Privacy Policy

Last updated: 6 June 2026

1. Who We Are

AISCKOP TEHNOLOGIES Ltd ("AISCKOP", "we", "us", or "our") is a research technology company registered in Scotland, United Kingdom, with our registered office in Edinburgh, Scotland, UK.

We operate at the intersection of microbial biology and nanotechnology research, providing research optimisation tools and services to business, academic, and research institutional clients.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, AISCKOP TEHNOLOGIES Ltd is the data controller in respect of personal data collected through our website and services.

Our Contact Details:

• Company Name: AISCKOP TEHNOLOGIES Ltd
• Registered Office: Edinburgh, Scotland, United Kingdom
• Email: contact@aisckop.co.uk
• Website: aisckop.co.uk

2. What Data We Collect

We collect and process the following categories of personal data about you:

Data You Provide Directly

When you contact us, submit an enquiry through our contact form, use our Discovery Lab, or otherwise communicate with us, you may provide us with:

• Identity Data: Your full name, job title, and professional role.
• Contact Data: Your email address, telephone number, and business postal address.
• Organisation Data: The name of the company, university, or research institution you represent, and its sector or industry.
• Enquiry Details: Information contained in your messages to us, including research queries, project descriptions, and any other details you choose to provide about your research interests or requirements.

Data We Collect Automatically

When you visit our website, we automatically collect certain technical information:

• Technical Data: Your IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, device type, and other technology on the devices you use to access our website.
• Usage Data: Information about how you use our website, including the pages you visit, the time and date of your visit, the time spent on those pages, the links you click, and the searches you conduct on our Discovery Lab.
• Cookie Data: Information collected through cookies and similar tracking technologies. For more details, please see our Cookie Policy.

Data We Do Not Collect

We do not collect any special categories of personal data as defined under Article 9 of the UK GDPR (such as data concerning health, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, or data concerning sex life or sexual orientation). We do not knowingly collect personal data from children under the age of 16. Our services are intended for business and research professionals.

3. How We Use Your Data

We use your personal data for the following purposes:

To Respond to Your Enquiries

We use your contact and enquiry data to respond to your questions, provide information about our services, and communicate with you about your research requirements. This is our primary purpose for collecting your data and is necessary for the performance of our contract with you or to take steps at your request prior to entering into a contract.

To Provide Our Services

We use your data to deliver the research optimisation services you have requested, including operating the Discovery Lab, generating research briefs, and coordinating expert consultations or partner laboratory validation.

To Improve Our Services

We analyse usage data and feedback to understand how our website and services are used, identify areas for improvement, and develop new features and functionality. This helps us maintain and enhance the quality of our Services.

To Communicate with You

We may use your contact details to send you service-related communications, including technical notices, security alerts, updates about our services, and administrative messages. We may also send you information about research insights, industry developments, or service offerings that we believe may be relevant to your professional interests, provided you have consented to receive such communications or we have another lawful basis for sending them.

For Legal and Regulatory Compliance

We may process your personal data as necessary to comply with applicable laws and regulations, including tax and accounting requirements, to respond to legal process or lawful requests from public authorities, and to protect our rights, property, and safety, and those of our users and third parties.

4. Legal Basis for Processing

Under the UK GDPR, we must have a lawful basis for processing your personal data. The legal bases we rely upon are:

Legitimate Interests (Article 6(1)(f) UK GDPR)

Our primary lawful basis for processing B2B enquiry data is legitimate interests. As a B2B research technology provider, it is in our legitimate interests to respond to enquiries from business and research professionals who are interested in our services, to develop and maintain professional relationships, and to provide relevant information about our research optimisation solutions. We have conducted a legitimate interests assessment (LIA) and have determined that our interests do not override your fundamental rights and freedoms.

Performance of a Contract (Article 6(1)(b) UK GDPR)

Where you have entered into or are seeking to enter into a service agreement with us, we process your personal data as necessary for the performance of that contract, or to take steps at your request prior to entering into a contract.

Consent (Article 6(1)(a) UK GDPR)

Where required by law, or where we are unable to rely on another lawful basis, we will obtain your explicit consent before processing your personal data. You have the right to withdraw your consent at any time by contacting us.

Legal Obligation (Article 6(1)(c) UK GDPR)

We may process your personal data where necessary to comply with a legal obligation to which we are subject, such as tax, accounting, or regulatory requirements.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Enquiry Data

Personal data collected through enquiries (contact forms, emails, Discovery Lab usage) is retained for twelve (12) months from the date of last contact. This period allows us to follow up on research enquiries and maintain professional relationships. After this period, personal data is securely deleted or anonymised, unless you have become an active client or have requested that we retain your information for a longer period.

Client Data

If you enter into a service agreement with us, we will retain your personal data for the duration of our business relationship and for a period of six (6) years thereafter, in accordance with UK statutory limitation periods and accounting requirements.

Technical and Usage Data

Technical data (such as server logs and analytics data) is retained for up to twenty-six (26) months, after which it is automatically deleted or aggregated and anonymised.

Data Deletion

In some circumstances, you can ask us to delete your data. See the "Your Rights" section below for further information. In some circumstances, we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

6. Your Rights

Under the UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

The Right to Access (Article 15 UK GDPR)

You have the right to request a copy of the personal data we hold about you and to check that we are lawfully processing it. This is commonly known as a "subject access request". We will provide this information within one month of receiving your request, free of charge, unless the request is manifestly unfounded or excessive.

The Right to Rectification (Article 16 UK GDPR)

You have the right to request that we correct any personal data that we hold about you which is inaccurate or incomplete. We aim to ensure that the information we hold is accurate and up to date, and we encourage you to inform us of any changes to your personal data.

The Right to Erasure (Article 17 UK GDPR)

Also known as the "right to be forgotten", you have the right to request that we delete or remove your personal data where there is no good reason for us continuing to process it. This right is not absolute and applies only in certain circumstances, such as where we no longer need the data for the purposes for which it was collected, or where you have withdrawn your consent.

The Right to Restrict Processing (Article 18 UK GDPR)

You have the right to request that we restrict the processing of your personal data in certain circumstances. This means we will suspend the processing of your data, for example, if you want us to establish the accuracy of the data or where our use of the data is unlawful but you do not want us to erase it.

The Right to Object (Article 21 UK GDPR)

You have the right to object to the processing of your personal data where we are relying on legitimate interests as the legal basis. You also have an absolute right to object at any time to the processing of your personal data for direct marketing purposes.

The Right to Data Portability (Article 20 UK GDPR)

You have the right to request that we transfer your personal data to you or to a third party in a structured, commonly used, machine-readable format. This right applies only to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

The Right to Withdraw Consent

Where we are processing your personal data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

Exercising Your Rights

To exercise any of these rights, please contact us using the details provided in the "Contact" section below. We will respond to your request within one month of receipt. In complex cases, or where we receive a high volume of requests, this period may be extended by up to two further months, in which case we will inform you of the extension and the reasons for it.

There is no fee for exercising your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

7. Third Parties

Data Sharing

We do not sell your personal data to third parties. We will only share your personal data with third parties where required by law, where it is necessary to perform our contract with you, or where we have another legitimate basis for doing so.

Service Providers

We may share your personal data with trusted third-party service providers who perform functions on our behalf, including:

• Website hosting and infrastructure providers;
• Analytics providers (Google Analytics);
• Email and communication service providers;
• Customer relationship management (CRM) platforms;
• Professional advisers, including lawyers, accountants, and insurers.

These service providers are contractually bound to process your personal data only in accordance with our instructions and to maintain appropriate security measures. They are not permitted to use your data for their own purposes.

Partner Laboratories

Where you request experimental validation services, we may share relevant research data and contact information with our partner laboratories in the United Kingdom and European Union. This sharing is done only with your explicit consent and under appropriate data processing agreements.

Legal and Regulatory Disclosure

We may disclose your personal data where required to do so by law, including in response to valid requests by public authorities (such as a court or government agency), or to protect our rights, property, or safety, and those of our users or others.

Business Transfers

If AISCKOP TEHNOLOGIES Ltd is involved in a merger, acquisition, or sale of all or a portion of its assets, your personal data may be transferred as part of that transaction. We will provide notice before your personal data is transferred and becomes subject to a different privacy policy.

8. Data Security

We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage.

These measures include:

• Encryption of data in transit using TLS/SSL technology;
• Access controls and authentication measures to restrict access to personal data;
• Regular security assessments and vulnerability testing;
• Staff training on data protection and security awareness;
• Incident response procedures for detecting, reporting, and investigating data breaches;
• Regular backups and disaster recovery procedures.

While we take all reasonable steps to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office (ICO) in accordance with our legal obligations under the UK GDPR.

9. International Transfers

We are based in the United Kingdom and store your personal data on servers located within the United Kingdom and the European Economic Area (EEA).

Some of our third-party service providers may process your personal data outside the UK and EEA. Where this occurs, we ensure that appropriate safeguards are in place to protect your personal data, in accordance with Chapter V of the UK GDPR. These safeguards may include:

• The use of Standard Contractual Clauses (SCCs) approved by the UK Secretary of State;
• Transferring data to countries that have been deemed to provide an adequate level of protection by the UK government;
• Relying on certification mechanisms or codes of conduct approved by the ICO.

If you would like further information about the mechanisms we use for international transfers, please contact us using the details below.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or service offerings. Any changes will be posted on this page with an updated "Last updated" date.

Where we make material changes to this policy, we will use reasonable efforts to notify you, such as by posting a notice on the website or sending you an email. We encourage you to review this Privacy Policy periodically for any changes.

Your continued use of our website and services following the posting of any changes to this policy constitutes your acceptance of the revised policy.

11. Contact

12. Complaints

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

Information Commissioner's Office (ICO)

For more information about your data protection rights and how to complain to the ICO, please visit the ICO's guidance for the public.