In this Privacy Policy "we", "us" and "our" refers to Thea Pharmaceuticals Limited.

Your personal information and this website is controlled by Thea Pharmaceuticals Limited our registered office is at the following address:

IC5 Innovation Way,
Keele University Science & Innovation Park,
Newcastle under Lyme,
ST5 5NT

Definitions

By "Personal Information" (in some countries referred to as "personal data" or "personally identifiable information") we mean any information relating to an identified or identifiable individual. This is broader than just information of a personal or private nature, it also includes information such as your name and e-mail address.

1. Scope of our Privacy Policy

Our Privacy Policy applies to all personal information we collect, use, share or otherwise process through our business activities, both online and offline including:

• Our Website
• Our Customer Relationship Management System
• Our official Social Media pages
• Our E-mails
• Our Online and Offline Campaigns
• Your conversations or correspondence with our Representatives.

You should be aware of the fact that our online activity may contain hyperlinks to third party websites, apps, etc. which are not controlled by us and which are not covered by this Privacy Policy. We have no responsibility or liability for the content and activities of these third party websites, apps, etc. As these third parties may collect your personal information, we suggest that you consult the privacy policies of these third parties to learn more about their use of your personal information.

Our websites make use of cookies. For more information on this subject, please also consult our Cookie Policy

Further, when using our online or offline services, please always also read our Terms of Use

2. Fair and lawful processing

We process your personal information for the below listed purposes on the basis of your consent, unless stated otherwise. In some cases, where required by law, we may ask for your explicit consent for processing your personal information for a specific purpose.

We only collect, use, disclose or otherwise process your personal information where it is fair and lawful to do so. We only collect data for the purposes listed in Section 4.

This data will be stored for up to 3 years and is intended for Thea Pharmaceuticals LTD Internal Staff and will only be shared with relevant, trusted third parties as outlined in Section 5. This is in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

In many cases providing your personal information to us is necessary for the performance of your contract with us; if you do not wish to provide your personal information to us, we may not be able to provide you with the products and services you have requested from us.

3. How do we obtain your Personal Information?

Personal Information obtained from you directly:

Firstly, we may obtain your personal information from you directly, e.g. when you buy a product from us, fill out a feedback form, survey or registration form, make a comment or enquiry, post something on our social media pages, attend an event we host or subscribe to direct marketing etc.

Personal Information collected this way may include:

• Name
• Address
• E-mail address
• User name
• Employment Numbers
• Telephone number (and recordings when you call our consumer line)
• Product purchase and usage information
• Information you provide regarding your marketing preferences
• User-generated content, posts and other content you submit to our Sites;
• Demographic information.
• Any other non-special category personal information you voluntarily provide us with directly.

Personal Information collected automatically:

Secondly, some Personal Information may be collected automatically when you visit or use our Sites (and those of our third party service providers acting on our behalf), such as information collected by cookies and other technologies (such as web analytic tools) on our websites. Please also consult our Cookie Policy for more information on how we make use of automated means of data collection like cookies

Personal Information collected this way may include:

• The number of times you have visited the site before
• When you arrived/left the site
• Your broad geographic location
• The search engine/device you may have used to access the Thea Pharmaceuticals site
• Any links you have clicked on

4. For which purposes, may we use your Personal Information

We use your Personal Information for our following business purposes:

• Based on your contract with us, handling and managing your purchase, for instance to communicate to you with respect to your purchase, to process your payments, to deliver the purchased products and services, and to offer you the necessary highest customer service through our CRM System.
• Better understanding your needs in order to provide you with more relevant information, analyzing and evaluating our corporate activities, testing, evaluating new products and improving our existing services, conducting market research and audits, identifying user trends and examining the degree of effectiveness of our marketing campaigns and degree of satisfaction of our customers.
• Informing you about our relevant products and services, and sending you relevant promotional materials (such as announcements relating to new events, products, and promotions, subject to your consent to such marketing where required by law.
• Managing our online activity, and fine-tuning the experience and content online to your previous online activities with a view of personalizing your online experience.
• Responding to your requests or enquiries.
• Dealing with any product adverse events you report to us.
• Administering general record keeping.
• Meeting legal and regulatory requirements.
• Educational Event Communications.

GDPR may require us to set out in this Privacy Policy the legal grounds on which we rely in order to process your personal information. In such cases, our use of your personal information is permitted by law because:

• It is necessary for our legitimate interests in the effective delivery of information, services and products to you and in the effective and lawful operation of our business (in each case provided such interests are not overridden by your rights)
• It is necessary for taking steps to enter into a contract with you for the products you purchase, or for carrying out our obligations under such a contract;
• It is required to satisfy any legal or regulatory obligations that we are subject to.

5. To whom we may disclose your Personal Information

Third Party Service Providers

We may share your Personal Information with trusted third party service providers who work on our behalf, such as marketing agencies, market research companies, e-commerce fulfilment partners, software, data hosting and other IT service providers, merchants selling Thea Pharmaceuticals Limited products, payment processors, etc. These third party service providers are required not to use your Personal Information other than to provide the services requested by us or otherwise in accordance with our instructions.

We may also share your personal information with other trusted third parties. Namely advertising agencies (when permitted to do so), so that we can offer you tailored content, including more relevant advertising for products and services which may be of interest to you. These third parties may use cookies or similar tracking technologies on your device in order to deliver customized content and advertising to you.

We may also disclose your personal information if we believe in good faith that such disclosure is necessary for our legitimate interest or prudent in light of our obligations under applicable law:

• In connection with any legal investigation;
• To comply with relevant laws or to respond to court our authority orders or warrants served on us
• To protect or defend our rights in legal procedures; or
• To investigate or assist in preventing any violation or potential violation of the law, this Privacy Policy, or any applicable Terms of Use.

6. How we protect your Personal Information

We have implemented appropriate technical and organisational measures to protect your Personal Information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access and against all other unlawful forms of processing.

When collecting or transferring Personal Information we use a variety of additional security procedures to help protect your information.

The Personal Information you provide us with is stored on computer systems located in controlled facilities which can only be accessed by a limited number of persons who have a need to know in order to carry out their tasks and any services requested by you.

If you would like to find out more about our specific security measures regarding your information you can get in touch using the details set out at “how to contact us” below.

7. Your choices regarding direct marketing

We may periodically send you free promotional materials related to our products and services which we believe are useful for you, if you have consented (opted-in) to receive such messages via e-mail or any other electronic channel (where such opt-in is required under GDPR).If you do not wish to receive such communications anymore, you will always have the opportunity to "opt out" by following the unsubscribe instructions provided in each of our direct marketing e-mails or by contacting us directly (please see our contact information at “how to contact us” below).

Where permitted under applicable law, we may send you service messages identifying any updates to our Privacy Policy (even where you have opted out of receiving marketing messages from us).

8. Your rights

You have various rights in relation to your Personal Information, as outlined in the GDPR you have:

• The right to be informed
• The right of access
• The right to rectification
• The right to erasure
• The right to restrict processing
• The right to data portability
• The right to object
• Rights in relation to automated decision making and profiling.

If you would like to exercise or understand more about your individual rights you can get in touch using the details set out at “Contact Us” below.

9. Complaints

If you are unhappy with the way we have handled your personal information or any privacy query or request that you have raised with us, you have a right to complain to your local data protection regulator.

10. How long we retain your Personal Information

We will only retain your Personal Information as long as reasonably required for the purposes as set out in this Privacy Policy or otherwise to comply with legal or regulatory requirements applicable to us.

When your Personal Information is processed:

For the performance of your contract with us, we retain your Personal Information for a period of 2 years following completion of a contractual order.

For meeting, legal and regulatory requirements, we retain your Personal Information for a period of 3 years or as it is set out by an applicable law.

In all other cases, we process your Personal Information, depending on the type, for up to 3 years from the date of our last interaction with you.

11. Children

Most of our Sites are not directed towards children and we request that children below the age of 16 do not provide Personal Information through our Sites.

If you are the parent or legal guardian of a child under 16 who you believe has provided Personal Information to us, please contact us using the details set out at “Contact Us” below to have the information deleted. Information voluntarily provided by children via e-mails, message boards, chat sessions etc. may be used by other parties to generate unsolicited e-mails. We encourage parents and legal guardians to inform children about how to use the Internet in a safe and responsible manner.

13. Contact Us

We welcome your feedback. If you have any comments, questions or complaints regarding this Privacy Policy or our processing of your Personal Information, or would like to exercise any of the rights set out in this policy above you can contact us by sending an e-mail to thea.support@theapharma.co.uk or phoning 0345 521 1290

You may also write to us at:
IC5 Innovation Way
Keele University Science and Innovation Park
Keele
Newcastle under Lyme
ST5 5NT

14. Privacy Policy Changes

This Privacy Notice was updated on (date). This document is a notice to you and not a contract between us. We may occasionally modify or amend it from time to time. When we make changes to this Privacy Notice, we will update the revision date at the top of this Privacy Notice. Where those changes are material, we will take steps to let you know. The new modified or amended Privacy Notice will apply from that revision date. Please always verify whether you have consulted the latest version of the Privacy Notice.