Privacy Policy

Sol-Gel Materials and Applications Ltd Privacy Policy

This privacy notice tells you what to expect us to do with your personal information.

  1. Contact Details

You can contact us by emailing us at info@sol-gel.co.uk

You can contact us in writing at Sol-Gel Materials and Applications Ltd, Kent Science Park, B1093A, Galley Drive, Sittingbourne, Kent, ME9 8GA.

  1. What information we collect, use, and why

We may collect or use the following information to provide services and goods, including delivery: 

  • Names and contact details; 

  • Addresses; 

  • Purchase or account history; 

  • Payment details; 

  • Account information; 

  • Records of meetings and decisions; and 

  • Information relating to compliments or complaints. 

We may collect or use the following information for the operation of customer accounts and guarantees: 

  • Names and contact details; 

  • Addresses; 

  • Payment details; 

  • Purchase history; 

  • Account information, including registration details; and 

  • Information used for security purposes. 

We may collect or use the following information for service updates or marketing purposes: 

  • Names and contact details; 

  • Addresses; 

  • Marketing preferences; 

  • Purchase or viewing history; and 

  • Records of consent, where appropriate. 

We may collect or use the following information to comply with legal requirements: 

  • Name; 

  • Contact information; 

  • Identification documents; 

  • Financial transaction information; 

  • Any other personal information required to comply with legal obligations; and 

  • Health and safety information. 

We may collect or use the following information for recruitment purposes: 

  • Contact details (e.g. name, address, telephone number or personal email address); 

  • Date of birth; 

  • National Insurance number; 

  • Copies of passports or other photo ID; 

  • Employment history (e.g. job application, employment references or secondary employment); 

  • Education history (e.g. qualifications); and 

  • Right to work information. 

We may collect or use the following personal information for dealing with queries, complaints or claims: 

  • Names and contact details; 

  • Address; 

  • Payment details; 

  • Account information; 

  • Purchase or service history; 

  • Witness statements and contact details; 

  • Relevant information from previous investigations; 

  • Customer or client accounts and records; 

  • Financial transaction information; 

  • Information relating to health and safety; and 

  • Correspondence. 

  1. Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website. 

Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website: 

If you make a request, we must respond to you without undue delay and in any event within one month. To make a data protection rights request, please contact us using the contact details at the top of this privacy notice. 

Please note, our website may contain links to other websites that are not controlled by us. These links are provided for your convenience. We are only responsible for our privacy practices and our security. We recommend you check the privacy policies for any other websites that you visit. 

  1. Our lawful bases for the collection and use of your data

The following section describes the lawful bases upon which we may collect or use personal information. 

Our lawful bases for collecting or using personal information: 

a) to provide services and goods; 
b) for the operation of customer accounts and guarantees;
c) for legal requirements; and
d) for recruitment purposes; 

are: 

  • Consent - we may have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time. 

  • Contract – we may have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object. 

  • Legal obligation – we may have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
     

  • Public task – we may have to collect or use your information to carry out a task laid down in law, which the law intends to be performed by an organisation such as ours. All of your data protection rights may apply, except the right to erasure and the right to portability. 

Our lawful bases for collecting or using personal information for: 

e) service updates; and 
f) marketing purposes; 

are: 

  • Consent - we may have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time. 

  • Contract – we may have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object. 

  • Legal obligation – we may have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
     

  • Legitimate interests – we may collect or use your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are that information collected, stored, and processed for marketing purposes may be used for further purposes including keeping our customers up to date on new opportunities, carrying out market research, tailoring our marketing communications and to enhance customer satisfaction. For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above. 

  • Public task – we may have to collect or use your information to carry out a task laid down in law, which the law intends to be performed by an organisation such as ours. All of your data protection rights may apply, except the right to erasure and the right to portability. 

Our lawful bases for collecting or using personal information for: 

g) dealing with queries, complaints or claims; 

are: 

  • Consent - we may have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time. 

  • Contract – we may have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object. 

  • Legal obligation – we may have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
     

  • Legitimate interests – we may collect or use your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are that information collected, stored, and processed in relation to queries, complaints or claims may be used for the purposes of investigating such queries, complaints, and/or claims for the purposes of reaching a satisfactory resolution to such queries, complaints, and/or claims and for the purposes of identifying and making improvements to our products and/or services. For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above. 

  • Public task – we may have to collect or use your information to carry out a task laid down in law, which the law intends to be performed by an organisation such as ours. All of your data protection rights may apply, except the right to erasure and the right to portability. 

  1. Where we get personal information from

  • Directly from you, for example through the ‘contact us’ form on our website; 

  • Publicly available sources; 

  • Previous employers, for example requesting a reference from a previous employer during hiring processes; and 

  • Suppliers and service providers. 

  1. How long we keep information

We will normally keep your personal data for as long as you are interacting with us for any reason and thereafter for a period of seven years. If, after this point, we have not exchanged any communications, we will delete your data. For example, if you are a customer of ours then we will retain your information for as long as you remain a customer of ours and then for 7 years thereafter.

For more information on how long we store your personal information or the criteria we use to determine this please contact us using the details provided above.

  1. Who we share information with

We may share information with the following entities and organisations.

7.1. Data Processors

Accountancy and Financial Services Providers: These data processors perform the following activities for us: Processors of payroll information, tax information, pensions processing, general services relating to company financial compliance, and the like.

Legal and Human Resources Service Providers: These data processors perform the following activities for us: Processors of employee information, contractor, and consultant information including information relating to investors, shareholders, and the like for the purposes of providing services such as Human Resources management, legal services and advice, regulatory compliance purposes, and the like.

7.2. Others we may share personal information with:

  • Insurance companies; 

  • Professional or legal advisors; 

  • Financial or fraud investigation authorities; 

  • Relevant regulatory authorities; 

  • External auditors or inspectors; 

  • Warranty and guarantee providers; 

  • Professional consultants; 

  • Organisations we’re legally obliged to share personal information with; 

  • Emergency services; 

  • Publicly on our website, social media or other marketing and information media; 

  • Debt collection agencies; and 

  • Suppliers and service providers. 

  1. Sharing information outside the UK

Where necessary, we may transfer personal information outside of the UK for specific purposes or reasons. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place.

For example, Sol-gel Materials and Applications Ltd operates, from time to time, in the European Economic Area (EEA). As part of these operations, it may be necessary for us to share some personal information with one or more service providers operating and/or based within the EEA. The EEA is designated by the UK as a territory of ‘data adequacy’ to which data can be transferred due to high standards of protection for personal data. More information on the topic of ‘data adequacy’ can be found in the relevant government guidance.

We do not regularly transfer personal data outside of the United Kingdom or the EEA. However, transfers may be made to our third-party service providers (such as software as a service vendors) that are located outside the EEA. Where we transfer data out of the EEA, we will take proper steps to ensure that it is protected in accordance with this Privacy Policy and applicable privacy laws.

Examples of service providers outside the UK with whom we may share personal information includes accountancy and financial services providers, legal services providers, and the like. Such service providers may be under additional data protection requirements beyond core legislation imparted by their practice and membership of professional practice bodies.

For further information or to obtain a copy of the appropriate safeguard for any of the transfers below, please contact us using the contact information provided above.

  1. How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow Cheshire SK9 5AF
Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

  1. Last Updated

Privacy laws and practice are constantly developing, and we aim to meet industry standards. Our policies and procedures are, therefore, under regular review. We may, from time to time, update our security and privacy policies. We will ensure our website has our most up to date Privacy Policy and suggest check this page periodically to review our latest version.

This privacy policy was last updated on 21 October 2025

Privacy Policy

Sol-Gel Materials and Applications Ltd Privacy Policy

This privacy notice tells you what to expect us to do with your personal information.

  1. Contact Details

You can contact us by emailing us at info@sol-gel.co.uk

You can contact us in writing at Sol-Gel Materials and Applications Ltd, Kent Science Park, B1093A, Galley Drive, Sittingbourne, Kent, ME9 8GA.

  1. What information we collect, use, and why

We may collect or use the following information to provide services and goods, including delivery: 

  • Names and contact details; 

  • Addresses; 

  • Purchase or account history; 

  • Payment details; 

  • Account information; 

  • Records of meetings and decisions; and 

  • Information relating to compliments or complaints. 

We may collect or use the following information for the operation of customer accounts and guarantees: 

  • Names and contact details; 

  • Addresses; 

  • Payment details; 

  • Purchase history; 

  • Account information, including registration details; and 

  • Information used for security purposes. 

We may collect or use the following information for service updates or marketing purposes: 

  • Names and contact details; 

  • Addresses; 

  • Marketing preferences; 

  • Purchase or viewing history; and 

  • Records of consent, where appropriate. 

We may collect or use the following information to comply with legal requirements: 

  • Name; 

  • Contact information; 

  • Identification documents; 

  • Financial transaction information; 

  • Any other personal information required to comply with legal obligations; and 

  • Health and safety information. 

We may collect or use the following information for recruitment purposes: 

  • Contact details (e.g. name, address, telephone number or personal email address); 

  • Date of birth; 

  • National Insurance number; 

  • Copies of passports or other photo ID; 

  • Employment history (e.g. job application, employment references or secondary employment); 

  • Education history (e.g. qualifications); and 

  • Right to work information. 

We may collect or use the following personal information for dealing with queries, complaints or claims: 

  • Names and contact details; 

  • Address; 

  • Payment details; 

  • Account information; 

  • Purchase or service history; 

  • Witness statements and contact details; 

  • Relevant information from previous investigations; 

  • Customer or client accounts and records; 

  • Financial transaction information; 

  • Information relating to health and safety; and 

  • Correspondence. 

  1. Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website. 

Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website: 

If you make a request, we must respond to you without undue delay and in any event within one month. To make a data protection rights request, please contact us using the contact details at the top of this privacy notice. 

Please note, our website may contain links to other websites that are not controlled by us. These links are provided for your convenience. We are only responsible for our privacy practices and our security. We recommend you check the privacy policies for any other websites that you visit. 

  1. Our lawful bases for the collection and use of your data

The following section describes the lawful bases upon which we may collect or use personal information. 

Our lawful bases for collecting or using personal information: 

a) to provide services and goods; 
b) for the operation of customer accounts and guarantees;
c) for legal requirements; and
d) for recruitment purposes; 

are: 

  • Consent - we may have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time. 

  • Contract – we may have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object. 

  • Legal obligation – we may have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
     

  • Public task – we may have to collect or use your information to carry out a task laid down in law, which the law intends to be performed by an organisation such as ours. All of your data protection rights may apply, except the right to erasure and the right to portability. 

Our lawful bases for collecting or using personal information for: 

e) service updates; and 
f) marketing purposes; 

are: 

  • Consent - we may have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time. 

  • Contract – we may have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object. 

  • Legal obligation – we may have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
     

  • Legitimate interests – we may collect or use your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are that information collected, stored, and processed for marketing purposes may be used for further purposes including keeping our customers up to date on new opportunities, carrying out market research, tailoring our marketing communications and to enhance customer satisfaction. For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above. 

  • Public task – we may have to collect or use your information to carry out a task laid down in law, which the law intends to be performed by an organisation such as ours. All of your data protection rights may apply, except the right to erasure and the right to portability. 

Our lawful bases for collecting or using personal information for: 

g) dealing with queries, complaints or claims; 

are: 

  • Consent - we may have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time. 

  • Contract – we may have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object. 

  • Legal obligation – we may have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
     

  • Legitimate interests – we may collect or use your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are that information collected, stored, and processed in relation to queries, complaints or claims may be used for the purposes of investigating such queries, complaints, and/or claims for the purposes of reaching a satisfactory resolution to such queries, complaints, and/or claims and for the purposes of identifying and making improvements to our products and/or services. For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above. 

  • Public task – we may have to collect or use your information to carry out a task laid down in law, which the law intends to be performed by an organisation such as ours. All of your data protection rights may apply, except the right to erasure and the right to portability. 

  1. Where we get personal information from

  • Directly from you, for example through the ‘contact us’ form on our website; 

  • Publicly available sources; 

  • Previous employers, for example requesting a reference from a previous employer during hiring processes; and 

  • Suppliers and service providers. 

  1. How long we keep information

We will normally keep your personal data for as long as you are interacting with us for any reason and thereafter for a period of seven years. If, after this point, we have not exchanged any communications, we will delete your data. For example, if you are a customer of ours then we will retain your information for as long as you remain a customer of ours and then for 7 years thereafter.

For more information on how long we store your personal information or the criteria we use to determine this please contact us using the details provided above.

  1. Who we share information with

We may share information with the following entities and organisations.

7.1. Data Processors

Accountancy and Financial Services Providers: These data processors perform the following activities for us: Processors of payroll information, tax information, pensions processing, general services relating to company financial compliance, and the like.

Legal and Human Resources Service Providers: These data processors perform the following activities for us: Processors of employee information, contractor, and consultant information including information relating to investors, shareholders, and the like for the purposes of providing services such as Human Resources management, legal services and advice, regulatory compliance purposes, and the like.

7.2. Others we may share personal information with:

  • Insurance companies; 

  • Professional or legal advisors; 

  • Financial or fraud investigation authorities; 

  • Relevant regulatory authorities; 

  • External auditors or inspectors; 

  • Warranty and guarantee providers; 

  • Professional consultants; 

  • Organisations we’re legally obliged to share personal information with; 

  • Emergency services; 

  • Publicly on our website, social media or other marketing and information media; 

  • Debt collection agencies; and 

  • Suppliers and service providers. 

  1. Sharing information outside the UK

Where necessary, we may transfer personal information outside of the UK for specific purposes or reasons. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place.

For example, Sol-gel Materials and Applications Ltd operates, from time to time, in the European Economic Area (EEA). As part of these operations, it may be necessary for us to share some personal information with one or more service providers operating and/or based within the EEA. The EEA is designated by the UK as a territory of ‘data adequacy’ to which data can be transferred due to high standards of protection for personal data. More information on the topic of ‘data adequacy’ can be found in the relevant government guidance.

We do not regularly transfer personal data outside of the United Kingdom or the EEA. However, transfers may be made to our third-party service providers (such as software as a service vendors) that are located outside the EEA. Where we transfer data out of the EEA, we will take proper steps to ensure that it is protected in accordance with this Privacy Policy and applicable privacy laws.

Examples of service providers outside the UK with whom we may share personal information includes accountancy and financial services providers, legal services providers, and the like. Such service providers may be under additional data protection requirements beyond core legislation imparted by their practice and membership of professional practice bodies.

For further information or to obtain a copy of the appropriate safeguard for any of the transfers below, please contact us using the contact information provided above.

  1. How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow Cheshire SK9 5AF
Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

  1. Last Updated

Privacy laws and practice are constantly developing, and we aim to meet industry standards. Our policies and procedures are, therefore, under regular review. We may, from time to time, update our security and privacy policies. We will ensure our website has our most up to date Privacy Policy and suggest check this page periodically to review our latest version.

This privacy policy was last updated on 21 October 2025

Privacy Policy

Sol-Gel Materials and Applications Ltd Privacy Policy

This privacy notice tells you what to expect us to do with your personal information.

  1. Contact Details

You can contact us by emailing us at info@sol-gel.co.uk

You can contact us in writing at Sol-Gel Materials and Applications Ltd, Kent Science Park, B1093A, Galley Drive, Sittingbourne, Kent, ME9 8GA.

  1. What information we collect, use, and why

We may collect or use the following information to provide services and goods, including delivery: 

  • Names and contact details; 

  • Addresses; 

  • Purchase or account history; 

  • Payment details; 

  • Account information; 

  • Records of meetings and decisions; and 

  • Information relating to compliments or complaints. 

We may collect or use the following information for the operation of customer accounts and guarantees: 

  • Names and contact details; 

  • Addresses; 

  • Payment details; 

  • Purchase history; 

  • Account information, including registration details; and 

  • Information used for security purposes. 

We may collect or use the following information for service updates or marketing purposes: 

  • Names and contact details; 

  • Addresses; 

  • Marketing preferences; 

  • Purchase or viewing history; and 

  • Records of consent, where appropriate. 

We may collect or use the following information to comply with legal requirements: 

  • Name; 

  • Contact information; 

  • Identification documents; 

  • Financial transaction information; 

  • Any other personal information required to comply with legal obligations; and 

  • Health and safety information. 

We may collect or use the following information for recruitment purposes: 

  • Contact details (e.g. name, address, telephone number or personal email address); 

  • Date of birth; 

  • National Insurance number; 

  • Copies of passports or other photo ID; 

  • Employment history (e.g. job application, employment references or secondary employment); 

  • Education history (e.g. qualifications); and 

  • Right to work information. 

We may collect or use the following personal information for dealing with queries, complaints or claims: 

  • Names and contact details; 

  • Address; 

  • Payment details; 

  • Account information; 

  • Purchase or service history; 

  • Witness statements and contact details; 

  • Relevant information from previous investigations; 

  • Customer or client accounts and records; 

  • Financial transaction information; 

  • Information relating to health and safety; and 

  • Correspondence. 

  1. Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website. 

Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website: 

If you make a request, we must respond to you without undue delay and in any event within one month. To make a data protection rights request, please contact us using the contact details at the top of this privacy notice. 

Please note, our website may contain links to other websites that are not controlled by us. These links are provided for your convenience. We are only responsible for our privacy practices and our security. We recommend you check the privacy policies for any other websites that you visit. 

  1. Our lawful bases for the collection and use of your data

The following section describes the lawful bases upon which we may collect or use personal information. 

Our lawful bases for collecting or using personal information: 

a) to provide services and goods; 
b) for the operation of customer accounts and guarantees;
c) for legal requirements; and
d) for recruitment purposes; 

are: 

  • Consent - we may have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time. 

  • Contract – we may have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object. 

  • Legal obligation – we may have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
     

  • Public task – we may have to collect or use your information to carry out a task laid down in law, which the law intends to be performed by an organisation such as ours. All of your data protection rights may apply, except the right to erasure and the right to portability. 

Our lawful bases for collecting or using personal information for: 

e) service updates; and 
f) marketing purposes; 

are: 

  • Consent - we may have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time. 

  • Contract – we may have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object. 

  • Legal obligation – we may have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
     

  • Legitimate interests – we may collect or use your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are that information collected, stored, and processed for marketing purposes may be used for further purposes including keeping our customers up to date on new opportunities, carrying out market research, tailoring our marketing communications and to enhance customer satisfaction. For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above. 

  • Public task – we may have to collect or use your information to carry out a task laid down in law, which the law intends to be performed by an organisation such as ours. All of your data protection rights may apply, except the right to erasure and the right to portability. 

Our lawful bases for collecting or using personal information for: 

g) dealing with queries, complaints or claims; 

are: 

  • Consent - we may have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time. 

  • Contract – we may have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object. 

  • Legal obligation – we may have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
     

  • Legitimate interests – we may collect or use your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are that information collected, stored, and processed in relation to queries, complaints or claims may be used for the purposes of investigating such queries, complaints, and/or claims for the purposes of reaching a satisfactory resolution to such queries, complaints, and/or claims and for the purposes of identifying and making improvements to our products and/or services. For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above. 

  • Public task – we may have to collect or use your information to carry out a task laid down in law, which the law intends to be performed by an organisation such as ours. All of your data protection rights may apply, except the right to erasure and the right to portability. 

  1. Where we get personal information from

  • Directly from you, for example through the ‘contact us’ form on our website; 

  • Publicly available sources; 

  • Previous employers, for example requesting a reference from a previous employer during hiring processes; and 

  • Suppliers and service providers. 

  1. How long we keep information

We will normally keep your personal data for as long as you are interacting with us for any reason and thereafter for a period of seven years. If, after this point, we have not exchanged any communications, we will delete your data. For example, if you are a customer of ours then we will retain your information for as long as you remain a customer of ours and then for 7 years thereafter.

For more information on how long we store your personal information or the criteria we use to determine this please contact us using the details provided above.

  1. Who we share information with

We may share information with the following entities and organisations.

7.1. Data Processors

Accountancy and Financial Services Providers: These data processors perform the following activities for us: Processors of payroll information, tax information, pensions processing, general services relating to company financial compliance, and the like.

Legal and Human Resources Service Providers: These data processors perform the following activities for us: Processors of employee information, contractor, and consultant information including information relating to investors, shareholders, and the like for the purposes of providing services such as Human Resources management, legal services and advice, regulatory compliance purposes, and the like.

7.2. Others we may share personal information with:

  • Insurance companies; 

  • Professional or legal advisors; 

  • Financial or fraud investigation authorities; 

  • Relevant regulatory authorities; 

  • External auditors or inspectors; 

  • Warranty and guarantee providers; 

  • Professional consultants; 

  • Organisations we’re legally obliged to share personal information with; 

  • Emergency services; 

  • Publicly on our website, social media or other marketing and information media; 

  • Debt collection agencies; and 

  • Suppliers and service providers. 

  1. Sharing information outside the UK

Where necessary, we may transfer personal information outside of the UK for specific purposes or reasons. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place.

For example, Sol-gel Materials and Applications Ltd operates, from time to time, in the European Economic Area (EEA). As part of these operations, it may be necessary for us to share some personal information with one or more service providers operating and/or based within the EEA. The EEA is designated by the UK as a territory of ‘data adequacy’ to which data can be transferred due to high standards of protection for personal data. More information on the topic of ‘data adequacy’ can be found in the relevant government guidance.

We do not regularly transfer personal data outside of the United Kingdom or the EEA. However, transfers may be made to our third-party service providers (such as software as a service vendors) that are located outside the EEA. Where we transfer data out of the EEA, we will take proper steps to ensure that it is protected in accordance with this Privacy Policy and applicable privacy laws.

Examples of service providers outside the UK with whom we may share personal information includes accountancy and financial services providers, legal services providers, and the like. Such service providers may be under additional data protection requirements beyond core legislation imparted by their practice and membership of professional practice bodies.

For further information or to obtain a copy of the appropriate safeguard for any of the transfers below, please contact us using the contact information provided above.

  1. How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow Cheshire SK9 5AF
Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

  1. Last Updated

Privacy laws and practice are constantly developing, and we aim to meet industry standards. Our policies and procedures are, therefore, under regular review. We may, from time to time, update our security and privacy policies. We will ensure our website has our most up to date Privacy Policy and suggest check this page periodically to review our latest version.

This privacy policy was last updated on 21 October 2025