Your privacy is important to Theolytics. The protection, confidentiality and integrity of your data is one of our primary concerns.
This notice explains how Theolytics Limited (“Theolytics”, “us” or “we”) collect and use personal data obtained from users of our website. Theolytics is the data controller of the personal data we collect, and we are committed to protecting and respecting your privacy. In this instance, “Personal data” refers to information which relates to an identified or identifiable living individual.

What personal data do we collect?

We collect information from you when you use our website or complete our ‘Contact Us’ form.
The personal data we collect might include the following:

  • Name
  • Address
  • Contact information such as email address and telephone number
  • CV and cover letter (when submitted through our ‘Careers’ Page)
  • Your IP address.

Why do we process your personal data?

We process data for the following purposes:

  • Communication with you – done at your request via the ‘Contact Us’ form
  • Compliance with our terms and policies, which include the prevention and detection of
    fraud or other crimes.
  • Tracking visitor activity on our website and the compilation of statistical reports on said
    website activity, which will enable us to improve our content.

Who has access to your personal data?

We have to disclose your personal data to our third-party service providers for the purposes of
hosting our website.

We may also disclose your personal data to legal consultants or similar third parties where it is
necessary for our legitimate interests, including the prevention and detection of fraud or other

Where we are required to by the relevant laws, we will also have to disclose your personal data
to law enforcement, government authorities or courts.

We may also share data with our respective partners and suppliers in the context of operating
our business, providing our services and other processing purposes as outlined in this Privacy Notice.

When sharing your data with third parties, we will only disclose any data that is relevant to the
situation. Furthermore, we generally have contracts that require them to keep your information
secure and restrict them from using it for any other purpose.

On which legal basis do we process your personal data?

We process your personal data on the following legal bases:

  • Legitimate business purposes: Where the processing is necessary for our legitimate
    interests, such as: to communicate with you after you have contacted us; to protect us
    from harm by preventing and detecting illegal activities, fraud or similar threats; to
    exercise or defend against legal claims, unless we determine in a case-by-case
    assessment that our interests are overridden by your interests or rights.
  • Consent: To deliver updates on our company (upon your subscription to said updates.)
  • Legal obligations: To comply with legal obligations to which we are subject (for example,
    where a court requests the disclosure of your data).

Where will your personal data be processed?

Your personal data is processed by our staff in the United Kingdom. In the event that any
personal data is transferred to a country outside the European Union (“EU”) or to an
international organisation, we will make sure that this transfer only occurs with countries and
international organisations that have already ensured an adequate level of protection and have
put appropriate safeguards in place to protect your data and your rights in accordance with EU
privacy law and GDPR, or as is otherwise allowed under GDPR.

Your rights

Under data protection law, your rights include:

  • Your right of access – You have the right to ask us for copies of your personal
  • Your right to rectification – You have the right to ask us to rectify personal information
    you think is inaccurate. You also have the right to ask us to complete information you
    think is incomplete.
  • Your right to erasure – You have the right to ask us to erase your personal
    information in certain circumstances.
  • Your right to restriction of processing – You have the right to ask us to restrict the
    processing of your personal information in certain circumstances.
  • Your right to object to processing – You have the right to object to the processing of
    your personal information in certain circumstances.
  • Your right to data portability – You have the right to ask that we transfer the personal
    information you gave us to yourself or another organisation in certain circumstances.

Storage and transfer of data


We implement the appropriate technical and organisational measures to protect your personal
information against accidental or unlawful destruction, loss, change or damage. All personal
information we collect will be stored on our secure servers.

Retention Periods.

We will store the personal information we collect for our own purposes for no longer than
necessary for the purposes set out and in accordance with our legal obligations and legitimate
business interests.

International Transfers of your Personal Information.

The personal information we collect may be transferred to and stored in countries outside of the jurisdiction you are in, where we and our third-party service providers have operations. If you are located in the EU, your personal information may be processed outside of the EU, including in the United States; these international transfers of your personal information will only be made pursuant to appropriate safeguards, such as standard data protection clauses adopted by the European Commission. If you wish to enquire further about these safeguards used, please contact us using the details set out at the end of this privacy policy

Links to third party sites

Our website contains links to third party sites, such as our investors and collaborators. If you
follow a link to any of these websites, please note that these websites have their own privacy
policies and that we do not accept any responsibility or liability for their policies. Please check
the individual policies before you submit any information to those websites.


If you apply for a role at Theolytics, we may ask you to provide various pieces of personal
information including professional and educational history, information about your skills and
experience and proof of your right to work. Whilst you are not required to provide all requested information, failure to do so may result in us being unable to proceed with your application for a role.

Approach to children

Our Website is not directed at persons under 13 and we do not knowingly collect personal
information from persons under 13. If you become aware that your child has provided us with
personal information without your consent, then please contact us using the details below so
that we can take steps to remove such information.

Changes to this notice

We reserve the right to modify or amend this Notice at any time and will always post the revised Notice on our website.

Contact us

If you have any questions or concerns about how Theolytics has used your personal data,
contact Theolytics via email at or by writing to us at:
Theolytics Limited
Oxford BioEscalator – Innovation Building
Roosevelt Drive