Effective date: 01 June 2026
Last updated: 01 June 2026

Weatherden Limited respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose and protect personal data when you visit our website, contact us, engage with our content or events, apply for roles, or otherwise interact with us.
This Privacy Policy is intended to meet our transparency obligations under the UK General Data Protection Regulation, the Data Protection Act 2018 and, where applicable, the EU General Data Protection Regulation. It also includes information for visitors and contacts in other jurisdictions, including the United States and Canada.

1. Who we are
Weatherden Limited is a drug development consultancy supporting biotech, pharmaceutical, investment and academic organisations with scientific, clinical, regulatory, statistical, operational and commercial expertise.

For data protection purposes, Weatherden Limited is the controller of the personal data described in this Privacy Policy, except where we process personal data on behalf of a client under a separate written agreement.

Company: Weatherden Limited
Company number: 09241011
Registered office: 264 Banbury Road, Oxford, England, OX2 7DY
Privacy contact: privacy@weatherden.co.uk

2. Scope of this Privacy Policy
This Privacy Policy applies to personal data we process in connection with:

• visits to www.weatherden.com;

• enquiries and business development communications;

• our Knowledge Network, events, webinars, meetings and thought leadership;

• recruitment and careers enquiries;

• supplier, adviser, partner and professional contact management;

• client relationship management and pre-contract discussions.

 

This Privacy Policy does not replace any client-specific data processing agreement, clinical project privacy notice, employee privacy notice, contractor privacy notice, candidate privacy notice, or other notice that may apply in a specific context.

 

3. Personal data we collect
We may collect and process the following categories of personal data.
 

3.1 Website and technical data
When you visit our website, we may process:

• IP address;

• browser type and version;

• device type;

• operating system;

• approximate location derived from technical information;

• pages viewed;

• dates and times of visits;

• cookie and similar technology data;

• security, diagnostic and performance information generated by the Wix platform.

 

3.2 Enquiry and business contact data
When you contact us, meet us, exchange business cards, email us, or engage with us about Weatherden’s services, we may process:

• name;

• job title;

• organisation;

• business email address;

• business telephone number;

• country or region;

• LinkedIn or other professional profile information;

• details of your enquiry or business requirements;

• communications with you;

• meeting notes and relationship history;

• information about your organisation, assets, programmes, investment interests, or business objectives that you choose to provide.

 

3.3 Event and Knowledge Network data
If you register for, attend, speak at, sponsor, or otherwise engage with Weatherden events or content, we may process:

• name;

• job title;

• organisation;

• contact details;

• attendance information;

• dietary, access or logistical requirements, where relevant;

• speaker biography, photograph and professional profile, where relevant;

• questions, comments or feedback you provide;

• communication preferences.

 

3.4 Recruitment data
If you apply for a role or contact us about opportunities, we process applicant data as described in section 11, “Recruitment and job applicants”.

 

3.5 Supplier, adviser and partner data
We may process:

• name;

• business contact details;

• role and organisation;

• payment and invoicing information;

• correspondence and contract details;

• due diligence information;

• professional qualifications or credentials, where relevant.

 

3.6 Sensitive or special category data
We do not intentionally collect special category data through the website, such as health data, genetic data, biometric data, racial or ethnic origin, political opinions, religious beliefs, trade union membership, or sexual orientation.

 

However, special category data may be processed in limited circumstances, for example:

• if you provide health, disability, dietary or access information for an event or recruitment process;

• if candidate diversity monitoring information is collected;

• if information is processed in a client project context under a specific agreement and privacy framework.

Where we process special category data, we will only do so where we have a lawful basis under data protection law and a specific condition for processing special category data.

 

4. How we collect personal data
We collect personal data:

• directly from you, for example when you email us, attend a meeting, register for an event, or apply for a role;

• from your organisation, colleagues, advisers or other professional contacts;

• from publicly available professional sources, such as company websites, conference agendas, Companies House, LinkedIn or professional directories;

• automatically through our website and the Wix platform when you visit our site;

• from service providers that support our website, communications, recruitment, events, operations or client relationship management.

 

5. Purposes and lawful bases

We process personal data for the following purposes and lawful bases:

​

• Operating, securing and maintaining our website

  • Personal data used: website and technical data, essential cookies, security logs.

  • Lawful basis: our legitimate interests in operating a secure and functional website; compliance with legal obligations where applicable.

• Responding to enquiries

  • Personal data used: name, contact details, organisation, enquiry content and communications.

  • Lawful basis: our legitimate interests in responding to business enquiries and developing professional relationships; steps prior to entering into a contract where relevant.

• Providing relevant professional communications about Weatherden, our services, events and insights

  • Personal data used: business contact details, role, organisation, areas of interest and communications.

  • Lawful basis: our legitimate interests in keeping relevant professional contacts informed about Weatherden, our services, events and insights; consent where required by applicable law.

• Managing client, investor, partner and professional relationships

  • Personal data used: business contact details, organisation, role, meeting notes and relationship history.

  • Lawful basis: our legitimate interests in managing professional relationships and developing Weatherden’s business.

• Organising events, meetings and Knowledge Network activities

  • Personal data used: contact details, attendance details, speaker information, access or dietary requirements where relevant.

  • Lawful basis: our legitimate interests in organising and promoting professional events; contract where participation terms apply; consent or explicit consent for certain optional or sensitive information where required.

• Publishing event or thought leadership content

  • Personal data used: speaker name, title, organisation, biography, image, comments or recordings where relevant.

  • Lawful basis: consent where appropriate; our legitimate interests in publishing professional content where this is fair and expected.

• Recruitment

  • Personal data used: applicant contact details, CV, qualifications, employment history, right-to-work information, interview notes and assessment records.

  • Lawful basis: our legitimate interests in recruiting for our business; steps prior to entering into a contract; compliance with legal obligations where relevant.

• Supplier and adviser management

  • Personal data used: contact details, contract details, payment and invoicing information.

  • Lawful basis: contract; our legitimate interests in managing suppliers and advisers; legal obligations for tax, accounting and compliance.

• Legal, regulatory and compliance matters

  • Personal data used: relevant records, communications, contracts and due diligence information.

  • Lawful basis: legal obligations; our legitimate interests in establishing, exercising or defending legal rights.

• Business administration, corporate transactions and record keeping

  • Personal data used: contact, contract, finance and relationship records.

  • Lawful basis: our legitimate interests in running and administering our business; legal obligations where applicable.

 

Where we rely on legitimate interests, we consider whether our interests are overridden by your interests, rights and freedoms.

 

Where we rely on consent, you may withdraw consent at any time. Withdrawal of consent does not affect processing carried out before withdrawal.

 

6. Communications

We may contact professional contacts about Weatherden, our services, events, insights and related opportunities where permitted by law. We may contact you using business contact details where we have a lawful basis to do so, including legitimate interests for relevant professional communications or consent where required. You can ask us to stop sending these communications at any time by contacting privacy@weatherden.co.uk or by using any unsubscribe mechanism provided in the communication.

​

We do not sell personal data.

 

7. Sharing personal data
We may share personal data with:

​

• website hosting and platform providers, including Wix;

• IT, email, cloud storage, cybersecurity and business software providers;

• professional advisers, including lawyers, accountants, auditors and insurers;

• recruitment advisers, background screening providers and referees, where relevant;

• event venues, event platforms, speakers, sponsors or co-hosts, where relevant and appropriate;

• clients, collaborators, advisers, investors or counterparties where this is necessary for a project, transaction, event or professional engagement;

• regulators, public authorities, law enforcement bodies or courts where required by law or necessary to protect our rights;

• prospective purchasers, investors or advisers in connection with a corporate transaction, restructuring or investment process.

 

We require service providers to protect personal data and to process it only in accordance with our instructions or otherwise as permitted by law.

Applicant data is handled as described in section 12.

8. International transfers
We are based in the United Kingdom, but our business and website may involve international contacts, clients, suppliers and service providers. Your personal data may therefore be transferred to or accessed from countries outside the UK, including the EEA, the United States, Canada and other jurisdictions.

Where UK GDPR or EU GDPR transfer rules apply, we will use an appropriate transfer mechanism, such as:

​

• an adequacy decision or adequacy regulation;

• the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses;

• EU Standard Contractual Clauses;

• another lawful transfer mechanism permitted under applicable data protection law.

 

Applicant data is handled as described in section 12. We do not transfer applicant data outside the UK/EEA.

 

9. Retention
We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, including legal, regulatory, accounting, reporting and business continuity purposes.

 

Our indicative retention periods are:

​

• Website security and technical logs: usually up to 12 months, unless longer retention is needed for security, investigation or legal purposes.

• Essential cookies: retained for the periods described in section 13.

• General business enquiries: up to 6 years after last meaningful contact or the end of the relevant matter.

• Client, investor, partner and professional relationship records: up to 6 years after the end of the relationship or relevant matter, unless a longer period is required for legal or regulatory reasons.

• Event registration and attendance records: up to 3 years after the event, unless needed for ongoing relationship management, legal claims or financial records.

• Communication preferences and suppression records: for as long as needed to respect your preferences and demonstrate compliance.

• Recruitment records for unsuccessful candidates: usually up to 12 months after the recruitment process, unless a longer period is required by law or in connection with a legal claim.

• Recruitment records for successful candidates: transferred to personnel, contractor or engagement records and retained under the applicable staff, contractor or worker privacy notice.

• Supplier and finance records: usually up to 7 years for tax, accounting and audit purposes.

• Legal claims and dispute records: retained for the duration of the matter and any applicable limitation period.

 

We may retain anonymised or aggregated information for longer where individuals are no longer identifiable.

10. Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. These measures may include access controls, secure systems, contractual confidentiality obligations, staff awareness, supplier due diligence and security monitoring.
No website, email system or online service can be guaranteed to be completely secure. You should avoid sending highly confidential or sensitive information to us by unsecured channels unless appropriate safeguards have been agreed.

11. Your rights
Depending on your location and the law that applies, you may have rights to:

​

• access your personal data;

• request correction of inaccurate or incomplete personal data;

• request deletion of personal data;

• request restriction of processing;

• object to processing based on legitimate interests;

• request data portability;

• withdraw consent where processing is based on consent;

• complain to a data protection regulator.

 

These rights are not absolute and may be subject to exemptions or limitations. To exercise your rights, contact us at privacy@weatherden.co.uk. We may need to verify your identity before responding. If you are in the UK, you have the right to complain to the Information Commissioner’s Office. The ICO’s website is ico.org.uk. If you are in the EEA, you may also have the right to complain to your local supervisory authority.

 

12. Recruitment and job applicants
This section explains how Weatherden Limited handles the personal data of people who apply to work with us. For this processing, Weatherden Limited is the controller.

12.1 Who to contact
Weatherden Limited is registered at 264 Banbury Road, Oxford, England, OX2 7DY.
For any questions about how we handle applicant data, or to exercise your data protection rights, please contact: privacy@weatherden.co.uk.

12.2 When this section applies
We advertise roles through channels including LinkedIn, medical and scientific journals, professional networks and other recruitment channels. Applications are also made to us directly, usually by email to join@weatherden.com. This section applies from the point that you apply for a role with us, send us your details in connection with a role, or otherwise take part in a recruitment process.

12.3 What applicant data we collect
We collect and use the information you provide when you apply and during the recruitment process. This will typically include:

​

• your name and contact details;

• your CV, covering letter and application information;

• your qualifications, professional memberships and credentials;

• your employment and education history;

• information about your experience, skills and suitability for the role;

• right-to-work and similar information relevant to the role;

• interview, screening and assessment notes;

• recruitment decision records; and

• correspondence with you about your application.

 

Please avoid sending us special-category information, such as health information, diversity data, information about racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, sexual orientation, or sex life information. We do not need this information to assess your application unless we specifically ask for it for a lawful reason, for example to make reasonable adjustments during the recruitment process.

12.4 Why we use applicant data and our lawful bases
We use applicant data to:

• assess your suitability for the role;

• communicate with you about your application;

• arrange and conduct interviews and assessments;

• make and record recruitment decisions;

• verify information relevant to your application, where appropriate;

• confirm your eligibility to work, where required; and

• deal with queries, complaints or legal issues relating to the recruitment process.

 

Our lawful bases are:

• our legitimate interests in recruiting staff and contractors for our business and managing an effective recruitment process;

• taking steps at your request prior to entering into a contract, where your application may lead to an employment, consultancy or other working relationship with us; and

• compliance with a legal obligation, where we need to confirm your eligibility to work or meet other legal requirements.

 

Where we need to process special-category data, for example disability information for reasonable adjustments, we will only do so where permitted by data protection law and, where required, with your explicit consent or for employment law purposes.

12.5 Who we share applicant data with
Applicant data is handled within Weatherden by people involved in recruitment and hiring decisions.
Applicant data is held in our business systems, including Microsoft 365, which are hosted within the UK and/or EEA. We do not sell applicant data. We do not use applicant data for marketing.

 

We may share applicant data with limited third parties where necessary for recruitment or legal purposes, such as professional advisers, IT service providers, referees, background-checking providers where relevant, or public authorities where required by law.

 

We do not transfer applicant data outside the UK/EEA unless the applicant is outside these areas.

12.6 How long we keep applicant data
If your application is unsuccessful, we keep your applicant data for 12 months after the recruitment process ends and then delete it, unless a longer period is required by law or in connection with a legal claim. We retain it for this period so that we can consider you for suitable roles that arise, respond to queries about the recruitment process, and maintain appropriate recruitment records.

You may ask us to delete your applicant data sooner by contacting privacy@weatherden.co.uk. We will comply unless we have a lawful reason to retain it.

If your application is successful, relevant applicant data will be retained as part of your employment, consultancy or engagement record and will be handled in accordance with the applicable staff, contractor or worker privacy notice.

12.7 Your rights
You have rights over your personal data, including the right to:

​

• access your personal data;

• ask us to correct inaccurate or incomplete personal data;

• ask us to delete your personal data;

• object to certain processing;

• ask us to restrict certain processing; and

• withdraw consent where we rely on consent.

 

These rights are subject to legal limits and may not apply in every case. To exercise your rights, please contact privacy@weatherden.co.uk. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk. We would, however, welcome the opportunity to address your concerns first.

13. Cookies and similar technologies

Our website is built on Wix Studio. Cookies and similar technologies are small files or identifiers stored on your device or browser.

We use cookies and similar technologies to operate and secure the website, support core website functionality, improve website performance, and maintain the reliability of the site.

Based on our current review, the website uses Wix platform cookies that are necessary for the website to operate securely and effectively. These are treated as necessary cookies. Necessary cookies do not require consent, but we still provide information about them.

You can control cookies through your browser settings. Blocking necessary cookies may affect the operation, security or functionality of the website.

13.1 Essential Wix cookies

Necessary cookies are required for the website to operate securely and effectively. They support functions such as security, fraud prevention, load balancing, rendering, session management and core website operation. The necessary cookies currently identified on our website are:

​

• ssr-caching

  • Provider/domain: www.weatherden.com.

  • Purpose: set by Wix to indicate how the site was rendered.

  • Duration: less than a minute.

  • Category: necessary.

• XSRF-TOKEN

  • Provider/domain: www.weatherden.com.

  • Purpose: enhances visitor browsing security by helping prevent cross-site request forgery.

  • Duration: session.

  • Category: necessary.

• hs

  • Provider/domain: www.weatherden.com.

  • Purpose: set by Wix for security purposes.

  • Duration: session.

  • Category: necessary.

• svSession

  • Provider/domain: www.weatherden.com.

  • Purpose: set by Wix to identify unique visitors and track a visitor’s session on the site.

  • Duration: 1 year, 1 month and 4 days.

  • Category: necessary.

• bSession

  • Provider/domain: www.weatherden.com.

  • Purpose: set by Wix in connection with load balancing to improve user experience.

  • Duration: 1 hour.

  • Category: necessary.

13.2 Non-essential cookies

Functional cookies support additional website functionality or help remember user choices. These cookies are not essential unless they are strictly necessary to provide a service specifically requested by the visitor. The functional cookies currently identified on our website are:

​​

• n/a

13.3 Managing cookies

Analytics cookies help us understand how visitors interact with the website, including how pages are viewed and how the site is used. We use this information to improve the website and user experience. Analytics cookies are not essential and should only be placed where you have given consent. You can delete or block cookies using your browser settings. The analytics cookies currently identified on our website are:

​

• n/a​

 

13.4 Changes to cookies, other cookies and site data

The following cookies or site data have also been identified. We are reviewing their precise function and classification. 

​

• server-session-bind

  • Provider/domain: www.weatherden.com.

  • Purpose: session binding and platform operation.

  • Duration: session.

  • Current scanner category: other.

• client-session-bind

  • Provider/domain: www.weatherden.com.

  • Purpose: session binding and platform operation.

  • Duration: session.

  • Current scanner category: other.

• fedops.logger.sessionId

  • Provider/domain: weatherden.com.

  • Purpose: platform logging, diagnostics or resilience monitoring.

  • Duration: never expires according to the scanner.

  • Current scanner category: other.

• mpaSessionId

  • Provider/domain: weatherden.com.

  • Purpose: session-related website or platform functionality.

  • Duration: session.

  • Current scanner category: other.

 

13.5 Changing your cookie preferences

You can also delete or block cookies using your browser settings. If you block necessary cookies, parts of the website may not function properly. The cookies used on our website may change over time, including where we change our website provider, add or remove website features, or update analytics or consent tools. We will update this Privacy Policy or our cookie information where required.

​

13.6 Changes to cookies

The cookies used on our website may change over time, including where we change our website provider, add or remove website features, or update analytics or consent tools. We will update this Privacy Policy or our cookie information where required.

14. Third-party links and platforms
Our website may link to third-party websites or platforms, including LinkedIn and event or content platforms. Those third parties are responsible for their own privacy practices. You should read their privacy notices before providing personal data to them.

15. US visitors
Weatherden does not sell personal data. We also do not knowingly use the website to share personal data for cross-context behavioural advertising. Certain US state privacy laws may provide residents with rights to access, correct, delete or opt out of certain uses of personal information. Where such laws apply to us, we will honour applicable rights requests.

16. Canadian visitors
If you are located in Canada, we will handle your personal information in accordance with applicable Canadian privacy requirements where they apply. You may contact us to request access to, or correction of, personal information we hold about you. Where consent is required for a particular activity, you may withdraw consent subject to legal or contractual restrictions.

17. Children
Our website and services are directed at business and professional audiences. We do not knowingly collect personal data from children through the website.

18. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be posted on our website with a revised “last updated” date. Where changes are material, we may take additional steps to notify you.

19. Contact
For questions about this Privacy Policy or how we use personal data, contact:
Weatherden Limited, 264 Banbury Road, Oxford OX2 7DY, England
Email: privacy@weatherden.co.uk

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​