​TCM Healthcare Group Limited (UK)
Effective Date: 05/2025

This Privacy Policy outlines how TCM Healthcare Group Limited (“we”, “us”, or “our”) collects, uses, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and other applicable privacy laws.

By using our website or purchasing our products, you agree to the terms of this Privacy Policy.

1. Who We Are

TCM Healthcare Group Limited
We are the data controller for the purposes of this Privacy Policy.

2. Information We Collect

We may collect and process the following types of personal data:

• Identity Data: Name, title, date of birth

• Contact Data: Billing address, delivery address, email address, phone number

• Transaction Data: Details about payments and purchases

• Technical Data: IP address, browser type, time zone, and other device data

• Usage Data: How you use our website, including pages visited and products viewed

• Marketing Preferences: Your preferences for receiving marketing communications

3. How We Use Your Data

We use your personal data to:

• Process and deliver orders

• Manage your customer account

• Communicate with you about your order or inquiry

• Improve our website, products, and services

• Comply with legal and regulatory obligations

• Send you marketing offers (only with your consent)

4. Legal Bases for Processing

We rely on the following legal bases:

• Contractual necessity – for order fulfillment and delivery

• Legitimate interests – to improve our services and business operations

• Legal obligation – to comply with tax and regulatory duties

• Consent – for marketing communications (you can withdraw at any time)

5. How We Share Your Data

We may share your data with:

• Payment processors (e.g., Stripe, PayPal)

• Delivery and logistics partners (e.g., Royal Mail, DPD)

• IT and website hosting providers

• Regulators, law enforcement, or tax authorities (as required by law)

We never sell your personal data to third parties.

6. International Data Transfers

We may transfer your data outside the UK, including to countries that do not offer the same level of data protection. Where we do, we ensure appropriate safeguards are in place (e.g., standard contractual clauses).

7. Data Retention

We retain your data only as long as necessary to fulfill the purposes we collected it for, including satisfying legal and accounting requirements. Typically:

• Order and transaction data: 6 years

• Marketing preferences: Until you withdraw consent

• Website analytics: As per cookie provider settings (see our Cookie Policy)

8. Your Data Protection Rights

You have the right to:

• Access the personal data we hold about you

• Request correction or deletion of your data

• Object to or restrict data processing

• Withdraw consent for marketing at any time

• Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise these rights, please contact us at help@health2u.uk.

9. Security

We take appropriate security measures to prevent personal data from being lost, misused, or accessed without authorization. This includes SSL encryption, secure payment processing, and restricted access protocols.

10. Third-Party Links

Our website may contain links to other sites. We are not responsible for their privacy practices, and you should read their privacy policies separately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with the updated effective date.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or your personal data, please contact:

Data Protection Officer
TCM Healthcare Group Limited

help@health2u.uk