Privacy Policy

Ayesda Bio Limited ("we," "us," or "our") is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, and protect personal data collected via ayesdabio.com and any other Ayesda Bio website where this policy is linked (the "Site"). It also describes your legal rights in relation to that data.

This policy addresses data collected through this Site only. Ayesda Bio services and research projects may be subject to separate, project-specific privacy notices. Our Cookie Policy explains separately how we use cookies and similar technologies.

By using this Site, you accept the terms of this Privacy Policy.

Who We Are

Ayesda Bio Limited is the data controller for personal data collected through this Site.

What Data We Collect

Data you provide directly:

When you submit an enquiry or contact us through this Site, we collect:

• Name, email address, and company name.
• The content of your message and the topic of your enquiry.
• Any other information you choose to include in your message.

Data collected automatically:

When you visit this Site, we may automatically receive:

• IP address and approximate location.
• Browser type, device type, and operating system.
• Pages visited, links clicked, and time spent on the Site.
• Referring URL (the page you came from).
• Data collected through cookies and similar technologies — see our Cookie Policy for details.

How We Use Your Data

We use the data we collect to:

• Respond to your enquiries and communications.
• Provide information about our services where requested.
• Send marketing communications where you have opted in (you may unsubscribe at any time by emailing privacy@ayesdabio.com).
• Improve and maintain the performance and security of this Site.
• Comply with our legal obligations.
• Protect the rights, safety, and interests of Ayesda Bio and others.

Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

• Legitimate interests — for responding to enquiries, maintaining and improving the Site, and protecting against security threats. We have assessed that our legitimate interests are not overridden by your rights and interests in these contexts.
• Consent — for any marketing communications and for non-essential cookies. You may withdraw consent at any time.
• Legal obligation — where we are required to process data to comply with applicable law.
• Contract — where processing is necessary to fulfil an agreement with you or to take steps at your request before entering into a contract.

Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected:

• Contact form enquiries: We retain the content of your message and your contact details for up to 2 years from the date of your enquiry, or for as long as necessary to manage the relationship arising from that enquiry.
• Marketing communications: We retain your contact details for marketing purposes until you unsubscribe or withdraw consent.
• Website usage data: Anonymised analytics data may be retained for up to 26 months. Raw server logs are retained for up to 90 days.
• Legal obligations: Where we are required by law to retain records for a specified period, we will do so.

When data is no longer required, it is securely deleted or anonymised.

Disclosure of Your Data

We do not sell your personal data. We may share it with:

• Service providers: Trusted third parties who assist us with website hosting, form processing, and email delivery, acting as data processors under our instruction. These currently include our website hosting provider and Web3Forms for contact form submission processing.
• Professional advisers: Lawyers, accountants, and auditors, under obligations of confidentiality.
• Regulatory authorities: Where we are required to do so by law or in response to a valid legal request.
• Business transfers: In the event of a merger, acquisition, or sale of Ayesda Bio or its assets, your data may be transferred as part of that transaction.

International Data Transfers

Ayesda Bio is based in the United Kingdom. Where personal data is transferred outside the UK or the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or standard contractual clauses approved by the European Commission. Our contact form processor (Web3Forms) operates under appropriate data transfer agreements.

Cookies

This Site uses cookies and similar technologies. Some cookies are strictly necessary for the Site to function. Others, such as analytics cookies, require your consent before they are set. Please see our Cookie Policy for full details of the cookies we use, their purpose, and how to manage your preferences.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals through this Site.

Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to request correction of inaccurate or incomplete data.
• Right to erasure — to request deletion of your data in certain circumstances ("right to be forgotten").
• Right to restriction — to request that we limit how we use your data in certain circumstances.
• Right to object — to object to processing based on legitimate interests or for direct marketing purposes.
• Right to data portability — to receive your data in a structured, machine-readable format in certain circumstances.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at privacy@ayesdabio.com. We will respond within one calendar month. We may need to verify your identity before processing your request.

Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the UK supervisory authority:

If you are based in the EU, you may also contact your local data protection authority. A list of EU supervisory authorities is available at edpb.europa.eu.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. These include encrypted data transmission (TLS/SSL), access controls, and secure hosting on ISO 27001-aligned infrastructure. While we take all reasonable steps to protect your data, no system can guarantee absolute security. If you suspect a security incident involving your data, please contact us immediately at privacy@ayesdabio.com.

Third-Party Links

This Site may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal data.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. Where changes are material, we will take reasonable steps to notify you.

Contact Us

For any questions about this Privacy Policy or how we handle your data: