Privacy Policy

1. Data Controller Identification

This Privacy Policy governs the processing of personal data collected by PulseForge Information Services Ltd ("PulseForge", "we", "us", or "our"), a company registered in England and Wales under Company Registration Number 12894572, with its registered office situated at:

2. Categories of Personal Data Collected

Depending on your interaction with our research portal, we may process the following data categories:

• Identity & Contact Data: Name, academic/clinical title, institutional affiliation, postal address, and email address when completing inquiry forms or purchasing research compendiums.
• Technical & Telemetry Data: IP address, browser type and version, operating system, time zone setting, and anonymized access logs for server security.
• Usage & Interaction Data: Page browsing patterns, interaction with the Vitality Assessment Calculator (processed strictly client-side unless submitted), and download records.
• Transactional Data: Fulfillment records, VAT invoices, and transaction reference IDs (we do not store full credit card numbers).

3. Lawful Basis for Processing (UK GDPR Art. 6)

We process personal data strictly where permitted under statutory law: (a) Contractual Necessity to deliver requested monographs or licensing services; (b) Legitimate Interests to maintain portal integrity, prevent fraud, and optimize academic presentation; (c) Legal Obligation to comply with statutory accounting and tax laws; and (d) Consent for voluntary research newsletter subscriptions.

4. Data Retention & International Transfers

Personal data is retained only for the duration necessary to satisfy the purpose for which it was collected, or to satisfy statutory UK tax retention mandates (6 years for fiscal transaction records). Where data is processed outside the UK/EEA, appropriate safeguards such as UK International Data Transfer Agreements (IDTAs) and Standard Contractual Clauses are implemented.

5. Your Statutory Data Subject Rights

Under UK GDPR and the Data Protection Act 2018, you possess the right to:

• Request access to the personal data we hold about you (Subject Access Request).
• Request rectification of inaccurate or incomplete personal records.
• Request erasure of personal data ("right to be forgotten") where retention is no longer legally mandated.
• Object to or restrict specific forms of data processing.
• Request portability of your personal data in a structured, machine-readable format.
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

6. Data Protection Officer Contact

To exercise any of your statutory rights or raise questions regarding our data practices, please contact our Data Protection Officer at compliance@Array or by mail to our Mayfair address.