Privacy Policy

1. Who we are

Double Helix Pharma UK Ltd(“we”, “us”, “our”) is the data controller responsible for your personal data. We are a pharmaceutical quality & compliance consultancy registered in England & Wales (company number 14557169), based in Aylesbury, Buckinghamshire, United Kingdom.

For any questions about this policy or your personal data, contact us at [email protected].

2. The personal data we collect

We only collect data that you choose to provide, or that is needed to run the website securely:

• Enquiry data — your name, company, email address and the details of your message when you complete our contact form or email us.
• Technical data — limited information such as IP address, browser type and pages visited, collected automatically by our hosting provider for security and reliability.

We do not intentionally collect special category data. Please do not include sensitive or confidential commercial information in your initial enquiry.

3. How and why we use it

We use your personal data only for the purposes below, relying on the following lawful bases under UK GDPR:

• To respond to your enquiry and discuss a possible engagement — lawful basis: legitimate interests, and/or taking steps at your request prior to entering a contract.
• To operate, secure and improve the website — lawful basis: legitimate interests in running a safe, functional website.
• To comply with legal obligations where applicable — lawful basis: legal obligation.

We do not use your data for automated decision-making or profiling, and we never sell it.

4. Sharing and processors

We do not sell or rent your personal data. We share it only with trusted service providers who process it on our behalf under appropriate contractual safeguards:

• Hosting — our website is hosted on Vercel, which processes technical/log data to deliver the site.
• Email delivery — contact-form submissions are delivered to us using an email service provider so we can read and reply to your enquiry.

Some providers may process data outside the UK. Where they do, we rely on appropriate safeguards (such as UK adequacy regulations or International Data Transfer Agreements / Standard Contractual Clauses) to protect your data.

5. Cookies and analytics

This website uses only the cookies strictly necessary for it to function and stay secure. We do not currently use advertising or third-party tracking cookies. If we introduce analytics or marketing cookies in future, we will update this policy and request your consent where required.

6. How long we keep your data

We keep enquiry data only for as long as necessary to respond to and manage your enquiry and any resulting relationship, and to meet our legal and accounting obligations. Where an enquiry does not lead to an engagement, we delete the related personal data once it is no longer needed.

7. Your rights

Under UK data protection law you have the right to:

• access a copy of the personal data we hold about you;
• have inaccurate data corrected;
• request erasure of your data;
• restrict or object to our processing;
• data portability; and
• withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email [email protected]. We will respond within one month.

8. Complaints

If you have a concern about how we handle your data, please contact us first so we can put it right. You also have the right to complain to the UK's supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk.

9. Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure, including encrypted (HTTPS) transmission and access controls.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page with a revised “last updated” date.

See also our Website Terms.