Privacy

Privacy Policy

Last updated: 1 May 2026

Overview

This privacy policy explains how MediStack (we, us, our) collects, uses and protects information about you when you visit this website or use our platform. We are committed to processing your data lawfully, fairly and transparently.

If you have any questions about this policy, please contact us at hello@medistack.com.

Who we are

MediStack provides connected infrastructure for the UK CBPM industry, including services for patients, clinics, pharmacies and wholesale operations. The data controller responsible for your personal information is MediStack.

Information we collect

Information you give us

When you book a demo or get in touch, we collect the information you provide directly: name, work email, company, country, organisation type, phone number (if provided), and any message you include.

Information collected automatically

When you visit our website, we collect limited technical information through Google Analytics 4, including:

We do not send personally identifying information to Google Analytics. Cookies are used to track these signals; see the cookies section below.

How we use your information

Legal basis for processing

Sharing your information

We do not sell or rent your personal information. We share it only with trusted service providers who help us operate this site and platform:

Each provider operates under their own privacy policy and processes information only for the purposes we instruct.

International transfers

Some service providers may process information outside the UK or EEA. Where this happens, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the UK Information Commissioner.

How long we keep your information

We keep personal information only for as long as necessary to fulfil the purpose for which it was collected, satisfy legal or reporting obligations, or resolve disputes. Demo enquiries are retained for up to 24 months unless you request earlier deletion.

Cookies

Your rights

Under the UK GDPR you have the right to:

To exercise any of these rights, please email hello@medistack.com.

Security

MediStack follows the Cyber Essentials framework and applies technical and organisational measures appropriate to the sensitivity of the data we process — including encryption in transit, access controls and ongoing monitoring.

Changes to this policy

We may update this privacy policy from time to time. The last updated date at the top of this page reflects the most recent revision. Material changes will be highlighted on the homepage or communicated to you directly where appropriate.

Contact

For privacy-related questions or to exercise your rights, email hello@medistack.com.