Please read the following information carefully.

This privacy notice contains information about what data we collect and store about you and why. It also tells you who we share this information with, the security mechanisms we have put in place to protect your data and how to contact us if you have a complaint.

Who are we?

VacV Biotherapeutics (UK) Ltd collects, uses and is responsible for personal information about you. When we do this, we are the ‘controller’ of this information for the purposes of the General Data Protection Regulation and other applicable data protection laws.

Information collected by us

Personal data, or personal information, means any information about an individual from which a person can be identified. We may collect, use, store and transfer the following different kinds of personal data about you:

• Name
• Address
• Telephone number
• Email address
• Position
• Organization
• Marketing preferences

How is your personal data collected? ‍

We use different methods to collect data from and about you, including through direct interactions and publicly available sources.

Direct interactions

You may give us your personal information by filling in our contact form or by corresponding with us by post, phone, email or otherwise.

Publicly available sources

We may receive information about you from publicly available sources such as Companies House, professional registers and conference/ seminar registers.

How do we use your personal data?

We will only use your personal data when the law allows us to. Most commonly, we may use your personal data in the following circumstances:

• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override these interests.
• Where it is necessary to exercise our rights or comply with our obligations under a contract with you.
• Where we need to comply with a legal obligation

Generally, we do not rely on consent as a legal basis for processing your personal data although we will get your consent before sending direct marketing communication to you via email. You have the right to withdraw such consent to marketing at any time by contacting us. We have set out below a description of the ways we plan to use your personal data, and which legal basis we rely on to do so. We have also identified what our legitimate interests are where appropriate.

What we use your data for?

• To register you as potentially interested in our services.
• To manage our relationship with you.
• Operational reasons, such as improving efficiency, training, and quality control.
• Statistical analysis to help us manage or understand the effectiveness of our business.

Lawful basis for processing

• Necessary for our legitimate interests (to develop our services and grow our business).
• Necessary for our legitimate interests (to be as efficient as we can be so that we can deliver the best service).
• Necessary for our legitimate interests (to study how potential customers and/or referrers may use our services, to grow our business and to inform our marketing strategy).

Opting out

You can ask us to stop sending you messages at any time by contacting us as per the details at the bottom of this privacy notice.

Who will we share your personal data with?

We will not share your personal data with any third party for marketing purposes.

We have relationships with several third parties that we may share your personal data with e.g., for us to receive IT services.  For a list of these third parties please contact The Data Protection Officer at the below address. We will share personal information with law enforcement agencies if required by applicable law. We will not share your personal information with any other third parties without your consent.

Where do we hold your personal data?

Personal data may be held at our offices and those of our third-party service providers as described above (see above: “Who will we share your personal data with?”).

How long will we store your personal data?

We will only retain your personal data for as long as reasonably necessary to fulfil the purpose we collected it for, including for the purpose of satisfying any legal or regulatory requirements. In some circumstances you can ask us to delete your personal data (see “Your rights” below).

Your rights

Under the General Data Protection Regulation, you have a number of important rights that you can exercise free of charge.  In summary, these rights are:

• Access to your personal information and other supplementary information;
• Require us to correct any mistakes or complete missing information we hold on you;
• Receive a copy of the personal information you have provided to us or have this information be sent to a third party, this will be provided to you or the third party in a structured, commonly used and machine readable format;
• Object at any time to processing of your personal information for direct marketing;
• Object in certain other situations to the continued processing of your personal information;
• Restrict our processing of your personal information in certain circumstances;
• Request not to be subject to automated decision making which produce legal effects that concern you or affect you in a significantly similar way.

If you want more information about your rights under the GDPR please see the Guidance from the Information Commissioners Office on Individual’s rights under the GDPR. If you want to exercise any of these rights, please:

• Email, call or write to The Data Protection Officer at the Company’s address or email address given below;
• Provide other information so that we can identify you. We may need to contact you to request further information to verify your identity;
• Let us have proof of your identity and address;
• Object at any time to processing of your personal information for direct marketing;
• State the right or rights that you wish to exercise.

We will respond to you within one month from when we receive your request.

How to make a complaint

Please get in touch if you have any issues or complaints (see “Get in touch” below). The General Data Protection Regulation also gives you the right to lodge a complaint with a supervisory authority where the alleged infringement of data protection laws occurred. The UK supervisory authority is the Information Commissioner’s Office who can be contacted at https://ico.org.uk/concerns.

Our security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed.  In addition, we limit access to your personal data to those employees, agents, contractors and other third parties, who have a business need to know. They will only process your personal data on our instructions, and they are subject to confidentiality restrictions. If you require further information about how we protect your data, please contact The Data Protection Officer (see “Get in touch” below).

Future processing

We do not intend to process your personal information for any reason other than stated within this privacy notice.  If this changes, we will inform you.

Changes to this privacy notice

This privacy noticed was published on 24 October 2022. We constantly review our internal privacy practices and may change this policy from time to time.

 Get in touch

If you have any questions about this privacy notice or the information, we hold about you or wish to opt-out please contact The Data Protection Officer at info@vacvbtx.com.

Alternative Formats

If it would be helpful to have this notice provided in another format (for example: in another language, audio, braille) please contact us (see “Get in touch” above).