1. Introduction 

At Inaphaea BioLabs, we recognise that the responsible handling of personal data is fundamental to maintaining trust, particularly within the life sciences and clinical research environment. As a Contract Research Organisation (CRO), we operate within a highly regulated framework and are committed to ensuring that personal data is processed lawfully, fairly, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and, where applicable, the EU GDPR. 

This Privacy Policy explains how we collect, use, and protect personal data when you visit our website, engage with our services, or otherwise interact with us. 

2. About Us 

Inaphaea BioLabs acts as a data controller in relation to personal data collected through this website and certain business activities. In the course of providing clinical research and related services, we may also act as a data processor on behalf of our clients such as, but not limited to, pharmaceutical, biotechnology, or medical device companies. 

Our registered office is located at D6 Thane Road, Nottingham NG90 6BH, and we can be contacted at info@inaphaea.com. Where required, we have appointed a Data Protection Officer who can be contacted via the above email address. 

3. The Nature of Data We Collect 

We collect personal data in a manner proportionate to our business needs and the expectations of individuals interacting with us. The categories of data we process through our website and related communications include identifying and contact information such as names, email addresses, telephone numbers, and professional affiliations. Where email addresses have been provided to access website content, downloads or resources, we will use those details to provide access to the requested content and may make contact regarding Inaphaea BioLabs services or resources where permitted by law, and will provide the option to opt out at any time. 

In a business-to-business context, we may also process professional information, including job titles, organisational roles, areas of scientific or clinical interest, and correspondence relating to our services. 

Technical information is collected automatically when you visit our website. This may include your IP address, browser type, operating system, and information about how you use our website, gathered through cookies, analytics and similar technologies. 

As a CRO, we are mindful that certain activities, particularly in the context of clinical trials or pharmacovigilance, may involve sensitive or ‘special category’ data, such as health information. However, such data is not typically collected via this website unless explicitly stated. Where it is collected, it is handled in strict compliance with applicable ethical, regulatory, and legal requirements, and always subject to appropriate safeguards and, where required, explicit consent. 

4. How and Why We Use Personal Data 

We use personal data primarily to operate our website, respond to enquiries, and provide information about our services. Where individuals contact us, we use the information provided to respond effectively and maintain appropriate business records. 

We may also process personal data to share relevant insights, updates, or communications about our scientific and research capabilities, provided that we have a lawful basis to do so. In most cases, this will either be your consent or our legitimate interest in promoting our services in a professional context. 

Where personal data is processed in the course of clinical research services, it is handled strictly in accordance with sponsor instructions, regulatory frameworks, and applicable data protection laws. In such cases, we may act as a processor, and the sponsoring organisation will determine the purposes and means of processing. 

Our legal bases for processing include consent (for example, where you opt-in to receive communications), the performance of a contract, compliance with legal obligations (such as regulatory requirements in clinical research), and our legitimate business interests, provided these are not overridden by your rights. 

5. Cookies and Website Technologies 

Our website uses cookies and similar technologies to enhance functionality, understand user behaviour, and improve overall performance. These technologies allow us to distinguish individual users and provide a more personalised browsing experience. 

Some cookies are essential for the operation of the site, while others, such as analytics cookies, help us understand how visitors interact with our content. Where required by law, we will obtain your consent before placing non-essential cookies on your device. You can manage your preferences at any time through our cookie banner or browser settings. 

6. Sharing and Disclosure of Data 

We do not sell personal data. However, we may share it with carefully selected third parties, partners and collaborators where necessary to support our business operations. These may also include IT service providers, website hosting services, analytics providers, and professional advisors. 

In the context of our CRO activities, we may also process personal data on behalf of clients and share it with authorised parties such as sponsors, regulatory authorities, ethics committees, or clinical investigators, always in line with contractual and legal requirements. 

Where disclosure is required by law or regulatory obligation, we will comply with such requirements while ensuring that only the necessary data is shared. 

7. International Data Transfers 

Given the global nature of clinical research, personal data may be transferred to countries outside the United Kingdom or Europe. Where this occurs, we ensure that appropriate safeguards are implemented to protect personal data, such as the use of Standard Contractual Clauses or transfers to jurisdictions that have been recognised as providing an adequate level of data protection. 

8. Data Retention 

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. In determining retention periods, we take into account legal and regulatory obligations, particularly those applicable to clinical research and pharmacovigilance, which may require data to be retained for extended periods. 

Once data is no longer required, it is securely deleted or anonymised. 

9. Your Rights 

Under applicable data protection laws, you have a number of rights in relation to your personal data. These include the right to access the data we hold about you, to request correction of inaccurate information, and to request deletion where appropriate. 

You also have the right to restrict or object to certain types of processing, as well as the right to receive your personal data in a structured and legible format. Where processing is based on consent, you may withdraw that consent at any time. 

Requests to exercise these rights can be made by contacting us using the details provided and we will respond in accordance with applicable legal timeframes. Please allow a reasonable amount of time for us to respond to your request. 

You additionally have the right to lodge a complaint with the Information Commissioner’s Office (ICO) or another relevant supervisory authority if dissatisfied. 

10. Data Security 

We implement robust technical and organisational measures to safeguard personal data against unauthorised access, loss, or misuse. These measures include secure IT systems, encryption where appropriate, controlled access to data, and staff training on data protection obligations. 

In the context of clinical research, we adhere to industry standards and regulatory expectations, including Good Clinical Practice (GCP) where applicable. 

11. Third-Party Websites 

Our website may contain links to third-party websites. These sites operate independently and have their own privacy policies. We encourage you to review those policies, as we are not responsible for their content or practices. 

12. Updates to This Policy 

We may update this Privacy Policy periodically to reflect changes in legal, regulatory, or operational requirements. Any updates will be posted on this page, and the revised version will take effect from the date of publication. 

13. Contact Information 

If you have any questions about this Privacy Policy or how your personal data is handled, please contact us at info@inaphaea.com or write to us at Inaphaea BioLabs Limited, D6 Thane Road, Nottingham NG90 6BH.