SurgiSim customer information

Privacy Policy

How SurgiSim collects, uses, stores and protects your personal information.

UK warehouse fulfilment Secure online ordering UK customer support

Last updated: 9 August 2026

1. Introduction

This Privacy Policy explains how SurgiSim collects, uses, stores and shares personal information when individuals visit our website, place an order, create an account, contact us or otherwise interact with our business.

We process personal information in accordance with applicable United Kingdom data protection legislation, including the UK General Data Protection Regulation and the Data Protection Act 2018, as amended.

2. Data Controller

SurgiSim is a trading name of Astflick Group Limited. Astflick Group Limited is the data controller responsible for the personal information described in this policy.

Legal entity: Astflick Group Limited
Company number: 05950580
VAT number: GB896845841
Registered in: England and Wales

Registered office:
Unit 7 Latham Road Business Park
Latham Road
Huntingdon
Cambridgeshire
PE29 6YE
United Kingdom

Data protection contact: hello@surgisim.co.uk

3. Who This Policy Applies To

This policy applies to personal information relating to:

  • Website visitors;
  • Consumer customers;
  • Business and institutional customers;
  • Customer representatives and purchasing contacts;
  • People making product or support enquiries;
  • Suppliers and professional contacts; and
  • Individuals subscribing to marketing communications.

4. Personal Information We Collect

Depending on how an individual interacts with SurgiSim, we may collect the following categories of information.

Identity information

  • Name;
  • Job title;
  • Business or organisation name; and
  • Account username or customer identification details.

Contact information

  • Billing and delivery addresses;
  • Email address;
  • Telephone number; and
  • Business or institutional contact details.

Order and transaction information

  • Products ordered;
  • Order value;
  • Purchase history;
  • Delivery and tracking information;
  • Returns, credits and refunds;
  • Invoices and purchase orders; and
  • Payment status and transaction references.

Payment-card information is normally collected and processed securely by our payment providers. SurgiSim does not ordinarily receive or store complete payment-card numbers.

Account information

  • Account preferences;
  • Saved addresses;
  • Order history;
  • Communication preferences; and
  • Account-security information.

Communication information

  • Emails and messages;
  • Contact-form submissions;
  • Support enquiries;
  • Complaints;
  • Return requests; and
  • Feedback and survey responses.

Technical and usage information

  • Internet Protocol address;
  • Browser type and version;
  • Device type;
  • Operating system;
  • Pages viewed;
  • Referral source;
  • Approximate location derived from an IP address;
  • Website-session information; and
  • Cookie and similar-technology identifiers.

Marketing information

  • Marketing preferences;
  • Communication consent records;
  • Email engagement information; and
  • Responses to promotions or campaigns.

Fraud and security information

  • Payment-verification results;
  • Risk indicators;
  • Suspected fraudulent activity;
  • Login records; and
  • Information required to protect customers, accounts and transactions.

5. Information We Do Not Intentionally Request

SurgiSim does not normally need special-category personal information, such as medical records, health information, biometric data, religious beliefs or information about an individual’s sexual orientation.

Please do not send sensitive personal information unless it is genuinely necessary for a specific enquiry and has been requested or agreed.

6. How We Collect Personal Information

We may collect personal information:

  • Directly from individuals during checkout, registration or communication;
  • Automatically when the website is used;
  • From an individual’s employer or organisation when placing an institutional order;
  • From payment, fraud-prevention and identity-verification providers;
  • From delivery and logistics providers;
  • From public-sector procurement systems or approved marketplaces;
  • From publicly available professional or business sources; and
  • From service providers acting on our behalf.

7. Why We Use Personal Information

We may use personal information to:

  • Provide and operate the SurgiSim website;
  • Process and fulfil orders;
  • Take and verify payment;
  • Deliver products and provide tracking information;
  • Create and administer customer accounts;
  • Respond to enquiries and provide customer support;
  • Process returns, refunds, replacements and complaints;
  • Prepare quotations and respond to tenders or purchase orders;
  • Maintain financial, tax and business records;
  • Prevent fraud and protect website security;
  • Improve website performance and customer experience;
  • Measure website usage where legally permitted;
  • Send marketing communications where permitted;
  • Establish, exercise or defend legal claims; and
  • Comply with legal and regulatory obligations.

8. Our Lawful Bases

We only use personal information where a lawful basis applies.

Contract

We process personal information where necessary to take steps requested before entering into a contract or to perform a contract. This includes processing orders, taking payment, arranging delivery and handling returns.

Legal obligation

We process information where necessary to comply with legal obligations, including accounting, taxation, product-safety, fraud-prevention and regulatory requirements.

Legitimate interests

We may process information where necessary for legitimate business interests, provided those interests are not overridden by an individual’s rights.

Our legitimate interests may include:

  • Operating and improving our business;
  • Supporting customers and responding to enquiries;
  • Maintaining network and transaction security;
  • Preventing fraud and misuse;
  • Managing business and institutional relationships;
  • Understanding website performance;
  • Recovering legitimate debts; and
  • Establishing or defending legal claims.

Consent

Where consent is required, we will ask for it clearly. This may apply to certain marketing communications, analytics technologies and advertising cookies.

Consent can be withdrawn at any time without affecting processing that was lawful before withdrawal.

9. Information Required to Complete an Order

Certain personal information is required to process an order, including the customer’s name, contact information, billing details and delivery address.

If required information is not provided, we may be unable to accept, process or deliver the order.

10. Shopify

Our online store is hosted using Shopify. Shopify provides the ecommerce platform that enables us to display products, receive orders and operate customer accounts.

Shopify processes personal information to provide its services and may also process certain information for purposes described in its own privacy documentation.

More information is available in the Shopify Privacy Policy.

11. Payment Providers

Payments are processed through the payment methods made available during checkout.

Payment providers may process:

  • Name and billing information;
  • Payment-card or account details;
  • Transaction value;
  • Device and security information; and
  • Information needed for fraud prevention or regulatory checks.

Payment providers process information under their own privacy policies and security requirements.

12. Delivery Providers

We share information needed to deliver orders with appropriate postal, courier and logistics providers.

This can include:

  • Recipient name;
  • Delivery address;
  • Email address;
  • Telephone number;
  • Parcel details; and
  • Delivery instructions.

Couriers may include Royal Mail, DPD, DHL, UPS or another appropriate delivery provider.

13. Other Organisations We May Share Information With

Where necessary and lawful, we may share personal information with:

  • Shopify and ecommerce service providers;
  • Payment processors;
  • Delivery and logistics providers;
  • Cloud-hosting and IT providers;
  • Email and customer-support platforms;
  • Accounting, finance and credit-control providers;
  • Fraud-prevention and security providers;
  • Analytics and advertising providers where permitted;
  • Professional advisers, including accountants, insurers and legal advisers;
  • Government departments, regulators and law-enforcement bodies where required; and
  • A purchaser or successor in connection with a genuine business sale, restructuring or transfer.

We do not sell personal information to unrelated third parties.

14. Google Services

Where configured, our website may use Google services such as Google Analytics, Google Merchant Center or Google advertising tools.

These services may receive technical, usage, transaction or cookie information where legally permitted and according to the customer’s privacy choices.

Non-essential Google analytics or advertising technologies will only be used where the required consent or other lawful permission