Privacy Policy
Who we are
BeMath Ltd is a PK/PD and clinical pharmacology consultancy registered in England and Wales (Company number: 17181602). Our registered address is Suite A, 82 James Carter Road, Mildenhall, IP28 7DE.
We are registered with the Information Commissioner's Office (ICO) as a data controller. Our ICO registration number is ZC139640.
If you have any questions about this policy or how we handle your data, please use the contact form on our website.
What personal data we collect and why
Contact form submissions
If you use the contact form on our website, we collect your name, email address, and any other information you choose to include in your message. We use this solely to respond to your enquiry. Submissions are delivered to BeMath Ltd's email inbox and are also stored within Squarespace's platform until deleted by BeMath Ltd. We do not add you to any mailing list or share your details with third parties.
Website analytics
Our website is hosted on Squarespace, which collects basic, anonymised information about visits to our site — such as pages viewed, approximate geographic location, and device type. This data is aggregated and does not identify you personally. We use it only to understand how our website is being used and to improve it. No third-party analytics tools such as Google Analytics are in use on this website.
Appointment booking
If you book a meeting with BeMath Ltd via our online scheduling tool (Calendly), your name and email address will be processed by Calendly Inc. in accordance with their privacy policy, available at calendly.com/privacy. BeMath Ltd uses this data solely to manage the appointment and will not use it for any other purpose.
How long we keep your data
Contact form submissions and related correspondence are retained for as long as necessary to respond to your enquiry and, where an engagement follows, for the duration of that engagement and for six years thereafter in accordance with our standard record-keeping obligations. Where no engagement follows, correspondence is deleted within twelve months of last contact.
Squarespace's aggregated analytics data is retained in accordance with Squarespace's own data retention policy, available at squarespace.com/privacy.
Legal basis for processing
We process contact form data on the basis of legitimate interests — specifically, responding to enquiries from prospective and existing clients. We process website analytics data on the same basis, as it helps us maintain and improve our website.
Your rights
Under UK GDPR you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data in certain circumstances
- Restriction — ask us to restrict how we use your data
- Objection — object to our processing of your data
- Portability — request your data in a portable format
To exercise any of these rights, please use the contact form on our website. We will respond within one month.
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the ICO at ico.org.uk or by calling 0303 123 1113.
Data security
We take reasonable technical and organisational measures to protect any personal data we hold against unauthorised access, loss, or disclosure. Contact form submissions are held within Squarespace's secure platform. Where personal data is included in client correspondence, it is stored within our secure working environment with access limited to authorised personnel only.
Personal data collected in the course of client engagements
In the course of providing consultancy services, BeMath Ltd collects and processes the contact details of individuals at client organisations and other companies we work with — typically names, email addresses, job titles, and telephone numbers. This data is used solely for the purpose of managing and performing those engagements and is not used for any other purpose.
Contact details of client representatives are retained for the duration of the engagement and for six years thereafter, in accordance with our standard record-keeping obligations under our professional indemnity insurance and applicable law. Where no engagement follows an initial enquiry, contact details are deleted within twelve months of last contact.
Where client datasets contain personal data (such as pseudonymised clinical trial participant data), such data is handled in accordance with the applicable confidentiality agreement and, where required, a separate Data Processing Agreement between BeMath Ltd and the relevant client. BeMath Ltd acts as a data processor in respect of such data and processes it solely on the documented instructions of the client as data controller.
If you are an individual whose contact details are held by BeMath Ltd in a business context and you wish to exercise any of your rights under UK GDPR, please use the contact form on our website.
Third parties
We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share data with third-party service providers (such as Squarespace as our website host) strictly to the extent necessary to operate our website and business, and only where those providers are bound by appropriate data protection obligations.
Changes to this policy
We may update this policy from time to time. The date at the top of this page reflects when it was last revised. We encourage you to review it periodically.