Privacy Policy

Last updated: 5 August 2026

1. Introduction

BIOTECH LABORATORIUM LTD respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, disclose and protect personal data when you:

  • visit or use our website;
  • contact us or submit an enquiry;
  • request information about our products, research or business activities;
  • communicate with us as a healthcare professional, researcher, supplier, distributor, business partner or other representative;
  • report a product quality issue, adverse event or other safety-related matter;
  • otherwise interact with BIOTECH LABORATORIUM LTD.

It also explains your rights under applicable UK data protection law and how you may exercise those rights.

This Privacy Policy applies to personal data processed through the BIOTECH LABORATORIUM website and through related communications with us. It does not apply to third-party websites or services that may be linked from our website.

2. Who We Are

BIOTECH LABORATORIUM LTD is the controller responsible for the personal data described in this Privacy Policy.

Company name: BIOTECH LABORATORIUM LTD
Company number: 16691736
Registered office: 167–169 Great Portland Street, 5th Floor, London, W1W 5PF, United Kingdom
Email: info@biotechlab.uk

In this Privacy Policy, references to “BIOTECH LABORATORIUM”, “we”, “us” or “our” mean BIOTECH LABORATORIUM LTD.

For questions about this Privacy Policy or the way we process personal data, please contact us using the details above.

3. Data Protection Legislation

We process personal data in accordance with applicable UK data protection and privacy legislation, including:

  • the UK General Data Protection Regulation;
  • the Data Protection Act 2018;
  • the Data (Use and Access) Act 2025, where applicable;
  • the Privacy and Electronic Communications Regulations 2003; and
  • other applicable laws, regulations and regulatory requirements governing pharmaceutical, medical, safety and business activities.

4. Personal Data We Collect

The personal data we collect depends on how you interact with us.

4.1 Identity and contact information

We may collect:

  • your name;
  • job title or professional role;
  • company or organisation name;
  • postal address;
  • email address;
  • telephone number;
  • country or location;
  • professional registration or qualification details, where relevant.

4.2 Enquiry and correspondence information

When you contact us, we may collect:

  • the contents of your message;
  • information included in a contact or partnership request;
  • records of email, telephone or written correspondence;
  • details of your enquiry and our response;
  • information about products, cooperation opportunities or services in which you are interested.

Please avoid including unnecessary medical or other sensitive personal information in a general website enquiry.

4.3 Business and professional information

If you interact with us in a professional or commercial capacity, we may collect:

  • your employer or organisation;
  • your position, department and professional responsibilities;
  • business contact information;
  • information relating to contracts, orders, distribution, supply, research or cooperation;
  • due diligence and compliance information;
  • billing, delivery and transaction information;
  • records of meetings, negotiations and business communications.

4.4 Product safety and medical information

If you report an adverse event, product complaint, medical enquiry or safety concern, we may collect information including:

  • information about the relevant product;
  • details of the reported event or complaint;
  • age, sex, health status or medical history of the person concerned;
  • treatment and outcome information;
  • details of the healthcare professional or person making the report;
  • supporting records or documents voluntarily provided to us.

Health information is considered special category personal data and receives additional protection under data protection law.

You should not use our website or general contact form for medical emergencies. In an emergency, contact the appropriate emergency or healthcare services immediately.

4.5 Technical and website usage information

When you access our website, we may automatically collect:

  • Internet Protocol address;
  • browser type and version;
  • device type and operating system;
  • time zone and approximate location;
  • pages viewed and links selected;
  • referral source;
  • date, time and duration of visits;
  • diagnostic, security and server log information;
  • cookie and similar technology identifiers.

4.6 Marketing preferences

We may collect information about:

  • whether you have agreed to receive communications from us;
  • your preferred communication channels;
  • your subscription or unsubscribe choices;
  • your interests in our products, activities or research.

5. How We Collect Personal Data

We may collect personal data:

5.1 Directly from you

For example, when you:

  • complete a website form;
  • contact us by email, telephone or post;
  • request product or scientific information;
  • submit a partnership request;
  • enter into a business relationship with us;
  • report a product complaint or safety matter;
  • attend a meeting, event or professional engagement.

5.2 Automatically

We may collect technical and usage information automatically through cookies, server logs and similar technologies when you use our website.

5.3 From third parties

We may receive personal data from:

  • your employer, organisation or authorised representative;
  • distributors, suppliers and commercial partners;
  • healthcare professionals;
  • research and scientific partners;
  • event organisers;
  • professional advisers and service providers;
  • regulatory authorities;
  • publicly accessible professional sources, company websites, registers and directories;
  • fraud prevention, compliance and due diligence providers.

Where we receive personal data from another source, we process it only where we have an appropriate lawful basis.

6. How and Why We Use Personal Data

We use personal data only where permitted by law.

6.1 Responding to enquiries

We process names, contact details and correspondence to:

  • answer questions;
  • respond to partnership or cooperation requests;
  • provide requested product, scientific or corporate information;
  • maintain records of communications.

Our lawful basis is normally our legitimate interest in communicating with individuals and organisations interested in our business, products and activities, or taking steps at your request before entering into a contract.

6.2 Managing business relationships

We process professional, contractual and transaction information to:

  • assess and establish commercial relationships;
  • communicate with suppliers, distributors and partners;
  • administer contracts, orders and deliveries;
  • conduct due diligence;
  • manage payments and accounting records;
  • provide business and operational support.

Our lawful basis may be performance of a contract, taking steps before entering into a contract, compliance with legal obligations or our legitimate interests in operating and developing our business.

6.3 Product quality, safety and pharmacovigilance

We may process personal data, including health information, to:

  • receive, investigate and document adverse event reports;
  • handle product quality complaints;
  • respond to medical information requests;
  • identify and assess product safety signals;
  • meet pharmacovigilance, product safety and regulatory obligations;
  • communicate with healthcare professionals, regulatory authorities, manufacturers or other relevant parties.

Depending on the circumstances, our lawful basis may include compliance with a legal obligation, the performance of tasks in the public interest, reasons of public interest in the area of public health, scientific or regulatory requirements, or explicit consent where appropriate.

Where required, we apply an additional lawful condition for processing special category personal data.

6.4 Website operation, security and improvement

We process technical and usage information to:

  • operate and maintain the website;
  • provide website functionality;
  • protect our website, systems and users;
  • detect security incidents, fraud or misuse;
  • diagnose technical problems;
  • understand how visitors use the website;
  • improve website content, usability and performance.

Our lawful basis is our legitimate interest in operating a secure, reliable and effective website. Where non-essential cookies or similar technologies are used, we will request consent where required by law.

6.5 Legal and regulatory compliance

We may process personal data to:

  • comply with applicable laws and regulatory requirements;
  • respond to lawful requests from authorities;
  • maintain required corporate, tax, accounting and compliance records;
  • establish, exercise or defend legal claims;
  • prevent and investigate unlawful activity;
  • protect the rights, property and safety of our company and others.

Our lawful basis is compliance with a legal obligation or our legitimate interests in protecting our business and legal rights.

6.6 Marketing and professional communications

Subject to applicable law, we may use business contact information to send:

  • company news;
  • product or research information;
  • invitations to professional events;
  • information about partnership opportunities;
  • other relevant corporate communications.

We may rely on consent or our legitimate interests, depending on the recipient, communication channel and circumstances.

You may unsubscribe or object to direct marketing at any time by using the unsubscribe method included in the communication or by contacting info@biotechlab.uk.

7. Legitimate Interests

Where we rely on legitimate interests, those interests may include:

  • responding to enquiries;
  • managing professional and commercial relationships;
  • promoting and developing our business;
  • improving our products, website and communications;
  • maintaining network and information security;
  • preventing fraud and misuse;
  • protecting our legal and commercial interests;
  • maintaining appropriate business records.

Before relying on legitimate interests, we consider whether the processing is necessary and whether your interests, rights or freedoms override our interests.

8. Special Category Personal Data

We do not generally request health information through the standard website contact form.

However, we may need to process health or other special category personal data when handling:

  • adverse event reports;
  • product safety matters;
  • product quality complaints;
  • medical information enquiries;
  • regulatory or scientific matters.

We limit the collection of such information to what is reasonably necessary and apply appropriate access restrictions, confidentiality measures and security controls.

Where possible, information used for safety assessment, research, statistics or regulatory reporting may be pseudonymised, de-identified or anonymised.

9. Sharing Personal Data

We may share personal data with carefully selected recipients where necessary for the purposes described in this Privacy Policy.

Recipients may include:

  • website hosting, IT, cybersecurity and technical support providers;
  • cloud storage and communications providers;
  • customer relationship and enquiry management providers;
  • manufacturers, laboratories, research organisations and scientific partners;
  • distributors, suppliers and logistics providers;
  • healthcare professionals and medical information specialists;
  • pharmacovigilance and product safety service providers;
  • professional advisers, including lawyers, accountants, auditors and insurers;
  • banks and payment service providers;
  • regulatory and governmental authorities, including the Medicines and Healthcare products Regulatory Agency where applicable;
  • law enforcement bodies, courts and other competent authorities;
  • prospective purchasers, investors or advisers in connection with a corporate transaction.

Service providers processing personal data on our behalf are required to use it only for authorised purposes and to maintain appropriate confidentiality and security measures.

We do not sell personal data.

10. International Transfers

Some of our service providers, manufacturers, research partners, distributors or other recipients may be located outside the United Kingdom.

Where personal data is transferred internationally, we take appropriate steps to ensure that it receives a level of protection consistent with UK data protection law.

Depending on the destination and circumstances, we may rely on:

  • UK adequacy regulations;
  • the UK International Data Transfer Agreement;
  • the UK Addendum to approved standard contractual clauses;
  • binding contractual and organisational safeguards;
  • another legally permitted transfer mechanism.

You may contact us for further information about the safeguards used for relevant international transfers.

11. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including legal, accounting, scientific, regulatory and reporting requirements.

Our indicative retention periods are:

  • General enquiries and correspondence: normally for up to 24 months after the enquiry has been resolved;
  • Business and contractual records: for the duration of the business relationship and generally for up to six years afterwards;
  • Accounting and transaction records: for the period required by applicable tax and accounting legislation;
  • Marketing records: until you withdraw consent, object or unsubscribe, subject to maintaining a limited suppression record to respect your choice;
  • Website security and technical logs: normally for up to 12 months, unless a longer period is required to investigate an incident;
  • Product safety, medical information and pharmacovigilance records: for the period required by applicable pharmaceutical, safety and regulatory obligations;
  • Legal claims and investigations: until the relevant limitation period, investigation or proceedings have concluded.

We may retain information for longer where required by law, regulatory requirements, an investigation, litigation or the protection of legal rights.

When personal data is no longer required, we will delete, anonymise or securely archive it as appropriate.

12. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Cookies are small files placed on your device when you visit a website. They may be used to:

  • enable essential website functions;
  • maintain website security;
  • remember user preferences;
  • understand website performance and usage;
  • improve website content;
  • support analytics or marketing activities.

Essential cookies may be used without consent where they are strictly necessary for the operation of the website.

Analytics, preference or marketing cookies will be used only where permitted by law and, where required, after you have provided consent.

You may manage your choices through the cookie banner or cookie settings provided on the website. You may also restrict or delete cookies through your browser settings, although this may affect website functionality.

More detailed information about the specific cookies in use should be made available through the website’s cookie settings or a separate Cookie Policy.

13. Direct Marketing

You have the right to object to the use of your personal data for direct marketing at any time.

You may:

  • select the unsubscribe option in a marketing communication;
  • change your cookie or communication preferences;
  • contact us at info@biotechlab.uk.

We may retain limited information on a suppression list to ensure that we continue to respect your request and do not send further marketing communications.

14. Data Security

We use appropriate technical and organisational measures designed to protect personal data against:

  • accidental or unlawful destruction;
  • loss or alteration;
  • unauthorised disclosure;
  • unauthorised access;
  • misuse or other unlawful processing.

These measures may include access controls, confidentiality requirements, secure hosting, system monitoring, backup procedures, staff awareness measures and contractual protections.

Access to personal data is limited to individuals and service providers who require it for legitimate business, legal or regulatory purposes.

Although we take reasonable steps to protect personal data, no method of Internet transmission or electronic storage can be guaranteed to be completely secure.

15. Your Data Protection Rights

Depending on the circumstances and applicable lawful basis, you may have the right to:

15.1 Access

Request confirmation that we process your personal data and receive a copy of that data.

15.2 Rectification

Request correction of inaccurate or incomplete personal data.

15.3 Erasure

Request deletion of personal data where there is no lawful reason for us to continue processing it.

15.4 Restriction

Request that we restrict the processing of personal data in certain circumstances.

15.5 Objection

Object to processing based on legitimate interests or the performance of a task in the public interest.

You have an absolute right to object to the use of your personal data for direct marketing.

15.6 Data portability

Request that certain personal data you provided to us be transferred to you or another organisation in a structured, commonly used and machine-readable format.

15.7 Withdrawal of consent

Where processing is based on consent, withdraw your consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

15.8 Automated decision-making

Request appropriate safeguards where a decision producing legal or similarly significant effects is based solely on automated processing.

We do not currently use personal data to make solely automated decisions that produce legal or similarly significant effects on website users.

Some rights are subject to legal conditions, limitations and exemptions. We may need to retain certain information despite an erasure request where this is necessary to comply with legal, pharmaceutical, safety or regulatory obligations.

16. Exercising Your Rights

To exercise a data protection right, contact:

Email: info@biotechlab.uk
Address: BIOTECH LABORATORIUM LTD, 167–169 Great Portland Street, 5th Floor, London, W1W 5PF, United Kingdom

Please clearly describe your request and the information to which it relates.

We may request additional information to confirm your identity and protect personal data against unauthorised disclosure.

We normally respond to valid requests within one month. Where a request is particularly complex or involves multiple requests, the response period may be extended where permitted by law. We will inform you if an extension is required.

We do not normally charge a fee. However, a reasonable fee may be charged, or a request may be refused, where permitted by law because it is manifestly unfounded or excessive.

17. Data Protection Complaints

You may submit a complaint about our handling of personal data by contacting info@biotechlab.uk.

Please include:

  • your name and contact details;
  • a description of your concern;
  • relevant dates, correspondence or supporting information;
  • the outcome you are seeking.

We will:

  • provide a clear means of submitting a complaint;
  • acknowledge your complaint within 30 days of receipt;
  • take appropriate steps to investigate it without undue delay;
  • keep you appropriately informed;
  • communicate the outcome of our investigation.

We encourage you to contact us first so that we have an opportunity to investigate and address your concern.

You also have the right to complain to the UK supervisory authority:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

ICO helpline: 0303 123 1113

18. Children’s Privacy

Our website and business services are not directed at children.

We do not knowingly collect personal data directly from children through the website. If you believe that a child has provided personal data to us without appropriate authorisation, please contact us.

This section does not prevent us from processing limited information about a minor where necessary for product safety, pharmacovigilance, legal or regulatory purposes.

19. Third-Party Links

Our website may contain links to websites, platforms or services operated by third parties.

We do not control those third parties and are not responsible for their privacy practices. We recommend reviewing the privacy information provided by each third party before submitting personal data.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • changes to our processing activities;
  • changes to the website or our services;
  • changes in pharmaceutical or regulatory requirements;
  • changes in data protection legislation or regulatory guidance;
  • improvements to our privacy and security practices.

The latest version will be published on our website with an updated revision date.

Where a change materially affects how we use personal data, we will take reasonable steps to bring the change to the attention of affected individuals where required.

21. Contact Us

For privacy enquiries, requests or complaints, contact:

BIOTECH LABORATORIUM LTD
Company number: 16691736
167–169 Great Portland Street
5th Floor
London
W1W 5PF
United Kingdom

Email: info@biotechlab.uk