Privacy Notice
Last updated: May 2026
Who we are
Tolemy Bio Ltd (company number 15597383) is the controller of personal data collected through this website. Our registered office is Future Business Centre, Kings Hedges Road, Cambridge, England, CB4 2HY.
If you have questions about how we use your data, contact us at info@tolemy.bio.
Data we collect
Depending on how you interact with our website, we may collect:
- Email addresses provided through signup forms
- Information submitted through contact or application forms
- Basic technical data such as server logs (IP address, browser type, pages visited)
- Recruitment data, if you apply for a role (see Recruitment section below)
Analytics
We use Plausible Analytics to understand aggregate website usage patterns such as page views, traffic sources, and visitor geography at a country level. Plausible does not use cookies, does not collect personal data, and does not track individual visitors across sites. All data is aggregated and anonymous. No consent banner is required as no personal data is processed.
Email updates
When you sign up for updates, we collect and store:
- Your email address
- The date and time of signup
- The page you signed up from
- Your consent record (the version of the notice you agreed to)
We use this information to send you occasional updates about Tolemy Bio, including company news, research, platform developments, hiring and announcements. You can unsubscribe at any time using the link in our emails.
Recruitment
When you apply for a role at Tolemy Bio, we collect and use the information you provide to assess your application and manage our recruitment process. This may include:
- Your name and contact details
- CV and portfolio
- LinkedIn, GitHub, and other profile links
- Work history and education
- Right-to-work information
- Interview notes and related correspondence
We use this information to assess suitability for roles, communicate with you, arrange interviews, make hiring decisions and meet legal or administrative requirements.
Lawful bases
We rely on the following lawful bases for processing personal data:
- Consent — for email updates. You can withdraw consent at any time by unsubscribing.
- Legitimate interests — for website security, analytics and understanding aggregate usage patterns, and for recruiting team members.
- Steps prior to entering a contract — for processing recruitment applications at your request.
- Legal obligations — where applicable, to comply with legal or regulatory requirements.
Who we share data with
We may share personal data with:
- Our hosting provider
- Our email service provider
- Plausible Analytics (aggregated, cookieless usage data)
- Recruitment and administration tools
- Professional advisers where needed
We do not sell personal data.
International transfers
Our processors are based in the UK and EEA, or operate under appropriate safeguards (such as Standard Contractual Clauses) where data is transferred outside these regions.
How long we keep data
- Server logs: 30–90 days
- Email signup data: until you unsubscribe, after which we delete your data within 30 days
- Recruitment data: 6–12 months after the recruitment process ends for unsuccessful candidates, unless you agree that we may keep your details for future opportunities. Successful candidate data may be retained as part of employment records.
Your rights
Under UK data protection law, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing
- Data portability
- Withdraw consent at any time (where consent is the lawful basis)
To exercise any of these rights, contact us at info@tolemy.bio.
Complaints
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Changes to this notice
We may update this notice from time to time. The "Last updated" date at the top of this page indicates when the most recent changes were made.