1. INTRODUCTION

Bioveritas Partners ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your personal data when you visit our website www.bioveritaspartners.com (the "Website") or otherwise engage our advisory services, and it tells you about your privacy rights and how the law protects you.

This Policy is provided in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (as amended by the Data (Use and Access) Act 2025) and the Privacy and Electronic Communications Regulations 2003 (PECR).

Please read this Policy carefully. By using our Website or providing us with your personal data, you acknowledge that you have read and understood this Policy.

2. WHO WE ARE (DATA CONTROLLER)

Bioveritas Partners is the "data controller" responsible for your personal data.

Company name: Bioveritas Partners Ltd
Registered office: 44b Hackwood Road, Basingstoke, Hampshire, England, RG21 3AE

Company registration number: 17029118

ICO registration number: ZC185235
Email: info@bioveritaspartners.com

If you have any questions about this Policy or how we handle your personal data, please contact us using the details above.

3.  THE PERSONAL DATA WE COLLECT

We may collect and process the following categories of personal data:

- Identity and contact data: your name, job title, company/organisation, email address, telephone number and postal address.
- Enquiry data: the content of any message, enquiry or information you submit through our contact form or by email.
- Marketing data: your email address and preferences where you subscribe to our newsletter or mailing list.
- Transaction and payment data: details relating to services purchased and payments made. Card and payment details are collected and processed directly by our third-party payment provider(s); we do not store your full card details on our systems.
- Technical and usage data: your IP address, browser type and version, device information, time zone setting, operating system, and information about how you use our Website, collected via cookies and similar technologies (see our Cookie Policy).

We do not intentionally collect any "special category" data (such as data revealing health, race, ethnicity, political opinions or religious beliefs) through the Website. Please do not submit such information to us unless we specifically request it.

4. HOW WE COLLECT YOUR PERSONAL DATA

We collect personal data:

- Directly from you, when you complete our contact/enquiry form, subscribe to our newsletter, purchase or enquire about our services, or correspond with us by email, phone or in person.
- Automatically, as you interact with our Website, through cookies and similar technologies.
- From third parties, such as our analytics providers and payment processors, and from publicly available professional sources.

5. HOW WE USE YOUR PERSONAL DATA AND OUR LAWFUL BASIS

Under UK GDPR we must have a lawful basis for processing your personal data. We rely on the following bases:

Purpose: To respond to your enquiry and correspond with you.
Lawful basis: Legitimate interests (to respond to enquiries and manage prospective client relationships) and/or steps taken at your request prior to entering a contract.

Purpose: To provide our advisory/consulting services and manage our engagement with you.
Lawful basis: Performance of a contract with you (or your organisation).

Purpose: To process payments and maintain financial records.
Lawful basis: Performance of a contract, and compliance with a legal obligation (e.g. tax and accounting law).

Purpose: To send you our newsletter and marketing communications.
Lawful basis: Consent, which you may withdraw at any time. Where you are an existing client and the communication concerns similar services, we may rely on legitimate interests (the "soft opt-in") in accordance with PECR.

Purpose: To operate, maintain, secure and improve our Website (including analytics).
Lawful basis: Consent (for non-essential cookies) and legitimate interests (to keep our Website secure and functioning).

Purpose: To comply with legal and regulatory obligations.
Lawful basis: Compliance with a legal obligation.

Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms. You may ask us for more information about this assessment.

6. MARKETING COMMUNICATIONS

Where you have subscribed to our newsletter or otherwise consented, we will send you marketing communications by email. You can opt out at any time by clicking the "unsubscribe" link in any marketing email, or by contacting us at info@bioveritaspartners.com. Opting out of marketing will not affect the processing of your personal data for the provision of our services.

7. WHO WE SHARE YOUR PERSONAL DATA WITH

We may share your personal data with:

- Service providers and processors who provide IT, website hosting (Wix), email, newsletter/email-marketing, analytics and payment-processing services on our behalf.
- Professional advisers, including accountants, lawyers and insurers, where necessary.
- Regulators, law enforcement and other authorities, where required by law.
- A buyer or successor in the event of a merger, acquisition or reorganisation of our business.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not sell your personal data.

8. INTERNATIONAL TRANSFERS

Some of our service providers (for example Wix and certain analytics or email providers) may be based outside the United Kingdom. Where we transfer your personal data outside the UK, we ensure a similar degree of protection by relying on an adequacy decision (a "data bridge"), the International Data Transfer Agreement (IDTA) or UK Addendum to the EU Standard Contractual Clauses, or another lawful transfer mechanism. You may contact us for further information about the safeguards in place.

9. DATA SECURITY

We have put in place appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, loss or destruction. We limit access to your personal data to those who have a genuine business need to access it. We also have procedures in place to deal with any suspected personal data breach and will notify you and the ICO where we are legally required to do so.

10. DATA RETENTION

We will only retain your personal data for as long as is necessary for the purposes for which we collected it, including to satisfy any legal, accounting or reporting requirements. In general:

- Enquiry data: retained for up to [12–24 months] where no engagement follows.
- Client and transaction records: retained for [7 years] following the end of our engagement, to comply with legal and tax obligations.
- Marketing data: retained until you unsubscribe or withdraw consent, and for a short period thereafter.

When personal data is no longer required, we will securely delete or anonymise it.

11. YOUR DATA PROTECTION RIGHTS

Under UK data protection law, you have the following rights:

- The right to be informed about how we use your personal data.
- The right of access to your personal data (a "subject access request").
- The right to rectification of inaccurate or incomplete data.
- The right to erasure ("right to be forgotten") in certain circumstances.
- The right to restrict processing in certain circumstances.
- The right to data portability.
- The right to object to processing based on legitimate interests or for direct marketing.
- Rights relating to automated decision-making and profiling. We do not currently carry out automated decision-making that produces legal or similarly significant effects.
- The right to withdraw consent at any time, where we rely on consent.

To exercise any of these rights, please contact us at info@bioveritaspartners.com. We will respond within one month. There is normally no charge, although we may charge a reasonable fee or refuse to act if a request is clearly unfounded or excessive.

12. YOUR RIGHT TO COMPLAIN

If you have a concern about how we handle your personal data, we would ask that you contact us first at info@bioveritaspartners.com so that we can try to resolve it. We will acknowledge your complaint and respond without undue delay.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: www.ico.org.uk

13. THIRD-PARTY LINKS

Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policy of any website you visit.
 

14.  CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this Policy periodically.

15. CONTACT US

If you have any questions about this Privacy Policy or our data practices, please contact:

​

Bioveritas Partners Ltd, 44b Hackwood Road, Basingstoke, Hampshire, England, RG21 3AE

​

Email: info@bioveritaspartners.com