Privacy Policy

1. Who We Are

MedRyge Ltd. provides technology solutions and consulting services to organisations in the healthcare and life-sciences sectors, including pharmaceutical companies, biotechnology and biopharma organisations, clinical research organisations, medical-device and digital-health organisations, investors and development partners.

Our services include clinical trial technology platforms, clinical-development advisory, clinical execution assurance, specialist advisory and related technology and support services.

For personal information processed through our Website, MedRyge Ltd. is generally the data controller responsible for determining how and why your personal information is processed.

Where MedRyge processes personal information on behalf of a client as part of a clinical trial, technology implementation or other engagement, MedRyge may act as a data processor or service provider. In such circumstances, processing will be governed by the applicable contractual arrangements and instructions of the relevant client.

2. Information We May Collect

Depending on how you interact with our Website and services, we may collect the following categories of information:

Information you provide directly

This may include:

• Name
• Job title and organisation
• Business email address
• Telephone number
• Country or location
• Information provided through contact or enquiry forms
• Information provided when requesting a demonstration
• Information contained in messages or correspondence sent to us
• Information relating to your business requirements or areas of interest
• Any other information you voluntarily provide to us

Information collected automatically

When you visit our Website, we may automatically collect certain technical information, such as:

• IP address
• Browser type and version
• Device type
• Operating system
• Time zone and general location information
• Pages visited and links accessed
• Date and time of visits
• Referring website or source
• Website usage and interaction information

This information may be collected through cookies, analytics tools and similar technologies.

3. How We Use Your Information

We may use personal information for the following purposes:

• To respond to enquiries and requests
• To arrange demonstrations or consultations
• To communicate with prospective and existing clients
• To provide information about our technology and consulting services
• To understand and respond to your business requirements
• To manage business relationships
• To improve our Website, products and services
• To monitor Website performance and security
• To maintain appropriate business and technical records
• To prevent fraud, misuse or unauthorised access
• To comply with applicable legal and regulatory obligations
• To establish, exercise or defend legal claims
• To communicate important service or administrative information

We will not use your personal information for purposes that are incompatible with the purpose for which it was originally collected unless permitted or required by applicable law.

4. Legal Basis for Processing

Where applicable under UK data-protection law, we process personal information on one or more of the following legal bases:

Consent

Where you have provided consent for a specific purpose, we may process your information based on that consent. You may withdraw your consent at any time.

Contract

We may process information where it is necessary to take steps at your request before entering into a contract or to perform a contract with you or your organisation.

Legitimate Interests

We may process information where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.

Examples may include responding to business enquiries, improving our services, maintaining business relationships and securing our Website.

Legal Obligation

We may process information where necessary to comply with applicable legal or regulatory requirements.

5. Cookies and Similar Technologies

Our Website may use cookies and similar technologies to provide essential functionality, understand how visitors use the Website, improve performance and, where applicable, support analytics or other features.

Cookies may be:

• Essential cookies – required for the Website to function properly.
• Analytics cookies – used to understand Website traffic and usage.
• Functional cookies – used to remember preferences or improve functionality.
• Other cookies or technologies – where applicable and subject to the appropriate legal requirements.

Where consent is required for non-essential cookies, we will request your consent before placing or using those cookies.

You can control or delete cookies through your browser settings. Disabling certain cookies may affect Website functionality.

6. How We Share Your Information

We do not sell your personal information.

We may share personal information where reasonably necessary with:

• Employees and authorised representatives of MedRyge
• Professional advisers, consultants and auditors
• Technology, hosting, cloud and IT service providers
• Website, analytics and communications service providers
• Business partners or service providers supporting our operations
• Regulators, government authorities or law-enforcement bodies where required or permitted by law
• Other parties where necessary to protect our rights, property, safety or the security of our users
• A buyer, investor or successor in connection with a merger, acquisition, restructuring or sale of all or part of our business

Where third parties process personal information on our behalf, we take appropriate steps to require them to protect the information and process it only for authorised purposes.

7. International Transfers

As a UK-based organisation, MedRyge may use service providers or work with clients and business partners located outside the United Kingdom.

Where personal information is transferred outside the UK, we will take appropriate measures to ensure that the transfer is carried out in accordance with applicable data-protection law.

Depending on the circumstances, this may include reliance on an adequacy decision, appropriate contractual safeguards or another lawful transfer mechanism.

8. Data Security

We take reasonable technical and organisational measures to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.

Our security measures may include access controls, authentication, secure communications, data protection procedures, monitoring and other appropriate technical safeguards.

However, no method of transmitting or storing information over the internet can be guaranteed to be completely secure. You should therefore take appropriate precautions when communicating sensitive information electronically.

9. How Long We Keep Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to satisfy legal, regulatory, accounting, contractual or reporting requirements.

The appropriate retention period may depend on:

• The nature of the information
• The purpose for which it was collected
• Our ongoing relationship with you or your organisation
• Applicable legal and regulatory requirements
• Our legitimate business requirements

When personal information is no longer required, we will securely delete it or anonymise it where appropriate.

10. Your Privacy Rights

Depending on the circumstances and applicable law, you may have rights in relation to your personal information, including the right to:

• Request access to personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information
• Request restriction of processing
• Object to certain processing
• Request portability of certain personal information
• Withdraw consent where processing is based on consent
• Object to direct marketing
• Lodge a complaint with the applicable data-protection supervisory authority

These rights are subject to applicable legal conditions and exemptions.

To exercise your rights, please contact us using the details provided below.

11. Direct Marketing

Where permitted by applicable law, we may contact business contacts regarding MedRyge services, technology platforms, consulting services, events or other relevant information.

Where consent is required, we will obtain the appropriate consent before sending marketing communications.

You may unsubscribe from marketing communications at any time by using the unsubscribe option included in the communication or by contacting us directly.

We will continue to respect your request not to receive marketing communications.

12. Third-Party Websites

Our Website may contain links to third-party websites, platforms or services.

Those websites are operated independently from MedRyge and may have their own privacy policies and terms.

We are not responsible for the privacy practices, content or security of third-party websites. We recommend reviewing the privacy policy of any third-party website before providing personal information.

13. Children's Privacy

Our Website and services are intended for business and professional users and are not directed toward children.

We do not knowingly collect personal information from children through our Website.

If you believe that a child has provided personal information to us, please contact us so that we can take appropriate action.

14. Clinical and Patient Information

MedRyge operates in the healthcare and life-sciences sector and provides technology and consulting solutions that may support clinical research and related activities.

The Website itself is not intended to be used to submit patient-identifiable information, clinical trial participant information, medical records or other sensitive health information unless specifically requested through an appropriately secured MedRyge system or service.

Please do not submit patient-identifiable or other sensitive clinical information through general Website contact forms or ordinary email unless specifically instructed by MedRyge.

Where MedRyge processes clinical, patient or other sensitive information on behalf of a client, such processing will be governed by the applicable contractual arrangements, security controls and data-protection requirements.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or privacy practices.

When we make changes, we will update the “Last Updated” date at the top of this page.

We encourage you to review this Privacy Policy periodically to remain informed about how we protect personal information.

16. Contact Us

If you have any questions about this Privacy Policy, how we process personal information, or wish to exercise your privacy rights, please contact us:

We will consider and respond to privacy-related requests in accordance with applicable law.

17. Complaints

If you are concerned about our processing of your personal information, we encourage you to contact us first so that we can investigate and address your concern.

You may also have the right to lodge a complaint with the relevant data-protection supervisory authority in the United Kingdom.