Privacy Policy

Last updated: Jul 28, 2026

 

Sequential Skin Ltd is committed to using personal information lawfully, fairly and transparently. This Privacy Policy explains how we use personal information in connection with sequential.bio (the Site), general business communications, marketing, supplier and customer relationships, and recruitment.

Separate privacy information may apply to a research study, clinical or consumer testing programme, sample analysis, app, portal, customer project or employee relationship. If a specific notice is provided for one of those activities, that notice applies to that activity and takes priority if there is any inconsistency.

​

1. Who we are and how to contact us

​

Sequential Skin Ltd is a company registered in England and Wales under company number 12547483. Our registered office and postal address is Moneta (B280), Babraham Research Campus, Babraham, Cambridgeshire, CB22 3AT, United Kingdom.

For the processing described in this policy, Sequential Skin Ltd is generally the controller. In some customer-sponsored studies or projects, we may act only as a processor on another organisation's instructions; in that case, the relevant controller's privacy notice explains how your information is used.

Privacy enquiries and rights requests: team@sequential.bio
​

2. Scope of this policy

 

This policy applies to visitors to the Site, people who contact us, newsletter subscribers, prospective and current business contacts, customer and supplier representatives, job applicants, and other individuals whose information we process for our own business purposes.

The Site is not directed at children. A study involving a child or young person will use a specific recruitment, consent and privacy process appropriate to that study.

3. Personal information we collect
 

Identity and contact information. Name, title, employer, role, postal address, email address, telephone number and account identifiers.

Business and relationship information. Organisation, sector, professional interests, correspondence, meeting notes, enquiries, proposals, contract details and relationship history.

Marketing information. Subscription choices, preferred topics and channels, consent records, objections, suppression records and engagement with communications.

Technical and usage information. IP address, browser and device information, time zone, approximate location derived from IP, security logs, identifiers and information about how the Site and emails are used.

Account and security information. Login or authentication records, permissions, activity logs and information used to prevent fraud, abuse or unauthorised access.

Recruitment information. CV, qualifications, employment history, work eligibility, application responses, interview notes, references and information reasonably required to assess an application.

Other information you provide. Information included in forms, messages, documents, feedback or support requests.

​

​4. Special category and study information
 

Please do not send health, genetic, biometric or other special category information through a general website or contact form unless we specifically ask for it and explain why it is needed.

If you apply for or take part in a research study, clinical study, consumer testing programme or sample-based service, Sequential or the relevant sponsor may process health, genetic, biometric, microbiome or other sensitive information. A study- or service-specific notice will identify the controller and explain the purpose, lawful basis, applicable special-category condition, safeguards, retention and sharing. Study participation and consent to take part in research are separate from consent used as a data-protection lawful basis.

​

5. How we obtain information
 

We obtain information directly from you when you use the Site, contact us, subscribe, meet with us, enter a business relationship or apply for a role. We also obtain information automatically from devices and services, subject to cookie choices.

We may obtain business contact information from your employer or colleagues, event organisers, professional networks, referral partners, publicly available professional sources, service providers, recruitment agencies or customers and partners. When information is obtained from another source, we provide privacy information as required by law unless an exception applies.

6. Why we use information and our lawful bases

Operate and secure the Site. To deliver pages and requested features, maintain availability, prevent misuse, troubleshoot and protect systems. We rely on legitimate interests in operating a secure and effective website, legal obligations where applicable, and consent for optional technologies where required.

Respond to enquiries and develop relationships. To communicate, arrange meetings, understand requirements, prepare proposals and manage prospective or current customer, supplier and partner relationships. We rely on steps requested before a contract, performance of a contract, and legitimate interests in running and developing our business.

Provide and administer contracted services. To onboard organisations, administer accounts, communicate about delivery, invoice, maintain records and enforce agreements. We rely on contract where you are a contracting individual, legitimate interests where the contract is with your organisation, and legal obligations.

Marketing and events. To send newsletters, invitations and relevant business communications, measure engagement and manage preferences. We rely on consent where required by electronic-marketing law and otherwise on legitimate interests, subject to your right to object. Every direct marketing message will offer an appropriate way to opt out.

Improve services and understand use. To analyse feedback and, where permitted, Site usage, identify trends and improve content, services and user experience. We rely on legitimate interests and on consent for cookies or similar technologies where required.

Recruit people. To manage applications, assess suitability, communicate with candidates, check eligibility, take steps before an employment contract and protect legal rights. We rely on steps before contract, legal obligations and legitimate interests in recruitment and defending claims. Any special category information is used only under an applicable legal condition.

Meet legal and compliance obligations. To keep records, respond to rights requests and complaints, comply with tax, accounting, corporate, regulatory or court requirements, and establish, exercise or defend legal claims. We rely on legal obligations and legitimate interests.

Corporate transactions. To evaluate or complete an investment, financing, restructuring, sale, merger or transfer, with appropriate confidentiality and data-protection safeguards. We rely on legitimate interests in managing our business and assets and legal obligations where applicable.

Where we rely on legitimate interests, we consider the necessity of the processing and balance our interests against the impact on your rights and freedoms. You may ask for more information about that assessment.

 

7. Marketing choices

​

You can unsubscribe from marketing emails using the link in the message or by contacting us. We may continue to send service, security, legal or relationship communications that are not direct marketing. We keep a minimal suppression record after an opt-out so that we can respect your choice.

Electronic-marketing rules vary by recipient type. We obtain consent where required and do not use pre-ticked boxes or treat silence as consent. Business contacts can object to direct marketing at any time.

 

8. Cookies and similar technologies
 

Our Cookie Policy explains the technologies used on the Site, when consent is required, and how to change your choices. Optional technologies are controlled through Cookie Settings.

Cookie Policy: sequential.bio/cookiepolicy

​

9. When we share information
 

We share personal information only where necessary and subject to appropriate safeguards. Recipients may include:

 

• hosting, cloud, communications, security, analytics, customer-relationship, marketing and other technology providers;

• professional advisers, auditors, insurers, banks and payment providers;

• customers, suppliers, research partners, laboratories, clinical research organisations or study sponsors where relevant and explained in the applicable relationship or specific notice;

• recruitment agencies, screening providers and referees in connection with applications;

• regulators, courts, law enforcement and public authorities where disclosure is required or permitted by law; and

• prospective buyers, investors, lenders or counterparties and their advisers in connection with a corporate transaction, subject to confidentiality and appropriate controls.

Service providers acting as processors may use information only on our documented instructions, must protect it and must not use it for their own unrelated purposes. Where another recipient acts as an independent controller, its own privacy notice also applies.

​

10. International transfers
 

Some providers or recipients may be located outside the United Kingdom, or may allow access from another country. When we make a restricted transfer, we use a lawful transfer mechanism, such as UK adequacy regulations or appropriate safeguards including the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses. Where required, we complete a data protection test or transfer risk assessment and apply supplementary safeguards. We use a legal exception only where the law permits and the conditions are met.

You may contact us for more information about the transfer mechanism relevant to your information, subject to lawful confidentiality restrictions.

​

11. How long we keep information
 

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, reporting, security and dispute-resolution requirements. We use a documented retention approach that considers the amount, nature and sensitivity of the information, risk of harm, purpose, whether the purpose can be achieved another way, and applicable limitation or regulatory periods.

 

• Enquiries and business contacts. For the active relationship and a reasonable follow-up period, then deletion or minimisation unless records are needed for a contract, legal obligation or claim.

• Contracts and transaction records. For the contract and the relevant legal, tax, accounting and limitation periods after it ends.

• Marketing. Until you opt out or the information is no longer needed under our review rules; a minimal suppression record may be kept longer to respect the opt-out.

• Recruitment. For the recruitment exercise and a reasonable period to manage queries or claims, or longer with permission where we wish to consider you for future roles.

• Security and technical logs. For a proportionate period based on security, troubleshooting and legal needs.

• Studies and sensitive processing. As stated in the applicable study, service or participant notice and relevant protocol or contract.

​

12. Security
 

We use appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, disclosure or access. Measures are selected according to risk and may include access controls, confidentiality obligations, encryption in transit or at rest where appropriate, backups, monitoring, supplier due diligence and incident procedures. No internet transmission or storage system can be guaranteed completely secure.

​

13. Your data protection rights
 

Depending on the circumstances, you may have the right to:

 

• be informed about how your personal information is used;

• request access to your personal information;

• request correction of inaccurate or incomplete information;

• request erasure of information where there is no lawful reason to continue using it;

• request restriction of processing in specified circumstances;

• object to processing based on legitimate interests and object at any time to direct marketing;

• receive or transfer certain information in a structured, commonly used and machine-readable format;

• withdraw consent at any time where processing is based on consent, without affecting earlier lawful processing; and

• ask for safeguards where a significant decision is made solely by automated processing, where applicable.

These rights are not absolute and exemptions may apply. We may ask for information reasonably needed to confirm identity or clarify a request. We normally respond without undue delay and within the period required by law. A fee is not normally charged, but the law permits a reasonable fee or refusal in limited cases, such as manifestly unfounded or excessive requests.

​

14. Automated decision-making
 

We do not currently use personal information collected through the Site to make decisions based solely on automated processing that produce legal or similarly significant effects. If that changes, we will provide specific information about the logic, significance, consequences and safeguards, including how to obtain human intervention and contest a decision.

​

15. Data protection complaints
 

If you believe we have used your personal information unlawfully, contact us at team@sequential.bio or by post at Moneta (B280), Babraham Research Campus, Babraham, Cambridgeshire, CB22 3AT, United Kingdom and mark the correspondence "Data protection complaint". We will help you make the complaint, acknowledge it within 30 days, investigate it, keep you appropriately informed and tell you the outcome without undue delay.

You may also complain to the Information Commissioner's Office, the United Kingdom supervisory authority. We would appreciate the opportunity to address your concern first, but this does not affect your right to contact the ICO.

ICO complaints information: ico.org.uk/make-a-complaint

​

16. Third-party links
 

The Site may contain links, plug-ins or embedded content provided by third parties. Those organisations may collect information under their own privacy notices. We do not control their independent processing and encourage you to review their notices.

​

17. Changes to this policy
​

We review this policy and may update it when our activities or legal requirements change. The date at the top shows the latest revision. If a change materially affects how we use information already collected, we will take reasonable steps to bring it to the attention of affected people and obtain consent where required.

​

Contact us
​

Questions about this Privacy Policy, your rights or a data protection complaint may be sent to:

Sequential Skin Ltd (company number 12547483)

Moneta (B280), Babraham Research Campus, Babraham, Cambridgeshire, CB22 3AT, United Kingdom

Email: team@sequential.bio