Privacy Policy
for Concert Bio.
At Concert Bio, accessible from https://www.concert.bio/, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collected and recorded by Concert Bio and how we use it.
If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us.
This Privacy Policy explains how we handle personal information about visitors to our website, people who contact us or subscribe to our newsletter, users of our platform, and the people we deal with at our customers, partners and suppliers. The data controller is Concert Bio Ltd (company no. 13568883), The Translation and Innovation Hub, 84 Wood Lane, London W12 0BZ, UK. You can contact us about this policy or your personal data at contact@concert.bio. This policy was last updated on 7 October 2026.
1. Information we collect
We may collect both personal information and technical information when you visit our website or interact with us. Personal information refers to any information that can identify an individual, such as your name, email address, postal address, or phone number. Technical information includes your browser type, IP address, and usage data. Some technical information, such as your IP address, can identify you and is treated as personal information under UK data protection law.
2. How we collect information
We collect information in the following ways:
2.1 Information you provide
We may collect personal information that you voluntarily provide when you:
- Submit a contact form or inquiry
- Subscribe to our newsletter or mailing list
- Open or use an account on our platform, or do business with us as a customer, partner or supplier
2.2 Automatic Information
We automatically collect certain technical information through cookies, web beacons, and similar technologies when you visit our website. This information helps us analyse trends, administer the site, track users' movements, and improve your overall experience.
3. How we use your information and our lawful basis
UK data protection law requires us to have a lawful basis for each way we use your personal information. We use the information we collect to:
Respond to enquiries you send us through our contact form or by email (lawful basis: our legitimate interest in responding to enquiries and running our business)
Send you our newsletter if you have subscribed to it (lawful basis: your consent, which you can withdraw at any time using the unsubscribe link in any email)
Provide and administer customer accounts on our platform and deliver our products and services (lawful basis: performance of a contract with you or the organisation you work for)
Contact existing and prospective business customers about our products and services (lawful basis: our legitimate interest in marketing to businesses; you can ask us to stop at any time)
Operate, secure and improve our website, including protecting our forms from spam and abuse (lawful basis: our legitimate interest in running a safe and reliable website)
Keep business records, such as invoices and contracts (lawful basis: compliance with our legal obligations, including accounting and tax rules)
Find and prevent fraud and misuse of our website and platform (lawful basis: our legitimate interests)
4. Log Files and Website Security
Like most websites, ours keeps log files. These record information such as internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. Our website is hosted by Webflow, which collects this information as part of its hosting service. Our contact form is protected from spam by Cloudflare Turnstile, which processes your IP address and browser information to tell people apart from automated bots. We use this information to keep the website running, to keep it secure and to understand how it is used.
5. Cookies and Web Beacons
Our website does not use advertising or analytics cookies. Our hosting provider and the spam protection on our contact form may set strictly necessary cookies, which are needed for the website to work and do not track you across other websites. You can block or delete cookies through your browser settings, although some parts of the website may then not work as intended.
For more general information on cookies, please read the Information Commissioner’s Office guidance on cookies.
6. Who We Share Your Information With
We do not sell your personal information. We share it only with service providers that help us run our business, and only as far as needed for that purpose: Webflow, which hosts our website and stores contact form submissions; Intuit Mailchimp, which sends our newsletter; Cloudflare, which protects our contact form from spam; and the email, customer relationship management, accounting and cloud storage tools we use day to day. Webflow, Mailchimp and Cloudflare are based in the United States and are certified under the UK Extension to the EU-US Data Privacy Framework, which the UK government recognises as providing adequate protection for personal data. Where we use any other provider outside the UK, we rely on UK-approved safeguards such as the International Data Transfer Agreement. We may also share information with our professional advisers, or with regulators and other authorities where the law requires it. This Privacy Policy does not apply to other websites, including websites we link to, so please check their own privacy policies.
7. How Long We Keep Your Information
We keep personal information only for as long as we need it for the purposes described above:
Enquiries made through our contact form or by email are kept for up to two years after our last contact with you, so that we can follow up and answer later questions.
Newsletter subscriber details are kept until you unsubscribe. After that we keep a minimal record so that we do not email you again.
Customer and platform account information is kept for the length of our relationship with you or your organisation, and for up to six years afterwards where UK accounting, tax or legal rules require it.
Log files and security data are kept for a short period by our hosting and security providers under their own retention policies.
8. UK GDPR Data Protection Rights
We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:
The right to access – You have the right to request copies of your personal data.
The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.
The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions, and to withdraw your consent at any time where we rely on it.
The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at contact@concert.bio. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk).
9. Children’s Information
Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.
Concert Bio does not knowingly collect any personal information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will make our best efforts to promptly remove such information from our records.
