Data Protection

At J&J Medical Ltd, we take data protection and privacy very seriously. We are committed to safeguarding the personal and sensitive information of our clients, employees, and partners. Our data protection policies are designed to comply with all relevant laws and regulations, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Cyber Essentials Accredited

We are proud to be Cyber Essentials accredited, demonstrating our commitment to cybersecurity. This government-backed accreditation assures our clients that we have implemented robust cybersecurity measures to protect our systems and data from potential threats. Our accreditation means that we have the following security controls in place:

Secure Configuration: We ensure all our devices and systems are configured securely to reduce vulnerabilities.

Boundary Firewalls and Internet Gateways: We use firewalls and gateways to protect our internal networks from external threats.

Access Control: We strictly manage access to our data and systems, ensuring that only authorised personnel have access to sensitive information.

Malware Protection: We employ up-to-date malware protection tools to prevent malicious software from entering our systems.

Patch Management: We regularly update our software and systems with the latest security patches to address vulnerabilities.

How We Protect Your Data

Data Encryption: We use advanced encryption methods to protect personal and sensitive data, ensuring that it is unreadable to unauthorised users.

Access Restrictions: Access to sensitive data is restricted to authorised personnel only. We enforce strict access control measures to prevent unauthorised access.

Regular Audits: We conduct regular security audits and assessments to identify and mitigate any potential risks.

Employee Training: Our team receives regular training on data protection best practices and cybersecurity awareness, ensuring they are equipped to handle data responsibly and securely.

Incident Response: We have a comprehensive incident response plan in place to quickly and effectively respond to any data breaches or security incidents.

Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

Right to Access: You can request a copy of the personal data we hold about you.

Right to Rectification: You can request that we correct any inaccurate or incomplete data.

Right to Erasure: You can request that we delete your personal data, subject to certain conditions.

Right to Restrict Processing: You can request that we restrict the processing of your data under certain circumstances.

Right to Data Portability: You can request that we transfer your data to another organisation or directly to you, in a structured, commonly used, and machine-readable format.

Right to Object: You have the right to object to the processing of your personal data under certain conditions.

Contact Us

If you have any questions about our data protection policies, wish to exercise your data protection rights, or believe your data has been handled inappropriately, please contact our Data Protection Officer:

Email: admin@jandjmedical.co.uk

Phone: 0800 001 6943

Address:
J&J Medical Ltd
53 Long Ley 
Harlow cm203nl
United Kingdom

We are committed to responding to all data protection inquiries promptly and ensuring that your data is handled securely and responsibly.