Privacy Policy

1. Introduction

Welcome to Pharma Escalator ("we," "our," or "us"). We are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website [Insert Website URL] or engage with our services.
We process personal data in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

2. Who We Are (Data Controller)

For the purposes of the UK GDPR, Pharma Escalator is the "Data Controller" of the personal data we hold about you. This means we determine the purposes and means of processing your data.

Our Contact Details:

• Company Name: Pharma Escalator
• Email Address: hello@pharmaescalator.co.uk
• Postal Address: 12 Redstart Dr, Catcliffe, Rotherham S60 8EG, UK

3. The Data We Collect

We primarily collect "Business Contact Information" relevant to B2B pharmaceutical marketing and growth services. The types of personal data we collect include:

• Identity Data: First name, last name, job title, and company name.
• Contact Data: Business email address, phone number, and mailing address
• Technical Data: IP address, browser type, time zone setting, and information about how you use our website (via cookies).
• Marketing and Communications Data: Your preferences in receiving marketing from us and your communication history (e.g., WhatsApp logs, email correspondence).

4. How We Use Your Data (Lawful Basis)

Under the UK GDPR, we must have a lawful basis to use your personal data. We rely on the following bases:

5. B2B Marketing and PECR

As a provider of business growth services, we often communicate with other businesses.

• Corporate Subscribers (LTDs, PLCs): We may email or message you based on Legitimate Interest to offer relevant services, provided you have not opted out.
• Sole Traders/Partnerships: We will only contact you for marketing purposes if we have obtained your Consent, or if you have previously bought services from us ("Soft Opt-in").

Opting Out: You can ask us to stop sending you marketing messages at any time by following the "unsubscribe" link in any message or contacting us directly.

6. Disclosure of Your Personal Data

We do not sell your data. We may share your data with trusted third parties to help us run our business:

• Service Providers: Cloud storage providers, email marketing platforms, and CRM systems (e.g., for managing WhatsApp conversations).
• Professional Advisers: Lawyers, bankers, auditors, and insurers.
• Regulators: HM Revenue & Customs and other authorities who require reporting of processing activities in certain circumstances.

7. International Data Transfers

If we transfer your personal data out of the UK (for example, if our servers or support teams are located in India or elsewhere), we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• The country has been deemed to provide an adequate level of protection for personal data by the UK Government.
• We use specific contracts approved for use in the UK which give personal data the same protection it has in the UK (International Data Transfer Agreements).

8. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. Access to your personal data is limited to those employees, agents, and contractors who have a business need to know.

9. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements.

• Client Data: Kept for the duration of the contract plus 6 years for tax/legal purposes.
• Marketing Data: Kept until you unsubscribe or for a period of [e.g., 24 months] of inactivity.

10. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements.

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure: Request us to delete your data where there is no good reason for us to continue processing it.
• Right to Restrict Processing: Ask us to suspend the processing of your data.
• Right to Object: Object to processing where we rely on a legitimate interest (or for direct marketing).
• Right to Data Portability: Request the transfer of your data to you or a third party.

To exercise any of these rights, please contact us at hello@pharmaescalator.co.uk.

11. Third-Party Links

This website may include links to third-party websites, plug-ins, and applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

11. Contact and Complaints

If you have any questions about this privacy policy or our privacy practices, please contact us at:

Pharma Escalator

Email:hello@pharmaescalator.co.uk

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.