Introduction
Pharma Consultants Ltd collects and processes personal data relating to business partners, prospective partners, and employees in order to manage professional relationships and operate effectively.
We are committed to transparency in how personal data is collected, used, and protected, and to complying with all applicable data protection laws.
Information We Collect
We may collect and process:
Name, company details, business address, email, and telephone number
Information submitted via contact forms, email, meetings, or telephone conversations
Recruitment-related information for job applicants (covered in a separate notice)
Data may be stored within secure email systems, internal databases, and authorised IT platforms.
Why We Process Personal Data
Personal data is processed to:
Maintain business relationships and enter into agreements
Comply with legal and regulatory obligations
Support recruitment, HR administration, and employee records
Provide project-relevant staff information to clients
Maintain training records required by regulatory standards
Respond to legal claims or compliance requirements
Special category data (e.g. health information) is processed only where required by employment law.
Data Sharing
Data may be shared internally where necessary for business operations and may be transferred outside the EEA using appropriate legal safeguards.
Data Security
Pharma Consultants Ltd maintains:
Encrypted devices and secure cloud storage
Restricted access to personal data
Confidentiality obligations for third-party processors
Technical and organisational safeguards to prevent misuse or loss
Data Retention
We retain personal data only as long as necessary:
Candidate CVs – up to 12 months
Employee records – up to 7 years
Training records – up to 25 years
Client personal data – up to 6 years after contract completion
Your Rights
You may:
Request access to your data
Correct inaccurate information
Request deletion or restriction of processing
Object to processing based on legitimate interests
Complaints may be made to the Information Commissioner’s Office (ICO).