Privacy Policy
Last Updated:
Introduction
Klona Biotech Limited ("we," "us," or "our"), registered in England and Wales (No. 16792235), with its registered office at 12 New Fetter Lane, London EC4A 1JP, United Kingdom, operates https://klonabiotech.com/ (the "Service") and is the data controller responsible for the personal information collected through the Service and described in this Privacy Policy.
The Service is presented by the Klona group of companies and the website is owned by our group company Klona Biotech Inc., but responsibility for personal information collected through the Service rests with Klona Biotech Limited.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit the Service. Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.
Information We Collect
We collect the following categories of information:
- Information you provide to us. If you complete our contact form or contact us by email, we collect your name, your email address, and the content of the message you send.
- Information collected automatically. When you access the Service, our hosting and security provider records your IP address, browser type and version, operating system, the pages you request, and the date and time of your request. An approximate country or region may be inferred from your IP address for security and service-delivery purposes.
We do not operate analytics, advertising, or tracking technologies on the Service. The Service does not offer user accounts, does not process payments, and does not carry out profiling or automated decision-making. We do not purchase personal information from third parties, and we do not knowingly collect special categories of personal data.
How We Use Your Information
We use the information we collect for the following purposes:
- To respond to your enquiry and to manage any business relationship arising from it
- To operate, maintain, and secure the Service, including the prevention and investigation of abuse, fraud, and attacks against our infrastructure
- To comply with our legal and regulatory obligations
We do not use your information for advertising, behavioral profiling, usage analytics, personalization, or marketing communications, and we do not sell, rent, or otherwise share your personal information for such purposes.
Legal Basis for Processing
Where the General Data Protection Regulation (GDPR) or the UK GDPR applies, we rely on the following legal bases:
- Legitimate interests — in responding to enquiries concerning our business, and in maintaining the security and integrity of the Service
- Steps taken at your request prior to entering into a contract — where your enquiry concerns a prospective agreement with us
- Compliance with a legal obligation — where we are required to retain or disclose information by law
Cookies and Tracking Technologies
We do not set cookies of our own, and we do not use advertising or analytics cookies, tracking pixels, or similar technologies. No information is written to your browser's local storage or session storage by the Service.
One strictly necessary cookie is set by Cloudflare, our hosting and security provider:
| Name | Set by | Purpose | Duration |
|---|---|---|---|
cf_clearance |
Cloudflare | Records that your browser has successfully completed a security challenge, so that you are not presented with a further challenge on each page you visit. | As determined by Cloudflare's challenge passage setting |
This cookie is strictly necessary for the delivery of the Service and is not used to profile you or to track you across other websites. We consider this cookie to fall within the exemption for strictly necessary cookies under the Privacy and Electronic Communications Regulations and the ePrivacy Directive, and no cookie consent banner is therefore presented. Further information is available in Cloudflare's Cookie Policy.
You may instruct your browser to refuse cookies or to notify you when a cookie is being set. Because the cookie described above is required to deliver the Service securely, refusing it may prevent parts of the Service from functioning correctly.
Third-Party Service Providers
The Service relies on the providers listed below to host the website, to process contact form submissions, and to receive and handle enquiry correspondence. Where your browser requests content directly from a provider, which is the case for our hosting and form providers, it discloses your IP address, browser type, and operating system to that provider, which may log that information in accordance with its own privacy policy.
All fonts, icons, images, stylesheets, and scripts used by the Service are hosted by us and served from our own domain. Your browser is not directed to any third-party content delivery network, font service, or advertising network in order to display our pages.
| Provider | Purpose | Information received |
|---|---|---|
| Cloudflare Pages | Website hosting, delivery and security | IP address, request logs, security signals |
| Formcarry | Processing and delivery of contact form submissions | The information you submit, together with your IP address |
| Google Workspace (Google LLC, United States) | Business email; receiving and responding to enquiries forwarded from the contact form | The content of your enquiry and your contact details |
Where an enquiry concerns another company in our group we may share it with that company so that it can be answered, and we may disclose your information to our professional advisers or to a competent authority where the law requires it.
Data Retention
We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy.
Contact form submissions are deleted from Formcarry's systems after 12 months. Enquiries forwarded to our business email are retained for up to 12 months following the closure of your enquiry, except where the correspondence forms part of an ongoing business relationship, in which case they are retained for the duration of that relationship. Server and security logs are retained for the shorter periods operated by our hosting provider.
We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
Data Security
The security of your data is important to us. The Service is delivered over HTTPS and is protected by our provider's network security controls, and access to enquiry correspondence is limited to personnel who require it. However, no method of transmission over the Internet and no method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
International Data Transfers
Klona Biotech Limited is the controller for personal information collected through the Service, and enquiries are handled by our staff in the United Kingdom. Our business email is provided by Google LLC, which is established in the United States, so enquiry correspondence is transferred to the United States, and that transfer is subject to the safeguards Google provides for international transfers under its data processing terms.
Your Rights Under the GDPR and UK GDPR
If you are resident in the United Kingdom or the European Economic Area, you have certain data protection rights, which apply in the circumstances set out in the legislation.
You have the following rights:
- Right of Access — You have the right to request copies of your personal data.
- Right to Rectification — You have the right to request that we correct any information you believe is inaccurate, or complete information you believe is incomplete.
- Right to Erasure — You have the right to request that we erase your personal data, under certain conditions.
- Right to Restrict Processing — You have the right to request that we restrict the processing of your personal data, under certain conditions.
- Right to Data Portability — You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
- Right to Object — You have the right to object to our processing of your personal data where that processing is based on our legitimate interests.
If you wish to exercise any of these rights, please contact us at privacy@klonabiotech.com. We will respond to your request within one month, as required by applicable data protection law. Where a request is complex, or where you have made a number of requests, we may extend that period by up to two further months. If we do, we will tell you within the first month and explain why.
If you have a complaint about how we handle your personal information, we welcome the chance to put it right and encourage you to contact us at privacy@klonabiotech.com, where we will acknowledge your complaint within 30 days and tell you the outcome. You may also complain to a supervisory authority at any time, whether or not you have raised the matter with us. In the United Kingdom the supervisory authority is the Information Commissioner's Office (ico.org.uk). In the European Economic Area it is the authority of the member state in which you reside or work.
Children's Privacy
The Service is directed to businesses, research partners, and investors. It is not directed to children, and we do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact us at privacy@klonabiotech.com and we will delete it.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Contact Us
If you have any questions about this Privacy Policy, please contact us:
- By email: privacy@klonabiotech.com
- By post: Klona Biotech Limited, 12 New Fetter Lane, London EC4A 1JP, United Kingdom
Please also see our Terms of Service.