This policy describes how Medsource Group LTD collects, processes and discloses your personal information as a data controller, when you contact us, use our services or interact with the Medsource Group Ltd platforms including websites and ERP.
Medsource Group Ltd is committed to maintaining the confidentiality, integrity and security of any business or personal information stored within the Software Application or on the Medsource Group LTD servers, hosted by Microsoft Azure cloud computing services.
The Privacy Policy is designed to tell you how we collect, use, and protect personal information, so you can make an informed decision about using our online ERP https://msg.co.ke , website and any future apps or other applications associated with Medsource Group Ltd.
By using the Medsource Group Ltd ERP and website, you consent to the information collection and use practices described herein.
What This Policy Covers?
We are committed to adopting the highest standards when it comes to how we collect, use and protect your personal information, and have accordingly developed this privacy policy (the “Policy”), which:
- Sets out the types of personal information we collect.
- Explains how and why we collect and use your personal information.
- Explains when and why we may share personal information within Medsource Group Ltd and with other organisations.
- Explains how we protect the personal information we collect; and
- Explains the rights and choices you have in relation to your personal information.
This Policy applies if you use our services (referred to in this Policy as “our Services”). Using our Services means:
- Buying / Ordering services or products from Medsource Group Ltd online on its ERP or over the phone/online Chat/email/WhatsApp
- Using any of our platforms, including websites (“our Websites”) and ERP
- Taking part in our promotions & competitions
- Registering to receive any communication via email or SMS/Whatsapp
This Policy also applies if you contact us or we contact you about our Services.
Personal Information We Collect
When you register to our services, we may collect:
- Your personal details, including your postal and billing addresses, email address(es), phone number(s), ID number.
- Details about your facility including appropriate licenses and registration details/documentation, location, business name.
- Your account login details, such as your username and the password (encrypted) that you have chosen; and
When you shop with us online via the ERP, browse our Websites, we may collect:
- Information about your online purchases (for example: what, when, where you ordered / bought and how you paid);
- Information about your online browsing behaviour on our Websites and ERP
- Information about devices you have used to access our Services (including the make, model and operating system, IP address, browser type and mobile device identifiers); and
- Information about your precise geolocation.
- Transaction information, including how the orders are being paid for
When you contact us or we contact you or you take part in promotions, surveys or questionnaires about our Services, we may collect:
- Personal information you provide about yourself;
- Details of emails and other digital communications we send to you including information about the emails you open and links in them that you click on; and
- Your feedback and contributions to customer surveys and questionnaires.
Other sources of personal information
We may also use personal information from other sources, such as specialist companies that supply information, online media channels, our partners and public registers. We may collect the following types of personal information about you from other sources: contact details, credit history, purchases, interests, preferences, or other types of publicly available information. This other personal information helps us to:
- review and improve the accuracy of the data we hold; and
- improve and measure the effectiveness of our marketing communications.
We may be required by law to collect personal information about you or as a consequence of any contractual relationship we have with you.
If you choose not to provide your personal information to be used in accordance with this Policy, you will still be able to visit our Platforms, but you may not be able to access certain services like product catalogue, products or services, and in some cases we may not be able to fulfill a service you request.
Why And How We Use Your Personal Information
Make our Services available to you
We use your personal information to provide the services you have requested, including:
- Processing your orders and refunds; and
- Managing the accounts you hold with us.
This is so we can provide the services to you in line with our contractual obligations to you.
Personalise your experience
We may use your personal information to personalise the marketing messages we send to you and to make them more relevant and interesting, as this is in our legitimate business interests. Where necessary we will obtain your consent first. We may use your personal information for this purpose in the following ways:
- Using your online browsing behaviour as well as your online purchases to help us better understand you as a member and provide you with personalised offers and services;
- Providing you with relevant marketing communications (including by email, post, telephone, SMS, or online advertising), relating to products and services we offer, and those of our manufacturers and distributors, suppliers and partners. As part of this, online advertising may be displayed on the ERP and on the organisations’ websites and online social media channels. We may also measure the effectiveness of our marketing communications and those of our manufacturers and distributors, suppliers and partners;
- To help us to better understand you and provide you with services and marketing communications, that are relevant to your interests, we combine personal information we collect when you make purchases from the Medsource online ERP.
Contact and interact with you
We may use your personal information when we communicate with you, in order to:
- Update you on the status of the order placed on the Medsource ERP including availability of products, status of your order, payment of your order, shipment of the order
- Contact you about our Services, for example by phone, email or post or by responding to social media posts that you have directed at us;
- Manage promotions and competitions you take part in, including those we run with our distributors and manufacturer and partners.
- Invite you to take part in and manage customer surveys, questionnaires and other market research activities carried out by Medsource Group Ltd and by other organisations on our behalf
It is in our legitimate business interests that we are able to provide you with appropriate responses and provide you with notice about our services.
Manage and improve our day-to-day operations.
We analyse information about how you use our services to:
- Manage and improve our website and ERP;
- Help to develop and improve our product range, services, information technology systems, know-how and the way we communicate with you;
- Detect and prevent fraud or other crime.
It is in our legitimate business interests to use the information provided to us for this purpose, so we can understand any issues with our services to improve it.
Sharing Personal Information
We may share your personal information with third parties under the following circumstances:
Management Science for Health (MSH)
We may share the personal information collected by MedSource Group LTd with our parent organization for the purposes listed above.
Distributors/Manufacturers on Medsource Group ERP
Medsource Group will share your personal information with manufacturers and distributors that sell products through our ERP. We only share personal information that enables our Distributors/Manufacturers to provide their services. For example, when you shop on the ERP we will give the relevant Distributors/Manufacturers your name, contact details, and address so that they can deliver your items.
Service Providers
We work with carefully selected Service Providers that carry out certain functions on our behalf. These include, for example, companies that help us with technology services, storing and combining data, processing payments and delivering orders. We only share personal information that enables our Service Providers to provide their services.
Some of the Service Providers we work with operate online media channels, and they place relevant online advertising for our products and services, as well as those of our suppliers and our Retail Partners, on those online media channels on our behalf. For example, you may see an advert for our products and services when you use a particular social media site.
Sharing Personal Information With Other Organisations
We shall not (a) modify your data, (b) disclose non-aggregated or non-anonymized data, except as compelled by law, or (c) access your data, except to provide the Medsource Group service and prevent or address service or technical problems, generate anonymous or aggregated data, or at your request in connection with customer support matters.
Medsource Group Ltd will NOT sell, collect, use, share, or rent any personal information for purposes other than those described in this Policy without first obtaining your consent. Medsource Group Ltd will NOT share specific information about your business or your identity with third-party vendors.
We may share personal information with other organisations in the following circumstances:
- if any applicable law or a public authority says we must share the personal information;
- if we need to share personal information in order to establish, exercise or defend our legal rights (this includes providing personal information to others for the purposes of preventing fraud and reducing credit risk);
- to an organisation we sell or transfer (or enter into negotiations to sell or transfer) any of our businesses or any of our rights or obligations under any agreement we may have with you to. If the transfer or sale goes ahead, the organisation receiving your personal information can use your personal information in the same way as us
- to any other successors in title to our business; or
- to anyone to whom we transfer or may transfer our rights and duties under our agreement with you.
Transfer Of Your Personal Information
Your personal information may be transferred to, stored, and processed in a country that is different from your country of residence or our country of incorporation. In any case, we have put in place appropriate safeguards in accordance with applicable legal requirements to ensure that your data is adequately protected. Medsource Group Ltd agrees to protect customer data as per the laws of each country of operation and will only ever disclose aggregated or anonymous data.
In the event your personal information is transferred to a foreign jurisdiction, it may be subject to the laws of that jurisdiction and we may be required to disclose it to the courts, law enforcement or governmental authorities in those jurisdictions but we will only do so where required by applicable laws.
How We Protect Personal Information
We maintain physical, technical, and organisational safeguards to secure your personal information from unauthorized access, use, alteration and destruction. However, no internet-based site can be 100% secure and we cannot be held responsible for unauthorised or unintended access that is beyond our control.
Social Media
We operate channels, pages and accounts on some social media sites to inform, assist and engage with customers. We monitor and record comments and posts made on these channels about us so that we can improve our services.
Medsource Group Ltd is not responsible for any information posted on those sites other than information we have posted ourselves. We do not endorse the social media sites themselves or any information posted on them by third parties.
Retention
We keep records for as long as required to a) manage purchases, bookings, memberships and provide the other relevant products or services anticipated by this Privacy Policy, including keeping you up-to-date with our marketing b) personalise the products, services and communications with you c) comply with the applicable record retention legal requirements. When deciding how long to keep your personal information after our relationship with you has ended, we take into account our legal obligations and regulators’ expectations.
If you wish to request that we no longer use your information to provide you services, please submit your request via info@medsource-group.com
However, we will retain and use your registration information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
Marketing Communications
All marketing communications we send to you will provide you with a way to withdraw your consent to future marketing. If you no longer wish to receive promotional materials you may opt-out from receiving these communications or change your account settings, this will remove you from marketing lists.
Please note that if you unsubscribe from marketing communications you will still receive operational and service messages from us regarding the services or products you bought from us and responses to enquiries made to us, and that we may hold your details on a suppression list so we don’t send you marketing communications in the future.
Cookies And Similar Technologies
We use cookies and similar technologies, such as tags and pixels (“Cookies”), to personalise and improve your customer experience as you use our website and ERP and to provide you with relevant online advertising. Cookies are small data files that allow a website or Mobile App to collect and store a range of data on your desktop computer, laptop or mobile device.
Cookies help us to provide important features and functionality on our Websites and ERP and we use them to improve your customer experience. For example, we use Cookies to do the following:
- Improve the way our Websites and ERP work
Cookies allow us to improve the way our Websites and Mobile Apps work so that we can personalise your experience and allow you to use many of their useful features. For example, we use Cookies so we can remember your preferences and the contents of your shopping basket when you return to our Websites and Mobile Apps.
- Improve the performance of our Websites and ERP
Cookies can help us to understand how our Websites and Mobile Apps are being used, for example, by telling us if you get an error message as you browse. These Cookies collect data that is mostly aggregated and anonymous.
Your choices when it comes to Cookies
You can use your browser settings to accept or reject new Cookies and to delete existing Cookies. You can also set your browser to notify you each time new Cookies are placed on your computer or other device.
Once you have given us your consent to the use of cookies, we shall store cookies on your computer or device. If you wish to withdraw your consent at any time, you will need to delete our cookies using your internet browser settings.
Aggregate Data, Data Analytics And Social Media Functionality
We may aggregate personal information and remove any identifying elements in order to analyse patterns and improve our marketing and promotional efforts, to analyse platform use, to improve our content and product offerings, and to customize our Platforms’ content, layout, products and services, and we may appoint third parties to do this on our behalf, as set out above.
We gather certain usage information like the number and frequency of visitors to our Platforms. This information may include which webpage you just came from, which webpage you next go to, what browser you are using, your device and your IP address. We only use such data in the aggregate. This collective data helps us to determine how much our customers use parts of our Platforms, and do research on our users’ demographics, interests, and behaviour to better understand and serve you.
If you use buttons on our Platforms linked to social media or similar sites (for example “Like” and/or “Share” buttons), content from our Platforms may be sent back to that other website or service and, depending on your privacy settings, may be privately or publicly visible (for example to friends, followers, or generally to anyone who has access to your profile page).
Your Rights
You have the right to see or access the personal information we hold about you, by submitting your request via info@medsource-group.com
In addition, you have certain rights regarding your personal information, subject to local law. These include the following rights to:
- rectify the information we hold about you;
- erase your personal information;
- restrict our use of your personal information;
- object to our use of your personal information;
- withdraw any consents you have provided for our use of your personal information;
- receive your personal information in a usable electronic format and transmit it to a third party (right to data portability); and
- lodge a complaint with your local data protection authority.
If you would like to discuss or exercise such rights, please contact us at the details below.
If you are concerned that any of the information we hold about you is incorrect, or out of date, please write to the address above to report your concerns and we will take appropriate steps to amend our records.
Please note that we will likely require additional information from you in order to honour your requests.
Links
Our Websites or ERP may contain links to other websites operated by other organisations that have their own privacy policies. Please make sure you read the terms and conditions and privacy policy carefully before providing any personal information on a website as we do not accept any responsibility or liability for websites of other organisations.
Children
Our platforms are not directed towards children. If you are providing personal information for an individual less than 18 years of age, you are providing us your affirmative parental consent as the legal parent or guardian to collect, use and process the information of the individual less than 18 years of age, consistent with this Privacy Policy.
Notification of Changes to this Privacy Policy
We update this Privacy Policy when needed and place updates on our platforms. If we are going to use your personal information in a manner different from that stated at the time of collection, we will notify you. All changes will become effective when posted unless indicated otherwise. Please review this Privacy Policy periodically for changes.
Consent
By accepting this Privacy Policy, you hereby do give Medsource Consent to process your personal and sensitive data as stipulated in the Medsource Group Limited Privacy Policy.