Privacy Notice

Last updated: 1st October 2026

1 About this notice

Metrion Biosciences Limited (company number 09669815), trading as Metrion Biosciences (Metrion, we, us or our), is a company registered in England and Wales. Our registered office is First Floor, Building 2, Granta Centre, Granta Park, Great Abington, Cambridge CB21 6AL, United Kingdom.

Metrion is the sole controller of the personal data described in this notice. This means that we decide why and how that personal data is used.

This notice explains how we collect and use personal data about visitors to our website at www.metrionbiosciences.com, people who make enquiries, contacts at prospective and existing customers, marketing contacts, event and webinar attendees, people who interact with us through social media or professional networks, and business contacts whose details we obtain from third party or public sources.

It does not apply to personal data that we process solely on a customer's instructions as its processor, or to employees and job applicants, who are covered by separate privacy information on our careers page.

Questions about this notice, requests to exercise data protection rights and data protection complaints should be sent to data@metrionbiosciences.com.

2 Personal data we collect

Depending on how you interact with us, we may collect and use the following personal data:

  • Contact and identity information, including your name, title, business email address, telephone number, postal address and other contact details.
  • Professional and organisation information, including your employer or organisation, job title, role, professional interests and relationship with Metrion.
  • Enquiry, customer and contract information, including information in enquiries, proposals, contracts, orders, projects, scientific or research collaborations, invoices, meetings, support requests and other business correspondence.
  • Billing and transaction information, including billing addresses, purchase order and invoice information, payment status, transaction records and any business bank or account details provided to us.
  • Marketing and preference information, including newsletter and event preferences, consent and objection records, campaign membership and subscription status.
  • Email delivery and engagement information, including delivery and bounce status and, where email tracking is enabled, information about opens and link selections.
  • Website and device information, including IP address, device and browser information, cookie or similar identifiers, pages viewed, links selected, referring pages, approximate location and information about how you use our website.
  • Event and webinar information, including registration and attendance details, questions, survey responses and, where a webinar or online event is recorded, your name, voice, image, presentation, chat contribution or other participation captured in the recording.
  • Communications and social media information, including messages sent through social media or professional networks, correspondence, call and meeting notes, and content that you choose to provide.

Please do not provide special category data or other sensitive information unless it is necessary and we have asked you to do so.

3 How we collect personal data

We collect personal data directly from you when you complete a web form, contact us, meet with us, register for or attend an event or webinar, interact with our website or emails, communicate through social media or a professional network, or discuss or obtain our services.

We may also obtain professional contact, employment, organisation, interest and event information from third parties and public sources. These sources may include SciLeads and other business contact information providers, LinkedIn and other professional networks, event and conference organisers, event co-hosts, business partners and referrals, customers, and publicly available company websites. We may combine this information with information you provide to us or with information already held in our customer relationship management system.

4 How and why we use personal data

We use personal data only where data protection law permits us to do so. The main purposes and lawful bases are set out below. Separate rules governing electronic communications, cookies and similar technologies may require consent even where our later use of the personal data has another lawful basis.

ActivityHow we use personal dataLawful basis
Enquiries and proposalsTo respond to enquiries, arrange meetings, prepare proposals and take steps towards a contract.Steps requested before entering into a contract, where you are a party to it; otherwise our legitimate interests in responding to enquiries and developing our business.
Services and customer relationshipsTo provide and administer services, manage projects and customer relationships, maintain records, invoice and receive payment, and provide support.Performance of a contract, where you are a party to it; legal obligations; and our legitimate interests in administering services and customer relationships.
Business marketing and prospectingTo identify relevant organisations and professional contacts and send information about our services, news and events.Consent where required; otherwise our legitimate interests in promoting our services to relevant professional audiences, subject to applicable electronic marketing rules and your right to object.
Events, webinars and recordingsTo administer registrations and attendance, deliver and record events or webinars, make recordings or extracts available to attendees or other intended audiences, respond to questions, provide follow-up materials and improve future events.Performance of a contract where applicable, consent where required, and our legitimate interests in organising and improving professional events.
Website cookies and analyticsTo operate and secure our website, remember choices, diagnose faults, understand use and improve content.Our legitimate interests in providing a secure and functioning website for strictly necessary activities; consent for non-essential analytics, advertising and similar technologies where required.
Email engagementTo assess delivery and engagement, understand content interests, segment communications, personalise content, adjust frequency, support sales follow-up and improve campaigns.Consent where required for tracking technologies; and, where permitted, our legitimate interests in evaluating and improving relevant business communications.
Communications and feedbackTo manage correspondence, social media interactions, surveys, complaints and requests to exercise data protection rights.Legal obligations and our legitimate interests in communicating effectively, improving services and handling concerns.
Suppliers and business partnersTo manage relationships with suppliers, consultants, collaborators and other business partners, including communications, contracting, purchasing, payments and administration.Performance of a contract, where you are a party to it; legal obligations; and our legitimate interests in managing our business and professional relationships.
Scientific collaborationsTo establish, manage and support scientific and research collaborations, including communicating with collaborators, coordinating activities, sharing research outputs and administering collaborative projects.Performance of a contract, where you are a party to it; and our legitimate interests in developing and managing scientific collaborations and advancing scientific and research activities.
Security, legal compliance and claimsTo protect our website, systems, business and people; prevent or investigate misuse; comply with law; and establish, exercise or defend legal claims.Legal obligations and our legitimate interests in protecting our business, systems and legal rights.
Corporate transactionsTo assess or complete an investment, financing, reorganisation, sale, merger or acquisition.Our legitimate interests in managing corporate transactions, subject to appropriate confidentiality and safeguards.

Where we rely on legitimate interests, we consider the benefit to Metrion and relevant customers or professional audiences, the nature and context of the data, the reasonable expectations of the individuals concerned and the safeguards available to them. You may contact us for further information about a relevant legitimate interests assessment.

5 Email tracking and engagement information

We use HubSpot to send and manage certain emails. Where tracking is enabled, HubSpot may place a small invisible image, commonly called a tracking pixel, in an email. When the email is opened and images load, the pixel can record an open. HubSpot may also change links so that a selection is recorded before the recipient is redirected to the intended page.

Email tracking may apply to:

  • marketing campaigns and newsletters;
  • individual sales emails;
  • automated communications and workflows;
  • event and webinar invitations, confirmations, reminders and follow-up emails; and
  • transactional or service communications.

The information recorded can include the recipient or message identifier, delivery or bounce status, whether and when an email was opened, repeat opens, whether and when a link was selected, the selected URL and, where available, device or email client information. Open information is not always accurate because it depends on images loading and may be affected by email privacy features.

If you select a tracked link and visit our website, HubSpot may also collect website information, including IP address, timestamps, pages visited and online identifiers. Where identity tracking is enabled, HubSpot may associate that browsing information with the relevant contact record.

We use this information to monitor delivery, measure engagement and campaign effectiveness, understand which content is of interest, segment and personalise communications, adjust communication frequency, support sales follow-up, suppress inactive contacts and coordinate follow-up across our marketing and sales activities.

Where applicable law requires consent for email tracking, we rely on consent. Where the law permits anonymous or strictly necessary measurements without consent, they may be used for deliverability, security and service performance. Where we rely on consent, you may withdraw it at any time by unsubscribing from the relevant communications or contacting us. Withdrawal does not affect processing carried out before it and may mean that we stop sending the relevant emails.

6 Cookies and similar technologies

Our website uses cookies and similar technologies. Necessary technologies support security, core website functions and the recording of your cookie choice. Other technologies may be used for analytics, advertising or functionality only after any consent required by law.

When the cookie banner is displayed, you can accept or decline non-essential technologies or choose categories through Cookie Settings. The cookie banner explains the available cookie categories and enables you to make choices about non-essential technologies controlled through HubSpot. You can also control cookies through your browser, although blocking necessary cookies may affect website operation.

7 Who we share personal data with

We may share personal data, where necessary for the purposes described in this notice, with the following recipients:

  • our personnel who need the information for their work;
  • customer relationship management, marketing and cookie consent providers, including HubSpot;
  • website hosting, analytics, professional network and social media providers, including Google and YouTube, Meta and Facebook, LinkedIn and X;
  • information technology, email, document, electronic signature, videoconferencing, webinar and event providers, including Microsoft, DocuSign, GoToMeeting and GoToWebinar;
  • event organisers, co-hosts and other business partners where this is needed to organise an event, respond to a referral or make an introduction that you have requested;
  • business information databases, SciLeads;
  • scientific collaborators/research partners;
  • accountancy, payroll, HR, pension providers;
  • suppliers/contractors;
  • banks, payment and financial service providers;
  • auditors, insurers, lawyers and other professional advisers;
  • prospective investors, purchasers, sellers and their advisers in connection with a corporate transaction; and
  • regulators, courts, law enforcement bodies and other authorities where disclosure is required or permitted by law.

Service providers acting as processors may use personal data only for the agreed purposes and subject to contractual and security requirements. Where another organisation acts as a separate or joint controller, its own privacy information may also apply. We do not sell personal data. We do not disclose personal data to an unrelated third party for its own direct marketing unless we have clearly explained this and obtained any consent required by law.

8 International transfers

Some recipients and service providers may store, access or otherwise process personal data outside the United Kingdom, including in the European Economic Area and the United States. Data protection laws in the destination country may not provide the same level of protection as UK law.

Where UK law restricts a transfer, we use an applicable UK adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to the European Commission's Standard Contractual Clauses or another lawful safeguard. Where the EU GDPR applies, we may use an EU adequacy decision, the European Commission's Standard Contractual Clauses or another permitted mechanism. We assess whether additional safeguards are needed in the circumstances. You may contact us for further information about the safeguards relevant to your personal data and how to obtain a copy.

9 How long we retain personal data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected. In deciding how long to retain information, we take account of the nature and sensitivity of the data, our relationship and dealings with you, the purpose of the processing, whether the information remains accurate and relevant, legal and contractual requirements, applicable limitation periods, disputes, security needs and any need to establish, exercise or defend legal claims.

We retain a limited record of an objection or unsubscribe request for as long as needed to ensure that the preference continues to be respected. When personal data is no longer required, we delete or anonymise it securely unless a legal hold or another lawful reason requires longer retention.

10 Your data protection rights

Depending on the law that applies and the circumstances, you may have the right to:

  • ask for access to your personal data and information about its use;
  • ask us to correct inaccurate or incomplete personal data;
  • ask us to erase personal data in certain circumstances;
  • ask us to restrict our use of personal data in certain circumstances;
  • receive certain personal data in a portable format and ask us to transmit it to another organisation;
  • object to processing based on our legitimate interests;
  • withdraw consent at any time where we rely on consent, without affecting earlier processing.

Your right to object to direct marketing You may object at any time to our use of your personal data for direct marketing, including related profiling. If you object, we will stop using your personal data for that purpose.

These rights are not absolute and may not apply in every case. We may need information to confirm your identity and clarify your request. We will respond within the period required by applicable law and will explain if an extension or exemption applies. You will not normally have to pay a fee.

You may unsubscribe from marketing emails at any time using the link in the email. To exercise another right, email: data@metrionbiosciences.com or write to the address in section 1, marked for the attention of the Privacy Contact.

11 Data protection complaints

If you have a concern about our use of your personal data, please contact us at data@metrionbiosciences.com. We will acknowledge a data protection complaint within 30 days, take appropriate steps to investigate it, keep you informed of progress where appropriate and provide an outcome without undue delay.

You may also complain to the UK Information Commission's Office. You can use the ICO complaint service or telephone 0303 123 1113. If you are in the European Economic Area, you may also complain to the data protection authority where you live or work, or where you consider an infringement occurred. Contacting us first does not affect your right to approach a regulator.

12 Security

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Measures include access controls, contractual controls, system and transmission safeguards and staff procedures appropriate to the nature and risk of the processing. No method of transmission or storage is completely secure.

13 Third party websites platforms and social media

Our website and communications may link to third party websites and platforms. Those organisations determine how they use personal data collected through their services and their privacy notices apply. When you interact with a Metrion page on a social media or professional network platform, Metrion and the platform may each receive information about the interaction. Please review the platform's privacy information and settings.

14 Children

Our website, services and communications are intended for business and professional audiences and are not directed to children. We do not knowingly collect personal data from children through this website. If you believe that a child has provided personal data to us, please contact us so that we can investigate and take appropriate action.

15 Providing personal data and automated decisions

Where we ask you to provide personal data, we will indicate whether particular information is required by law, under a contract or in order to enter into a contract. If you do not provide required information, we may be unable to respond fully to an enquiry, enter into or perform a contract, or provide the relevant service.

We may use professional, preference and engagement information to segment contacts and prioritise or personalise business communications. We do not use the personal data covered by this notice to make decisions based solely on automated processing that produce legal effects or similarly significantly affect you.

16 Changes to this notice

We may update this notice to reflect changes in our processing or the law. We will publish the updated version on our website and, where a change materially affects individuals, take reasonable steps to bring it to their attention.
magnifier
linkedin facebook pinterest youtube rss twitter instagram facebook-blank rss-blank linkedin-blank pinterest youtube twitter instagram