Privacy Policy

Data Protection 

Biodatascientist processes personal data strictly in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Any personal data shared with or accessed by Biodatascientist during the provision of services will be used solely for the purposes of delivering those services, fulfilling contractual obligations, or complying with legal requirements.

Biodatascientist implements appropriate technical and organisational measures to safeguard personal data against unauthorised access, loss, alteration, or disclosure. These measures are proportionate to the nature, scope, context, and risks associated with the processing activities undertaken.

Unless otherwise agreed in writing, Biodatascientist acts as an independent data controller for any personal data it collects directly, and as a data processor only where explicitly contracted to do so. In processor scenarios, Biodatascientist will process personal data exclusively on documented instructions from the client and will not engage sub‑processors without prior authorisation.

Clients are responsible for ensuring they have a lawful basis for sharing personal data with Biodatascientist and for providing any required notices to data subjects.

Upon completion of services, personal data will be retained only for as long as necessary to meet contractual, legal, or regulatory obligations, after which it will be securely deleted or anonymised unless otherwise agreed.