Symbiosis Pharmaceutical Services Ltd (company number SC373596) is the data controller responsible for your personal data.
Registered office: Scion House, Unit 10, Stirling University Innovation Park, Stirling, FK9 4NF, Scotland.
You can contact our Data Protection Officer (DPO) at: Lorraine.Den-Kaat@symbiosis-pharma.com
Personal Data We Collect
We may collect and process the following categories of personal data:
- Identity data: name, job title, employer.
- Contact data: email address, phone number, postal address.
- Website usage data: pages visited, IP address, browser type, device identifiers.
- Cookie data: analytics cookies, preference cookies.
- Wi-Fi usage data: device MAC address, connection times, bandwidth usage, websites accessed.
- Marketing data: mailing list subscriptions, email engagement statistics.
- Enquiry data: information you provide when contacting us.
How We Use Your Personal Data (Purposes)
We process your personal data for the following purposes:
- To operate and improve our website
- To provide Wi-Fi access on our premises
- To respond to enquiries
- To send newsletters and updates (with your consent)
- To maintain security and monitor network performance
- To comply with legal and regulatory obligations
Lawful Bases For Processing
We rely on the following lawful bases under UK GDPR:
- Consent: for marketing emails and non-essential cookies.
- Legitimate interests: website analytics, network security, business administration.
- Contract: responding to enquiries or providing services.
- Legal obligation: compliance with regulatory requirements.
Cookies
We use cookies to understand how visitors use our website and to improve user experience.
You can manage or withdraw cookie consent at any time through our cookie banner or your browser settings.
Categories of cookies used:
- Strictly necessary cookies
- Analytics cookies (Google Analytics)
- Preference cookies
Third-Party Processors
We use trusted third-party service providers:
Google Analytics
- Used to analyse web traffic.
- Date processed: IP address (anonymised), device information, browsing behaviour.
- Lawful basis: Legitimate interests.
Salesforce Marketing Cloud Account Engagement (formerly Pardot)
- Used to manage mailing lists and send newsletters.
- Data processed: email address, engagement statistics.
- Lawful basis: Consent.
International Data Transfers
Some of our service providers (e.g., Salesforce Marketing Cloud Account Engagement (formerly Pardot), Google) may transfer data outside the UK.
Where this occurs, we ensure appropriate safeguards are in place, such as:
- UK International Data Transfer Agreement (IDTA)
- Standard Contractual Clauses (SCCs)
Data Retention
We retain personal data only for as long as necessary for the purposes described above:
- Marketing data: until you unsubscribe.
- Website analytics data: up to 26 months.
- Wi-Fi logs: up to 12 months.
- Enquiry data: up to 3 years.
- Contractual data: up to 7 years (legal requirement).
Your Rights
You have the following rights under UK GDPR:
- Right of access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to object
- Right to data portability
- Right to withdraw consent
- Right to lodge a complaint with the ICO
ICO contact: http://www.ico.org.uk
To exercise your rights, contact our DPO at: Lorraine.Den-Kaat@symbiosis-pharma.com
Automated Decision-Making
We do not use your personal data for automated decision-making or profiling.
Changes to This Notice
We may update this privacy notice from time to time.
The latest version will always be available on our website.
