Privacy Policy

Lepzi Ltd. is committed to protecting your privacy and ensures lawful collection and use of any personal data.

Lepzi Ltd. acts as the Data Controller under article 4 of EU GDPR.

This Privacy Notice explains:

·Who we are

·Personal data we collect

·Our legal basis for processing

·Who we may share information with and why

·Where we may transfer data to

·How we keep information secure and deal with security incidents

·How long we may keep your data for

·Your data privacy rights

·How to contact our DPO and the ICO

·If you are an employee of one of our clients looking for further information on how we handle your data, please click here.

Lepzi Ltd.

Lepzi Ltd. is the UK Head Office of a group of companies operating as individual legal entities under the Lepzi name.

The group operates in the clinical diagnostics sector and engages in R&D, manufacturing and Sales & Marketing of a portfolio of diagnostic tests for use in hospitals, clinical laboratories and doctor’s practices.

Personal data we collect

We will only collect data provided by yourself upon contacting us together with our responses to you.All employees who handle personal and business data are fully trained to ensure that the data is processed in line with the General Data Protection Regulations 2018 (GDPR) as well as The Data Protection Act 2018 (DPA 2018).

Personal Data from other sources:

We may gather information about you and/or your company that is already in the public domain.

Cookies

When you visit our website, a record of your device’s IP address is kept. This is used anonymously in order to analyse website and page visitors. Please see our Cookies Policy for further information.

Our legal basis for processing

Before processing any personal data, we ensure that at least one lawful basis under GDPR is met. We will not disclose personal data for any purpose other than what the data was originally collected for; unless there is an overriding legal basis that enables this processing.

We may collect, hold, use and disclose the information collected to compile statistical data and to maintain our database; to develop or improve our website; respond to any queries; notify you of any upcoming marketing, training or other events that we think may be of interest to you; provide you with publications; manage quality control and compliance issues; manage systems administration; provide you or your organisation with advice; notify you about important changes or developments to our services; contact you for your views on our services or to determine the suitability for employment.

We provide an opt-out option.

Applying for a job

You provide several pieces of data to us directly during the recruitment exercise. In some cases, and to facilitate our ‘Legitimate Interests’ we will collect data about you from third parties, such as employment agencies and former employers when gathering references or credit reference agencies. Should you be successful in your job application, we will gather further information from you, for example, your bank details and next of kin details, once your employment begins. We have a Legal Obligation to ensure you have a right to work in the UK and make reasonable adjustments for you if you have a disability.

Data Retention

Lepzi Ltd. only keeps your data for as long as necessary, unless there is an overriding legal ground. We will not retain data if it is deemed unlawful to do so. Data may be held for purposes relating to the establishment, exercise or defence of legal claims which the group or our clients may face. We will typically keep data concerning your account for at least five years from the date it is collected. Some data may be deleted before this time period, for example, data provided to us in the course of an unsuccessful job application will be retained no longer than 6 months after the recruitment exercise.

Personal data that is no longer necessary is deleted securely.

All data subjects have individual rights. On a case-by-case basis, you have the following rights in relation to your personal data processed by Lepzi Ltd.:

The right to be informed about how your personal data is collected and used.

The right to request access to a copy of any personal data that we hold about you.

The right to rectify personal data we may hold which is identified as incorrect or misleading.

The right to erasure of any personal data; also known as ‘the right to be forgotten’.

The right to restrict further processing of your personal data.

As an organisation we do not operate any automated decision-making systems. Please be aware that the rights listed in this section only apply to individuals and cannot be used to request data relating to business entities. Please be aware that your rights of access do not entitle you to physical or digital copies of any documentation we hold.

Contact

Lepzi Ltd. can be approached for any questions, comments and requests regarding this privacy policy.

Our Data Protection officer welcomes communication around our policies and practices and they can be directly contacted by writing to us at Lepzi Ltd., Bedford Technology Park, Thurleigh, Bedfordshire MK44 2YA or email us at enquiries@lepzi.com

If you’re not satisfied with our response, or believe we’re not processing your personal data in accordance with the law, you can approach the UK regulator for further guidance at www.ico.org.uk/concerns

Additional Information

This version was last updated and reviewed November 2022.

We regularly review and monitor regulatory guidance for any industry changes which may impact our business operations or your rights and freedoms.

In this privacy notice, “personal data” means any information relating to an individual who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data or an online identifier.

We are legally known as Lepzi Ltd., and our registered office is at 71-75 Shelton Street, London WC2H9JQ United Kingdom. We are registered in England and Wales under company number 14422135.