DropCode

Privacy Policy

This policy explains how Dropcode Bio Ltd ("DropCode", "we", "us") collects and uses personal data through this website. We are the data controller for that data, and we process it under the UK GDPR and the Data Protection Act 2018.

We do not use cookies, analytics, advertising pixels or third-party trackers on this website. Nothing is stored on your device and we do not build profiles of visitors.

01

What we collect

We only hold data you choose to give us. If you join our waitlist, that is your email address. If you contact us or send a speculative application, that is your email address and whatever you include in your message or attachments — typically your name, career history and the material you want us to read. Our hosting provider also processes standard server logs, including IP addresses, to keep the site available and secure.

02

Why we use it, and our lawful basis

Waitlist emails are used to send occasional updates about our technology and investment opportunities; our basis is your consent, which you can withdraw at any time. Enquiries and applications are used to reply to you and to assess candidates; our basis is legitimate interests in recruiting and in running our business. Server logs are kept on the basis of legitimate interests in site security.

03

Who we share it with

We do not sell personal data or share it for advertising. We use a small number of service providers who process data on our behalf — email, hosting and, where relevant, recruitment tooling — under contracts that restrict them to our instructions. Where a provider is outside the UK, transfers rely on adequacy regulations or the International Data Transfer Agreement. We may disclose data where the law requires it.

04

How long we keep it

Waitlist details are kept until you unsubscribe or ask us to delete them. Speculative applications are kept for up to twelve months so we can come back to you if a suitable role opens, unless you ask us to remove them sooner. General enquiries are kept for as long as needed to deal with them and for our own records.

05

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable form. Where we rely on consent, you can withdraw it at any time. Email us and we will respond within one month. If you are not satisfied, you can complain to the Information Commissioner's Office at ico.org.uk.

06

Contact and changes

For anything in this policy, or to exercise a right, email info@dropcode.bio. Dropcode Bio Ltd is a company registered in England and Wales, based in Cambridge, United Kingdom. If we change this policy we will update the date at the bottom of this page.

Last updated 18 September 2026