Biorbyt's Privacy Policy

Version Number: 5.0 | Effective Date: 1 January 2026

ABOUT THIS POLICY

Biorbyt values your privacy and the protection of your personal data. This Privacy Policy (the “Policy”) explains how Biorbyt Ltd (“Biorbyt”, “we”, “us” or “our”) collects, uses, stores, shares, transfers, and otherwise processes personal data collected from or about you.

The Biorbyt entity with which you interact will, where applicable, be the data controller responsible for your personal data.

This Policy applies to personal data collected through our websites, online services, communications, customer service interactions, business relationships, product orders, marketing activities, events, and other interactions where this Policy is made available or referenced.

This Policy is intended to help you understand:

• the scope of this Policy
• the categories of personal data we collect
• how we use your personal data and our legal bases for doing so
• who we share your personal data with
• how long we keep your personal data
• your rights and choices
• how to contact us

If you provide us with personal data relating to another individual, you are responsible for ensuring that person is aware of this Policy and, where required, that you have obtained any necessary consent.

We are committed to processing personal data in accordance with applicable law, including the UK GDPR, EU GDPR, Data Protection Act 2018, and related privacy and electronic communications laws.

1. SCOPE

This Policy applies to personal data collected by Biorbyt in connection with:

• your use of our website and online services
• your creation of an account with us
• your purchase of products from us
• your enquiries, requests, and communications with us
• your participation in events, surveys, webinars, or marketing activities
• your subscription to updates, newsletters, or product information
• our relationships with customers, suppliers, distributors, and business contacts
• any other interaction where this Policy is posted, linked, or otherwise made available

This Policy applies to both online and offline collection of personal data.

There may be circumstances in which a separate privacy Policy applies, such as employee privacy Policies, recruitment privacy Policies, or specific Policies for a particular program, activity, or service. In those cases, the separate Policy will apply to the extent relevant.

If you do not provide personal data that is necessary for us to perform a contract, provide requested services, or comply with legal obligations, some services or products may not be available to you.

2. YOUR INFORMATION

We interact with individuals and organizations for a range of legitimate business purposes. In the course of those interactions, we may collect personal data directly from you, automatically through your use of our website or systems, or from third parties such as business partners, service providers, or publicly available sources.

The personal data we collect depends on the nature of your relationship with us and how you interact with us.

3. GENERAL CATEGORIES OF PERSONAL DATA WE COLLECT

“Personal Data” means any information relating to an identified or identifiable individual, including information that can directly or indirectly identify a person.

Depending on the circumstances, Biorbyt may collect and process the following categories of personal data:

Identity and Contact Information

This may include, for example:

• first name and last name
• email address
• telephone number
• postal address
• company name
• job title
• account login details
• customer account identifiers

Professional Information

This may include:

• employer or institution
• department or business role
• professional affiliation
• purchasing role or research interest
• communications relating to your professional activities or product enquiries

Commercial and Transaction Information

This may include:

• products purchased or considered
• order history
• quotations
• shipping and billing details
• payment-related records
• customer support history
• communications regarding purchases, returns, refunds, or complaints

Technical Information

This may include:

• IP address
• browser type and version
• operating system and device type
• referring website or URL
• website usage information
• date and time of access
• pages viewed and navigation patterns
• information collected through cookies and similar technologies, as described in our Cookie Policy

Marketing and Communications Information

This may include:

• preferences regarding marketing communications
• subscription status
• records of whether you opened or clicked marketing emails
• attendance at events, webinars, or promotional activities
• responses to surveys or feedback forms

Correspondence and Support Information

This may include:

• records of email correspondence
• support tickets
• live chat records
• notes of communications with our team
• information you choose to provide in relation to product support or customer service

We do not intentionally collect special category personal data through our website except where required in a limited and lawful context, and we do not seek to collect personal data from children.

4. HOW WE COLLECT PERSONAL DATA

We collect personal data in a number of ways, including:

Directly from you

For example, when you:

• create an account
• place an order
• request a quotation
• contact us
• subscribe to updates
• participate in surveys, webinars, or events
• use our live chat or support services

Automatically through your use of our website

When you visit or use our website, we may automatically collect certain technical and usage information through cookies, analytics tools, logs, and similar technologies. Please see our Cookie Policy for more information.

From third parties

We may receive personal data from:

• your employer or institution
• distributors or business partners
• service providers acting on our behalf
• publicly available sources
• payment processors
• logistics providers
• analytics and website service providers

5. HOW WE USE YOUR PERSONAL DATA AND OUR LEGAL BASES

We only process personal data where we have a lawful basis for doing so.

To provide products and services

We use personal data to:

• register and manage customer accounts
• process orders and payments
• arrange shipping and delivery
• provide quotations and product information
• respond to enquiries and customer service requests

Legal basis:

• performance of a contract
• steps prior to entering into a contract
• legitimate interests in operating our business

To manage our business relationship with you

We use personal data to:

• communicate with customers, suppliers, distributors, and other contacts
• administer accounts and business records
• provide technical support
• maintain customer service records

Legal basis:

• performance of a contract
• legitimate interests in managing business relationships

To improve our website, products, and services

We use personal data and technical data to:

• analyze website usage
• improve website performance and usability
• diagnose technical issues
• improve customer experience
• develop and refine our services

Legal basis:

• legitimate interests
• consent, where required for non-essential cookies or analytics technologies

To send marketing communications

We may use your personal data to send:

• product updates
• service announcements
• newsletters
• event invitations
• promotional communications

You can opt out of marketing communications at any time.

Legal basis:

• consent, where required
• legitimate interests, where permitted by law

To maintain security and prevent misuse

We use personal data to:

• detect and prevent fraud
• protect website and system security
• investigate suspicious or unlawful activity
• enforce our terms and policies

Legal basis:

• legal obligations
• legitimate interests in protecting our business and systems

To comply with legal and regulatory obligations

We may process personal data to:

• comply with tax, accounting, regulatory, and legal obligations
• maintain business records
• respond to lawful requests from authorities
• establish, exercise, or defend legal claims

Legal basis:

• legal obligation
• legitimate interests

6. MARKETING COMMUNICATIONS

Where permitted by law, we may contact you about products, services, events, or information that may be relevant to your professional interests or previous interactions with us.

Where consent is required by law, we will obtain it before sending marketing communications.

You may unsubscribe or opt out of marketing communications at any time by:

• using the unsubscribe link in our emails
• contacting us directly

Opting out of marketing communications will not affect service-related or transactional communications.

7. COOKIES, ANALYTICS AND OTHER TRACKING TOOLS

Our website uses cookies and similar technologies to support website operation, customer service, analytics, and security.

This may include:

• strictly necessary cookies
• functional cookies
• privacy-focused analytics technologies
• live chat functionality

We do not currently use advertising or targeting cookies for behavioural advertising or cross-site profiling.

Further details about how we use cookies and similar technologies are available in our Cookie Policy.

8. THIRD-PARTY LINKS AND TOOLS

Our website may contain links to third-party websites, platforms, or services that are not operated or controlled by Biorbyt.

This Policy does not apply to those third-party websites or services. We encourage you to review their privacy policies before providing them with personal data.

Our website may also incorporate third-party tools or services, such as live chat, analytics, payment processing, or embedded content. Those services may process personal data in accordance with their own privacy practices and any agreements they have with us.

9. RECIPIENTS OF PERSONAL DATA

We may share personal data with the following categories of recipients, where appropriate:

• service providers supporting website hosting, analytics, live chat, IT, payment processing, logistics, and customer support
• suppliers, distributors, and business partners, where necessary, to support our operations
• professional advisers such as lawyers, auditors, insurers, and accountants
• courts, regulators, law enforcement authorities, and governmental bodies, where required by law or necessary to protect our rights
• prospective purchasers, investors, or transaction advisers in the event of a sale, restructuring, financing, or transfer of business

We require third-party service providers processing personal data on our behalf to implement appropriate security measures and comply with applicable data protection laws.

10. INTERNATIONAL DATA TRANSFERS

Personal data may be transferred to, stored in, or accessed from countries outside the United Kingdom or European Economic Area.

Where such transfers occur, Biorbyt implements appropriate safeguards as required by applicable law, which may include:

• Standard Contractual Clauses
• contractual data protection obligations
• vendor due diligence and risk assessment
• other lawful transfer mechanisms

You may contact us for more information about the safeguards used for international transfers.

11. DATA RETENTION

We retain personal data only for as long as necessary for the purposes for which it was collected, including for legal, regulatory, contractual, accounting, tax, dispute resolution, and business continuity purposes.

In determining retention periods, we consider:

• the nature, sensitivity, and volume of the personal data
• the purpose for which the data was collected
• the risk of harm from unauthorized use or disclosure
• applicable legal and regulatory requirements
• the need to maintain business and contractual records
• potential legal claims or disputes

When personal data is no longer required, it is securely deleted, anonymized, or otherwise disposed of in accordance with our data retention practices.

12. YOUR RIGHTS AND CHOICES

Depending on the laws that apply to you, you may have the right to:

• request access to your personal data
• request correction of inaccurate or incomplete personal data
• request deletion of your personal data
• request restriction of processing
• object to processing
• request transfer of your personal data
• withdraw consent where processing is based on consent
• opt out of marketing communications

These rights are subject to legal and regulatory limitations and may not apply in all circumstances.

To exercise your rights, please contact us using the contact details below. We may need to verify your identity before responding to your request.

You may also have the right to lodge a complaint with the relevant data protection authority.

13. INFORMATION COLLECTED FROM MINORS

Biorbyt does not knowingly collect personal data from children through its website or services. If we become aware that personal data has been collected from a child without appropriate authorization, we will take reasonable steps to delete that information.

14. SALE OR TRANSFER OF BUSINESS

If Biorbyt is involved in a sale, acquisition, merger, restructuring, financing, or transfer of all or part of its business or assets, personal data may be disclosed to advisers and prospective transaction parties and transferred as part of the transaction, subject to appropriate confidentiality and legal protections.

15. SECURITY

Biorbyt uses technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

These measures may include:

• access controls
• password protection
• encryption
• secure network and device controls
• physical security
• incident response procedures
• staff training and confidentiality obligations

While we take reasonable steps to protect personal data, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

16. CONTACT US

If you have any questions about this Policy or our data practices, you can contact us at:

Biorbyt Ltd
8 Signet Court
Swann Road
Cambridge
CB5 8LA
United Kingdom

Email:

17. UPDATES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in law, regulation, technology, or our business practices.

The most current version will always be posted on our website with the updated effective date.

We encourage you to review this Policy periodically.