Privacy Policy

Updated on: 27th September 2024

This Privacy Policy explains how and why personal data (information that relates to an identified or identifiable individual) are processed by Arcturis Data (UK) Limited (“Arcturis”, “we”, or ”us”) as a data controller for the purposes detailed below. 

This Privacy Policy does not apply to any of our other purposes which may have their own privacy policies, or any service(s) offered by a third party, which will be subject to the privacy policy of that third party. Information on how and why personal data are processed in relation to the Arcturis Real World Data (RWD) Network research database can be found on the Network’s Transparency and Privacy Notice webpage.  

If after reading this notice you have any questions or queries, or would like any further information, please do not hesitate to contact our Data Protection Officer via dpo@arcturisdata.com

Purposes for processing 

We use your personal data for the following purposes, or for purposes which are reasonably compatible to the ones described. 

To initiate and manage a relationship with you

 

We will use your personal data to: 

      • Provide our services and products to you; 
      • To respond to your queries and provide you with information when you request it or when we think our services and products may be of interest to you. When we share electronic marketing with you, we will ask for your consent where required and you will have the ability to opt out of future electronic marketing at any time; 
      • Provide online services such as webcasts, employment opportunities and financial results; 
      • Invite you to provide feedback, participate in research, surveys or attend events; 
      • Manage your account on our systems; 
      • Identify you and authenticate your access rights access to our systems; 
      • Personalise your experience when interacting with Arcturis; and, 
      • Perform analytics, market research and segmentation to understand your preferences, improve our services and products and our communications with you. 

To manage our business operations and processes

We will use your personal data to: 

      • Manage our network and information systems security;  
      • Manage our workforce effectively; 
      • Keep records related to our relationship with healthcare professionals; 
      • Undertake data analyses and auditing to help us deliver and improve our platforms, content and services; 
      • Monitor and analyse trends, usage and activities in connection with our products and services to understand which parts of our products and services are of the most interest and to improve them accordingly; and 
      • Prepare and perform management reporting and analysis, including analytics and metrics. 

To achieve other purposes

We will use your personal data: 

      • To follow applicable laws and regulations; 
      • To respond to requests from competent public authorities; 
      • To tell you about changes to our terms, conditions and policies; 
      • To exercise or defend Arcturis against litigation (potential, threatened or actual); 
      • To investigate and take action against illegal or harmful behaviour; 
      • To protect Arcturis, your vital interests, or those of another person; 
      • To gain insights and feedback on our products and services in order to correct or improve them, by analysing information from external sources such as Google, Facebook and Twitter (and others), and; 
      • When we sell, assign or transfer all or part of our business. 

Lawful bases for processing 

We can collect and use your personal data when one of the following applies: 

      • To take steps before entering into a contract or perform a contract;  
      • You have specifically given us your consent. You can withdraw your consent at any time. We will normally need your consent in the following circumstances: 
          • Placing cookies on your device to find out how you use our websites so we can personalise what you see by tailoring content and notifications to the things you are interested in; 
          • Certain situations where you share sensitive information about yourself, such as your health; 
          • Before we send you certain electronic marketing communications; and 
          • Other occasions where processing person data relies upon your consent.  
      • We need to use your personal data for legitimate business purposes, for example, to enable us to run our business successfully. These include: 
          • Sending direct marketing materials to you (you will always have the right to opt out of marketing and promotional communications); 
          • Conducting audits and internal investigations and complying with internal policies; 
          • Managing our IT and communications systems and networks; 
          • Planning and improving our business activities; 
          • Conducting training and gathering feedback for ensuring quality control; 
          • Protecting our rights, privacy, safety or property, you or others; 
          • To provide the functionality of the services we provide you, which includes providing you with related customer service; 
          • Verifying your eligibility to access certain products and services or otherwise conducting background checks to ensure we are not precluded from working with you; 
          • Analysing or predicting your preferences to identify aggregated trends to develop, improve or modify our products, services and business activities; 
          • Interacting with you through online advisory forums and allowing you to send messages to another person if you choose to do so; 
          • Responding to and handling your queries or requests; 
          • Sending administrative information to you, such as changes to our terms, conditions and policies; 
          • Completing your transactions and providing you with related customer service; and 
          • Reaching out to you to provide information about our products and services or request input relating to our products or services; 
      • For the establishment, exercise or defence of legal claims or proceedings; 
      • To protect your vital interests or those of others; and 
      • Because it is necessary for reasons of substantial public interest, on the basis of applicable laws. 

Categories of personal data processed 

The personal data we collect, and process, may include: 

      • Basic information, such as your title, name, gender, role, age or date of birth; 
      • Contact information, such as your personal or business email addresses, mailing address, telephone number(s) and profile on a social media platform;  
      • Financial information, such as your bank details, including account name, account number and sort code; 
      • Employment information, such as the roles and companies you currently or have previously work for or with; 
      • Qualifications information, such as academic, clinical and professional qualifications and training undertaken and attained;   
      • Services and products used, such as data related to your use of our services and products (including feedback), your purchase or licensing history and preferences, your interactions with us, your preferred method of communications with us; 
      • Information technology and network activity information, such as information about your device and your usage of our website and systems, including your IP address, device ID, hardware model and version, mobile network information, operating system and other online identifiers, type of browser, access time, pages viewed, URLs clicked on, forms submitted, and physical location; 
      • Sensitive information, such as that relating to, or inferring, your health, race or ethnicity, political opinions, religious or philosophical beliefs (these are collectively known as ‘special category’ personal data); and 
      • Information in audio and visual formats, such as photos, videos and voice recordings of you. 

You can choose not to give us personal data when we ask you for it. If you decide not to give us your personal data, it may restrict our relationship with you. For example, we may not be able to provide you with the services or products you would like to use or engage with. 

Sources of personal data  

We collect your personal data from various sources. When we collect personal data directly from you, this will be from: 

      • Your engagement with our business development, HR, finance or other teams within Arcturis; 
      • Your use our websites and systems; 
      • When you share or use your social media profile to contact Arcturis;  
      • When you register with us to receive promotional material;  
      • If you get in touch for support or to provide feedback; 
      • Your registration or attendance of an online event such as a webcast; 
      • Your response to any surveys you choose to take part, and;  
      • Your registration or attendance of online and offline meetings, events and conferences, such as advisory panels or collaboration events. 

When we collect your personal data from other sources, which will include: 

      • Publicly accessible sources; 
      • Marketing partners and vendors; 
      • Healthcare provider directories; 
      • Events management agencies; 
      • Social media platforms; and 
      • When you talk about us online, like when you mention Arcturis, its products or services. 

Recipients of personal data  

We share your personal data on a ‘need-to-know’ basis, typically only with teams within Arcturis who need it to do their jobs.  

We will also share your personal data with other entities, for example: 

      • Event and marketing agencies; 
      • Research and scientific organisations who work with us;  
      • Employment and recruitment agencies; 
      • Technology and media services providers who work with us; 
      • Any entity who may acquire us or part of our business; 
      • Local or foreign regulators, courts, governments and law enforcement authorities; and 
      • Professional advisors, such as auditors, accountants and lawyers. 

Data retention 

Personal data is retained for no longer than necessary to fulfil our purposes for processing it. Once personal data is no longer needed by Arcturis, it will be either anonymised or destroyed.   

Individual rights  

You have several rights which you can exercise in respect of your personal data: 

      • The right to request access  
      • The right to request correction;   
      • The right to request erasure;   
      • The right to object to the processing; 
      • The right to request that the processing of your data is restricted;   
      • Request the transfer of your data to another party, and; 
      • Rights in relation to automated decision making and profiling.  

Further information on these rights is available from the Information Commissioner’s Office: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/individual-rights/ 

 If you would like to exercise any of these rights or withdraw consent, please contact our Data Protection Officer via dpo@arcturisdata.com. For your protection, and to protect the privacy of others, we may need to verify your identity before completing what you have asked us to do. 

Where we have relied upon your consent to process your personal data and you later withdraw that consent, we may not be able to undertake some of the purposes described in this Privacy Policy.  

Cookies and similar technologies 

We may use cookies and similar technologies when you visit our website or use one of our services. Such technology allows us to deliver, personalise or otherwise improve your experience of our websites and services. Accepting cookies may give us access to information, for example, about your browsing behaviour. You can choose to accept or decline cookies, however if you decline this may affect your usage of our website and services.  

Your right to lodge a complaint  

If you have any questions, concerns or complaints regarding how Arcturis processes your personal data, please contact us via https://www.arcturisdata.com/contact-us/. 

Individuals have the right to lodge a complaint with a data protection supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO). Information on how to complain to the ICO is provided here: https://ico.org.uk/make-a-complaint/ 

Changes to the terms of this privacy notice 

We will update this privacy notice from time to time, as and when required. If any change would result in us processing your personal data for a new purpose not listed in this privacy notice, we would inform you before we start using it for a new purpose.