Upstart Bio Limited (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal data responsibly.
This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website or engage with our services.
Who We Are
Upstart Bio Limited is the data controller for the purposes of UK data protection law.
Upstart Bio Limited
Registered address: 3A Marketplace, Woodstock, Oxfordshire, OX20 1SY
Company number: 12421858
Registered in England and Wales
Telephone: 0797 4757 263
Email: [email protected]
What Information We Collect
We may collect and process the following personal data:
- Name
- Email address
- Telephone number
- Company name and job title, where relevant
- Information you choose to provide via contact forms, email or other correspondence
When you use our website, we may also automatically collect technical data, including:
- IP address
- Browser type and version
- Device type
- Pages visited and time spent on the site
- Referral source
This technical data is used to monitor performance, maintain security and improve the website.
How We Use Your Information
We use personal data to:
- Respond to enquiries and contact requests
- Provide and manage our services
- Communicate with clients and prospective clients
- Send updates where you have explicitly opted in
- Maintain and improve our website
- Comply with legal and regulatory obligations
We do not sell personal data and we do not use your information for unsolicited marketing.
Legal Basis for Processing
Under UK GDPR, we rely on the following legal bases:
- Consent, where you have opted in to receive communications
- Contract, where processing is necessary to provide services
- Legitimate interests, for website functionality, security and service improvement
- Legal obligation, where processing is required by law
Cookies and Analytics
We use cookies and similar technologies to support website functionality and understand how visitors use our website.
Non-essential cookies are only set with your consent via our cookie consent mechanism.
We may use services such as:
- Google Analytics (via Google Tag Manager)
- Google Search Console
- Microsoft Clarity
These services collect anonymised or pseudonymised technical data to help us analyse website performance and user behaviour.
Access to Personal Data
Personal data submitted through our website is stored within systems used to operate and maintain the website and our business communications.
From time to time, limited access to this data may be available to trusted third-party service providers who support the operation of the website or related systems (for example, website hosting, website maintenance, technical support, email delivery, security, and analytics). This access is typically incidental to providing those services and is restricted to what is necessary.
Where third-party providers process personal data on our behalf, we take reasonable steps to ensure appropriate safeguards are in place. This may include contractual obligations, confidentiality requirements, and security measures appropriate to the service provided.
We do not authorise third-party providers to use personal data for their own marketing. However, some providers may process limited technical information as part of delivering their services. Where this applies, it is governed by the provider’s own policies and settings, alongside any agreements in place.
We will disclose personal data to others only where required by law, to protect our legal rights, or where you have provided explicit consent.
Data Retention
We retain personal data only for as long as necessary for the purposes it was collected, including to meet legal, regulatory or contractual obligations.
This may include retaining enquiry records, correspondence and service-related communications for a reasonable business period.
Data Security
We take appropriate technical and organisational measures to safeguard personal data against unauthorised access, loss, misuse or alteration.
However, no internet-based system can be guaranteed to be completely secure, and transmission of data is at your own risk.
Links to Other Websites
Our website may contain links to third-party websites.
We are not responsible for the privacy practices or content of those websites and recommend reviewing their privacy policies separately.
Children’s Privacy
Our services are not directed at children under the age of 18.
We do not knowingly collect personal data from children. If we become aware that such data has been collected, it will be deleted promptly.
Your Rights
Under UK data protection law, you have the right to:
- Request access to your personal data
- Request correction of inaccurate or incomplete data
- Request erasure of your personal data
- Restrict or object to certain types of processing
- Withdraw consent at any time where processing is based on consent
To exercise your rights, please contact us using the details below.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been handled improperly.
Changes to This Policy
We may update this Privacy Policy from time to time. The most recent version will always be published on this page.
Contact Us
If you have any questions about this Privacy Policy or how your personal data is handled, please contact:
