Privacy Policy
Last updated: 1 October 2026
This policy explains how BioActive T PHARMA LIMITED uses personal data when you visit www.bioactivet.co.uk or contact us.
Who is responsible for your data
The controller of your personal data is BioActive T PHARMA LIMITED, a company registered in England and Wales under number 07689892, with its registered office at Jasper House, Highfield Road, West Byfleet KT14 6QT, United Kingdom.
For any question about your data, write to info@bioactivet.co.uk or to the postal address above. We have not appointed a data protection officer.
What we use, why, and for how long
| Situation | Data | Purpose | Lawful basis | How long we keep it |
|---|---|---|---|---|
| You send us an enquiry through the contact form, by email or by phone | First name, last name, email address, phone number if you give it, and the content of your message | To answer you and handle your request | Our legitimate interest in answering business enquiries addressed to us (Art. 6(1)(f) UK GDPR). If you ask us, acting for yourself, to take steps before entering into a contract with you: Art. 6(1)(b) UK GDPR | Up to 12 months after our last contact with you, unless the enquiry leads to cooperation |
| You or the company you represent work with us | Contact details of the people acting for the partner, correspondence, contract and settlement data | To conclude and perform the contract, keep our accounts, and establish or defend legal claims | Art. 6(1)(b) UK GDPR where you are the contracting party. Art. 6(1)(f) UK GDPR where you act for a company: our legitimate interest in performing the contract with it and in establishing or defending claims. Art. 6(1)(c) UK GDPR for tax and accounting records | For the term of the contract and then, as a rule, for 6 years, the general limitation period for contract claims. Tax and accounting records for as long as tax and company law require |
| You visit this website | IP address, date and time, address of the page requested, browser and device information sent by your browser | To deliver the pages, keep the website secure and diagnose errors | Our legitimate interest in running a secure, working website (Art. 6(1)(f) UK GDPR) | Server logs are kept by our hosting provider for a limited period set by our hosting plan. Ask us for the current period |
In the contact form, first name, last name, email address and message are required. The phone number is optional. Giving us your data is voluntary, but without the required fields we cannot answer you.
We do not use your enquiry to send you marketing messages, and we do not sell personal data.
If we received your contact details from your employer or a business partner who named you as a contact person, we use your name, position, email address and phone number for the purposes in the second row of the table.
Who receives your data
We share personal data only with those who need it to provide the service:
- Vercel Inc. (United States) hosts this website and processes server logs.
- Resend (United States) delivers the message you send through the contact form to our mailbox and keeps a delivery log for up to 30 days.
- Our email provider, which hosts our mailboxes.
- BioActive T Sp. z o.o. (Poland), if we pass your enquiry to it because it concerns a market outside the United Kingdom. It then handles your data as a separate controller under its own privacy policy.
- Legal, tax and accounting advisers, and public authorities when the law requires it.
Vercel, Resend and our email provider act as our processors under data processing agreements and may use the data only on our instructions.
Transfers outside the United Kingdom
Vercel and Resend are based in the United States. Both are certified under the UK Extension to the EU-U.S. Data Privacy Framework, which UK regulations recognise as adequate, and their data processing agreements include standard contractual clauses with the UK addendum. Transfers to Poland and other countries of the European Economic Area are covered by UK adequacy regulations.
You can ask us for a copy of the safeguards that apply to a transfer.
Cookies and similar technologies
This website does not use cookies or similar technologies for analytics, advertising or profiling. It sets one cookie, and only after you close the cookie notice:
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| bat_consent | This website | Remembers that you have seen the cookie notice and what you chose, so we do not show the notice on every page | Up to 180 days |
The cookie exists to keep the setting you asked for when you closed the notice, so the notice does not come back on every page. It holds your choice, its date and a version number, nothing else. We keep it for up to 180 days, so that we ask again about twice a year. Some browsers may shorten this period, for example to seven days or less in Safari, and the notice then returns sooner. You can delete it in your browser settings at any time, and you can reopen the notice with the Cookie settings link at the bottom of every page.
If we add an optional tool in the future, such as visitor statistics, we will ask for your consent first where the Privacy and Electronic Communications Regulations require it, and list the tool here.
Your rights
You have the right to:
- get access to your data and receive a copy of it,
- have inaccurate data corrected,
- have your data erased when we no longer have a reason to keep it,
- have the processing restricted,
- object, on grounds relating to your particular situation, to processing based on our legitimate interest,
- receive the data you gave us in a common machine-readable format and have it sent to another controller, where we process it to perform a contract with you.
To use any of these rights, or to complain about how we handle your data, write to info@bioactivet.co.uk. We answer within one month.
You also have the right to complain to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, telephone 0303 123 1113, ico.org.uk.
Automated decisions
We do not make decisions based solely on automated processing, and we do not profile visitors or contacts.
Security
The website is served only over an encrypted connection. Access to enquiries is limited to the people at BioActive T who need it to answer you.
Changes to this policy
We update this policy when the way we use personal data changes. The date at the top shows the latest version.