Take a moment to explore our current special offers and discover selected products available at reduced prices. Whether you’re planning ahead or looking for a practical solution right now, our latest offers are worth a closer look.
EMR Storage Solutions Limited respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store and protect personal data when you:
visit our website;
contact us;
request information about our products;
place an order;
purchase products from us;
communicate with us regarding an order;
submit information through one of our website forms;
or otherwise interact with us in connection with our products and services.
This Privacy Policy is intended to provide the information required under the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Irish data protection legislation, including the Data Protection Act 2018.
We process personal data lawfully, fairly and transparently and only for specified, explicit and legitimate purposes.
2. Who We Are
The data controller responsible for your personal data is:
EMR Storage Solutions Limited Company Registration Number: 418635
Address: Unit 11 Dunboyne Business Park Dunboyne Co. Meath A86 EC60 Ireland
EMR will assess whether the appointment of a formal Data Protection Officer is legally required for its processing activities.
Where a Data Protection Officer is not legally required, privacy and data protection enquiries may be directed to the contact address above.
4. Personal Data We Collect
Depending on how you interact with us, we may collect the following categories of personal data.
Contact information
This may include:
name;
email address;
telephone number;
postal address;
delivery address;
billing address.
Order and transaction information
When you place an order, we may collect:
order number;
products ordered;
quantities;
delivery information;
billing information;
order value;
VAT-related information where applicable;
payment status;
correspondence relating to the order.
Payment information
EMR accepts bank transfer payments.
We may receive information necessary to identify and reconcile your payment, such as:
payer name;
payment reference;
transaction date;
amount paid;
bank transfer reference;
and payment status.
We do not ask you to provide your online banking password, PIN or other confidential banking credentials to us.
Where banking information is provided by you, it will only be processed for legitimate business, accounting, payment reconciliation, refund or legal purposes as applicable.
Communication information
If you contact us, we may retain:
your messages;
email correspondence;
telephone correspondence where recorded lawfully;
enquiries;
complaints;
and information provided during customer support.
Website and technical information
When you visit our website, certain technical information may be collected automatically depending on the technologies enabled on the website.
This may include:
IP address;
browser type;
device type;
operating system;
approximate location derived from IP address;
pages visited;
referring website;
date and time of access;
website interactions;
and technical information necessary for security and website operation.
Some of this information may constitute personal data under applicable law.
5. Information You Provide Through Forms
If you submit information through our contact, enquiry or other website forms, we process the information you provide in order to respond to your request.
Depending on the form, this may include:
name;
email address;
telephone number;
company name;
delivery location;
product requirements;
message content;
and any other information you voluntarily provide.
Please do not submit unnecessary sensitive personal information through our website forms.
6. How We Use Your Personal Data
We use personal data only where we have a lawful basis to do so.
Depending on the circumstances, we may use your personal data to:
Process and fulfil orders
This includes:
processing your order;
confirming your order;
preparing products;
arranging delivery;
communicating about delivery;
handling payment by bank transfer;
processing refunds;
and providing customer support.
Respond to enquiries
We use information submitted through our contact and enquiry forms to respond to requests for information, quotations and product enquiries.
Manage customer relationships
We may use information to:
communicate with customers;
provide support;
deal with complaints;
manage returns;
handle refunds;
and maintain appropriate customer records.
Meet legal obligations
We may process personal data where necessary to comply with legal obligations, including:
accounting requirements;
tax obligations;
consumer protection requirements;
legal claims;
regulatory requirements;
and requests from competent authorities.
Protect our website and business
We may process technical and account information to:
detect fraudulent activity;
prevent abuse;
protect website security;
investigate security incidents;
maintain website functionality;
and protect our legal rights.
Improve our website and services
Where the applicable legal requirements are met, we may use website and technical information to understand how our website is used and improve its performance, functionality and user experience.
Where this involves non-essential analytics or tracking technologies, the applicable consent requirements will be respected.
7. Legal Bases for Processing
Under the GDPR, personal data must be processed on a valid legal basis.
Depending on the circumstances, EMR may rely on the following legal bases.
Performance of a contract
We may process personal data where necessary to:
accept and process an order;
arrange delivery;
communicate with you about your purchase;
process payments;
process returns and refunds;
or otherwise perform our contractual obligations.
Legal obligation
We may process personal data where necessary to comply with legal obligations, including accounting, tax and regulatory requirements.
Legitimate interests
We may process personal data where this is necessary for our legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
Our legitimate interests may include:
operating and administering our business;
maintaining customer records;
protecting our website;
preventing fraud;
improving our services;
handling complaints;
establishing or defending legal claims;
and communicating with existing customers about matters relating to their relationship with us.
Where we rely on legitimate interests, we consider the impact of the processing on individuals and apply appropriate safeguards.
Consent
Where consent is required by law, we will ask for it before carrying out the relevant processing.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
8. Direct Marketing
We distinguish between service communications and direct marketing.
Service communications include messages necessary to process or manage your order, such as:
order confirmations;
invoices;
payment information;
delivery information;
return information;
refund information;
and responses to customer enquiries.
These communications are not treated as optional marketing communications where they are necessary to perform the contract or provide the requested service.
Electronic direct marketing, such as promotional emails or text messages, is subject to the GDPR and the Irish ePrivacy Regulations. As a general rule, electronic direct marketing requires affirmative consent, subject to the limited existing-customer exception provided by law.
Where we send permitted direct marketing communications, we will provide an appropriate opportunity to opt out.
Every applicable marketing email will provide an easy way to unsubscribe.
Under GDPR Article 21, individuals have an absolute right to object to processing of their personal data for direct marketing purposes.
9. Information Required to Place an Order
Certain personal information is necessary to enter into and perform a sales contract.
For example, we may require:
your name;
contact details;
billing information;
delivery address;
and information necessary to process your order.
If you do not provide information that is necessary to process your order, we may be unable to accept, fulfil or deliver the order.
Where information is optional, we will make this clear where appropriate.
10. Who We Share Personal Data With
We do not sell your personal data.
We may share personal data with trusted third parties where this is necessary for legitimate business purposes, to perform a contract, comply with a legal obligation or where another lawful basis applies.
Depending on how the website and business operate, recipients may include:
Delivery and logistics providers
We may provide delivery-related information such as:
name;
delivery address;
telephone number;
and order information
to delivery or transport providers where necessary to fulfil the order.
Website and hosting providers
Our website and its underlying systems may be hosted, maintained or supported by third-party service providers.
IT and technical service providers
We may use providers for:
website maintenance;
security;
backups;
email;
technical support;
and related services.
Accounting and professional advisers
We may share information with:
accountants;
auditors;
legal advisers;
insurers;
and other professional advisers
where necessary for legitimate business or legal purposes.
Payment and banking services
Because payments are made by bank transfer, payment information may be processed by banks and financial institutions involved in the transfer.
Google and other online service providers
Where applicable services are enabled on the website, certain information may be processed by third-party providers such as Google in connection with:
website analytics;
advertising measurement;
security;
product information;
or other website functionality.
The precise providers and processing activities will depend on the services actually enabled on the website.
11. Google Merchant Center
Product information submitted to Google Merchant Center is primarily commercial/product information.
Where personal data is included in information transmitted to Google or associated Google services, such processing will be carried out only where there is an appropriate legal basis and in accordance with applicable data protection requirements.
We do not intentionally submit unnecessary customer personal data to Google Merchant Center.
Customer order information will not be disclosed to Google merely because a customer places an order, except where a particular Google service or integration lawfully requires relevant information and the applicable privacy requirements are satisfied.
12. International Data Transfers
Some of our service providers may process personal data outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we will ensure that an appropriate legal transfer mechanism and safeguards are in place where required by GDPR.
These may include:
an EU adequacy decision;
Standard Contractual Clauses;
or another legally recognised transfer mechanism.
Where required, further information about applicable safeguards may be obtained by contacting us.
The GDPR transparency requirements include informing individuals about relevant transfers outside the EU/EEA and the safeguards relied upon.
13. How Long We Keep Personal Data
We retain personal data only for as long as necessary for the purpose for which it was collected, taking into account applicable legal, accounting, tax, contractual and dispute-resolution requirements.
There is no single GDPR retention period applicable to all information. Retention depends on the type of information and why it is processed. The Irish Data Protection Commission confirms that organisations must apply the storage limitation principle and consider statutory retention requirements when determining appropriate periods.
Our general retention approach is:
Type of information
General retention approach
Customer/order records
For the duration of the customer relationship and subsequently for as long as required for legal, accounting, tax and contractual purposes
Invoices and financial records
For the period required by applicable accounting and tax legislation
Customer enquiries
For as long as reasonably necessary to respond and manage the enquiry, and longer where necessary for legal or business purposes
Complaints
For as long as reasonably necessary to investigate and resolve the complaint and to meet legal or dispute-resolution requirements
Marketing preferences
Until consent is withdrawn or the individual otherwise objects, subject to any information necessary to maintain an opt-out record
Website/security logs
For the period reasonably necessary for security, troubleshooting and legal purposes
Account information
For the duration of the account and thereafter where necessary for legal or legitimate business purposes
When personal data is no longer required, it will be securely deleted, anonymised or otherwise disposed of in accordance with our retention practices.
14. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Some cookies are strictly necessary for the website to function, including technologies required for services explicitly requested by the user, such as maintaining a shopping cart.
Other cookies, including certain analytics, advertising and tracking technologies, may require user consent under Irish ePrivacy rules.
Our Cookie Policy provides further information about:
the cookies and technologies we use;
their purposes;
their providers;
their retention periods;
and how you can manage your preferences.
Where consent is required, users must be able to withdraw or change their consent, and withdrawing consent should be as easy as giving it.
15. Data Security
We take reasonable technical and organisational measures to protect personal data against:
unauthorised access;
accidental loss;
destruction;
alteration;
disclosure;
and other unlawful or unauthorised processing.
Security measures may include appropriate access controls, secure communications, software updates, backups and other technical safeguards appropriate to the nature of the information processed.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
16. Data Breaches
If we become aware of a personal data breach, we will assess the breach and take the steps required by applicable data protection law.
Where notification to the Data Protection Commission or affected individuals is legally required, we will make the relevant notification within the applicable timeframe.
17. Your Data Protection Rights
Subject to applicable legal conditions and exemptions, you have rights under the GDPR including:
Right to access
You may request confirmation as to whether we process your personal data and request a copy of that information.
Right to rectification
You may request correction of inaccurate or incomplete personal data.
Right to erasure
You may request deletion of your personal data in certain circumstances.
This right is not absolute and does not apply where we are legally required or otherwise entitled to retain the information.
Right to restriction
You may request restriction of processing in certain circumstances.
Right to data portability
Where applicable, you may request your personal data in a structured, commonly used and machine-readable format and request that it be transferred to another controller.
Right to object
You may object to certain processing based on legitimate interests.
You have an absolute right to object to processing of your personal data for direct marketing purposes.
Right to withdraw consent
Where processing is based on consent, you may withdraw your consent at any time.
Withdrawal does not affect processing carried out lawfully before the withdrawal.
These rights are subject to the conditions and limitations contained in the GDPR and applicable law.
Please provide enough information to allow us to identify you and understand your request.
Where reasonably necessary to protect personal data against unauthorised disclosure, we may ask for additional information to verify your identity.
The Irish Data Protection Commission confirms that organisations may request additional information where there are reasonable doubts about an individual’s identity.
We will respond to valid data protection requests within the timeframe required by applicable law.
19. Complaints to the Data Protection Commission
If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the Irish supervisory authority:
Data Protection Commission
21 Fitzwilliam Square South Dublin 2 D02 RD28 Ireland
You can find further information about the Data Protection Commission and its complaint process on its official website.
This does not prevent you from contacting EMR first. We encourage customers to contact us so that we can try to resolve privacy concerns directly.
20. Children’s Data
Our website and products are intended for adults and businesses.
We do not knowingly seek to collect personal data from children for marketing purposes.
If you believe that a child has provided personal data to us unnecessarily, please contact us at:
We do not currently use personal data to make decisions based solely on automated processing that produce legal effects or similarly significant effects on individuals.
If this changes, we will update this Privacy Policy and provide any information required by applicable law.
22. Third-Party Websites
Our website may contain links to third-party websites.
We are not responsible for the privacy practices, security or content of websites operated by third parties.
We recommend reviewing the privacy policy of any third-party website before providing personal information.
23. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
changes to our business;
changes to the website;
new technologies;
changes to our service providers;
changes to data processing activities;
or changes in applicable law.
The updated version will be published on this page with an updated “Last updated” date.
The Data Protection Commission recommends that privacy policies be reviewed and updated so that they accurately reflect an organisation’s actual processing activities.
24. Contact Details
EMR Storage Solutions Limited Company Registration Number: 418635
Unit 11 Dunboyne Business Park Dunboyne Co. Meath A86 EC60 Ireland
