PRIVACY
Policy

PURPOSE OF THIS PRIVACY NOTICE

This is SkinBioTherapeutics PLC’s (we, us or our) Privacy Policy for our external business activities relating to our use of the Personal Data of:

  • users of our website;
  • employees of our customers, suppliers and potential customers & suppliers; and
  • others who may be interested in our business.

This Privacy Notice aims to give you information on how we collect and process your Personal Data through your use of this website and other sources, when you engage with us.

CONTROLLER

Please contact the CFO (CFO@skinbiotherapeutics.com) if you have any queries relating to our Group and data protection or if you wish to exercise your rights.

Our processing of Personal Data is regulated by the Information Commissioner’s Office (ICO) (www.ico.org.uk). This version was last updated on 24thSeptember 2018, previous versions can be obtained by contacting us.

THE DATA WE COLLECT ABOUT YOU

Personal Data means any information about an individual from which that person can be identified.

We may collect, use, store and transfer different kinds of Personal Data about you, which we have grouped together as follows:

•Identity Data -name, title, date of birth and gender.•Contact Data –email address, telephone numbers, addresses.•Technical Data -internet protocol (IP) address, login data,browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our website.•Usage Data -information about how you use our website.•Marketing and Communications Data -your preferences in receiving marketing from us and your communication preferences.

HOW IS YOUR PERSONAL DATA COLLECTED?

•You may give us Identity and Contact Data by filling in forms or by corresponding with us. •We may automatically collect Technical and Usage Data about your equipment, browsing actions and patterns. We collect this Personal Data by using cookies and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies. Please see our Cookie Policy for further details.

HOW WE USE YOUR PERSONAL DATA

We will only use your Personal Data when the law allows us to. Most commonly, we will use your Personal Data where:

•it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests; or •we need to comply with a legal or regulatory obligation.

We do not rely on consent as a legal basis for processing your Personal Data.

PURPOSES FOR WHICH WE WILL USE YOUR PERSONAL DATA

Business purposes

The purposes for which personal data may be used by us, including personnel, administrative, financial, regulatory, payroll and business development purposes.Business purposes include the following:

•Compliance with our legal, regulatory and corporate governance obligations and good practice.•Gathering information as part of investigations by regulatory bodies or in connection with legal proceedings or requests.•Investigating complaints.•Marketing our business.•Improving services.

SupplierEmployeeDataData HeldReason for ProcessingLawful Basis for Processing DataRetention PolicyNames, addresses, bank details, VAT registration details, amounts billed, daily rates or contract ratesTo facilitate our relationships with our external suppliers. Legitimate interest, to engage those suppliers.6 yearsfrom the end of the last company financial year they relate to, or longer if they show a transaction that covers more than one of the company’s accounting periods for HMRC tax requirements.Investors’DataData HeldReason for ProcessingLawful Basis for Processing DataRetention PolicyNames, addresses, shareholdingTo identify those holding shares in the business. Performance of a contract (if direct relationship with that investor).Legal obligation.To be retained indefinitely for as long as schedules, certificates etc remain active.