Privacy Policy

1. Scope

Cytosomatic Labs (“we”, “us”) is a preclinical biotechnology research organisation. This notice explains how we process personal data collected through cytosomaticlabs.com, our research portal, and related correspondence.

It covers site visitors, enquirers, portal account holders, and personnel of prospective research partners. It does not cover recruitment candidates, or data collected under a clinical trial or research protocol — we run no clinical trials and collect no patient health information through this site.

2. Data we process

We do not knowingly process special-category data — health, biometric, precise location or government identifiers. Please do not include such information in an enquiry.

• Identity and contact — name, email address, organisation and role, provided by you.
• Correspondence — the content and metadata of enquiries and email exchanges.
• Account — credentials and profile details held by our authentication provider, including your Google identifier if you sign in with Google.
• Technical — IP address, user agent, timestamp and requested URL, generated automatically in server and security logs.
• Preferences — language selection, stored locally in your browser.

3. Purposes and legal bases

We do not sell personal data, share it for cross-context behavioural advertising, or use it for automated decision-making with legal or similarly significant effects. Where we rely on consent, you may withdraw it at any time without affecting prior processing.

• Respond to collaboration, funding and general enquiries — legitimate interests, or consent where you initiated contact.
• Operate and secure your research portal account — performance of a contract with you.
• Maintain availability, detect abuse and investigate security incidents — legitimate interests.
• Meet legal obligations and establish or defend legal claims — legal obligation and legitimate interests.

4. Disclosure

We disclose personal data to no advertising network, data broker or third party for their own marketing purposes.

• Processors — our hosting platform, managed database and authentication provider, and transactional email provider, each acting on documented instructions.
• Professional advisers — legal, accounting and insurance advisers, where necessary.
• Authorities — where required by law or to protect the rights, property or safety of Cytosomatic Labs or others.
• Corporate transactions — in a merger, financing or transfer of assets, subject to this notice continuing to apply.

5. Security, transfers and retention

Account and enquiry records are held in a managed cloud database with row-level access rules restricting each signed-in user to their own records. Traffic is encrypted in transit and internal access is limited to those who need it. No system is completely secure; if you believe your interaction with us is compromised, contact us immediately.

Processing may occur on infrastructure in the United States and European Union. For transfers out of the UK or EEA we rely on our providers’ safeguards, including standard contractual clauses where applicable.

We retain enquiries for the duration of a collaboration discussion and a reasonable record-keeping period thereafter, account records until you request deletion, and technical logs for a short operational window. Periods may be extended where law or a legal claim requires it.

6. Cookies

We use strictly necessary and functional browser storage only: a portal sign-in session, a language preference, and platform security cookies. There are no advertising cookies, pixels or third-party behavioural analytics. Because we neither sell nor share personal data, Global Privacy Control signals require no differential response. Full detail is in our cookie policy.

7. Your rights

Contact us using the details below to exercise a right. We may verify your identity first, will respond within the period required by applicable law, and will not discriminate against you for making a request. An authorised agent may act for you with written proof of authority.

• Access, correction, deletion and portability of your personal data.
• Restriction of, or objection to, processing based on legitimate interests.
• Withdrawal of consent at any time.
• Complaint to your supervisory authority, and appeal of our decision where local law provides it.

8. Regional disclosures

• United States — in the past 12 months we collected the categories in section 2 for the purposes in section 3 and disclosed them to the processors in section 4. We sold no personal data, shared none for cross-context behavioural advertising, and knowingly processed none belonging to anyone under 16. No opt-out mechanism is therefore required.
• UK, EEA and Switzerland — the legal bases in section 3 apply, together with the rights in section 7.
• Canada — we handle personal information in line with applicable federal and provincial privacy legislation.

9. Children and external links

This site addresses researchers, clinicians, investors and other professional audiences. It is not directed at children and we do not knowingly collect data from anyone under 16; contact us and we will delete any such data.

Links to external resources, including professional profiles, publications and partner organisations, are governed by those organisations’ own notices.

10. Changes

An updated notice takes effect when posted, and the date above reflects the most recent revision. Where law requires, we will seek your consent or notify you directly of material changes.