Privacy statement

1. Who we are

Plenty Biologics Limited (“Plenty Biologics”, “we”, “us”) is the controller of the personal data described in this statement. We are registered in Jersey under company number 164045, with our registered office at Hawk House, 22 Esplanade, St. Helier, JE1 1BR, Jersey.

For anything in this statement, write to us, show the email address.

2. What this statement covers

This statement covers this website. It does not cover the websites of our partners or any other site we link to; those organisations handle your information under their own terms.

3. What we collect

We collect two things, and nothing else.

• What you send us. If you complete the contact form, we receive your name, your company, your email address, the content of your message, and a record that you ticked the consent box, with the date and time. If you join the waitlist, we receive your name, your email address, your company if you choose to give it, and the same record of your consent.
• Technical information. Our hosting provider records the IP address, browser type and pages requested for each visit, as part of serving the site and protecting it from abuse. We do not use this to identify you.

We do not ask for any other information, and we do not buy or obtain personal data from third parties.

4. What we do not do

This site sets no cookies. There is no cookie banner because there is nothing to consent to. We also run no analytics, no tracking or advertising technology, and no profiling or automated decision-making. We do not add you to a marketing list, and we do not sell, rent or trade personal data.

5. Fonts loaded from Google

The site’s typefaces are served by Google Fonts. Your browser requests them directly from Google, which means Google receives your IP address and basic browser information as part of that request. That processing is Google’s, not ours, and is governed by its own privacy policy. We do not receive anything from Google in return, and no font request carries information you have given us.

6. Why we use your information

• To respond to your enquiry and contact you about related opportunities. Our lawful basis is your consent, given when you ticked the box on the contact form. You can withdraw it at any time (see section 10).
• To operate and secure the site. Our lawful basis is our legitimate interest in keeping the site available, working and free from abuse. This covers the technical information in section 3 only.

7. Who we share it with

We share your information only with the suppliers who run the site for us, and only so far as they need it:

• Netlify hosts the site and receives contact form submissions.
• Google carries the email notification that brings your enquiry to us, and our reply back to you.

These suppliers act on our instructions and may not use your information for their own purposes. Beyond them, we disclose personal data only where the law requires it.

8. Where your information is held

Netlify and Google are both based in the United States, so your enquiry is transferred outside Jersey. Both participate in the EU-US Data Privacy Framework, which Jersey recognises as giving personal data sent to participating United States organisations a level of protection equivalent to the protection it has here. We can send you details of that safeguard on request.

9. How long we keep it

We keep enquiries for 24 months after our last contact with you, then delete them. If your enquiry leads to a working relationship, we keep the correspondence for as long as that relationship continues and for the period afterwards that our legal and accounting obligations require. Technical logs are kept for the period our hosting provider retains them.

10. Your rights

Under Jersey data protection law you have the right to:

• ask for a copy of the personal data we hold about you
• have inaccurate data corrected
• have your data deleted
• restrict or object to how we use it
• receive it in a portable format
• withdraw your consent at any time, by emailing us, show the email address; this does not affect anything we did before you withdrew it

Exercising any of these rights is free, and we will respond within four weeks. If your request is complex we may need longer, and we will tell you within those four weeks if so.

11. Complaints

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Jersey Office of the Information Commissioner at jerseyoic.org, on +44 1534 716530, or at 2nd Floor, 5 Castle Street, St Helier, Jersey JE2 3BT.

12. Changes

If we change how we handle personal data, we will update this statement and change the date at the top. Where the change is significant and we hold your consent, we will tell you directly.