Privacy Policy
Last updated: 1 January 2026
Summary: We are Cassiopeia Globals Ltd., a UK-based company. We collect and use your personal data only to process your orders, respond to your enquiries, and improve our services. We never sell your data to third parties. This policy explains exactly what data we collect, how we use it, and your rights under UK law.
1. Who We Are
Cassiopeia Globals Ltd. ("we", "us", "our") is the data controller responsible for your personal data. We are a UK-based company supplying dental and surgical instruments.
Contact details:
Email: cassiopeiaglobals@gmail.com
Phone: 07939059282
Website: https://www.cassiopeiaglobals.com
2. What Personal Data We Collect
We collect personal data that you provide directly to us when you:
- Place an order on our website
- Create a customer account
- Subscribe to our newsletter
- Contact us via our contact form or email
- Visit our website (automatic data)
The categories of personal data we collect include:
- Identity data: first name, last name
- Contact data: email address, telephone number, billing address, delivery address
- Transaction data: details of products you have purchased, order history, payment confirmation references
- Technical data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform (collected automatically when you visit our website)
- Usage data: information about how you use our website
- Marketing and communications data: your preferences for receiving marketing from us and your communication preferences
We do not store payment card details. All payment processing is handled securely by PayPal. We receive only confirmation of payment and a transaction reference number.
3. How We Collect Your Personal Data
We collect data through the following means:
- Direct interactions: data you provide when placing an order, creating an account, subscribing to our newsletter, or contacting us
- Automated technologies: when you visit our website, we may automatically collect technical data about your equipment, browsing actions and patterns using cookies and similar technologies
- Third parties: we receive payment confirmation data from PayPal when you complete a purchase
4. How We Use Your Personal Data
We use your personal data for the following purposes and on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| To process and fulfil your orders, including sending confirmation and dispatch notifications | Performance of contract |
| To manage your customer account | Performance of contract |
| To respond to your enquiries and customer service requests | Legitimate interests / Performance of contract |
| To send you our newsletter (only if you have subscribed) | Consent |
| To improve our website and services | Legitimate interests |
| To comply with legal obligations, including accounting and tax requirements | Legal obligation |
| To detect and prevent fraud | Legitimate interests / Legal obligation |
5. Marketing Communications
We will only send you marketing communications if you have specifically subscribed to our newsletter. You can unsubscribe at any time by clicking the unsubscribe link in any email we send you, or by contacting us directly at cassiopeiaglobals@gmail.com.
We do not share your personal data with third parties for their own marketing purposes.
6. Who We Share Your Data With
We may share your personal data with the following categories of third parties:
- PayPal: to process your payment. PayPal's privacy policy applies to data processed by PayPal.
- Hostinger: our website hosting provider, who stores website data on our behalf.
- Delivery carriers: we share your name and delivery address with our delivery partners to fulfil your order.
- HMRC and other regulators: where required by law.
We do not sell your personal data to any third party.
7. International Data Transfers
We primarily process your data within the United Kingdom and the European Economic Area. Where data is transferred outside these areas (for example, by PayPal), appropriate safeguards are in place in accordance with UK GDPR requirements.
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements.
- Order data: retained for 7 years to comply with HMRC requirements
- Customer account data: retained while your account is active and for 2 years after your last interaction
- Newsletter subscriber data: retained until you unsubscribe
- Contact enquiry data: retained for 2 years
9. Your Rights Under UK GDPR
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights:
- Right of access: the right to request a copy of the personal data we hold about you
- Right to rectification: the right to request correction of inaccurate or incomplete data
- Right to erasure: the right to request deletion of your personal data in certain circumstances
- Right to restrict processing: the right to request that we restrict processing of your data in certain circumstances
- Right to data portability: the right to receive your data in a structured, machine-readable format
- Right to object: the right to object to processing based on legitimate interests or for direct marketing purposes
- Rights related to automated decision-making: we do not use automated decision-making or profiling
To exercise any of these rights, please contact us at cassiopeiaglobals@gmail.com. We will respond within 30 days.
10. Cookies
Our website uses cookies to ensure the website functions correctly (for example, to maintain your shopping cart and login session). These are essential cookies and do not require your consent. We do not currently use analytical or marketing cookies.
You can control cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of our website.
11. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. All data is transmitted over secure HTTPS connections. Passwords are stored using industry-standard hashing (bcrypt). We regularly review our security measures.
12. Children's Privacy
Our website and services are not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page indicates when the policy was last updated. We encourage you to review this policy periodically.
14. How to Complain
If you have concerns about how we handle your personal data, please contact us first at cassiopeiaglobals@gmail.com and we will do our best to resolve your concern.
You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113