Privacy Policy

Relatix Bio works with researchers, clinicians, health innovators and participant communities. This notice explains what personal information we collect through this website, why we use it, who may receive it and the choices available to you. Relatix Bio is the controller of personal information collected directly through this site unless a project-specific notice says otherwise.

Information we collect

• Enquiries and partnerships: name, email address, telephone number where supplied, organisation, role, project requirements and correspondence.
• Career applications: name, email address, LinkedIn profile where supplied, CV and anything included in application notes.
• Newsletters and updates: email address, subscription preferences, consent record and unsubscribe activity where a subscription is offered.
• Participant and community engagement: contact details, profile or background information, preferences and information relevant to opportunity matching. This may include information about physical or mental health, neurodivergence, disability or lived experience when a person chooses to provide it.
• Website and security data: IP address, browser and device information, timestamps, requested pages, cookie identifiers, form-security results and server logs.

Please do not include medical records or other sensitive information in a general contact or career form unless we specifically ask for it through an appropriate, explained process.

How and why we use information

• responding to enquiries and discussing potential work;
• planning, delivering and administering services or partnerships;
• assessing career applications and contacting candidates;
• sending requested newsletters or updates;
• matching people or communities with potentially relevant research, testing or engagement opportunities;
• operating, securing, troubleshooting and improving the website and forms;
• maintaining records and meeting legal, regulatory and safeguarding obligations.

Lawful bases

Depending on the interaction, we rely on one or more of the following UK GDPR lawful bases: taking steps at your request before entering a contract; performing a contract; complying with a legal obligation; your consent, particularly for optional direct marketing; and our legitimate interests in responding to enquiries, developing responsible partnerships, recruiting staff, operating securely and improving our services. Where we rely on legitimate interests, we consider the necessity of the use and balance it against your rights and reasonable expectations.

Health and other special-category information

Information concerning health, disability, neurodivergence, ethnicity and certain other characteristics may receive additional legal protection. Where Relatix Bio processes special-category information, we identify both an Article 6 lawful basis and an applicable Article 9 condition before processing. The relevant condition and safeguards depend on the project and may include explicit consent or a condition relating to research, equality, employment or another basis provided by law. A project-specific privacy notice or participant information sheet will explain the basis, purpose and choices in more detail. Those project-specific terms take precedence where they provide more specific information.

We minimise sensitive information, restrict access and do not use it for unrelated advertising. We do not make solely automated decisions through this website that have legal or similarly significant effects on individuals.

Who we share information with

We may share information only where necessary with authorised Relatix Bio personnel; website hosting, email, form-security, communications and IT providers acting for us; professional advisers; regulators or public authorities where required; and research or commercial partners where the person has been appropriately informed and the sharing has a lawful basis. We do not sell personal information.

International transfers

Some technology providers may process information outside the United Kingdom. Where personal information is transferred internationally, we use an applicable adequacy decision or appropriate contractual and organisational safeguards, and assess supplementary measures where required. You may contact us for more information about safeguards relevant to your data.

How long we keep information

We keep personal information only for as long as needed for the purpose described, including any legal, accounting, contractual, research-integrity or dispute-resolution requirements. Retention decisions consider the nature and sensitivity of the information, risk of harm, the relationship or project lifecycle and whether the purpose can be achieved with less information. Unsuccessful recruitment information is deleted or anonymised after the recruitment and any appropriate challenge period unless the applicant agrees to longer consideration. Newsletter details are retained until unsubscribe or withdrawal, subject to keeping a minimal suppression record where necessary.

Security

We use proportionate technical and organisational safeguards, including access controls, secure administration, data minimisation, backups and service-provider controls. No internet service can guarantee absolute security. If an incident creates a risk to individuals, we follow applicable assessment and notification duties.

Cookies and third-party services

The site uses cookies and similar storage needed for WordPress functionality, security and form operation. Contact forms use Google reCAPTCHA to reduce abuse; this may cause Google to receive technical information under its own privacy terms. Any optional analytics or marketing technology should be enabled only with the required information and consent controls.

Your rights

Depending on the circumstances and lawful basis, you may have rights to access, correct or erase information; restrict or object to processing; receive portable information; and withdraw consent without affecting earlier lawful processing. You also have the right to object to direct marketing at any time.

To exercise a right or ask a privacy question, use our contact page. We may need to verify identity before acting on a request. You can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint.

Changes to this notice

We may update this notice when services, providers or legal requirements change. The updated date at the top shows the current version.