hLAB is committed to protecting and respecting your privacy.
This privacy policy provides information to you about the basis on which any personal information (“personal data”) we collect from you, or that you provide to us through our website, will be processed by us. This privacy policy shall be read in conjunction with our cookie policy and our website terms of use.
hLAB is a brand of hVIVO Services Limited. In this privacy policy, the terms “hLAB”, “we”, “our”, and “us” are used to refer to hVIVO Services Limited. We are registered in England and Wales under company number 02326557 and have our registered office at 40 Bank Street, Floor 24, London, E14 5NR. We are a subsidiary of hVIVO plc (company number 07514939). We are a data controller and will handle (“process“) any personal data that we collect about you in accordance with the law, including, but not limited to the UK General Data Protection Regulation, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 and its replacement and the guidance and codes of practice issued by the Information Commissioner’s Office (‘ICO’).
Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
Children
This website is not intended for nor designed to attract individuals under the age of 18. We do not collect personal data from any person whom we know or suspect is an individual under the age of 18.
WHAT PERSONAL DATA DO WE COLLECT?
We process your personal data, which may include your name, email address, phone number, account identification data e.g. usernames, encrypted passwords, details in your CV and details of any enquiry which you may have, when you use the ‘Contact Us’ tab on our website or when we communicate by other means, for example by telephone or email.
We may collect and process records of any correspondence and communications with us and telephone calls may also be recorded.
We also ask you if you would like to provide your consent to receive information from us, from time to time, including promotional emails about new products, special offers, career opportunities or other information which we think you may find interesting.
Information we collect about you. With regard to each of your visits to our website we may automatically collect the following information:
HOW WE USE YOUR INFORMATION
We use information held about you in the following ways, depending on the nature of your enquiry:
USING YOUR INFORMATION IN ACCORDANCE WITH DATA PROTECTION LAW
Data protection laws require that we meet certain conditions before we are allowed to use your data in the manner described in this privacy policy. We take our responsibilities under data protection laws extremely seriously, including meeting these conditions. To use your personal data, we will rely on the following conditions, depending on the activities we are carrying out:
Consent: We will sometimes ask you to provide your consent for the collection and/or further use of your personal data, whilst on other occasions a different legal basis (see below) may be more legally appropriate depending on the purposes for which your personal data are to be used by us.
With regard to online job applications, we will ask you to provide your explicit consent to the processing of the personal data contained within your online application. This includes special category data such as, but not limited to, information about your health, racial or ethnic origin and criminal convictions. We ask you to read this Privacy Policy prior to providing your consent so that you are fully informed as to how and why your personal data will be used. Your explicit consent to the processing of the personal data contained within your online application is provided to us by ticking the relevant boxes at the end of the application and by submitting the application form to us. Data protection legislation provides you with certain rights in relation to this processing (see below: ‘Your Rights’) – you can, for instance, withdraw your consent to the processing of this personal data at any time. However, this is likely to mean that you will not be able to continue with your application.
Direct marketing: we seek your prior ‘opt-in’ consent before sending you any (i) information about our research, our products, our services and/or career opportunities. You have the right to withdraw your consent and can object to processing of this nature, at any time.
Compliance with legal obligations: As an entity established under the laws of England and Wales, we are obliged to comply with UK laws and guidance provided by UK regulatory bodies. Where we are legally obliged to disclose your personal data to a third party e.g. within the terms of a UK court order or where required to do so in line with a specific requirement in any UK legislation, the processing will fall within this category. You will not be able to object to the processing or ask for the deletion of your personal data when it is processed upon this legal basis.
Legitimate interests: To use your personal data for any other purpose described in this privacy policy, we will rely on a condition known as “legitimate interests”. This legal basis requires us to carry out a balancing test of our interests in using your personal data against the interests you have as a citizen and the rights you have under data protection laws. The outcome of this balancing test will determine whether we can use your personal data in the ways described in this privacy policy. We will always act reasonably and give full and proper consideration to your interests in carrying out this balancing test.
It is in our legitimate interests to collect your personal data when you browse our website, for example, as it provides us with the information that we need in order to improve your experience and those of other visitors as they use the website in future.
HOW LONG WE KEEP YOUR INFORMATION FOR
We may retain your personal data for as long as it is needed for the purposes indicated in this Privacy Policy and strictly in accordance with data protection legislation.
The period of time for which personal data is processed (including storage) will depend on the nature of the personal data and the purpose for which we have indicated to you that it is to be processed by us. Personal data held for a direct marketing purpose is held for two (2) years
If your online job application is unsuccessful, we will retain your details on our database for two (2) years so that we may contact you in the event that a suitable opportunity becomes available for which you may wish to be considered. We would ask that you keep us updated in relation to your contact details if you wish to remain on our database for this purpose.
DISCLOSURE OF YOUR INFORMATION
We may share your personal data with any member of our Group, which means its subsidiaries, and its ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006 (our “Group“) where there is a legal basis for doing so under data protection law and to meet stated legitimate business purposes.
We will only share your personal data with other members of the Group for marketing purposes where you have expressly consented to the disclosure of your personal data for these purposes.
We will only share your personal data with the following where there is a business need to do so and where there is also a clear legal basis under data protection law:
We will disclose your personal data to third parties:
HOW IS YOUR PERSONAL DATA PROTECTED?
Your personal data is only shared with staff within our organisation and with any partners who work closely with us on a ‘need to know’ basis for our legitimate business purposes and access to databases and folders containing personal data is restricted to appropriate staff. We have implemented organisational and technical security measures to safeguard and protect against unauthorised access to your personal data.
Our suppliers are also required to agree to data protection measures to protect your personal data which includes the requirement for them to commit to only process individuals’ personal data consistent with contractual purposes and with appropriate technical and organisational security safeguards.
STORAGE AND TRANSFER OF YOUR PERSONAL DATA
Most of the data that we collect from you is processed, and stored securely by us within, the UK or European Economic Area (“EEA”) However, where your personal data is transferred outside of the UK or EEA, this processing is carried out in accordance with the requirements of the UK General Data Protection Regulation. Personal data held by external service providers, including the suppliers who assist us with our online career portal and our email marketing campaigns, insofar as they process your personal data, is processed and/or transferred securely and in accordance with the data protections for UK citizens’ privacy rights, by adequacy decision under Article 45 UK GDPR or under an appropriate safeguard or derogation pursuant to Articles 46 and 49 UK GDPR.
All information you provide to us is stored on our secure servers, or those of our suppliers.
YOUR RIGHTS
You have a number of rights under data protection law in relation to the way we process your personal data, although these are not absolute and in some instances we may be unable to accept your request, in which case we will respond to you to explain why. These are set out below. You may contact us using the details on our website (or by contacting us directly – details below) to exercise any of these rights and we will respond to any request received from you within one month from the date of the request.
You can contact our Data Protection Officer at dataprotectionofficer@hvivo.com Please address any questions, comments and requests regarding our data processing practices to us in this way in the first instance. You can exercise any of the rights below by contacting us at dataprotectionofficer@hvivo.com.
NUMBER | DESCRIPTION OF RIGHT |
Right 1
| A right to access personal data held by us about you.
|
Right 2
| A right to require us to rectify any inaccurate personal data held by us about you.
|
Right 3
| A right to require us to erase personal data held by us about you. This right will only apply where (for example): we no longer need to use the personal data to achieve the purpose we collected it for; or where you withdraw your consent if we are using your personal data based on your consent; or where you object to the way we process your data (in line with Right 6 below).
|
Right 4
| A right to restrict our processing of personal data held by us about you. This right will only apply where (for example): you dispute the accuracy of the personal data held by us; or where you would have the right to require us to erase the personal data but would prefer that our processing is restricted instead; or where we no longer need to use the personal data to achieve the purpose we collected it for, but you require the data for the purposes of dealing with legal claims.
|
Right 5
| A right to receive personal data, which you have provided to us, in a structured, commonly used and machine readable format. This right will only apply where the processing is based on consent or a contract (see above) and the processing is carried out by automated means. You also have the right to require us to transfer this personal data to another organisation, at your request.
|
Right 6
| A right to object to our processing of personal data held by us about you (including for the purposes of sending marketing materials to you). |
Right 7 |
A right to withdraw your consent, where we are relying on it to use your personal data (for example, where you have asked to receive marketing information about our services or products). |
If you have any concerns regarding our processing of your personal data, or are not satisfied with our handling of any request by you in relation to your rights, you also have the right to make a complaint to the Information Commissioner’s Office. Their address is:
First Contact Team
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
SK9 5AF
LINKS TO OTHER WEBSITES
Please note that our website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
Salesforce & Pardot
We use Salesforce & Pardot for online marketing.
This includes, among others:
Email marketing (newsletter, together with automated email, e.g., for provision of downloads), social media publishing & reporting, reporting, contact management, landing pages, contact forms.
Downloading our content pieces on the articles and research pages may require a user provide their contact information, together with further demographic information. Users will be given the option to opt-in to being contacted by us regarding our products and services. This information, together with the contents of our website are stored on the servers of our software partner Salesforce. We can use it to make contact with visitors to our website or via phone or email and to determine which of our company’s services are interesting for them. All information collected by us is subject to this data privacy policy. We use all information collected exclusively for our marketing or sales efforts.
More information on Salesforce data privacy provisions
More information on Salesforce regarding to EU data protection provisions
More information on the cookies used by Salesforce
ADROLL
We occasionally use the AdRoll display advertising network to collect visitor data on our site and then serve targeted display ads to you on other sites. Our partners use technology such as cookies and web beacons to collect this data. For more information or to opt-out of this type of advertising, please visit AdRoll’s privacy policy. https://www.nextroll.com/privacy
CHANGES TO THIS PRIVACY POLICY
Any changes to this privacy policy in the future will be posted on this page. Please check back frequently to see any updates or changes to this privacy policy
This policy was last reviewed and updated: September 2024
