Signal (“we”, “us”, or “our”) is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights under the UK GDPR and EU GDPR.

1. Who we are

Signal is a specialist biotech consultancy business, operating in the UK, Ireland, and internationally. Our business provides pharmacovigilance and related consulting services.

Contact details:

Email: ckenny@signalpharmaexperts.com

2. What information we collect

We may collect and process the following types of personal data:

• Website visitors: IP address, browser type, operating system, and pages visited (collected automatically by Squarespace for security and troubleshooting).

• Contact form submissions: Name, email address, phone number, and any information you choose to provide.

• Business contacts and clients: Professional contact details (e.g. name, job title, email, telephone number).

• Employees, contractors, and applicants: HR-related personal data as required for employment or engagement.

We do not actively collect sensitive personal data through our website.

3. How we use your data

We use your personal data for the following purposes:

• Responding to enquiries submitted via our website.

• Delivering our services under contract with clients.

• Managing our business relationships.

• Maintaining the security and proper functioning of our website.

• Meeting our legal and regulatory obligations.

4. Legal basis for processing

We rely on the following lawful bases under GDPR:

• Legitimate interests: to operate our website, respond to enquiries, and manage client relationships.

• Contract: where processing is necessary to perform a contract with you or your organisation.

• Legal obligation: where processing is necessary to comply with applicable law.

• Consent: where required (for example, for optional cookies or marketing communications).

5. Data sharing and storage

We may share personal data with trusted service providers (such as Squarespace, our IT and cloud providers, or professional advisers) who support our business operations.

We do not sell or rent personal data.

Data may be stored on servers outside the UK/EU. In such cases, we ensure appropriate safeguards (such as standard contractual clauses) are in place.

6. Data retention

We retain personal data only as long as necessary for the purposes described above, or as required by law. For contact form enquiries, we generally keep information for up to 12 months unless a business relationship is established.

7. Your rights

Under GDPR, you have the following rights:

• Access to your personal data.

• Correction of inaccurate data.

• Erasure of your data (“right to be forgotten”).

• Restriction of processing.

• Data portability.

• Objection to processing.

• Lodge a complaint with the Information Commissioner’s Office (ICO) or your local supervisory authority.

To exercise your rights, please contact us at ckenny@signalpharmaexperts.com

8. Data security and breaches

We take appropriate technical and organisational measures to protect personal data.

In the event of a data breach, we will assess the risk, notify affected individuals and regulators where required, and assist our clients (as controllers) in meeting their obligations.

9. Updates to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

Last updated: September 2025