1. Who we are

MedGenesis Ltd (“MedGenesis”, “we”, “us”), the company behind TARA PV, is the controller of personal information collected through www.tarapv.com and through business enquiries made to us directly.

MedGenesis Ltd, 105 Great North Road, Eaton Socon, St Neots, Cambridgeshire, PE19 8EL. Registered in England and Wales, company number 06836256.

For anything to do with privacy, email [email protected] and mark it for the attention of the Data Protection Contact.

2. What this notice covers

This notice explains how we collect and use personal information when you visit this website, request a demonstration or our datasheet, contact us, ask about or buy our services, apply to work with us, or otherwise deal with us in a business capacity.

When a customer uses TARA PV, or we host or support it for them, any personal information in their safety database (such as adverse event case data) is processed on the customer's behalf. The customer is the controller of that information and their own privacy notice applies. Our contract and data processing terms with that customer govern that processing.

3. Information we collect

• Identity and contact details, such as your name, job title or department, company, email address and phone number.
• Enquiry and relationship information, including what you tell us in a form or by email, how you heard about us, correspondence, quotations, contracts and support requests.
• Website and device information, including IP address, browser and device type and the pages you visit. See section 8.
• Billing and transaction information needed to manage a customer or supplier relationship.
• Recruitment information, if you send us a CV or apply for a role.

Please don't send special category information, such as health information about yourself or anyone else, or details of adverse events, through the website forms. Please also don't send passwords or unnecessary confidential information.

4. Where we get it from

• From you, through the website forms, email, phone calls, meetings and contracts.
• From your employer or colleagues, or from customers, partners, suppliers and people who refer you to us.
• Automatically from the website, as described in section 8 and our Cookie Policy.
• From publicly available business sources, where that is lawful and proportionate.

5. Why we use it, and our lawful basis

Where we rely on legitimate interests, we have considered whether the processing is necessary and proportionate and what effect it has on you. You can object to it at any time (see section 13).

6. Special category and criminal offence information

We don't intentionally collect special category or criminal offence information through the website. If we ever need it, for example as part of recruitment, we will identify a lawful basis and the additional condition the law requires, apply appropriate safeguards and tell you at the time.

7. Marketing

We only send business news and updates where the law allows, and we ask for consent where it is required. Every marketing email has a clear way to unsubscribe, and you can also ask us to stop at any time by emailing [email protected].

8. Cookies and similar technologies

We don't use analytics, advertising or tracking cookies. The website uses a strictly necessary robot check on its forms, and the tutorial videos only load from YouTube if you choose to play them. Our Cookie Policy has the details.

9. Who we share information with

We only share personal information where it is necessary and proportionate. That includes:

• Other companies in our group, where needed to reply to you, deliver services or manage our relationship with you.
• Service providers who support us, including:
  • Mailjet, which sends the emails generated by the website forms.
  • Cloudflare, which runs the robot check on the website forms (Cloudflare Turnstile).
  • Google, through YouTube, only if you play a tutorial video.
  • Our email and business systems providers, our web hosting provider, and our accounting, IT and professional advisers.
• Customers, partners, suppliers and professional advisers, where needed for a particular project or service.
• Regulators, law enforcement, courts or other authorities, where the law requires it or it is needed to protect rights and security.
• A buyer, investor or their advisers in connection with a proposed sale or restructuring of our business, under appropriate confidentiality.

Anyone handling personal information for us is bound by appropriate contractual, confidentiality, security and data protection obligations. We do not sell personal information.

10. International transfers

Some of our service providers, including Cloudflare and Google, may store or access personal information outside the UK, including in the United States. Before any restricted transfer, we make sure a lawful transfer mechanism is in place, such as UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework), the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, and we carry out a transfer risk assessment where one is required.

11. How long we keep it

We keep personal information only for as long as we need it for the purpose we collected it for, taking account of legal, contractual, tax, accounting and security requirements.

12. Security

We use technical and organisational measures appropriate to the risk, including access control, multi-factor authentication, encryption in transit and at rest, endpoint and network protection, logging, backups, supplier checks, staff training and incident response procedures. No transmission over the internet is completely secure, so please don't send us more information than you need to.

13. Your rights

Subject to certain conditions and exemptions, you have the right to:

• be told how your personal information is used;
• get a copy of your personal information;
• have inaccurate or incomplete information corrected;
• have your information erased, or its use restricted;
• receive your information in a portable format, in some circumstances;
• object to processing based on legitimate interests, and object at any time to direct marketing;
• withdraw consent at any time, where we rely on consent. This doesn't affect anything we did before you withdrew it;
• not be subject to solely automated decisions with legal or similarly significant effects, and to challenge them.

To use any of these rights, email [email protected]. There is normally no charge. We may ask for information to confirm your identity, and we will respond within one month, or tell you within that time if we need longer because the request is complex.

14. Complaints

If you are unhappy with how we have handled your personal information, please contact us first at [email protected], marked for the attention of the Data Protection Contact. We will acknowledge your complaint within 30 days, investigate it and tell you the outcome without undue delay.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

15. Automated decision-making

We don't use information from this website to make solely automated decisions that have legal or similarly significant effects on you.

16. Children

This website and our services are for businesses and are not aimed at children. If you think a child’s personal information has been sent to us, please let us know and we will delete it.

17. Other websites

This website links to other websites, such as LinkedIn and YouTube. Those organisations are responsible for their own privacy practices, so please read their privacy notices.

18. Changes to this notice

We review this notice regularly and whenever our processing, our services or the law changes. The version and date at the top of this page show when it was last updated.