i say B.V. | Weesperstraat 114, 1112AP Diemen, The Netherlands | info@medicalbrands.com

1. Who are we? i say B.V. is responsible for the processing of personal data as described in this privacy policy. We process your data in accordance with the General Data Protection Regulation (GDPR).

2. What data do we collect and why? We only collect personal data when you provide it to us, for example when placing an order, signing up for our newsletter, filling in a contact form, or participating in a promotion. Data we process includes: name, email address, postal address, payment details and order history. Legal basis: performance of a contract, your consent, or a legitimate interest.

3. Retention periods We do not retain your data longer than necessary. Order data is retained for a maximum of 7 years (statutory obligation).

4. Sharing of data We never sell or rent your data. We only share data with carriers, payment service providers, email marketing services (with your consent) and public authorities (where legally required).

5. Cookies We use cookies for website functionality, analytics (including Google Analytics) and advertising. On your first visit we ask for your consent via our cookie banner.

6. Your rights You have the right to access, rectification, erasure, objection, data portability and withdrawal of consent. Send your request to info@medicalbrands.com. We will respond within 30 days.

7. Complaints You can lodge a complaint with the Dutch Data Protection Authority: autoriteitpersoonsgegevens.nl

8. Changes We reserve the right to amend this policy. The current version is always available on our website. Last updated: July 2026