Privacy policy

1. Who we are

Evidax Ltd ("Evidax", "we", "us", "our") provides evidence strategy and evidence generation services to biotech and pharmaceutical companies. We are a company registered in England and Wales (company number 17182003) with our registered office at 5 Reginald Grove, York, YO23 1LN, UK.

This policy explains how we collect, use, and protect personal data when you visit evidax.co, contact us, or subscribe to our updates.

For the purposes of the UK General Data Protection Regulation and the EU GDPR, Evidax Ltd is the data controller of the personal data described here.

Questions about this policy or how we handle your data: hello@evidax.co.

2. Personal data we collect

Information you give us

Contact form. Your first name, surname, email address, company, and anything you write in the message field.

Email and other correspondence. If you email us, we keep a record of that correspondence.

Marketing subscriptions. If you opt in to receive updates, we collect your name and email address.

Information we collect automatically

We use Cloudflare Web Analytics to understand how the site is used. It does not use cookies and does not collect personal data. Our hosting provider processes IP addresses for security and to deliver the site.

The Evidence Gap Survey

If you use the Evidence Gap Survey, we receive the answers you gave. This is sent when you reach your results, and also if you leave part way through after answering at least eight questions. It is sent automatically, without you pressing send.

We receive your answers and a randomly generated reference for that visit. By itself this does not include your name, your email address or your company.

If you then ask us to email your results, we receive your email address with the same reference, which means we can connect your answers to you. We use your address to send your results and to reply if you contact us about them.

We use survey answers to improve the survey, to see which questions people stop at, and to understand the evidence gaps companies are facing. We keep them for 24 months.

3. How we use your data, and our legal bases

Responding to enquiries. Legitimate interests in replying to someone who has contacted us, or steps taken before entering a contract.

Operating and improving the site. Legitimate interests.

Running the Evidence Gap Survey and sending results. Legitimate interests.

Sending updates and insights. Consent, which you give by ticking the box on our form. You can withdraw it at any time.

Complying with legal obligations. Legal obligation.

Establishing, exercising, or defending legal claims. Legitimate interests.

Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights. You can object at any time.

4. How we share your data

We do not sell your personal data. We share it only with:

Service providers. Resend, which delivers our form submissions and sends our email updates, and Cloudflare, which hosts this site. These process data on our behalf under contract.

Professional advisers. Lawyers, accountants, and insurers where necessary.

Authorities. Courts, regulators, or law enforcement where we are legally required.

Business transfers. If we are involved in a merger, acquisition, or sale of assets, personal data may transfer as part of that transaction, subject to appropriate safeguards.

5. International transfers

We are based in the United Kingdom. Some of our service providers store or process data in the United States.

Where we transfer personal data outside the UK or European Economic Area, we rely on appropriate safeguards, including transfers to countries covered by UK adequacy regulations or an EU adequacy decision, or Standard Contractual Clauses with the UK International Data Transfer Addendum. Contact hello@evidax.co for details of the safeguards we use.

6. Cookies

We do not use tracking or marketing cookies. Our analytics are cookieless. Our hosting provider may set strictly necessary cookies required for security and site delivery, which do not require consent.

7. How long we keep your data

Enquiry records: 24 months from your last contact, unless we go on to work together.

Client records: for the duration of our engagement and as long as our legal and accounting obligations require.

Marketing data: until you unsubscribe.

Evidence Gap Survey answers: 24 months, including any email address you give us with them.

8. How we protect your data

We use appropriate technical and organisational measures, including access controls, encryption in transit, and reputable service providers with strong security practices. No system is completely secure, but we work to protect your data in line with good industry practice.

9. Your rights (UK and EEA)

You have the right to request a copy of your data, ask us to correct or delete it, restrict or object to how we use it, receive it in a portable format, and withdraw consent where we rely on it.

Email hello@evidax.co and we will respond within one month. We may need to verify your identity first.

You can also complain to the Information Commissioner's Office at ico.org.uk, or to your local data protection authority if you are in the EEA. We would welcome the chance to address your concerns first.

10. Your rights (United States)

If you live in a US state with a comprehensive privacy law, including California, Colorado, Connecticut, Virginia, and Texas, you may have the right to know what personal information we collect and disclose, to access and receive a copy of it, to correct inaccuracies, to delete it subject to certain exceptions, to opt out of any sale, sharing, or targeted advertising, and not to be discriminated against for exercising these rights.

We do not sell personal information. We do not use tracking cookies or targeted advertising.

To exercise these rights, email hello@evidax.co with your name, state of residence, and the nature of your request. You may use an authorised agent where permitted by law.

11. Children

Our site and services are directed at businesses and professionals. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with data, contact us and we will delete it.

12. Third-party links

Our site links to third-party websites including LinkedIn and PROSPERO. We are not responsible for their privacy practices and encourage you to read their policies.

13. Changes to this policy

We may update this policy. The updated version will appear on this page with a revised date.

14. Contact us

Evidax Ltd
5 Reginald Grove, York, YO23 1LN, UK

Email: hello@evidax.co