Privacy Policy (VisionExceller8 / Vision Pharma)
Last updated: [7 February 2026]
1) Who we are
This website is operated by VisionExceller8 Ltd (“we”, “us”, “our”). We are the data controller for the personal information collected through this website.
Contact details
- Company: VisionExceller8 Ltd (trading as “Vision Pharma”, if applicable)
- Contact person: Dr Tristan Mann
- Email: ceo1@visionexceller8.com
If you have questions about this policy or how we use your data, contact us using the details above.
2) What information we collect
We may collect and process:
- Contact details: name, email address, phone number, organisation (if you provide it)
- Enquiry information: messages you send via forms or email
- Marketing preferences: whether you opt in/out of updates
- Technical data: IP address, device/browser information, pages visited (through cookies/analytics if enabled)
3) How we collect your information
We collect personal information when you:
- submit your email to access/download our slide deck (the “Deck”)
- complete a contact/enquiry form
- email or call us
- browse our website (via cookies/analytics where used)
The UK GDPR requires that we provide this information in an accessible way at the point we collect it.
4) Why we use your information and our lawful bases
We only use your personal information where we have a lawful basis under UK GDPR.
A) To deliver the Deck you requested
- Purpose: send you the Deck link / provide access to download
- Lawful basis: legitimate interests (responding to your request) or performance of a contract (providing requested information), depending on how the download is implemented
B) To respond to enquiries and manage relationships
- Purpose: respond to messages, schedule calls, provide information about partnerships/pilots
- Lawful basis: legitimate interests (running our business and responding to you)
C) To send marketing/updates (only if permitted)
- Purpose: send newsletters, product updates, partnership opportunities
- Lawful basis: typically consent for email marketing to individuals (and we will include an unsubscribe link in every message)
- If you are a corporate subscriber (e.g., a business email) we will still provide a clear opt-out and comply with applicable PECR rules.
D) To improve and secure our website
- Purpose: analytics, performance monitoring, preventing fraud/abuse
- Lawful basis: legitimate interests (website security and improvement)
5) Cookies and analytics
We may use cookies and similar technologies to operate the site and understand usage. If we use non-essential cookies (e.g., analytics/advertising), we will ask for consent via a cookie banner where required. (See also our Cookie Notice, if you have one.)
6) Who we share your information with
We may share personal information with trusted service providers who support our website and communications, such as:
- website hosting and site tools (e.g., GoDaddy)
- email delivery/marketing platforms (if used)
- file hosting providers (e.g., Google Drive/OneDrive/Dropbox) if the Deck is stored there
We only share what is necessary and require appropriate safeguards/contractual protections.
We do not sell your personal information.
7) International transfers
Some of our service providers may process data outside the UK. Where this happens, we will ensure appropriate safeguards are in place (for example, UK adequacy regulations or approved contractual protections), as required by data protection law.
8) How long we keep your information (retention)
We keep personal information only for as long as necessary for the purposes described:
- Deck requests: typically [12–24 months] from last interaction (to manage follow-ups and demonstrate compliance)
- Enquiries/partnership discussions: [up to 6 years] where needed for business records and legal claims/defence
- Marketing lists: until you unsubscribe or we periodically refresh/remove inactive contacts ([e.g., 24 months inactivity])
- Technical logs: typically [30–180 days] (security/diagnostics)
(You can adjust these periods to match your actual operations—ICO expects retention to be clear and justifiable.)
9) Your rights
Under UK GDPR you have rights including:
- access to your data
- rectification (correction)
- erasure (deletion) in certain circumstances
- restriction of processing
- data portability (in certain cases)
- object to processing based on legitimate interests
- withdraw consent at any time where we rely on consent (e.g., marketing)
The ICO’s “right to be informed” and transparency requirements underpin these rights.
To exercise your rights, contact ceo1@visionexceller8.com.
10) Marketing preferences
If you opt in to marketing, you can unsubscribe at any time using the link in our emails or by contacting us. We follow PECR rules for electronic marketing, including consent requirements and clear opt-out mechanisms.
11) Complaints
If you have concerns, please contact us first and we’ll try to resolve them. You also have the right to complain to the UK regulator:
Information Commissioner’s Office (ICO)
12) Changes to this policy
We may update this policy from time to time. We will post the updated version on this page and update the “Last updated” date.