Privacy Notice

This notice was last updated in August 2026.

Introduction

We are CardiaTec Biosciences Ltd, a company registered in England and Wales under company number 13634184, with our registered office at Ketton Suite, The King Centre, Main Road, Barleythorpe, Oakham, Rutland, England, LE15 7WD (“CardiaTec”, “we”, “our” or “us”).

If you have any questions about this notice, would like to make a complaint or wish to exercise your legal rights, please contact us at info@cardiatec.ai.

How do you use my data?

When you contact us

When you contact us by phone, email, on social media or at an event, we will usually collect your name, email address, telephone number, social media handle, role or title, organisation name and address, and any other information you provide.

This includes information provided when you interact with us as an existing or prospective scientific or commercial partner, research institution, hospital, investor, contractor, consultant, supplier or other professional contact.

We use this information because it is in our legitimate interests to respond to your inquiry, discuss your interest in our work and manage our professional relationship with you or your organisation.

Where your inquiry relates to an agreement with us, we may also use your information to take steps before entering into a contract or to perform that contract.

To send you news and updates

When you have opted in to receive communications from us, such as updates about our work, events, publications or investment opportunities, we will collect your name and email address and send these communications based on your consent.

Where you have previously expressed an interest in CardiaTec, such as by meeting us at a conference or engaging with us professionally, we may send you relevant professional communications because it is in our legitimate interests to promote our work, where permitted by applicable electronic marketing laws.

You can withdraw your consent or opt out at any time by contacting info@cardiatec.ai or following the unsubscribe link in the communication.

If you express an interest in investing in CardiaTec

If you express an interest in investing in CardiaTec, we will usually collect your name, email address, telephone number, role or title, organisation name and address, financial information and any information required for appropriate identity or due-diligence checks.

We use this information because it is in our legitimate interests to assess potential investments and raise finance for our business.

If you go on to invest, we will process the information required to enter into and perform our agreement with you and to comply with relevant legal and regulatory obligations.

When you apply for a position with us

When you apply for a position with CardiaTec, we may collect your name, contact details, CV, employment history, qualifications, accreditations, interview or assessment results, right-to-work documentation, references and information received from recruitment agencies or other recruitment partners.

We use this information to assess your suitability for our available roles and manage the recruitment process. We do this to take steps at your request before entering into an employment or consultancy contract and because it is in our legitimate interests to recruit suitable individuals.

Where we process right-to-work documentation, we do so to comply with our legal obligations.

We may process health or disability information where necessary to provide reasonable adjustments during the recruitment process and where permitted by employment and data protection law.

If your application is unsuccessful, we will normally retain your recruitment information for up to six months after the recruitment process. We may ask for your permission to retain it for longer so that we can consider you for future opportunities.

If you become an employee or contractor, we will provide further privacy information about how we process personal data during your employment or engagement.

If our business is sold or reorganised

We may process or share your information in connection with a proposed investment, financing, merger, reorganisation, acquisition or sale of all or part of our business.

We do this because it is in our legitimate interests to ensure that our business can continue and that the proposed transaction can be assessed and completed.

Where possible, we will share anonymised information. Where personal data must be shared, this will take place in controlled circumstances and subject to appropriate confidentiality arrangements.

When we arrange events, gifts or hospitality

If we arrange an event, hospitality or a professional gift for you, we may collect and use your name, contact details, organisation, delivery address and any other information reasonably required to make the arrangements.

We use this information because it is in our legitimate interests to manage our professional relationships and arrange appropriate events, gifts and hospitality.

Who do you share my data with?

We may share your personal data where required by law, where necessary to administer our relationship with you or where we have another legitimate reason to do so. This may include:

Business partners, suppliers and subcontractors: where necessary to perform an agreement with them or with you, or to support our website, IT systems, recruitment, accounting, legal, security, research or business operations.

Events, gifts and hospitality partners: we may share the information necessary to make arrangements with event organisers, venues, gift suppliers, delivery companies and other relevant service providers. We do not sell personal data for marketing purposes.

Regulators, authorities and enforcement agencies: where we are required to disclose personal data to comply with a legal obligation or to prevent or investigate fraud, security incidents or unlawful activity.

Prospective investors or purchasers: where necessary in connection with an investment, financing or proposed sale of our business. Any negotiations involving personal data will be subject to appropriate confidentiality arrangements.

Where do you store my data?

We store personal data using our own systems and third-party service providers, primarily in the United Kingdom and European Economic Area.

Where we transfer personal data outside the United Kingdom or European Economic Area, we ensure that it receives the additional protection required by law. This may include relying on an adequacy decision or using approved contractual safeguards.

To keep this notice concise, we have not described the specific safeguard used for every provider or transfer. You may contact us at info@cardiatec.ai for more information.

How long do you keep my data?

We retain personal data only for as long as we need it, unless we are required to keep it for longer to comply with legal, accounting, regulatory or contractual requirements or to manage potential legal claims.

The applicable period will depend on the nature of the information and our relationship with you.

What are my rights under data protection law?

Depending on the circumstances, you may have the right to:

• access the personal data we hold about you;
• ask us to correct incomplete or inaccurate information;
• ask us to erase your personal data;
• ask us to restrict how we use your personal data;
• ask us to transfer certain personal data to you or another organisation;
• object to how we use your personal data; and
• withdraw your consent where we rely on consent.

These rights are not absolute and will not be available in every situation.

To exercise your rights, contact us at info@cardiatec.ai.

You also have the right to lodge a complaint with us or with the Information Commissioner’s Office, the UK supervisory authority for data protection. If you are based in the European Economic Area, you may also contact the supervisory authority in your country.

Cookie Notice

We do not currently use any essential or non-essential cookies on our website.

Contact

CardiaTec Biosciences Ltd 9 Hills Road, Cambridge, Cambridgeshire, CB2 1GE

Email: info@cardiatec.ai