GxP Pharma
LEGAL

Privacy notice

Version 1.0 · effective 1 October 2026

Who we are. GxP Pharma Ltd, registered in England and Wales, company number 16057274, P.O. Box 1504, Cambridge CB1 0DU, UK ("GxP Pharma", "we"). We are the controller of the personal data described here. Contact: tushar@gxppharma.com. We are registered with the Information Commissioner's Office, registration number ZC247353.

What we collect

Enquiry, demo or meeting request
Name, job title, company, work email, phone, WhatsApp number (optional), country and time zone, company website, what you need, message, files you choose to send
Confidentiality agreement
Name, job title, organisation, email, date and time of acceptance, agreement version, IP address
Guide downloads
Name, job title, company, work email, guides chosen
Marketing
Your consent choice, date given, and emails opened or clicked
Business cards at events
Details on the card, where and when we met
Website
Strictly necessary cookies only (see Cookies below)

Why we use it, and our lawful basis (UK GDPR Article 6)

Replying to enquiries, arranging meetings and demos
Legitimate interests — responding to a business request
Confidentiality agreements, proposals and engagements
Contract, or steps before entering one
Sending the guides you requested
Legitimate interests
Newsletters, GxP Watch, course and event news
Consent (you can withdraw at any time)
Keeping records of agreements and consents
Legal obligation and legitimate interests

We do not use your data for automated decisions that have legal or similarly significant effects.

Who we share it with

Service providers who process data for us under contract: Microsoft (Microsoft 365 — email, documents, collaboration and scheduling), Webflow (this website and its forms), Zoho (quotations and invoicing), and our payment provider. Our associates and team members, only where needed to deliver your request, bound by confidentiality. Regulators, where the law requires. A current list of our processors is available on request from tushar@gxppharma.com.

International transfers

Some of our team work in India. Where data leaves the UK we use the UK International Data Transfer Agreement or Addendum, or rely on UK adequacy regulations.

How long we keep it

Enquiries that do not proceed
3 years after last contact
Confidentiality agreements and acceptance records
6 years after expiry
Client engagement records
6 years after the engagement ends
Marketing consent records
For as long as you are subscribed, plus 2 years
Unsubscribe list
Indefinitely, so we never email you again

Your rights

Access, correction, deletion, restriction, objection, data portability, and withdrawal of consent. Email tushar@gxppharma.com. We reply within one month. You can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

Cookies

This website sets only strictly necessary cookies. We do not run analytics or advertising cookies at present. If we add analytics in future we will ask for your consent first, and you will be able to change or withdraw that choice at any time.

GxP Pharma Ltd, Company No. 16057274 · P.O. Box 1504, Cambridge CB1 0DU, UK · Terms of business · Home