Symbiosis Pharmaceutical Services Ltd (company number SC373596) is the data controller responsible for your personal data.
Registered office: Scion House, Unit 10, Stirling University Innovation Park, Stirling, FK9 4NF, Scotland.
For privacy or data protection matters, please contact: Lorraine Den-Kaat, Lorraine.Den-Kaat@symbiosis-pharma.com
Personal Data We Collect
We may collect and process the following categories of personal data:
- Identity data: name, job title, employer.
- Contact data: email address, phone number, postal address.
- Website usage data: pages visited, IP address, browser type, device identifiers.
- Cookie data: analytics cookies, preference cookies.
- Wi-Fi usage data: device MAC address, connection times, bandwidth usage, websites accessed.
- Marketing data: mailing list subscriptions, email engagement statistics.
- Enquiry data: information you provide when contacting us.
- Images captured by CCTV systems operating at our premises.
How We Use Your Personal Data (Purposes)
We process your personal data for the following purposes:
- To operate and improve our website
- To provide Wi-Fi access on our premises
- To respond to enquiries
- To send newsletters and updates (with your consent)
- To maintain security and monitor network performance
- To comply with legal and regulatory obligations
We operate CCTV systems at our premises. Appropriate signage is displayed in monitored areas to inform employees, visitors and contractors that CCTV is in operation.
Lawful Bases For Processing
We rely on the following lawful bases under UK GDPR:
- Consent: for marketing emails and non-essential cookies.
- Legitimate interests: website analytics, network security, business administration and operation of CCTV systems for the security of employees, visitors, assets and premises.
- Contract: responding to enquiries or providing services.
- Legal obligation: compliance with regulatory requirements.
- We operate CCTV systems at our premises for the following purposes: ensuring safety and security of employees, visitors and property, preventing and detecting crime, and investigating incidents and complaints.
Cookies
We use cookies to understand how visitors use our website and to improve user experience.
You can manage or withdraw cookie consent at any time through our cookie banner or your browser settings.
Categories of cookies used:
- Strictly necessary cookies
- Analytics cookies (Google Analytics)
- Preference cookies
Third-Party Processors and Data Sharing
We use trusted third-party service providers:
Google Analytics
- Used to analyse website traffic.
- Date processed: IP address (anonymised), device information, browsing behaviour.
- Lawful basis: Legitimate interests.
Salesforce MCAE (formerly Pardot)
- Used to manage mailing lists and send newsletters.
- Data processed: email address, engagement statistics.
- Lawful basis: Consent.
CCTV footage may be shared where necessary with:
- Police and law enforcement agencies
- Insurers
- Legal advisers
- Regulatory authorities where required by law
International Data Transfers
Some of our service providers (e.g., Salesforce MCAE, Google) may transfer data outside the UK.
Where this occurs, we ensure appropriate safeguards are in place, such as:
- UK International Data Transfer Agreement (IDTA)
- Standard Contractual Clauses (SCCs)
Data Retention
We retain personal data only for as long as necessary for the purposes described above:
- Marketing data: until you unsubscribe.
- Website analytics data: up to 26 months.
- Wi-Fi logs: up to 12 months.
- Enquiry data: up to 3 years.
- Contractual data: up to 7 years (legal requirement).
- CCTV footage is normally retained for 30 days and is then automatically deleted unless required for an investigation, legal proceedings, an insurance claim or other legitimate business purpose.
Your Rights
You have the following rights under UK GDPR:
- Right of access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to object
- Right to data portability
- Right to withdraw consent
- Right to lodge a complaint with the ICO
- Right to request access to CCTV footage containing your personal data, subject to the rights of other individuals and applicable legal exemptions.
ICO contact: http://www.ico.org.uk
To exercise your rights, contact Lorraine Den-Kaat – Lorraine.Den-Kaat@symbiosis-pharma.com
Automated Decision-Making
We do not use your personal data for automated decision-making or profiling.
Changes to This Notice
We may update this privacy notice from time to time.
The latest version will always be available on our website.
Version 2
13/07/2026
