Privacy notice

Who this notice covers

This notice applies to visitors to the Exordium Biotech website and to people who contact the laboratory by email or through the project brief.

There are no accounts, logins, client portals or dashboards on this website. Nothing here is a patient portal, and this website is not used to deliver medical care.

Information you give us

• Identity and contact details: your name, email address, and — only if you choose to provide them — company name and phone number.
• Project information: the objective, product category and format, development stage, readiness, launch window and any technical detail you write into the brief or an email.
• Correspondence: the content of emails and any documents you decide to send us.

Please do not send patient health information, medical records, passwords, payment-card numbers, government identification numbers or other highly sensitive personal information. None of it is needed to evaluate a product-development inquiry.

Information collected automatically

Like any website, requests to our host and to the font service produce standard technical log information such as IP address, browser type, referring page and the time of the request. This is a normal part of serving a web page and is used for delivery, security and troubleshooting.

No analytics product, advertising pixel, session-recording tool or marketing tag is installed on this website. We do not build visitor profiles, and we do not capture UTM or campaign parameters.

Cookies and browser storage

This website does not set cookies. The only browser storage used is a single session entry that remembers your scroll position between pages and is cleared when you close the tab. Web fonts are requested from a third-party font service, which receives the standard request information described above.

Details, including what would change if analytics were ever introduced, are in the cookie notice.

How the project brief works today

The project brief on this website is currently a front-end prototype. It builds a draft project profile in your own browser as you answer, and it does not yet transmit or store your answers on a server. Nothing you type is sent to us until backend delivery is connected.

Until then, the reliable way to reach the laboratory is email. When submission is connected, this notice will be updated to describe exactly where the information goes and how long it is kept.

Why we use information

We do not use inquiry information for advertising, and we do not add you to a marketing list because you submitted a brief. If a newsletter or marketing option is ever offered, it will be a separate, unchecked choice you have to opt into.

• To review a project for technical fit, development readiness and current laboratory capacity.
• To reply to your inquiry and to have the technical conversation that follows.
• To prepare a scope or proposal where a project looks like a fit.
• To keep the website secure, available and working correctly.
• To meet record-keeping or legal obligations that apply to us.

Lawful bases (EEA and UK visitors)

Where the EU or UK GDPR applies, we rely on the following lawful bases: your request to take steps before entering a contract, when you ask us to review a project; our legitimate interests in responding to correspondence, operating and securing the website, and evaluating whether a project fits the laboratory; consent, where you have given it for something optional; and legal obligation, where the law requires us to keep records.

Who we share information with

Project information is treated as confidential and is not sold, rented or traded. It is not shared for advertising.

We use ordinary service providers to run the website — a hosting and deployment platform, an email provider and a web font service. They process information only to provide those services. Where a project proceeds under an agreement, information may be shared with the specific suppliers or third-party laboratories needed to carry out that work, and only to the extent needed.

The definitive list of processors will be published here once the backend for form delivery is connected and each vendor and its data-processing terms have been confirmed. We would rather name none than name the wrong ones.

Confidentiality of technical information

Formulas, technical detail and commercial context sent to us are handled as confidential business information and kept within the laboratory. Confidentiality obligations, formula ownership and intellectual property in project deliverables are defined in the applicable project agreement; browsing this site or submitting a brief does not by itself transfer or grant rights in anything.

How long we keep it

Inquiry correspondence is kept while a project is under discussion and for as long as needed afterwards to maintain a record of the engagement or to meet legal obligations. Information we no longer need is deleted or archived. You can ask us to delete an inquiry at any time.

Specific retention periods will be published once form delivery and storage are connected and the retention rule has been set with counsel.

Security

We take reasonable measures to protect information, including limiting who can access inquiry correspondence and keeping the site free of unnecessary third-party code. No website or email system is completely secure, so please avoid sending highly sensitive information by email.

Your privacy rights

Depending on where you live, you may have some or all of the following rights over personal information we hold about you:

• Access — ask what we hold and get a copy.
• Correction — ask us to fix information that is wrong or out of date.
• Deletion — ask us to delete information we no longer need.
• Restriction and objection — ask us to pause or stop certain uses, including uses based on legitimate interests.
• Portability — receive certain information in a portable format, where applicable.
• Withdraw consent — where we relied on consent, withdraw it at any time without affecting what came before.
• Non-retaliation — we will not treat you differently for exercising a privacy right.
• Complain — raise a concern with your local data-protection authority (EEA/UK) or your state attorney general.

To make a request, email projects@exordiumbiotech.com. We may need to ask for information that confirms you are the person the request concerns, or that an agent is authorised to act for you, before we can act on it.

United States and California

For U.S. visitors, the categories of personal information collected, the purposes for collecting them and the parties they may be disclosed to are described in the sections above. The information collected here is business-contact and project information — we do not seek sensitive personal information, and we do not knowingly collect it.

Based on the technology currently installed on this site — no analytics, no advertising pixels, no tracking cookies — we do not sell personal information and do not share it for cross-context behavioural advertising.

If advertising or analytics technology is introduced in future, this notice will be updated first, an opt-out will be provided where applicable, and Global Privacy Control browser signals will be recognised where required.

International transfers

The laboratory and its service providers are based in the United States. If you contact us from outside the United States, your information will be handled in the United States, where privacy laws differ from those in your home country. Where required, transfers rely on an appropriate safeguard such as the European Commission's standard contractual clauses.

Children

This is a business-to-business website. It is not directed to children, and we do not knowingly collect information from anyone under 16. If you believe a child has sent us information, email us and we will delete it.

Links to other sites

Where we link to research, suppliers or other external pages, those sites have their own privacy practices and we are not responsible for them.

Changes to this notice

This notice will be updated as the website and the business develop — in particular when the project brief begins transmitting submissions, or if any analytics is introduced. The date at the top shows when it last changed.