Back to Home

Privacy Policy

Last updated: January 23, 2026

Infinity Medical ("we," "us," or "our") is committed to protecting your privacy and personal data in accordance with Tunisian Law No. 2004-63 of July 27, 2004, on the protection of personal data, and in compliance with regulations set by the Instance Nationale de Protection des Données Personnelles (INPDP - National Personal Data Protection Authority). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, visit our website, or engage with our business.

1. Data Controller Information

Company Name: Infinity Medical S.A.R.L.
Registration: Registered in Tunisia
Address: Immeuble Fajr، Rue Lac Lochness, 1053, Tunis, Tunisie
Email: contact@infinitymedical.tn
Phone: +216 25 314 415

2. Legal Basis and Compliance

Our data processing activities comply with:

Tunisian Law No. 2004-63 of July 27, 2004, on the protection of personal data
Organic Law No. 2004-63 as amended
Regulations issued by the Instance Nationale de Protection des Données Personnelles (INPDP)
Relevant healthcare and medical device regulations in Tunisia

3. Information We Collect

3.1 Personal Information

We may collect the following types of personal data:

Identity data: Name, title, professional credentials
Contact data: Email address, telephone number, business address
Professional data: Institution name, job function, specialization, medical license number (for healthcare professionals)
Commercial data: Purchase history, quotation requests, product inquiries
Technical data: IP address, browser type, device information, cookies

3.2 How We Collect Information

Directly from you when you contact us, request quotes, or place orders
Through our website using cookies and similar technologies
From our business partners and suppliers
Through business cards and professional networking
At trade shows, conferences, and professional events

4. Purpose and Legal Basis for Processing

We process your personal data for the following purposes:

Contract execution: To process and fulfill your orders, provide quotes, and deliver products
Legal obligations: To comply with regulatory requirements for medical device distribution, import/export documentation, and product traceability
Legitimate interest: To maintain customer relationships, provide after-sales support, improve our services, and conduct business development
Consent: For marketing communications and newsletters (where applicable)
Customer service: To respond to inquiries, provide technical support, and handle warranty claims
Regulatory compliance: To maintain records required by Tunisian Ministry of Health and medical device regulations

5. Data Sharing and Disclosure

We may share your personal data with:

Service providers: Logistics companies, payment processors, IT service providers (under strict confidentiality agreements)
Manufacturers and suppliers: Our international brand partners for warranty, technical support, and product-related services
Regulatory authorities: Tunisian Ministry of Health, INPDP, customs authorities, and other governmental bodies when legally required
Professional advisors: Lawyers, auditors, insurance companies
Business transfers: In case of merger, acquisition, or sale of business assets

We do not sell your personal data to third parties. All data transfers are conducted in accordance with Tunisian law and include appropriate safeguards.

6. International Data Transfers

As we work with international medical device manufacturers, some of your data may be transferred outside Tunisia to countries including but not limited to European Union member states, the United States, and other countries where our suppliers are located. Such transfers are conducted in accordance with Article 46 of Law No. 2004-63 and with authorization from INPDP when required. We ensure adequate protection through:

Standard contractual clauses approved by INPDP
Adequacy decisions recognizing equivalent data protection
Binding corporate rules where applicable

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit and at rest
Access controls and authentication procedures
Regular security audits and assessments
Employee training on data protection
Secure data storage facilities
Incident response and breach notification procedures

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

Customer data: Duration of business relationship plus 10 years for medical device traceability requirements
Financial records: 10 years as required by Tunisian accounting law
Marketing consents: Until withdrawal of consent or 3 years of inactivity
Website analytics: Maximum 13 months
Medical device records: As required by Ministry of Health regulations (minimum 10 years)

9. Your Rights Under Tunisian Law

Under Tunisian Law No. 2004-63, you have the following rights regarding your personal data:

Right of access: You can request confirmation of whether we process your personal data and obtain a copy
Right of rectification: You can request correction of inaccurate or incomplete data
Right to deletion: You can request deletion of your data under certain conditions
Right to object: You can object to processing based on legitimate interest or for direct marketing
Right to restriction: You can request limitation of processing in specific situations
Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time

To exercise these rights, please contact us using the details provided in Section 1. We will respond to your request within one month.

10. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance user experience and analyze website traffic. We use:

Essential cookies: Required for website functionality
Analytics cookies: To understand how visitors use our website
Preference cookies: To remember your language and display settings

You can control cookies through your browser settings. Please note that disabling cookies may affect website functionality.

11. Children's Privacy

Our services are directed to healthcare professionals and businesses. We do not knowingly collect personal data from individuals under 18 years of age. If you become aware that a child has provided us with personal data, please contact us.

12. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The "Last updated" date at the top indicates when the policy was last revised. We encourage you to review this policy regularly. Material changes will be communicated through our website or directly to our customers.

13. Contact and Complaints

For any questions, concerns, or to exercise your rights regarding your personal data, please contact us at:

Email: contact@infinitymedical.tn
Phone: +216 [Your phone number]
Address: [Your registered address in Tunisia]

Right to Lodge a Complaint

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Instance Nationale de Protection des Données Personnelles (INPDP):

Instance Nationale de Protection des Données Personnelles (INPDP)
Address: 1, Rue Mohamed Moalla, 1002, Mutuelleville, Tunis B.P. 525
Phone: +216 71 79 98 53 / +216 71 79 97 11
Website: www.inpdp.tn
Email: inpdp@inpdp.tn

14. Declaration of Data Processing

In accordance with Article 7 of Law No. 2004-63, Infinity Medical has declared its data processing activities to the INPDP. Our declaration reference number is available upon request.