Schedule a call

Legal

Privacy Policy

Last updated: 25 September 2026

1. Introduction

This Site is published by Inovivo Ltd, which operates under the name Inovivo Group ("Inovivo", "we", "us" or "our"). We respect your privacy and are committed to protecting any personal data we process about you. This policy explains what personal data we collect through inovivogroup.com (the "Site"), why we collect it, how we use it, and the choices and rights available to you. It applies to visitors to the Site and to anyone who contacts us through it.

We are a corporate and institutional-facing organisation. The Site is informational: it does not offer user accounts, online purchases, subscriptions, or any product login, so the amount of personal data we collect through it is limited.

2. Who We Are

Inovivo Ltd, registered in England and Wales (company number 12112761), registered office 16-18 West Street, Rochford, England, SS4 1AJ, is the controller of the personal data described in this policy. This means we decide why and how that data is used, and we are responsible for it under UK data protection law. Our contact details are in Section 13.

3. Personal Data We Collect

3.1 Data you provide voluntarily

If you contact us, for example by email or by using the "Schedule a call" links on the Site, which open an email to us, your message may contain your name, email address, organisation, job title, and anything else you choose to include.

If you meet us at an event, you may give us your details through the form on our event page: your name, work email, organisation, role, what brought you to us, any notes, and your consent for us to contact you.

We do not currently operate any newsletter sign-ups, account registrations, or downloadable-content gates on the Site. All contact is initiated by you, at your discretion.

3.2 Data collected automatically

When you visit the Site, our hosting provider automatically records standard technical information generated by your browser as part of normal web-server operation, such as your IP address, browser type and version, device type, referring page, pages visited, and the date and time of your visit. We use this information to keep the Site secure and working properly, for example to detect and block malicious traffic, and we do not use it to identify you or to build profiles of individual visitors.

The Site currently loads typefaces from Google Fonts, which means your browser connects to Google's servers and Google receives your IP address and standard request data in order to deliver those fonts. We are responsible for choosing to load fonts in this way, and we do so in our legitimate interest in presenting the Site consistently. Google processes this data under its own privacy policy and may do so in the United States (see Section 6).

The Site itself does not set advertising or re-targeting cookies.

4. Legal Basis for Processing

Where UK GDPR, EU GDPR, or an equivalent data protection law applies to our processing of your personal data, we rely on the following legal bases:

  • Legitimate interests: to respond to your enquiries, to keep the Site secure, to understand basic technical performance of the Site, and to display the Site's typefaces.
  • Consent: where we ask for it, including when you ask us through our event form to contact you, and for any analytics we introduce in future.
  • Legal obligation: where we are required to process or retain data to comply with the law.

You may ask us at any time which legal basis applies to a particular use of your data.

5. How We Share Personal Data

We do not sell personal data. We share personal data only with the following categories of recipients, each acting to help us run the Site or our business:

  • Hosting provider: the Site is hosted on Netlify's infrastructure, which processes standard web traffic and server-log data as described in Section 3.2.
  • Font delivery: Google, via Google Fonts, as described in Section 3.2.
  • Event lead form: Google, via Google Forms and Google Sheets, which receive and store the details you submit through the form on our event page.
  • Email provider: enquiries sent to our email addresses are handled through Microsoft 365, our business email platform.
  • Customer relationship management: HubSpot, where we keep records of enquiries and our subsequent correspondence with you.
  • Professional advisers and authorities: where necessary to obtain advice, or where we are required to do so by law, regulation, or a valid legal process.

Any future third party we engage to process personal data on our behalf will be required to provide appropriate safeguards for that data.

6. International Transfers

We are based in the United Kingdom. Members of our team who work outside the UK, including in the United Arab Emirates, may read and handle an enquiry you send us. Our service providers, including Netlify, Google, Microsoft and HubSpot, may also process personal data in other countries, including the United States. Where UK or EU data protection law applies and personal data leaves the UK or the European Economic Area for a country that does not benefit from an adequacy decision, we put appropriate safeguards in place, such as the UK International Data Transfer Agreement, the UK Addendum to the EU standard contractual clauses or the EU standard contractual clauses themselves, or we rely on the provider's certification under the EU-US Data Privacy Framework and its UK Extension. You can ask us for details of these safeguards using the contact details in Section 13.

7. Data Retention

We keep personal data only for as long as we need it for the purposes described in this policy. We keep enquiry emails and meeting requests for up to 24 months after our last contact with you. If an enquiry leads to a business relationship, we keep the related correspondence for the length of that relationship and for up to six years afterwards, to meet our legal, tax and accounting obligations. Netlify keeps server-log data for a short operational period under its standard settings, after which it is deleted. We do not keep personal data indefinitely.

8. Security Measures

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration, including relying on reputable infrastructure providers with their own security standards (Netlify for hosting, Microsoft 365 for email, HubSpot for customer records). No method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.

9. Your Rights

Depending on where you are located and the law that applies to you, you may have some or all of the following rights in relation to your personal data:

  • to be informed about how we use your data (this policy is part of that);
  • to request access to the personal data we hold about you;
  • to request correction of inaccurate data;
  • to request erasure of your data in certain circumstances;
  • to ask us to restrict how we use your data in certain circumstances;
  • to object to our use of your data where we rely on legitimate interests (see below);
  • to request data portability, where technically feasible;
  • to withdraw consent at any time, where processing is based on consent; and
  • to complain to us, and to a data protection authority (see below).

To exercise any of these rights, contact us using the details in Section 13. We will respond within one month of receiving your request, or tell you within that month if we need up to two further months because the request is complex.

Your right to object. Because we rely mainly on our legitimate interests, you have the right to object at any time to our use of your personal data for those purposes. If you object, we will stop unless we have compelling legitimate grounds to continue or we need the data to establish, exercise or defend legal claims.

Complaints. If you are unhappy with how we have used your personal data, please tell us first using the details in Section 13. We will acknowledge your complaint within 30 days, look into it without undue delay and tell you the outcome. You also have the right to complain to the Information Commissioner's Office, the UK data protection regulator (ico.org.uk, telephone 0303 123 1113), or to the data protection authority in the country where you live or work.

10. Children's Data

The Site is directed at institutions and business professionals. It is not directed at, and we do not knowingly collect personal data from, children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to remove it.

11. Automated Decision-Making

We do not use your personal data for any automated decision-making or profiling that produces legal or similarly significant effects on you.

12. Changes to This Policy

We may update this policy from time to time, for example to reflect changes in the Site, our practices, or the law. We will post the updated version on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this policy or how we handle your personal data, or if you would like to exercise any of the rights described above, please contact us at:

Email: hello@inovivogroup.com

Inovivo Ltd, registered in England and Wales (company number 12112761), 16-18 West Street, Rochford, England, SS4 1AJ, United Kingdom

Icons: Solar by 480 Design, licensed CC BY 4.0.