Privacy Policy
WHO WE ARE
The website nerretherapeutics.com is operated by NeRRe Therapeutics Limited so that NeRRe Therapeutics Limited may contact you with information and/or in response to enquiries that you make via the website.
Where we use “we”, “our” or “us” in this privacy notice, we mean NeRRe Therapeutics Limited unless we say otherwise. Where we use “our site” in this privacy notice, we mean nerretherapeutics.com.
Company | NeRRe Therapeutics Limited |
Company Number | 07916206 |
Country | Incorporated in the UK |
Registered Office | Stevenage Bioscience Catalyst Incubator Building, Gunnels Wood Road, Stevenage, Hertfordshire, SG1 2FX |
THE INFORMATION WE COLLECT ABOUT YOU
Each time you visit our site, we may automatically collect information about you and the device you are using, including:
- Information about which pages you visit and which resources you use on our site
- Information about how you got to our site
- Your internet protocol address known as your IP address which is used to connect your device to the internet
- Your device’s operating system and platform
- The type and version of the browser you are using
- Browser plug-in types and versions which extend the functionality of your browser, for example Pinterest, Evernote and Adblock
- MAC addresses which are used as network addresses for Wi-Fi and Ethernet
- Traffic data, which is aggregated information about the number of visitors, sessions, users and page visits to our site
- Location data
- Time zone setting
- Weblogs
INFORMATION PROVIDED DIRECTLY FROM YOU
We also collect any information you provide to us directly by contacting us by any of the methods referred to on our website for example:
- Your name
- Your email address
Please see our Cookie Notice for details of the cookies we use on our site.
WHERE DO WE GET YOUR INFORMATION FROM?
We collect the information you provide to us directly by contacting us directly through one of the methods referred to on our website, for example by email (e.g. to info@nerretherapeutics.com) or telephone.
We also collect information directly from your device. We use cookies to collect some of this information. Please see our Cookie Notice for details of the information we collect through our site.
WHY DO WE NEED YOUR INFORMATION?
We need the information we collect automatically about your visit to our site to:
- Administer our site
- Improve our site to ensure that content is presented in the most effective manner
- Analyse how visitors use our site (including behaviour patterns and the tracking of visits across multiple devices)
- Improve your online experience
We need the information you provide by contacting us directly through one of the methods referred to on our website and / or by filling in any of the forms to:
- Contact you about those services on our site in which you have expressed an interest
- Contact you to respond to any enquiries or other correspondence from you including (but not limited to) any enquiries or correspondence from you relating to clinical trials
- Process an application you have made for a job opening via our website
You do not have to give us any information or confirm that the information we have obtained from other sources is correct.
WHO DO WE SHARE YOUR INFORMATION WITH?
We may share your personal data with third parties where this is required by law, where it is necessary to perform a contract with you, or where we have another legitimate interest in doing so.
All of these third parties are required to take appropriate security measures to protect your personal information in line with our policies. We only permit them to process your personal data for specified purposes and in accordance with our instructions.
OUR SERVICE PROVIDERS
We may share your personal data with our third-party service providers that perform services and functions at our direction and on our behalf. Our service providers are IT service providers, our recruitment service providers, our lawyers and our cloud storage providers. We rely on service providers in order to effectively operate our business.
THIRD PARTY COMPANIES ASSOCIATED WITH A SALE OR ACQUISITION OF, OR INVESTMENT IN, THE BUSINESS
In the event that we sell or buy any business or assets, we may share your personal data to the prospective seller or buyer of such business, assets or shareholdings.
In the event that we seek to obtain additional investment, we may share your personal data to prospective investor(s).
OTHER THIRD PARTIES
We may need to share your personal data with a regulator or to otherwise comply with applicable law or judicial process. We may disclose your personal data if we are required by law to do so or if we reasonably believe that disclosure is necessary to protect our rights and/or to comply with judicial or regulatory proceedings, a court order or another legal process.
TRANSFERRING INFORMATION OUTSIDE THE UK
We may transfer some personal information we collect about you to the following countries outside of the UK: the United States and Europe, for example where this is necessary for the purposes of our commercial relationships with our investors, to send limited personal data to board members and directors who are not based in the UK, to our third party service providers such as lawyers and advisors, and for cloud storage provision.
A number of the countries in which recipients of your personal data are based may be countries in respect of which there is not an adequacy decision issued by the UK Government under the UK GDPR – what this means is that the country to which we transfer your data has not been deemed to provide an adequate level of protection for your personal data for the purposes of the UK GDPR.
However, in these cases we may use specific appropriate safeguards, which are designed to give personal data the same protection it has in the UK – for example, requiring the recipient of personal data to enter into the International Data Transfer Agreement issued by the UK Information Commissioner’s Office and/or the Standard Contractual Clauses approved by the European Commission or in very limited circumstances, we may rely on an exception, or ‘derogation’, which permits us to transfer personal data to such country despite the absence of an ‘adequacy decision’ or ‘appropriate safeguards’ – for example, reliance on your explicit consent to that transfer.
In addition, we seek to obtain copies or access to the third parties’ data protection policies where possible and only supply the minimum amount of personal data required for the purposes of the activities mentioned above.
If you require further information about these protective measures, you can request it from the Data Privacy Manager.
GOOGLE ANALYTICS
We use Google Analytics to collect details of how you use our site. We do this to help us analyse how visitors use our site (including behaviour patterns and the tracking of visits across multiple devices). Google Analytics doesn’t collect information that identifies a visitor to our site.
All the information that is collected is anonymous and is only used to improve how our site works. We do not allow Google to make any attempt to establish the identities of any users of our site. Please see our Cookie Notice for more details about Google Analytics.
WHERE IS YOUR INFORMATION STORED?
Your information is generally stored on servers and filing systems in the UK, but it may also be stored in or accessed from countries outside the UK. Where this may happen, we always make sure that there are appropriate safeguards in place, such as binding corporate rules or the UK-US data bridge, to guarantee that your information – and your rights – are protected to the same high standard as under UK law.
Our site may, from time to time, contain links to and from the websites of third parties. If you follow a link to any of these websites, please note that these websites have their own privacy notices and cookie notices and we do not accept any responsibility or liability for those notices or your use of those websites. Please check these policies before you submit any personal data to these websites.
Unfortunately sending information via the internet is not totally secure. Although we do our best to protect your information, we cannot guarantee the security of any information you transmit to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to prevent unauthorised access.
HOW LONG DO WE KEEP YOUR INFORMATION FOR?
We only keep your information for as long as we need it.
If you provide information directly to us by making enquiries with us/sending correspondence to us through one of the methods referred to on our website, we will keep your information for no more than 12 months from the date of the last communication between us.
If you have made an application for a job opening via our website, we will keep your information for a period of 12 months after we have communicated to you our decision about whether to appoint you.
After this period, we will securely destroy your personal information in accordance with our data retention policy.
We keep your information for this long so that we can:
- deal with any issues or concerns that you may have about how we handled your personal data
- bring or defend any legal claims
Further information in relation to the way we handle the personal data of job applicants is set out in our Candidate Privacy Notice, a copy of which is available on request at the postal address above or by email to DPM@nerretherapeutics.com.
DO WE CARRY OUT PROFILING AND AUTOMATED DECISION MAKING?
We use Google Analytics to collect details of how you use our site, as well as anonymous data that you enter into our forms. We do this to help us analyse how visitors use our site (including behaviour patterns and the tracking of visits across multiple devices), administer our site and manage your account. Google Analytics doesn’t collect information that identifies a visitor to our site.
All the information that is collected is anonymous and is only used to improve how our site works. We do not allow Google to make any attempt to establish the identities of any users of our site. Please see our Cookie Notice for more details about Google Analytics.
We do not carry out any other profiling or automated decision-making in respect of the information we automatically collect about you when you visit our site.
WHAT RIGHTS DO YOU HAVE?
Under the data protection rules, you have several rights in respect of your information, which include the right to:
- access your information
- withdraw your consent to the processing of your information at any time
- ask us to make changes to the information we hold about you to make sure that it is accurate and up to date
- delete or erase your information (sometimes called the right to be forgotten)
- stop or restrict our processing of your information
- object to our processing your information
- not be subject to automated decision-making and
- request the transfer of some of the information we hold about you (known as data portability).
If you would like to exercise any of your rights, please contact us at DPM@nerretherapeutics.com or in writing to the Data Privacy Manager at the Company’s postal address above. Please note that an archive copy of any information provided to us may be retained by us for our records and for audit purposes.
You have the right to request a copy of the information we hold about you by sending your request in writing to us at the above address.
MAKING A COMPLAINT
If you have any questions, concerns or complaints about the way NeRRe Therapeutics Limited processes your personal information, please contact us at the postal address above or at DPM@nerretherapeutics.com.
If you are not happy with the way we have handled your complaint or are still concerned about our handling of your personal information, you have a right to take your complaint to the Information Commissioner’s Office at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF and www.ico.org.uk.
CHANGES TO THIS NOTICE
We will regularly review this notice and keep it updated to make sure that the information we provide you with is accurate and up to date.
We will retain previous policies which can be requested form us at the postal address above or at DPM@nerretherapeutics.com.
This notice was last reviewed and updated in November 2023.