The latest revisions of this document are listed below. Please refer to the previous versions of this document for earlier revision histories.
Summary of Changes
This is the first instance of a CAN UK Ltd website data privacy notice drafted by Ian Flood, the DPO contracted by CAN UK.
Summary of Changes
CAN Legals issued content amends to more accurately reflect the nature of the websites holding this notice.
1.2 Approvals
Approvers
First Line: ECED
Second Line: EHH
First Line: 26/05/26
Second Line: 26/05/26
Final Approval:
Executive team
Welcome to the Cantourage UK Ltd Privacy Notice
This information has been produced to help you understand everything you need to know about the way Cantourage UK Ltd collects, uses, and shares personal data, what your legal rights are and how to exercise them. We hope you’ll take some time to read this document; we’ve tried to keep it all as simple as possible and to avoid jargon, and we’ll make our best efforts to keep you informed if there are any changes tothe way we process your personal data in the future. Cantourage UK takes its responsibility for protecting your data very seriously and we do advise you get to know our practices. If there’s anything here you don’t understand, or if you want to ask any questions, please feel free to contact us. This document was last updated on: 26 May 2026
Who is the Data Controller?
We are Cantourage UK Ltd. We are the Data Controller responsible for your personal data.
Registered Address: 238-240 Bethnal Green Road, London, E2 0AA
Registration Number: 13145673
In this document Cantourage UK may be referred to as “we”, “us”, or “our”.
What Kinds of Personal Data does Cantourage UK Process?
We collect personal data for various purposes; with that in mind we have created a list of the types of personal data that we may collect, either directly from yourself or from other sources, in order to achieve those purposes.
Types of People:
Wholesalers
Pharmacies
Licence holders
Date Approved
Name, email, telephone numbers, payment data
Name, email, telephone numbers, payment data
Name, email, telephone numbers, payment data
Special Category Personal Data
Cantourage UK does not intentionally collect special category personal data through the B2B Portalor its B2B website. However, in limited circumstances, special category personal data may beincidentally included within documents or communications submitted by Customers. Where thisoccurs, such data will be processed only to the extent necessary to comply with Applicable Laws,regulatory obligations or contractual requirements.
What are the reasons Cantourage UK collects Personal Data?
Legal Obligations
We use personal data firstly to fulfil any contractual obligations that exist between us and yourself. Where we request personal data be provided to enter into, or meet the terms of any such contract, you will be required to provide the relevant personal data, or we will not be able to deliver the goods or services you want. In such cases the lawful basis of us processing the personal data is that it is necessary for the performance of a contract. We are required by law to process personal data for purposes relating to our legal obligations, these include:
- To provide for our financial commitments, or to relevant financial authorities.
- To comply with regulatory requirements and any self-regulatory schemes.
- To carry out required business operations and due diligence.
- To cooperate with relevant authorities for reporting criminal activity, or to detect and prevent fraud.
- To investigate any insurance claims, claims of any kind of harassment or of discrimination, or any
other claim whereby the organisation may have to defend itself. - Satisfying our regulatory obligations as a holder of a WDA(H) and Schedule 2 Controlled Drug Licence.
Consent
We may process personal data or the following reasons where we have sought your consent to do so:
- In relation to cookies consented to on our cookie banner when you interact with our website.
Contractual Necessity
We may process personal data for any of the following purposes:
- providing access to and operating the Portal;
- managing accounts and Authorised Users;
- supplying the Products ordered;
- responding to any enquiries submitted through contact forms.
Legitimate Interests
We may process personal data for any of the following purposes, which are considered to be within our legitimate business interests:
- To provide goods and services where it has been requested;
- Communicating with customers about Portal functionality;
- Verifying eligibility and licence-holder status;
- Responding to enquiries or requests for further information;
- To send information to people who have asked to be kept informed;
- To improve the quality of services offered and to better understand customers’ needs by
requesting feedback or reviews of the services provided, or by sending survey forms; - To send notifications of any changes to the goods and/or services provided that may affect
people; - To understand the scale of our customer base; for statistical analysis and market research;
- To recognise when people re-engage with us;
- To facilitate the completion of research initiatives;
- To allow us to support and maintain our products in active service;
- To provide reference information to third party organisations when necessary;
- To improve our website so content is delivered more efficiently;
- Security, fraud prevention and audit;
- Ensuring the security and integrity of the Portal and related systems;
- Monitoring, logging and auditing Portal activity, including account access, uploads, downloads,
order activity and security events; - Detecting, investigating and preventing unauthorised access, misuse, fraud and cyber-security
incidents; - To enhance the security measures in place that protect data we are responsible for;
- To protect our assets;
- To provide for and manage members of staff within the organisation.
Where does Cantourage UK Obtain Personal Data from?
We collect personal data directly in various ways. This could include when you complete an online form,or if you provide the data directly to a representative of Cantourage UK.
Where it is necessary for us to achieve our business objectives, we may collect personal data from publicly accessible sources.
We may also gather personal data by any of the following methods:
- By systems that gather data automatically from your computer equipment when visiting our online platforms.
- From systems that allow geographical location tracking, such as IP Address and device/browser information collected automatically through the Website and associated technologies. See our cookie banner on our website for more details.
Who does Cantourage UK Share Personal Data with?
To achieve the above stated purposes for which we process your personal data, we may have to share information with certain third-party organisations. This may include where we are legally required to do so, or where it is strictly necessary in order to deliver a particular product or service.
We will make all reasonable efforts to ensure any third-party with whom we share personal data is compliant with data protection law.
The kinds of third-parties we may share your information with include:
- Organisations where it is necessary to provide goods and services or to achieve our business purposes.
Where will Cantourage UK process your Personal Data?
As a part of our standard business practices, we may transfer your personal data to organisations
based in countries that have not been granted an adequacy decision under the General Data Protection
Regulation. Where this is the case we will ensure the data is protected by appropriate safeguards.
How Long will Cantourage UK Keep your Personal Data?
We will keep your personal data only for as long as required to achieve the purposes for which it is
gathered.
The following criteria determine the period for which we retain personal data:
- Until we are no longer required to do so to comply with regulatory requirements or financial
obligations. - Certain records relating to orders, regulatory documentation, audit logs and Portal activity may be
retained for longer periods where necessary to comply with legal, regulatory, tax, licensing, GDP
or audit obligations. - Until we are no longer required to do so by any law we are subject to.
- Until all purposes for which the data was originally gathered have become irrelevant or obsolete.
- Until it is requested that we no longer process the data and that it is erased.
Your Rights, Our Responsibility
The Right of Access
This grants you the right to confirm whether or not your personal data is being processed, and to be provided with relevant details of what those processing operations are and what personal data of yours is being processed.
If you would like access to the personal data we have about you, we ask that you contact us using the
details below.
The Right to Rectification
This one is fairly straight forward; if you notice that the data we have about you is inaccurate or incomplete, you may request we rectify the mistake. We will make every effort to respond to requests of this type immediately.
The Right to Erasure
Otherwise known as the ‘right to be forgotten’, this given you the right to request your personal data be deleted.
This is not an absolute right; if you were to request that we erase your personal data, we would erase as much of that data as we could but may have to retain some information if it is necessary. Were we have received a request for personal data to be erased, if it is necessary for us to retain some of that information we shall ensure that the remaining data is used only when and where it is absolutely necessary.
The Right to Objection
The right to object is a basic freedom all democracies enjoy. If you wish to object to the way we use, or
have used, your personal data you may do so freely.
The Right to Complain
We will always try to maintain the highest standards and encourage the confidence our customers have in us as an organisation. To achieve this, we request that any complaints be first brought to our attention so we can properly investigate matters. If you would like to complain about Cantourage UK to a regulatory body, you may do so by contacting your local data protection supervisory authority.
Cantourage UK Contact Details
For further information related to this policy, please contact:
Cantourage UK
238-240 Bethnal Green Road, London, E2 0AA
legals@cantourage.co.uk
The Cantourage UK Data Protection Officer
Ametros Group Ltd
Lakeside Offices
Thorn Business Park
Rotherwas Industrial Estate
Hereford
Herefordshire
England
HR2 6JT
dpo@ametrosgroup.com
www.ametrosgroup.com
