AmaranthLabs
Contact Us

Legal

Privacy Policy

Last updated: March 2026

AmaranthLabs Ltd (“we”, “us”, “our”) is the data controller for personal data collected through this website (amaranthlabs.co.uk) and our job application process. We are registered in England and Wales. Our registered office is at Abingdon Science Park, Abingdon, Oxfordshire OX14 3YS.

We are committed to protecting your personal data and processing it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data We Collect and Why

We process personal data for the following purposes, each with its own lawful basis:

Contact and enquiry forms

Name, company, email address, role, and message content submitted via our website forms.

Lawful basis: Legitimate interests (Article 6(1)(f)) – to respond to business enquiries and assess commercial opportunities.

Retention: 2 years from the date of last contact, then securely deleted.

Job applications

Name, email address, CV, cover letter, and any other information you voluntarily provide as part of an application.

Lawful basis: Legitimate interests (Article 6(1)(f)) – to assess suitability for employment and manage our recruitment process.

Retention: Unsuccessful applicants: 6 months from the close of the role. Successful applicants: data transfers to your employment record and is retained for the duration of employment plus 6 years.

Website usage data

IP addresses, browser type, pages visited, and time spent on the site, collected automatically via cookies and analytics.

Lawful basis: Legitimate interests (Article 6(1)(f)) – to maintain and improve our website.

Retention: Aggregated analytics data is retained for up to 26 months. Raw logs are deleted after 90 days.

2. Cookies

We use cookies that are strictly necessary for the website to function. We may also use analytics cookies to understand how visitors use the site. You can adjust or disable non-essential cookies through your browser settings at any time. Disabling cookies may affect some functionality of the site.

3. Third-Party Processors

We share data with the following processors who act on our instructions:

  • Vercel Inc. – website hosting and infrastructure. Servers are located in the EU/EEA.
  • Resend Inc. – transactional email delivery (i.e. forwarding form submissions to our team).
  • Google LLC – reCAPTCHA (spam prevention on forms). Subject to Google's privacy policy. Data may be transferred to the US under Standard Contractual Clauses.

We do not sell your personal data to third parties. Data may be disclosed where required by law or to protect our legal rights, or in connection with a business transfer such as a merger or acquisition.

4. International Transfers

Some of our processors (Google, Resend) may transfer data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the ICO or reliance on an adequacy decision.

5. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include encrypted data transmission (HTTPS) and access controls. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

6. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

  • Right of access – request a copy of the personal data we hold about you.
  • Right to rectification – request correction of inaccurate or incomplete data.
  • Right to erasure – request deletion of your data where there is no overriding reason for us to retain it.
  • Right to restriction – request that we limit how we use your data in certain circumstances.
  • Right to data portability – receive your data in a structured, machine-readable format where processing is based on consent or contract.
  • Right to object – object to processing based on legitimate interests. We will stop unless we can demonstrate compelling legitimate grounds.
  • Rights related to automated decision-making – we do not make solely automated decisions that produce legal or similarly significant effects on you.

To exercise any of these rights, contact us at hello@amaranthlabs.co.uk. We will respond within one month. There is no charge for making a request.

7. Right to Complain

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

We would appreciate the opportunity to address your concerns before you contact the ICO, so please reach out to us first.

8. Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top of this page will reflect any changes. Continued use of the website after any update constitutes acceptance of the revised policy.

9. Contact

For any privacy-related enquiries, please contact us at hello@amaranthlabs.co.uk or by post at Abingdon Science Park, Abingdon, Oxfordshire OX14 3YS.