Privacy

Last updated: 24 October 2025

Effectus Research (“we”, “us”, “our”) is committed to protecting the privacy and security of your personal data. This notice explains what we collect, why we collect it, how we use it, and your rights under UK data protection law (including the UK GDPR and the Data Protection Act 2018).

Who we are and how to contact us

Controller: Effectus Research
Email: contact@effectusresearch.com
Telephone: +44 7771 997 104
Address: Life Sciences Innovation Hub, Nethergate, Dundee, DD1 4HN, Scotland, UK

If you have any questions about this notice or how we handle your data, please contact us using the details above.

How we obtain personal data

We collect personal data in the following ways:

When you contact us via our website, email or phone, or meet us at events.
In the course of providing services (e.g. consulting, executive support, education and workshops).
When you subscribe to updates/newsletters or download resources.
From publicly available sources (e.g. LinkedIn, Companies House) and referrals.
Through website usage data (e.g. basic analytics and cookies—see Cookies below).

The personal data we collect

The data we collect depends on your relationship with us and may include:

Identity and contact data: name, job title, organisation, email, phone, postal address.
Communications: emails, meeting notes and related correspondence.
Client/project data: information necessary to perform our services, which may include limited personal data about your staff, customers, stakeholders or research participants provided by you as our client.
Marketing preferences: your choices about receiving updates from us.
Recruitment data: CVs, cover letters, interview notes and references.
Website/technical data: IP address, device/browser information, and pages visited.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it to us or asked us to process it (e.g. accessibility or dietary requirements for events). We do not knowingly collect children’s data or target services to children.

How and why we use personal data (lawful bases)

We use personal data only where the law allows. The main purposes and lawful bases are:

To provide and manage our services (e.g. proposals, statements of work, delivery, billing, client communications) — performance of a contract and legitimate interests.
To respond to enquiries and provide information you request — legitimate interests.
To improve our website, services and user experience (including security, analytics and troubleshooting) — legitimate interests.
To send updates/marketing where you have opted in, or where permitted for business contacts — consent or legitimate interests (you can opt out at any time).
To comply with legal or regulatory obligations (e.g. tax, accounting, anti‑fraud) — legal obligation.
Recruitment — legitimate interests and, where applicable, consent.

We do not sell your personal data.

Marketing

We may send professional updates or invitations we think are relevant to your role. You can opt out at any time by using any unsubscribe link in emails or by contacting us.

Sharing your data

We may share personal data with:

Service providers/Processors who support our operations (e.g. secure hosting, email, document management, analytics, event tools). These providers only process data on our instructions and are subject to confidentiality and security obligations.
Professional advisers (e.g. accountants, insurers, lawyers) where necessary.
Third parties at your request or with your consent.
Authorities where required by law or to protect rights, property or safety.

If our website links to third‑party services (for example, a newsletter platform or video host), their own privacy notices apply when you use those services.

International transfers

Some providers may be located outside the UK. Where we transfer personal data internationally, we implement appropriate safeguards (e.g. UK Addendum to Standard Contractual Clauses, adequacy regulations) to protect your data.

Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or loss, proportionate to the nature and risks of the processing.

How long we keep data (retention)

We keep personal data only for as long as necessary for the purposes set out in this notice:

Enquiries (non‑client): typically up to 24 months after our last interaction.
Client/project records: typically 7 years after the end of the engagement (to meet tax and contractual requirements), or longer if required by law or to establish/defend legal claims.
Marketing contacts: until you opt out or we determine the data is no longer up‑to‑date/necessary.
Recruitment: ordinarily up to 12 months from receipt (or longer with your consent), unless employed/engaged.

We will securely delete or anonymise data when it is no longer required.

Your rights

Depending on the circumstances, you may have rights to: access, rectification, erasure, restriction, objection, and data portability. You also have the right to withdraw consent where processing is based on consent. To exercise your rights, please contact us using the details above. We may need to verify your identity and (if applicable) confirm your authority to act on someone’s behalf.

How to complain

If you have concerns about how we use your data, please contact us first and we’ll do our best to resolve the issue. You also have the right to complain to the UK Information Commissioner’s Office (ICO). Visit ico.org.uk/make‑a‑complaint or call 0303 123 1113.

Our data protection complaints process

We provide a route for raising data protection complaints. We will acknowledge complaints within 30 days of receipt, investigate without undue delay (including during staff absences), keep you informed of progress and provide an outcome without undue delay. This is in addition to your right to contact the ICO at any time.

Cookies

Our website uses essential cookies to make the site work and may use analytics to understand website performance and improve our services. You can usually control cookies through your browser settings and choose to opt out of marketing cookies via the pop up banner on the website. If we deploy non‑essential cookies, we will request your consent where required.

Changes to this notice

We may update this notice from time to time. Significant changes will be highlighted on our website or communicated directly where appropriate. The version and date are shown at the top of this page.

Contact details

Effectus Research
Life Sciences Innovation Hub, Nethergate, Dundee, DD1 4HN, Scotland, UK
Email: contact@effectusresearch.com
Telephone: +44 7771 997 104