Genestack Privacy Notice

Effective from: 09 December 2025

1. Introduction

   Genestack Limited ("Genestack", "we", "us" or "our") is committed to protecting and respecting your privacy. This Privacy Notice explains how we collect, use, disclose and protect personal data when you visit our website, interact with us, or use our services.

   This notice has been updated to reflect current UK GDPR, UK Data Protection Act 2018 and EU GDPR requirements and supersedes all previous versions.

   Genestack Limited is the data controller for the purposes of applicable data protection laws.

2. Who We Are

   Genestack Limited
   Registered in England and Wales
   Company number: 7778793
   VAT number: GB144965974
   Registered address: Salisbury House, Station Road, Cambridge, CB1 2LA, United Kingdom
   Website: https://www.genestack.com

3. Personal Information We Collect

   We may collect, store and use the following categories of personal information:

   1. Information you provide directly: Name, email address, company name, job title, location, and any other information you submit via website forms, email, live chat, demo requests or other communications. This information is typically collected when you subscribe to newsletters or marketing communications, request a demo or meeting, or contact us with enquiries or support requests.
   2. Communications data: Content of emails, support requests or live chat conversations, and metadata associated with communications (such as date, time and contact details).
   3. Technical and usage data: IP address (anonymised where possible), browser type and version, operating system, pages visited, referral source, length of visit and interactions with the website. This data is collected through cookies and similar technologies (see Section 10).
4. Legal Bases for Processing

   We process personal data only where permitted by law. Our lawful bases include:

   1. Consent – where you have explicitly agreed (e.g. marketing emails);
   2. Contract – where processing is necessary to provide requested services;
   3. Legitimate interests – to operate, improve and secure our website and business;
   4. Legal obligation – where required to comply with applicable laws.
5. How We Use Personal Information

   We use personal information for the following purposes:

   1. to operate, administer and improve our website and business;
   2. to respond to enquiries, support requests and complaints;
   3. to provide requested services, demos or information;
   4. to personalise website content and communications;
   5. to send non-marketing operational communications;
   6. to send marketing communications where you have consented;
   7. to comply with legal and regulatory obligations;
   8. we will not use your personal data for purposes that are incompatible with those described in this notice.
6. Marketing Communications

   Where you have opted in, we may send you marketing communications by email. You may withdraw your consent at any time by clicking the unsubscribe link in any marketing email, or by contacting us at marketing@genestack.com.

   We do not sell or rent your personal data to third parties for marketing purposes.

7. Disclosing Personal Information

   We may share your personal data with our employees, officers and contractors, professional advisers (e.g. legal, financial, insurance), and service providers and suppliers who process data on our behalf. All such parties are required to process data securely and only in accordance with our instructions.

   We may also disclose personal data:

   1. where required by law or regulation;
   2. in connection with legal proceedings or potential claims;
   3. to protect or enforce our legal rights;
   4. in the event of a business sale, merger or asset transfer;
   5. except as described above, we do not disclose personal data to third parties.
8. International Data Transfers

   Personal data may be processed or stored in countries outside the UK or European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.

   By using our website and services, you acknowledge that such transfers may occur.

9. Data Retention

   We retain personal data only for as long as necessary for the purposes for which it was collected, including fulfilling contractual obligations, complying with legal requirements, and resolving disputes and enforcing agreements.

   When personal data is no longer required, it is securely deleted or anonymised.

10. Cookies and Similar Technologies
    1. Cookies: Cookies are small text files placed on your device to help websites function and improve user experience. You can control cookies through your browser settings; however, disabling cookies may affect website functionality.
    2. Google Analytics: We use Google Analytics to analyse website usage and performance. IP addresses are anonymised. Data collected is not used for advertising and is not sold to third parties. Further information is available from Google.
    3. Salesforce: We use Salesforce as our customer relationship management (CRM) platform. Salesforce cookies track website interactions and associate them with form submissions. Data is retained for up to two years and used to improve user experience and tailor sales interactions. You may request access to, correction or deletion of this data by contacting marketing@genestack.com.
11. Security of Personal Information

    We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration.

    While we strive to protect data, no internet transmission is completely secure, and we cannot guarantee absolute security.

12. Your Data Protection Rights

    Under applicable data protection laws, you have the right to access your personal data, request correction of inaccurate data, request erasure of your data, restrict or object to processing, request data portability, withdraw consent at any time, and lodge a complaint with the Information Commissioner's Office (ICO).

    Requests can be made by contacting us at info@genestack.com. We may request proof of identity and will respond within statutory timeframes.

13. Third-Party Websites

    Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites.

14. Changes to This Privacy Notice

    We may update this Privacy Notice from time to time. Any changes will be published on our website, and material changes may be notified by email.

    We encourage you to review this notice periodically.

15. Contact Details

    If you have any questions about this Privacy Notice or our data practices, please contact us:

    Email: info@genestack.com
    Address: 82–88 Hills Road, Cambridge, CB2 1LQ, United Kingdom

16. Regulatory Information

    Genestack Limited is registered as a data controller with the UK Information Commissioner's Office (ICO).

    ICO Certificate number 209625

Download the policy as a PDF