Legal

Privacy Policy

Last updated: 1 October 2026

1. Who we are

This website is operated by GraalMed Distribution Limited, a company established in Malta, European Union ("GraalMed", "we", "us"). We are the controller of the personal data described in this policy.

For any question about this policy or about your personal data, write to graalmed@graalmeddistribution.com.

2. What this policy covers

This policy explains how we handle personal data when you visit this website or contact us by email. The website is informational only: there are no user accounts, no online orders and no contact forms.

3. Personal data we process

• Data you send us. If you write to us, we receive your name, email address, the organisation you represent and the content of your message, together with any document you choose to attach.
• Technical data. When you load a page, our server records standard technical information in its logs: IP address, date and time of the request, the page requested and the type of browser and device.

We do not use this website to collect special categories of personal data, and we ask you not to send us any by email.

4. Why we use it and on what legal basis

• To answer your enquiry and to take steps before entering into a business relationship with the organisation you represent (Article 6(1)(b) GDPR, or our legitimate interest in replying to business correspondence, Article 6(1)(f) GDPR).
• To keep the website secure, prevent misuse and diagnose technical problems (our legitimate interest, Article 6(1)(f) GDPR).
• To comply with legal obligations that apply to us (Article 6(1)(c) GDPR).

We do not use your data for automated decision-making or profiling, and we do not sell personal data.

5. Who receives your data

Personal data is handled by our own staff and by service providers that act on our instructions, such as our hosting and email providers. We share data with authorities only where the law requires it.

6. Transfers outside the European Economic Area

We aim to keep personal data within the European Economic Area. If a provider processes data outside it, we rely on the safeguards provided by the GDPR, such as an adequacy decision or the European Commission's standard contractual clauses.

7. How long we keep it

• Email correspondence is kept for as long as needed to handle your enquiry and the business relationship that may follow, and afterwards for the period required by law.
• Server logs are kept for a limited period and then deleted or anonymised.

8. Your rights

Under the GDPR you have the right to ask us for access to your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on consent, you may withdraw that consent at any time.

To exercise these rights, write to graalmed@graalmeddistribution.com. You also have the right to lodge a complaint with the data protection authority of your country of residence or with the Office of the Information and Data Protection Commissioner in Malta.

9. Cookies

This website does not use tracking, analytics or advertising cookies. Details are in our Cookie Policy.

10. Changes to this policy

We may update this policy from time to time. The date at the top of the page shows when it was last revised.