WHO ARE WE?

Granta Park® (“We”) are committed to protecting and respecting your privacy.

This policy (together with our terms of use and any other documents referred to on it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.  Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.  By visiting our site www.grantapark.co.uk (“our site”), you are accepting and consenting to the practices described in this policy.

This website is not intended for children, and we do not knowingly collect data relating to children.

The data controller responsible for your personal data is Granta Park.  If you have any questions about this privacy policy or our privacy practices, please contact us in one of the following ways:

•        Email Address:  dataprivacy@biomedrealty.com; or

•        Postal Address:  McClintock Building, Granta Park, Great Abington, Cambridge CB21 6GP

You have the right to make a complaint at any time to the Information Commissioner's Office (“ICO”), the United Kingdom (“U.K.”) regulator for data protection issues (www.ico.org.uk).  We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

INFORMATION WE MAY COLLECT FROM YOU

We may collect and process the following data about you:

•        Information you give us. You may give us information about you by filling in forms on our site or by corresponding with us by phone, email or otherwise.  The data includes information you provide when you register to use our site, subscribe to our services, join our membership, or you report a problem with our site.  The information you give us may include (i) Identity Data, such as your name, marital status, title, date of birth and gender, and details of the organisation with which you are affiliated, (ii) Contact Data, such as your address, email address and phone number, (iii) Financial Data, such as bank account and payment card details, (iv) Transaction Data, such as details about payments to and from you, and other details of products and services you have purchased from us, and (v) Marketing and Communications Data such as your preferences in receiving marketing from us and our third parties.

•        Information we collect about you. With regard to each of your visits to our site, we may automatically collect the following information:  (i) Technical Information, including the Internet protocol (“IP”) address used to connect your computer to the internet; your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform; and  (ii) Usage Data comprising information about your visit to our site, including the full Uniform Resource Locators (“URL”) clickstream to, through and from our site (including date and time); products

you viewed or for which you searched; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs); and methods used to browse away from the page.

•        Information we receive from other sources. We may receive information about you if you use any of the other websites we operate or the other services we provide.  We are also working closely with third parties (including, for example, business partners; subcontractors in technical, payment and delivery services; advertising networks; analytics providers, search information providers; and credit reference agencies); and may receive certain identity data, contact data, financial data and/or transactional data relating to you from them.

•        Aggregated data. We also collect, use and share aggregated data, such as statistical or demographic data, for any purpose.  Aggregated data could be derived from your personal data, but is not considered personal data in law, as this data will not directly or indirectly reveal your identity.  For example, we may aggregate your usage data to calculate the percentage of users accessing a specific website feature.  If, however, we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data that will be used in accordance with this Privacy Policy.

•        Special category personal data.  We do not collect any special category personal data about you (including details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health, or genetic or biometric data), nor do we collect any information about criminal convictions or offences.

USES MADE OF THE INFORMATION

We will only use your personal data when the law permits.  Most commonly, we will use your personal data in the following circumstances:

•        Where we need to perform any contract we are about to enter into or have entered into with you;

•        Where it is necessary for our legitimate interests (or those of a third party), and your interests and fundamental rights do not override those interests; and

•        Where we need to comply with a legal obligation.

Generally, we do not rely on consent as a legal basis for processing your personal data, although we will get your consent before sending third party direct marketing communications to you via email or text message.  You have the right to withdraw consent to marketing at any time by contacting us.

We have set out below a description of all of the ways we plan to use personal data held about you:

 

Purpose/Use	Type of Data	Legal Basis	Retention Period
To carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products and services that you request from us	Identity Data, Contact Data, Financial Data, Transactional Data	Necessary for the performance of a contract with you	Duration of contract plus six years for tax purposes
To provide you with information about other goods and services we offer that are similar to those that you have already purchased or enquired about	Identity Data, Contact Data, Marketing and Communications Data	Necessary for our legitimate interests (to develop our products/services and grow our business)	Duration of our contact with you plus six years for tax purposes
To provide you, or permit selected third parties to provide you with information about goods or services we feel may interest you	Identity Data, Contact Data, Marketing and Communications Data	Consent (for sending third-party direct marketing communications)	Retained in accordance with the criteria as described in paragraph How Long Will Your Data be Retained below.
To notify you about changes to our services	Identity Data, Contact Data	Necessary for our legitimate interests (to keep you updated about service changes)	Retained in accordance with the criteria as described in paragraph How Long Will Your Data be Retained below.
To ensure that content from our site is presented in the most effective manner for you and your device	Technical Data, Usage Data	Necessary for our legitimate interests (to improve user experience and site functionality)	Retained in accordance with the criteria as described in paragraph How Long Will Your Data be Retained below.
To administer our site and for internal operations,	Technical Data, Usage Data	Necessary for our legitimate interests (for	Retained in accordance with

 

Purpose/Use	Type of Data	Legal Basis	Retention Period
including troubleshooting, data analysis, testing, research, and statistical and survey purposes		running our business, provision of administration and IT   services)	the criteria as described in paragraph How Long Will Your Data be Retained below.
To improve our site to ensure that content is presented in the most effective manner for you and your computer	Technical Data, Usage Data	Necessary for our legitimate interests (to enhance site usability   and performance)	Retained in accordance with the criteria as described in paragraph How Long Will Your Data be Retained below.
To allow you to participate in interactive features of our service, when you choose to do so	Technical Data, Usage Data	Necessary for our legitimate interests (to enhance site usability   and performance)	Retained in accordance with the criteria as described in paragraph How Long Will Your Data be Retained below.
As part of our efforts to keep our site safe and secure	Technical Data, Usage Data	Necessary for our legitimate interests (for network security and fraud prevention)	Duration of our contact with you plus six years for tax purposes
To measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you	Technical Data, Usage Data	Necessary for our legitimate interests (to understand advertising impact and deliver targeted ads)	Retained in accordance with the criteria as described in paragraph How Long Will Your Data be Retained below.
To make suggestions and recommendations to you and other users of our site about goods or services that may interest you or them	Identity Data, Contact Data, Usage Data	Necessary for our legitimate interests (to offer personalised    recommendations)	Retained in accordance with the criteria as described in paragraph How Long Will Your
Purpose/Use	Type of Data	Legal Basis	Retention Period
			Data be Retained below.

 

Information we receive from other sources.  We may combine this information with information you give to us and information we collect about you.  We may use this information and the combined information for the purposes set out above (depending on the types of information we receive).

DISCLOSURE OF YOUR INFORMATION

We may share your personal information with any member of the BioMed Realty, L.P., group (“our Group”), which means our subsidiaries, and our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.

We may share your information with selected third parties, including:

•        Business partners, suppliers and subcontractors for the performance of any contract we enter into with them or you;

•        Advertisers and advertising networks that require the data to select and serve relevant adverts to you and others;

•        Analytics and search engine providers that assist us in the improvement and optimisation of our site; and

•        Credit reference agencies for the purpose of assessing your credit score, where this is a condition of us entering into a contract with you.

We may disclose your personal information to third parties:

•        In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets;

•        If we or substantially all of our assets are acquired by a third party, in which case personal data held by us about our customers will be one of the transferred assets; and

•        If we are under a duty to disclose or share your personal data in order to comply with any legal obligation; or in order to enforce or apply our terms of use and other agreements; or to protect our rights, property, or safety, and those of our customers or others, including exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

WHERE WE STORE YOUR PERSONAL DATA: INTERNATIONAL TRANSFERS

We share your personal data within our group, which involves transferring your data outside the U.K.  In addition, many of our external third parties are based outside the U.K., so their processing of your personal data will involve a transfer of data outside the U.K.  Such external third parties and their staff may be engaged in, among other things, the fulfilment of your order, the processing of your payment details, and the provision of support services.  By submitting your personal data, you agree to this transfer, storing and processing.  We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

Whenever we transfer your personal data out of the U.K., we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

•        Where personal data is transferred within our group, we use an intragroup data transfer agreement;

•        We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data; and

•        Where we use certain service providers, we may use specific contracts approved for use in the UK that give personal data the same protection it has in the UK.

We have put in place appropriate security measures to prevent your personal data from being accidentally lost; used or accessed in an unauthorised way; altered or disclosed.  Any payment transactions will be encrypted using SSL technology.  Where we have given you (or where you have chosen) a password that enables you to access certain parts of our site, you are responsible for keeping this password confidential.  We ask you not to share a password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure.  Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site.  Any transmission is at your own risk.  Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

YOUR RIGHTS

You may contact us using the details set out above in the “Who Are We?” section at any time to request that we:

•        confirm whether personal information about you is being processed;

•        provide you with further details about how we process your personal information;

•        provide you with a copy of any personal information that we hold about you;

•        update/correct any of your personal information that is out of date or incorrect;

•        delete any personal information that we are holding about you;

•        restrict the way that we process your personal information;

•        provide your personal information to a third party provider of services (data portability);

•        provide you with a copy of any personal information that we hold about you; or

•        consider any valid objections that you have to our use of your personal information.

Your request must include your name, email address and postal address, and we may request proof of your identity.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights).  We may, however, charge a reasonable fee if your request is clearly unfounded, repetitive or excessive.  Alternatively, we could refuse to comply with your request in these circumstances.

We try to respond to all legitimate requests within one month.  Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests.  In this case, we will notify you and keep you updated.

Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates.  If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies.  Please check these policies before you submit any personal data to these websites.

HOW LONG WILL YOUR DATA BE RETAINED?

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes for which we collected it.  By law, we must keep for tax purposes basic information about our customers (including contact, identity, financial and transaction data) for six years after they cease being customers. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

In some circumstances, you may ask us to delete your data.  See your legal rights above for further information.

In some circumstances, we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

COOKIES

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies.  If you disable or refuse cookies, please note that some parts of our site may become inaccessible or not function properly.  For more information about the cookies we use, please see our Cookie Policy.

CHANGES TO OUR PRIVACY POLICY

We keep our privacy policy under regular review.  Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by email.  Please check back frequently to see any updates or changes to our privacy policy.  This version was last updated in June 2025.  Historic versions can be obtained by contacting us.

CONTACT

Questions, comments and requests regarding this privacy policy are welcomed.  Please contact us using the contact details set out in the “Who Are We?” section above.