Privacy Policy

Last updated: February 25, 2026 at 6:09 am.

SurePulse Medical Limited (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, disclose, and safeguard information when you visit our website at https://www.surepulsemedical.com, contact us, or use our services.

1. Who we are

Controller: Square Socket, a UK-based digital agency. For the purposes of UK GDPR and the Data Protection Act 2018, we are the data controller of personal data processed via our website and for our own marketing and business operations.

For certain client projects, we may act as a processor handling data on behalf of our clients (the controllers). Where we are a processor, we process personal data strictly under the client’s documented instructions and our data processing agreement (DPA).

2. Data we collect

Information you provide

• Contact details (name, email address, phone number, postal address)
• Account details (if you create an account for a service we provide)
• Project information and correspondence
• Billing details (e.g., invoicing name and address; payments are handled by third-party processors)
• Any other information you choose to provide (e.g., via contact forms or support channels)

Information collected automatically

• IP address, device identifiers, browser type, operating system
• Usage data (pages viewed, time on page, referring URLs)
• Approximate location derived from IP address
• Cookies and similar technologies (see Cookie Policy)

Information from third parties

• Payment and accounting providers (transaction confirmations, anti-fraud signals)
• Analytics and marketing platforms (aggregated usage insights)
• Public sources (e.g., company websites, professional profiles)

3. How we use your data

• Providing and improving our websites, products, and services
• Responding to enquiries, providing support, and managing projects
• Processing invoices and payments and maintaining accounting records
• Sending service communications and, where permitted, marketing updates
• Monitoring site performance, debugging, and preventing fraud or abuse
• Complying with legal obligations and enforcing our agreements

4. Legal bases (UK/EU)

• Contract: to perform a contract or take steps at your request before entering into one.
• Consent: for example, to send marketing where opt-in is required. You can withdraw consent at any time.
• Legal obligation: to comply with laws (tax, accounting, regulatory).
• Legitimate interests: for reasonable, proportionate processing that does not override your rights (e.g., securing our services, improving user experience, basic analytics, B2B outreach).

5. Sharing your data

We may share personal data with trusted recipients, including:

• Service providers (e.g., hosting, email delivery, analytics, CRM, accounting/payment platforms) under contracts that protect your data.
• Clients (when we act as a processor and need to report or provide services to the controller).
• Professional advisers (legal, accounting, insurance) under confidentiality obligations.
• Authorities where required by law or to protect rights, safety, or property.
• Corporate transactions: if we undergo a merger, acquisition, or asset sale, your data may be transferred with appropriate safeguards.

We do not sell personal data.

6. Data retention

We keep personal data only for as long as necessary for the purposes set out in this policy and to meet legal, accounting, or reporting requirements. When no longer needed, we will delete or anonymise the data.

7. Cookies & analytics

We use cookies and similar technologies to operate our website, understand performance, and enhance user experience. You can manage cookies through your browser settings. For more detail, see our Cookie Policy.

8. Your rights

Depending on your location, you may have the right to:

• Access your personal data and receive a copy
• Rectify inaccurate or incomplete data
• Erase your data in certain circumstances
• Restrict or object to processing, including objections to direct marketing
• Data portability
• Withdraw consent where processing is based on consent

To exercise these rights, contact us using the details below. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk) or your local supervisory authority.

9. Security

We implement appropriate technical and organisational measures to protect personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. International transfers

Where data is transferred outside the UK/EEA, we rely on lawful transfer mechanisms such as adequacy decisions and Standard Contractual Clauses, and we conduct risk assessments where appropriate.

11. Children’s privacy

Our services are not intended for individuals under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the “Last updated” date.

13. Contact us

SurePulse Medical Limited

Email: info@surepulsemedical.com.
Address: SurePulse Medical Limited, Medicity, D6 Thane Road, Nottingham, NG90 6BH United Kingdom.
Company number: 08112962.