The terms, in language you can read once.

We collect personal data only when you choose to send it to us. In practice that means one of two things.

The enquiry form. Your name, your company, your work email address, your country, the species and production stage you are interested in, the problem you are trying to solve, and whatever you write in the free-text box. Note that this form does not transmit anything by itself: it composes a message and hands it to your own email client, so we receive your details only if you then send that message.

Email you send us directly, including a request to be added to the list for evidence notes and regulatory updates. We hold what is in your message and in its header.

We do not ask for special category data and we ask you not to send it. Please do not include payment details, passwords or identity documents in an enquiry.

We use your details to answer your enquiry, to send you the technical dossier, the Certificate of Analysis and the published evidence you have asked for, to follow up on that enquiry or on a trial you are planning, and to keep a record of what we sent to whom.

The lawful basis is our legitimate interests in responding to a business enquiry and in supplying business customers — an interest you would reasonably expect, given you contacted us first. Where you have asked to receive evidence notes and regulatory updates, we rely on your consent, and you may withdraw it at any time. Some records are kept because we have a legal obligation to keep them, for example where a supply is involved.

We do not use your data for automated decision-making or profiling. We do not sell it, rent it, or supply it to data brokers, and we do not enrich it with data bought from third parties.

Your enquiry is handled by Ekome staff. Behind that sit the ordinary service providers any business uses — an email provider and a website host — which process data on our instructions under a written contract and for no purpose of their own.

We will disclose personal data to a regulator, a court or a law enforcement body where we are legally required to. We will not do so voluntarily. Where personal data is transferred outside the United Kingdom, we rely on an adequacy decision or on the UK International Data Transfer Addendum.

Enquiries that do not lead to a supply are deleted no later than 24 months after our last contact with you. Records connected to a supply of product are kept for as long as the relevant commercial, tax and product-traceability obligations require, and then deleted.

If you ask to be removed from the evidence notes list, we act on it immediately and keep only the minimum record needed to make sure we do not add you back.

Under UK data protection law you may ask us to:

• —give you a copy of the personal data we hold about you
• —correct anything that is inaccurate or incomplete
• —delete it, where we have no continuing basis for holding it
• —restrict how we use it while a question about it is resolved
• —provide it in a portable, machine-readable form
• —stop using it, where we rely on legitimate interests and you object
• —stop sending you evidence notes, at any time and for any reason

Write to info@ekome.co.uk and we will respond within one month. There is no charge. We may ask you to confirm who you are before we release anything.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority, at ico.org.uk.