Data Protection Notice

Effective Date: October 2025

When you submit a form, create an account, or make a purchase on the CODE BLUE CPR website, we collect and process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

CODE BLUE CPR
Website: https://codebluecpr.co/
Email: info@codebluecpr.co

2. What Data We Collect

Depending on your activity, we may collect:

Your name and contact details
Billing and shipping addresses
Email address and telephone number
Payment information (processed securely via third-party providers)
Message content (from contact forms)
Any other information you choose to provide

3. Why We Collect Your Data

We process your data to:

Respond to your enquiries or quotation requests
Fulfil and deliver your orders
Manage payments, refunds, and account details
Provide after-sales service and customer support
Comply with legal and accounting obligations

4. Lawful Basis for Processing

Processing is based on one or more of the following lawful bases:

Contract: to perform our obligations to you (e.g., fulfilling an order)
Consent: where you voluntarily provide information via a form
Legal obligation: to comply with accounting, tax, or consumer laws
Legitimate interest: to maintain security, prevent fraud, and improve our services

5. How Long We Keep Your Data

We retain your personal data only for as long as necessary to:

Complete the purpose for which it was collected
Meet legal and accounting requirements

Typically:

Enquiry form submissions – up to 12 months
Order and transaction records – up to 6 years (for tax compliance)

6. Your Rights

You have the right to:

Access your data
Request correction or deletion
Withdraw consent at any time
Object to or restrict certain processing
Lodge a complaint with the Information Commissioner’s Office (ICO)

You can exercise these rights by contacting us at: info@codebluecpr.co

7. Data Security

We use secure servers and SSL encryption to protect your personal data. Only authorised personnel have access to your information, and we never sell or share your details with unauthorised third parties.