Privacy Notice
Last updated: October 2026
Who we are
Med eTech Innovation is the trading name of Medetech Innovation Ltd. ("Med eTech", "we", "us"), a clinical research organisation registered in Scotland (company number SC597321) and based in Dundee, Scotland, UK. We are the data controller for personal data collected through this website and in our day-to-day business contact with sponsors, partners and other organisations.
How to contact us about your data
We are not required to appoint a formal Data Protection Officer under UK GDPR. Our Director & CEO, Stephen Leiper, is responsible for data protection and can be contacted at dpo@medetech.org.
What this notice covers
This notice covers visitors to this website, people who contact us, subscribers to our news updates and business contacts. It does not cover clinical trial participants. If you take part in a study we support, you will receive a separate, study-specific participant information sheet explaining how your data is used.
Personal data we collect
- Enquiries: your name, email address, organisation, area of interest and message when you contact us through the website form or by email.
- News and business updates: work email address, name, job title and organisation of business contacts we send news and service updates to, and of anyone who signs up for news on our website.
- Business contacts: names, job titles and work contact details of people at sponsors, partners and suppliers.
- Technical data: standard server logs (such as IP address, browser type and pages requested) kept by our hosting provider for security and performance.
Why we use it and our lawful basis
- Responding to enquiries and managing business relationships: our legitimate interests in running and developing our business, or steps taken at your request before entering into a contract.
- Sending news and service updates to business contacts: our legitimate interests in telling organisations we work with, or could work with, about our clinical research services. We only send these to people in their professional capacity at companies and other organisations, not to individuals or sole traders, and only about services relevant to their role. Where you sign up for news through our website, we rely on your consent.
- Your right to opt out: every email includes an unsubscribe link, and you can also object at any time by contacting privacy@medetech.org. We will stop straight away and keep only the minimum details needed to make sure we do not contact you again.
- Keeping the website secure and working: our legitimate interests.
- Meeting legal and regulatory obligations: legal obligation.
Cookies
This website does not use advertising or analytics cookies. Web fonts are loaded from Google Fonts, which means your browser connects to Google's servers and shares your IP address with Google when you visit.
Who we share it with
We do not sell personal data. We share it only with trusted service providers who help us operate, under contracts that require them to protect it, including our website hosting provider (Krystal Hosting, UK), our email and IT providers, and Brevo, which we use to send news updates. We may also share data where required by law or by a regulator.
International transfers
Some of our service providers may process data outside the UK. Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.
How long we keep it
We keep personal data only for as long as we need it for the purposes above. Enquiry correspondence is kept for up to 24 months after our last contact, unless it leads to an ongoing business relationship. Business contact details used for news and service updates are kept until you unsubscribe or object, or until they are no longer relevant to our business. We review our mailing lists at least once a year.
Your rights
Under UK GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its use (including an absolute right to object to direct marketing), to data portability, and to withdraw consent at any time where we rely on consent. To use any of these rights, email privacy@medetech.org. We will respond within one month.
Complaints
If you have a concern, please contact our data protection lead at dpo@medetech.org first. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes to this notice
We may update this notice from time to time. The latest version will always be available on this page.