate grounds to continue or need the information for legal claims.

You can object to direct marketing at any time. If you object to direct marketing, we will stop using your personal data for that purpose.

Right to data portability

Where the right applies, you can ask us to provide your personal data in a structured, commonly used and machine-readable format, or ask us to transmit it to another controller.

Right to withdraw consent

Where we rely on consent, you can withdraw that consent at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.

Rights relating to automated decision-making

You have rights in relation to certain automated decisions that have legal or similarly significant effects. We do not currently carry out this type of processing.

How to exercise your rights

You can exercise your rights by contacting us at:

Email: dataprotection@primeglobalpeople.com
Post: Prime Global, Mere House, Brook Street, Knutsford, Cheshire WA16 8GP, United Kingdom
Telephone: +44 (0)1565 752100

We may need to verify your identity before responding to a request. This is to protect your personal data.

We will respond to rights requests within the period required by law. In most cases, this will be one month from receipt of the request or, where we need clarification, from the point at which we receive the clarification we reasonably need. In certain cases, we may extend the response period where permitted by law.

Data protection complaints

If you have a concern or complaint about how we use your personal data, please contact us first so that we can investigate and respond.

You can make a data protection complaint by contacting us at:

Email: dataprotection@primeglobalpeople.com
Post: Prime Global, Mere House, Brook Street, Knutsford, Cheshire WA16 8GP, United Kingdom
Telephone: +44 (0)1565 752100

Please include enough information to help us understand your complaint, such as your name, contact details, what your complaint is about, and any relevant correspondence or reference numbers.

We will:

  • acknowledge receipt of your data protection complaint within 30 days;
  • take appropriate steps to investigate and respond to your complaint without undue delay;
  • keep you informed where appropriate; and
  • tell you the outcome of your complaint without undue delay.

Making a complaint to us does not affect your right to complain to the Information Commissioner’s Office.

You can complain to the ICO if you are unhappy with how we have used your personal data or how we have handled your complaint.

The ICO’s contact details are:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113

Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include access controls, secure systems, confidentiality obligations, staff training, supplier due diligence, contractual protections, monitoring, backup procedures and incident response processes.

No website or electronic communication system is completely secure. You should take care when sending information to us electronically and should not send information that is unnecessary or excessive.

Contact us

If you have any questions about this privacy notice, how we use your personal data, how to exercise your rights, or how to make a data protection complaint, please contact us at:

Email: dataprotection@primeglobalpeople.com
Compliance contact: complianceofficer@primeglobalpeople.com
Post: Prime Global, Mere House, Brook Street, Knutsford, Cheshire WA16 8GP, United Kingdom
Telephone: +44 (0)1565 752100

Changes to this privacy notice

Any changes we may make to this privacy notice in the future will be posted on this webpage. The last update to this privacy notice was made on 8th October 2026.