Privacy Policy

This version is effective from 1 January 2026.

1. Data controller

The data controller is PG SCIENTIFIC INC LTD, 25 Wilton Rd, London, United Kingdom, SW1V 1LW. For data protection matters write to privacy@pgscientific.co.uk.

2. What data we process

• Contact details: name, email address, phone number, company name and job title when you get in touch with us.
• Enquiry content: information you voluntarily provide in a message or during a meeting.
• Technical data: IP address, browser and device type, pages viewed — in anonymised or aggregated form, depending on the cookie consent you have given.
• Contract data: company details, documents and correspondence required to perform an agreement and to keep accounting records.

We do not collect special categories of personal data and do not request them through forms on this site.

3. Lawful bases and purposes

• Performance of a contract — delivering services, support and invoicing.
• Legitimate interests — replying to business enquiries, protecting our infrastructure and improving the website.
• Consent — analytics cookies and sending informational material. Consent can be withdrawn at any time.
• Legal obligation — retention of tax and accounting records as required by United Kingdom law.

4. Sharing with third parties

We do not sell personal data. Access may be granted to trusted service providers acting on our instructions: hosting and cloud infrastructure, email services, accounting and legal advisers. A data processing agreement is in place with each of them.

Where data is transferred outside the United Kingdom or the EEA, we ensure appropriate safeguards — an adequacy decision or standard contractual clauses.

5. Retention periods

• business correspondence without a resulting contract — up to 24 months;
• client data under a contract — for its duration and 6 years afterwards;
• technical server logs — up to 12 months;
• cookie consent records — up to 12 months from the choice being made.

6. Security

We apply technical and organisational safeguards: encryption of data in transit, least-privilege access control, multi-factor authentication, logging of administrator actions, and regular backups with restore verification.

No system is completely secure. In the event of a breach that poses a risk to the rights and freedoms of individuals, we will notify the supervisory authority within 72 hours and, where required, the data subjects themselves.

7. Your rights

• access your data and obtain a copy of it;
• request correction of inaccurate data;
• request erasure where there is no basis for continued retention;
• restrict processing or object to it;
• receive your data in a machine-readable format (portability);
• withdraw consent without affecting the lawfulness of prior processing.

To exercise these rights, write to privacy@pgscientific.co.uk. We respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the United Kingdom supervisory authority.

8. Children

Our services are intended for businesses. We do not knowingly collect data relating to people under 16. If such data reaches us in error, it will be deleted.

9. Changes to this policy

This policy may be updated as our processes or the law change. The current version is always available on this page.