Privacy Statement

Stevenage Bioscience Catalyst respects the privacy of visitors to our website and is committed to the protection of your personal information.

This Privacy Statement explains what we do with your personal data, whether you are visiting our website, corresponding with us or using our services.  It describes how we collect, use and process your personal data.

For the purpose of applicable data protection legislation (including but not limited to the General Data Protection Regulation (Regulation (EU) 2016/679) (the "GDPR"), SBC is recognised as a Data Controller.


Personally Identifiable Information

Stevenage Bioscience Catalyst directly collects personal information (such as name, address, telephone number or e-mail address) only when it is asked for and you voluntarily submit it to us. We may use the information to respond to your requests, improve our level of service and the content of our Site, provide you with information (where you have agreed to this), seek your views or consider your application for employment.

 How we protect your personally identifiable information

Stevenage Bioscience Catalyst uses a variety of security technologies and procedures to help protect your personal information from unauthorised access, use, or disclosure. Stevenage Bioscience Catalyst is committed to using commercially reasonable means to ensure that your personal information is protected appropriately.

Sharing personally identifiable information with third parties

Stevenage Bioscience Catalyst will not sell or rent personal information to third parties. Sometimes selected third parties are used to provide support services in connection with the Site and such parties may have access to your information to enable them to provide those services. All companies providing such support services are required to meet the same standards of data protection as Stevenage Bioscience Catalyst and are prohibited from using the information for their own purposes.  In particular Stevenage Bioscience Catalyst does not allow its service providers to use your personal information for their own marketing activities.

We may disclose your personal information in the following circumstances:

1.  When we have reason to believe that disclosing this information is necessary to identify, contact or bring legal action against someone who may be causing injury to you, or otherwise injuring or interfering with Stevenage Bioscience Catalyst's rights, property or operations, other users of this Site, or anyone else who could be harmed by such activities;

2.  When we believe the law requires it, or in response to any demand by law enforcement authorities in connection with a criminal investigation, or civil or administrative authorities in connection with a pending civil case or administrative investigation; or

3.   In connection with a substantial corporate transaction, such as a division, a merger, consolidation, asset sale,or in the unlikely event of bankruptcy.

Non-Personal Information

Stevenage Bioscience Catalyst may also collect (where available) information about your browser type and operating system, websites you visited before and after visiting the Site, standard server log information and IP Address (see below).

This information (which does not identify any individual) is aggregated together data such as the total number of visits to our Site, the number of visitors to each page of our Site, and the domain names of our visitors' internet service providers. We use this information, which remains in aggregate form, to understand how our visitors use our Site so that we may improve it. We may also share this aggregated information with other third parties.
No personal information is disclosed in this process.

Use of IP Addresses

An Internet Protocol (IP) address is a set of numbers that is automatically assigned to your computer whenever you log on to your internet service provider or through your organisation's local area network (LAN) or wide area network(WAN). Web servers automatically identify your computer by the IP address assigned to it during your session online.

Stevenage Bioscience Catalyst, or third party companies acting on our behalf, may collect IP addresses for the purposes of systems administration and to audit the use of our Site. We do not ordinarily link a user's IP address to information that directly identifies that user, which means each user's session will be logged, but the user remains anonymous to us. However, we may use IP addresses to identify users of our Site when we feel it is necessary to enforce compliance with the Site's terms of use, or to protect our service, Site or other users.

Links to other web sites

This Site may provide links to third party websites. This Privacy Statement does not apply to those websites. Stevenage Bioscience Catalyst is not responsible for the availability of such websites and does not review or endorse and shall not be liable, directly or indirectly, for (i) how these websites treat your personally identifiable information, (ii) the content of such websites, including (without limitation) any advertising, products, goods or other materials or services available from such websites and (iii) the use that others make of these websites.

Please ensure that you check the legal and privacy statement posted on each website you link to before entering any personally identifiable information.


The main reasons that we collect data regarding clients and commercial partners are:

       i.   Managing relationships – we will collect the details for our contacts within your organisation, such as names, addresses, telephone numbers and/or email addresses.  We hold this information in order that we can maintain a relationship with you and enter into contractual arrangements etc.

       ii.   Managing finances – we may collect personal information in relation to our finance processes such as bank details, so that we can pay you. In certain circumstances, such as when you engage with our Finance teams, we may share information with other third parties such as debt recovery agents.

We also use some of your personal data in our legitimate interests, to help us to offer you a more tailored, efficient service. However, you do have the right to object to us processing your personal data on this basis:

       i.  Marketing and developing our business – we may from time to time collect personal information from you to help us to grow our business, such as when you provide us with a business card at conferences etc.    If we do obtain information in this way we will inform you of our intention to use it in the development of our business,

We will always respect your right to restrict this type of processing of your personal data by providing you with the opportunity to opt-out of these type of communications.

       ii.  Support services – we might collect and hold personal information in providing supporting services, for example:

                           a.          Contacting individuals in relation to press releases

                           b.          Collating and managing business proposals 


The main reasons that we collect data regarding suppliers are:

       i.  Managing relationships – we will collect the details for our contacts within your organisation, such as names, telephone numbers and email addresses.  We may also hold extra information that someone in your organisation has chosen to tell us.
       ii.  Managing finances – we may collect personal information in relation to our finance processes such as bank details, so that we can pay you. In certain circumstances, such as when you engage with our Finance teams, we may share information with other third parties such as debt recovery agents.


The main reasons that we collect data regarding staff and applicants are:

       i.  Recruitment Process – you might provide to us, or we might receive from another source such as an agency, your CV.  This will contain personal information relating to yourself such as name and contact details and your career history.  If you are unsuccessful in applying for a position with us we will delete this information ,and any interview notes within 12 months.  If you are successful, we will retain your CV along with other work records in accordance with our data retention standard operating procedure.

       ii.  HR Records – we will collect personal information in relation to managing both your own and our interests in relation to your employment contract.  You will be provided a staff specific privacy statement as part of your induction process.  This will contain a more detailed overview of how we process your personal data in relation to employment.


You have the following data protection rights:

Right to access:  You may ask us to confirm what information we hold about you at any time, and request us to modify,update or delete such information. We will need to verify your identity and may ask for more information about your request. If we provide you with access to the information we hold about you, we will not charge you for this unless your request is "manifestly unfounded or excessive". If you request further copies of this information from us, we may charge you a reasonable administrative cost where legally permissible. Where we are legally permitted to do so, we may refuse your request. If we refuse your request we will always tell you the reasons for doing so. 

Right to rectification: You have the right to request that we rectify any inaccurate or incomplete personal data that we hold about you. If we have shared this personal data with third parties, we will notify them about the rectification unless this is impossible or involves disproportionate effort. Where appropriate, we will also tell you which third parties we have disclosed the inaccurate or incomplete personal data to. Where we think that it is reasonable for us not to comply with your request, we will explain our reasons for this decision.

Right to erasure: You have the right to request that we erase your personal data in certain circumstances. Normally, the information must meet one of the following criteria:

  • the data are no longer necessary for the purpose for which we originally collected and/or processed them;
  • you have withdrawn your consent to us processing your data, and there is no other valid reason for us to continue processing;
  • the data has been processed unlawfully;
  • it is necessary for the data to be erased in order for us to comply with our legal obligations as a data controller; or
  • if we process the data because we believe it necessary to do so for our legitimate interests, you object to the processing and we are unable to demonstrate overriding legitimate grounds for our continued processing.

We would only be entitled to refuse to comply with your request for one of the following reasons: 

  • to exercise the right of freedom of expression and information;
  • to comply with legal obligations or for the performance of a public interest task or exercise of official authority;
  • for public health reasons in the public interest;
  • for archival, research or statistical purposes; or
  • to exercise or defend a legal claim.
  • when complying with a valid request for the erasure of data we will take all reasonably practicable steps to delete the relevant data.

Right to restrict processing: You have the right to request that we restrict our processing of your personal data in certain circumstances. This means that we can only continue to store your data and will not be able to carry out any further processing activities with it until either: (i) one of the circumstances listed below is resolved; (ii) you consent; or (iii) further processing is necessary for either the establishment, exercise or defence of legal claims, the protection of the rights of another individual, or reasons of important EU or Member State public interest. 

The circumstances in which you are likely to request that we restrict the processing of your personal data are:

  • where you believe the data we are processing is inaccurate, where we will restrict processing for the period during which the accuracy of the data is verified;
  • where you object to our processing of your personal data for our legitimate interests.
  • where our processing of your data is unlawful, but you would prefer us to restrict our processing of it rather than erasing it; and
  • where we have no further need to process your personal data but you require the data to establish, exercise, or defend legal claims.

If we have shared your personal data with third parties, we will notify them about the restricted processing unless this is impossible or involves disproportionate effort. We will, of course, notify you before lifting any restriction on processing your personal data.

Right of data portability: If you wish, you have the right to transfer your personal data between data controllers. To allow you to do so, we will provide you with your data in a commonly used machine-readable format that is password-protected so that you can transfer the data to another online platform.


If you consider that the data protection principles have not been followed in respect of personal data about yourself you should contact Stevenage Bioscience Catalyst at:

Stevenage Bioscience Catalyst
Gunnels Wood Road
Hertfordshire  SG1 2FX

You also have the right to raise concerns with a supervisory authority by contacting the Information Commissioners Office whose website is 

If you would like to exercise any of these rights, or withdraw your consent to the processing of your personal data please contact us at the address above or via

Please note that we may keep a record of your communications to help us resolve any issues which you raise.



This Site may use technology called "cookies". A cookie is a small text file that is placed on your hard disk by a Web page server. Cookies help provide additional functionality to the Site or help us analyse usage of the Site more accurately. For instance, our server may set a cookie that keeps you from having to enter a password more than once during a visit to the Site. In all cases in which cookies are used, we will not collect information that directly identifies you. The only personally identifiable information Stevenage Bioscience Catalyst collects directly is the information you voluntarily provide.

You have the ability to accept or decline cookies. Most Web Browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies, or receive a warning before a cookie is stored, if you prefer. Please refer to your Internet Browser’s instructions or help screen to learn more about these functions and to specify your cookie preferences. If you choose to decline cookies, you may not be able to fully experience the interactive features of this Site or any other websites that you visit.


We may occasionally update this Privacy Statement. If the changes we make are material, we may post a notice on this Site. We encourage you to periodically review this Privacy Statement to stay informed about how we are helping to protect the personal information we collect. Your continued use of the Site constitutes your agreement to the Privacy Statement and any updates. Note that this Privacy Statement does not apply to information collected from offline resources and communications.

This statement was last updated on 22nd May 2018.


Funding Partners: