Privacy Policy

1. Who we are

This website is operated by Mariposa Therapeutics Ltd ("Mariposa", "we", "us", "our"), a company registered in England and Wales under company number 12373627, with its registered office at International House, 10 Churchill Way, Cardiff, CF10 2HE, United Kingdom.

For the purposes of UK data protection law — the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 — Mariposa is the data controller for personal data processed through this website.

2. Scope of this policy

This policy covers this website and any personal data we receive when you contact us through it. It does not cover third-party websites we link to, which have their own privacy policies.

3. What information we collect

This is an informational website. It does not host contact forms, accounts, logins, or e-commerce, and we do not use advertising or tracking cookies. We collect personal data in only two ways:

Information you give us

If you email us using an address published on this site (for example, our general enquiries or scientific partnerships addresses), we receive and process your email address, your name if you provide it, and the contents of your message. You choose what to share with us.

Technical information

Like almost all websites, our hosting infrastructure automatically records limited technical data when a page is served — such as your IP address, browser type, and the pages requested. This is used to operate the site securely and reliably. In addition, this site loads typefaces from Google Fonts and images from a content delivery network; by their nature, these services receive your IP address in order to deliver content to your browser. We do not combine this technical data with your identity, and we do not use it to build a profile of you.

4. How and why we use your information

We use the personal data described above to:

• respond to your enquiry and correspond with you;
• operate, maintain, and secure the website; and
• comply with our legal and regulatory obligations.

Our lawful bases under UK GDPR are our legitimate interests (running our business, responding to those who contact us, and keeping the site secure) and, where relevant, taking steps at your request prior to entering into a contract or relationship. Where we would ever rely on your consent, we will ask for it separately and you may withdraw it at any time.

5. Who we share it with

We do not sell your personal data, and we do not share it for marketing purposes. We share personal data only with:

• service providers who help us operate the site and our email (for example, our web host, content delivery and font providers, and email provider), acting on our instructions;
• professional advisers (such as lawyers and auditors) where necessary; and
• regulators, law enforcement, or other authorities where we are legally required to do so.

6. International transfers

Some of our service providers (including the font and content delivery services referred to above) may process data outside the United Kingdom. Where personal data is transferred outside the UK, we rely on an adequacy regulation or appropriate safeguards (such as the UK International Data Transfer Agreement or Addendum, or Standard Contractual Clauses) so that your data remains protected.

7. How long we keep it

We keep correspondence for as long as is necessary to deal with your enquiry and to maintain a record of our dealings with you, after which we delete or anonymise it. Technical logs are kept only for a short period for security and operational purposes.

8. How we protect your information

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. No transmission over the internet can be guaranteed to be completely secure, but we work to protect the limited data we hold.

9. Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to our processing in certain circumstances;
• data portability in certain circumstances; and
• withdraw consent, where we rely on it.

To exercise any of these rights, please contact us using the details below. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk — although we would appreciate the chance to address your concerns first.

10. Children

This website is intended for a general and professional audience and is not directed at children. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "last updated" date above. Material changes will be made clear on this page.

12. How to contact us

For any question about this policy or about how we handle your personal data, please contact us: