Privacy & cookies.

Who we are.

This website belongs to Elixir Consulting Ltd ("elixir", "we", "us"), a clinical diagnostics advisory and the UK partner for Technoclone GmbH. For the personal data described here, we are the data controller. As a small organisation we are not required to appoint a Data Protection Officer; privacy questions reach the director directly.

This notice covers elixir-consulting.co.uk only. It does not cover any third-party website we link to; those sites have their own privacy notices.

What we collect, and how.

We collect only what you choose to give us. There is no account to create, and we do not buy in or build profiles about visitors.

• Your name — so we know who we are replying to.
• Your organisation and role — your laboratory, trust, department or company, where you give it, so we can put the enquiry in context.
• Your email address — the address we use to respond.
• Your enquiry — whatever you tell us about what you need, in your own words.

How the quote-request form works

We think it is fairer to say this plainly. The form does not send your details to a server of ours as you type. When you submit it, the form opens a draft email in your default email client or webmail, pre-filled with what you entered. We receive nothing until you choose to send that email from your device. If you close the draft instead, no personal data reaches us at all. We then hold your enquiry the way we hold any email correspondence.

Purpose and lawful basis.

We use the information you send for one purpose — to respond to and fulfil your enquiry: to understand what you need, to reply, to scope or quote for work, and to carry it out if you decide to go ahead. We do not use it for marketing, and we do not sell or share it for anyone else's marketing.

Under the UK GDPR, our lawful bases are:

• Legitimate interests (Article 6(1)(f)) — responding helpfully to an enquiry you have sent us is a reasonable use of your details that you would expect; we have carried out a legitimate interests assessment and concluded it does not override your rights.
• Steps prior to a contract (Article 6(1)(b)) — where your enquiry is about engaging us, we may use your details to take the steps you ask for before any agreement, and then to perform that agreement.

We hold the principle of data minimisation: we collect only what is needed for that purpose, and no more.

Cookies and analytics.

We use cookies to understand how the site is used, so we can improve it. Analytics cookies are set only if you accept them.

When you first visit, a banner asks whether you accept analytics cookies. Until you choose, no analytics or other non-essential cookies are set. If you accept, we use Google Analytics 4 and Microsoft Clarity to see which pages are visited, how people move through the site, and where they click, so we can make it more useful. These tools are provided by Google and Microsoft, who act as our processors; the data may be processed outside the UK under the appropriate safeguards (such as the UK Addendum to the EU standard contractual clauses, or an adequacy decision). We do not sell your data.

One small strictly-necessary cookie records your cookie choice so we do not ask again; it carries no analytics. You can change or withdraw consent at any time using Cookie preferences in the footer, and our full Cookie policy lists each cookie and its purpose.

Security and retention.

Your enquiry is held in our business email and ordinary working records so we can deal with it. Our business email and working tools are provided by established third-party suppliers who act as our data processors under contract — they hold your data only to provide those services to us, not for their own purposes. Access is limited to the people at elixir who need it to respond to you, and we take reasonable steps to keep it secure.

We keep it no longer than necessary. If the enquiry does not lead to work, we hold it only as long as we reasonably need to for the conversation and any sensible follow-up, then delete it. Where it does lead to work, we keep what we must to deliver that work and to meet our legal, tax and professional-record obligations, after which it is deleted or anonymised.

Your rights.

Under UK data-protection law you have rights over your personal data. We will not charge you for exercising them in the ordinary case, and we will respond within one month — or up to three months for complex or numerous requests, as UK GDPR Article 12 allows, telling you if we need the extra time.

To exercise any of these, contact us by email. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office (ICO), the UK's data-protection regulator, at ico.org.uk. We would appreciate the chance to put things right first, but it is your right to go straight to them.

Privacy questions.

For any privacy question — including a request to see, correct or delete your data — please email us. Marking your message "data protection enquiry" helps us route it quickly.