Privacy Policy
ABOUT US AND WHAT WE DO
Pivotal Scientific Limited is a company registered in England. Its company number is 06590487. Its registered office is at Plumridge Accountancy, Sanders House Churchfields, Stonesfield, Witney, Oxfordshire, England, OX29 8PP.
Pivotal Scientific Limited is registered with the UK Information Commissioner under number ZA067725.
When we say we or us in this privacy notice we mean Pivotal Scientific Limited.
We assist companies in the biotechnology sector to grow their brand and sales by supporting them at all stages of the business life cycle – creating business plans, facilitating corporate introductions, and giving advice on mergers and acquisitions, management buy-outs, and disposals of assets and stock.
We have a database of sellers, manufacturers, distributors, and resellers.
WHY THIS NOTICE IS IMPORTANT
Please read this privacy notice carefully. It sets out:
- how we use personal data; and
- the rights of individuals whose personal data we use.
You can download a pdf version of this privacy notice here.
INTRODUCTION
Personal data is information about an identifiable individual (a human being), called a data subject.
Anonymous or anonymised data is not personal data.
This privacy notice applies to personal data about individuals who:
- visit our website;
- enquire about us or our services or make a complaint;
- interact with us via social media;
- are our prospect or a contact, officer, employee or shareholder of any of our prospects;
- are our client or a contact, officer, employee or shareholder of any of our clients;
- are members of the PSL Alliance or a contact, officer or employee of a member of the PSL Alliance;
- are a Pivotal Partner or a contact, officer or employee of a Pivotal Partner;
- we meet at conferences or other events;
- are a contact, officer, employee or shareholder of any business any of our clients is looking to acquire, invest in or merge with;
- are a contact, officer, employee or shareholder of any business looking to acquire, invest in or merge with any of our clients; or
- are a contact, officer, employee or shareholder of or any business included in our database of sellers, manufacturers, distributors and resellers.
This privacy notice applies where we control how your personal data is used.
In those circumstances, data protection law obliges us to:
- use your personal data lawfully, fairly and transparently;
- collect your personal data only for purposes which we have explained to you, and not use it in any way which is incompatible with those purposes;
- collect and use your personal data only if it is needed for those purposes;
- keep your personal data for no longer than it is needed for those purposes;
- keep your personal data accurate and up to date; and
- keep your personal data securely.
This privacy notice does not apply where we process personal data for someone else (a controller) who controls how your personal data is used. In that case we are obliged to process your personal data on the controller’s instructions and the controller’s privacy notice, policy, statement, or information given to you by the controller, applies.
Cookies: We use cookies and similar technologies to collect information about the equipment of visitors to our website and their use of our website. Please click here for more information.
TYPES OF PERSONAL DATA AND HOW WE USE THEM
The table below sets out:
- the personal data we collect and use;
- the purposes for which we use it; and
- the legal basis we rely on to legitimise the processing; and
- the lawful basis we rely on.
Where the lawful basis is our legitimate interests or the legitimate interests of someone else, we have also indicated what those interests are.
We may have more than one lawful basis. Please if you want to know which basis applies.
| VISITORS TO OUR WEBSITE | |||
| PERSONAL DATA | PURPOSES | THE LEGAL BASIS | SOURCE |
| Your IP address and any personal data collected through our uses of cookies, such as information about your internet connection and browser and the country where your computer is located, the web pages you view when you visit our website, any searches you make, and your browser’s Session ID | To protect against fraud and other illegal activities, for instance by monitoring IP addresses to identify log-ins from unexpected locations To help us to see if you have problems using our website. Please see our Cookie Notice for more details about the cookies we use | Our legitimate interests in running our business, including protecting our website and your account and improving our website | Cookies placed on your computer |
| Any feedback and responses to any survey or questionnaire, unless that feedback/response is anonymous and therefore not personal data | To help us to improve our products and services | Our legitimate interests in running our business, including our website | You |
| INDIVIDUALS WHO ENQUIRE ABOUT US OR OUR SERVICES OR MAKE A COMPLAINT | |||
| PERSONAL DATA | PURPOSES | THE LEGAL BASIS | SOURCE |
| Your name and contact details (e.g. email address and phone number(s)) and any other details you provide to us, such as your company or organisation, and the country in which you are located | To deal with your enquiry or complaint | Our legitimate interests in running our business. Our legitimate interests in dealing with your enquiry or complaint. Your company’s or organisation’s legitimate interests in our dealing with your enquiry or complaint | You |
| A record of your enquiry or complaint and of our response | To deal with your enquiry or complaint to demonstrate how we dealt you’re your complaint | To perform a contract with you or to take steps at your request before entering into a contract. To comply with our legal obligations. Our legitimate interests in running our business and improving our products and services. Our legitimate interests in dealing with your enquiry or complaint. Your company’s or organisation’s legitimate interests in our dealing with your enquiry or complaint | You Our records |
| INDIVIDUALS WHO ARE OUR PROSPECTS OR CONTACTS, OFFICERS, EMPLOYEES OR SHAREHOLDER OF OUR PROSPECTS | |||
| PERSONAL DATA | PURPOSES | THE LEGAL BASIS | SOURCE |
| Your name, address, email address, phone number and other personal data you or your company or organisation provide to us | To communicate with prospects | To take steps at your request before entering into a contract. Our legitimate interests in marketing and selling our products and services and promoting our business. Your company’s or organisation’s legitimate interests in receiving information about our products and services | You or your company or organisation |
| INDIVIDUALS WHO ARE OUR CLIENTS OR CONTACTS, OFFICERS, EMPLOYEES OR SHAREHOLDERS OF OUR CLIENTS | |||
| PERSONAL DATA | PURPOSES | THE LEGAL BASIS | SOURCE |
| Your name and contact details | To advise our client | To perform a contract with you. Our legitimate interests in carrying on our business. Your company’s or organisation’s legitimate interests in receiving advice | You Your company or organisation |
| Information about your aims and the types of business in which you are interested | To advise our client | To perform a contract with you. Our legitimate interests in carrying on our business. Your company’s or organisation’s legitimate interests in receiving advice | You Your company or organisation |
| Details of your transactions | To maintain our business and financial records | To perform a contract with you. To comply with our legal obligations | YouOur records |
| Details of your bank account, credit or bank card and billing address | To invoice, process payments, and prevent fraudulent transactions | To perform a contract with you. Our legitimate interests in carrying on our business and preventing fraudulent transactions. Your company’s or organisation’s legitimate interest in our fulfilling the order, dealing with returns and preventing fraudulent transactions | You |
| Your name and the name of your business if we use any quotation or testimonial from you in our promotional materials or website | To help us to market our services and to promote our business | Our legitimate interests in marketing and selling our services and promoting our business | You |
| INDIVIDUALS WE MEET AT CONFERENCES OR OTHER EVENTS | |||
| PERSONAL DATA | PURPOSES | THE LEGAL BASIS | SOURCE |
| Your name, email address, phone number, job title and company or organisation, and any other details you provide, and any services in which you have expressed an interest | To provide you with any information you have requested | Our legitimate interests in marketing and selling our products and services and promoting our business | You |
| CONTACTS, OFFICERS, EMPLOYEES AND SHAREHOLDERS OF ANY BUSINESS:– ANY OF OUR CLIENTS IS LOOKING TO ACQUIRE, INVEST IN OR MERGE WITH; OR– LOOKING TO ACQUIRE, INVEST IN OR MERGE WITH ANY OF OUR CLIENTS | |||
| PERSONAL DATA | PURPOSES | THE LEGAL BASIS | SOURCE |
| Your name, job title or position and contact details | To make an introduction | Our legitimate interests in providing services to our clients. Our client’s legitimate interests in receiving an introduction | You. Your company or organisation |
| Your CV, information about your experience, career, qualifications and shareholding or investment in the target | To advise our client | Our legitimate interests in providing services to our clients. Our client’s legitimate interests in receiving information in connection with any proposed acquisition, investment or merger | You Your company or organisation |
| INDIVIDUALS WHO CONTACT US TO EXERCISE THEIR RIGHTS AS DATA SUBJECTS | |||
| PERSONAL DATA | PURPOSES | THE LEGAL BASIS | SOURCE |
| Your name and the contact and other details which you provide to us, such as your company or organisation and your email address | To deal with any request from you to exercise your rights as a data subject and to check your identity | To comply with our legal obligations | You |
| Further information necessary to verify your identity | To check your identity | To comply with our legal obligations | You |
| A record of your request and of our response | To deal with your request | To comply with our legal obligations | YouOur records |
| ALL INDIVIDUALS | |||
| PERSONAL DATA | PURPOSES | THE LEGAL BASIS | SOURCE |
| Records of:- any consent you have given for the processing of your personal data;- any withdrawal of any consent; and- the suppression of personal data | To ensure that we have your consent where necessary. To ensure that we act on your withdrawal of consent. To comply with requests from you to exercise your rights as a data subject | To comply with our legal obligations | You |
| If you contact us, any personal data received from you | To help us to improve our products and services | Our legitimate interests in running our business | You |
| If you interact with us via social media, your user name, likes and dislikes and comments and opinions | To respond to your comments and queries | Our legitimate interests in running our business. Our legitimate interests in dealing with your comments and opinions | You |
| If you have signed up to our newsletter, or asked us to send you information about us, our products or services, your name and email address | To send you our newsletter or the information you have requested | Our legitimate interests in marketing and selling our products and services and promoting our business. Your company’s or organisation’s legitimate interests in receiving information about our products and services | You |
| Your relationship (e.g. employee, director, or shareholder) with any business on our database | To respond to your comments and queries | Our legitimate interests in running our business | YouOur records |
Special Categories of Personal Data: These are information about race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data.
We do not collect or use this kind of data. Please do not provide any special category data to us.
Data about Convictions and Offences: We do not collect or use this kind of data.
Aggregated Data: We may collect, use and share aggregated data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not personal data because it does not directly or indirectly identify you.
If we combine or connect any aggregated data with personal data so that we can identify you, we will use the combined data in accordance with this privacy notice.
CHANGE OF PURPOSE
We will not use personal data for a new purpose unless:
- the new purpose is compatible with the original purpose;
- we contact you to explain the lawful basis for the new purpose; or
- we anonymise the personal data and use it for research or statistical purposes.
MARKETING
We may send you marketing materials by email, but you can opt out of that at any time by contacting us.
We may phone you to market our services unless:
- you have objected to receiving marketing calls from us and you have not asked us to call you; or
- your number appears on the Telephone Preference Service or the Corporate Telephone Preference Service and you have not asked us to call you.
You can ask us to stop calling you that at any time by contacting us.
We do not send unsolicited marketing emails or text messages without your consent except:
- we may send you information about goods and services similar to those which you have enquired about or bought from us in the past;
- invite you to events if you have previously enquired about, registered for or attended one of our events; or
- where you have asked us to send you our newsletter, information about us, or our products or services, or to invite you to events,
but you can unsubscribe from those emails or texts at any time by contacting us.
We do not share personal data with anyone for marketing purposes.
AUTOMATED DECISION MAKING AND PROFILING
We do not use information about you for the purposes of automated decision making, including profiling.
SHARING PERSONAL DATA
We may share your personal data with:
- If you are a key member of staff, an officer or shareholder of a business looking for investment, to sell, to buy or to merge, with potential investors, buyers, sellers and merger partners.
- If you appear in our database of sellers, manufacturers, distributors and resellers.
- Our consultants, contractors and other suppliers who have a need to know in order to perform their obligations to us.
- Someone who wants to acquire or acquires us or our business.
If our business assets are acquired, personal data will be one of the assets transferred to the buyer.
- Any business we merge with.
- Any company or business we acquire.
- Anyone we use to process personal data for us, such as the host of our IT systems.
That person will be obliged to:
- use personal data only for our purposes;
- process it only on our instructions; and
- have appropriate security measures in place to protect the data.
For details of the people we currently use to process personal data for us please click here.
- Our professional advisers. They are obliged to keep it confidential.
- The police and other law enforcement agencies.
- The Information Commissioner’s Office and anyone else if the law obliges us to disclose your personal data to them.
- Anyone else to protect our rights and property or to protect the rights or property of someone else.
TRANSFERS OF PERSONAL DATA OUTSIDE THE UK
Our staff may access personal data when they are outside the United Kingdom, but the same safeguards will apply as if our staff were accessing personal data from within the United Kingdom.
We will not transfer personal data outside the United Kingdom unless at least one of the following applies:
- We transfer it to a country which ensures an adequate level of protection for personal data as determined under adequacy regulations made under the Data Protection Act 2018 or in accordance with any transitional provisions which apply after the end of the Brexit transition period.
- The recipient has entered into standard clauses made under the Data Protection Act 2018 or in accordance with any transitional provisions which apply after the end of the Brexit transition period. If you wish to see a copy of the Standard Contractual Clauses, please contact us.
- You have given your explicit consent to the transfer of your personal data. (If you have given that consent you may withdraw it at any time by contacting us.)
- We cannot perform our contract with you without making that transfer.
- We cannot take steps you have requested us to take without making that transfer.
- We cannot enter into or perform a contract with someone else and which is in your interests without making that transfer.
- The transfer is necessary for important reasons of public interest.
- The transfer is necessary for the establishment, exercise or defence of legal claims.
- The transfer is necessary to protect your vital interest and you are unable to give consent to the transfer.
SECURITY
We have appropriate security measures to prevent personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
We limit access to personal data to those of our officers, employees, agents, contractors service providers and other people who have a business need to know.
They will process your personal data on only on our instructions and they are subject to a duty of confidentiality.
Where we share any personal data with another controller, that other controller is responsible for keeping the personal data which it receives from us secure.
We have procedures to deal with any suspected personal data breach and will tell the Information Commissioner’s Office and you of a breach of security involving your personal data if the law obliges us to do that.
HOW LONG WE KEEP PERSONAL DATA
We keep personal data only for:
- as long as is necessary to achieve our stated purpose(s);
- as the law requires; or
- as required for to meet any legal, accounting, or reporting requirements.
The law requires us to keep information about our clients and customers (including their contact details, details of their identity, financial information and information about transactions with them) for six years after they cease being customers.
Please ask if you want to see a copy of our data retention and deletion policy.
In some circumstances you can ask us to delete your personal data. Please see Your Rights.
If we anonymise your personal data, it will no longer be personal data and we may keep and use it indefinitely.
YOUR RIGHTS
Access
You can ask us to confirm whether we hold or use your personal data. If we do hold your personal data, you can ask us for a copy of it.
Correction
You can have incomplete or incorrect personal data corrected.
We may need to check the accuracy of any new data you give to us.
Erasure (the right to be forgotten)
You can ask us to delete your personal data if we have no good reason to continue using it.
You can also ask us to delete your personal data if:
- you have objected to our using it (see below);
- we have used your personal data illegally; or
- we must delete your personal data to comply with the law.
We may not always be able to comply with your request for legal reasons. We will tell you about those if you request us to delete your personal data.
Restriction
You can ask us to suspend our use of your personal data in the following circumstances:
- if you want us to establish the data’s accuracy;
- if our use of your personal data is illegal, but you do not want us to delete it;
- if you need us to hold the data in connection with a legal claim, but we do not need it; or
- you have objected to our use of your personal data, but we need to check whether we have overriding legitimate reasons to use it.
Object to the processing of your personal data
If our basis for using your personal data is our legitimate interests or someone else’s legitimate interests (see the table above), and you think that affects your rights, you can object to our using your personal data.
In some cases, we may show that we have compelling legitimate grounds to use your personal data and that those grounds override your rights.
Object to the use of your personal data for direct marketing purposes
You can object if we use your personal data for direct marketing purposes.
Withdraw consent
If you have given consent for us to use your personal data, you can withdraw that consent at any time.
If you withdraw your consent, that will not affect our earlier use of your data with your consent.
Transfer of personal data (data portability)
If you gave your personal data to us and:
- you consented to our using your personal data; or
- we used that personal data to perform a contract with you
and we have processed that data electronically, you can ask us to send your personal data to you or to someone else.
How to exercise your rights
Please at the address given below to exercise your rights.
We try to respond to all requests within a month. It may take us longer if things are complicated or you have made a lot of requests, but we will let you know what is happening.
Normally you do not have to pay to exercise your rights, we may charge a reasonable fee if your request is unfounded, repetitive or excessive.
Or we may refuse to comply with your request in those circumstances.
We may need you to provide more information to check your identity.
We may ask you for further information in order to comply with your request.
YOU CAN DECIDE NOT TO PROVIDE PERSONAL DATA
You can decide not to give us personal data.
If you do not provide data which we need to provide a service or a feature of our website, we may not be able to provide that service or feature.
If you do not provide data which we need to check your identity, we may not be able to comply with your request to exercise your rights.
OTHER WEBSITES
Our website may include links to third party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow someone else to collect or share data about you.
We do not control other people’s websites and we are not responsible for their privacy policies or their or privacy notices or statements.
This privacy notice does not apply to any website operated by anyone else. If you visit a website operated by someone else, please read its privacy notice (or privacy policy or statement) to find out how it uses your personal data.
COMPLAINTS AND QUESTIONS
If you think we are using your personal data unfairly or we are misleading you, please let us know.
It is important that your personal data is accurate and up to date. Please let us know if your personal data changes.
We also welcome suggestions for improving our procedures.
Please let us know if you want more information about how we use your personal data.
You have the right to make a complaint about the way we have used your personal data to the UK Information Commissioner’s Office at: The Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF or www.ico.org.uk.
Or you can go to court.
Please contact us and give us a chance to set things right before you contact the Information Commissioner’s Office or go to court.
HOW TO CONTACT US
We have appointed a Data Protection Manager: Jemma Tilling
If you have any questions about this privacy notice, you want to exercise your rights, or you want to make a complaint, please:
- email our Data Protection Manager at [info@pivotalscientific.com]; or
- phone us on +44 (0)1869 238377; or
- write to us at [Pivotal Scientific Ltd, 77 Heyford Park, Upper Heyford, Oxfordshire, OX25 5HD ], marking your letter for the attention of The Data Protection Manager.
CHANGES TO THIS PRIVACY NOTICE
This privacy notice was last updated on 8th March 2021.
If we change how we use your personal data, we will let you know, either by posting a notice on our website or sending you an email.
If you don’t agree to the changes, you can stop giving us personal data.