Privacy & security.

01Who We Are

This policy explains how OneSC (“we”, “us”, “our”) collects, uses and protects personal information when you visit our website, contact us or use our products. OneSC is the data controller for personal information collected through this website. Our address is 124 City Road, London, EC1V 2NX, United Kingdom.

Where we process data on behalf of our customers inside the OneSC products, we act as a data processor under our customer agreements, and our customer is the controller.

02Information We Collect

We collect the following types of information:

• Contact details you give us through our forms, such as your name, work email address, role and organisation.
• Enquiry details, such as the product you are interested in and the content of your message.
• Account and usage information when you use our products, such as user details, audit trail entries and activity logs.
• Technical information collected automatically, such as your IP address, browser type, device information and pages visited.

03How We Use Your Information

We use your information to:

• Respond to your enquiries and arrange demos.
• Provide, maintain and support our products and services.
• Send you service updates and, where you have agreed, marketing communications.
• Improve our website and products.
• Keep our website and products secure and prevent misuse.
• Meet our legal and regulatory obligations.

04Lawful Bases for Processing

Under the UK GDPR and EU GDPR, we rely on the following lawful bases:

• Contract, where processing is needed to provide our products and services to you or your organisation.
• Legitimate interests, such as responding to business enquiries, improving our services and keeping them secure.
• Consent, for non-essential cookies and marketing communications. You can withdraw consent at any time.
• Legal obligation, where we must process information to comply with the law.

05Sharing Your Information

We do not sell your personal information. We share it only with:

• Service providers who help us run our business, such as hosting, email and customer support providers, under contracts that protect your data.
• Professional advisers, such as lawyers and auditors.
• Regulators, law enforcement or other authorities where the law requires it.
• A buyer or successor in the event of a merger, acquisition or sale of assets, subject to equivalent protections.

06International Transfers

Where we transfer personal information outside the UK or European Economic Area, we make sure appropriate safeguards are in place, such as adequacy regulations or standard contractual clauses.

07How Long We Keep Your Information

We keep personal information only for as long as we need it for the purposes described in this policy, including to meet legal, regulatory, accounting and reporting requirements. Records held within our products are retained in line with our customer agreements and applicable GxP requirements.

08Your Rights

Depending on where you are, you may have the right to:

• Access the personal information we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Ask us to delete your information.
• Object to or restrict how we use your information.
• Ask us to transfer your information to another organisation.
• Withdraw your consent at any time, where we rely on consent.

To exercise any of these rights, email info@onesc.com. We will respond within one month.

09Security

We take the security of your information seriously. Our products are built for regulated life-sciences environments and designed to support FDA 21 CFR Part 11, EU GMP Annex 11 and GAMP 5. Our measures include:

• Encryption of data in transit and at rest.
• Role-based access controls and single sign-on.
• Complete, time-stamped audit trails that cannot be altered.
• Separate production, test and training environments.
• Regular backups and monitoring.

No system is completely secure. If you believe your information has been compromised, please contact us straight away.

10Cookie Policy

Cookies are small text files stored on your device when you visit a website. We use the following types of cookies:

We only set non-essential cookies with your consent.

11Managing Cookies

You can change your cookie choices at any time through our cookie banner. You can also block or delete cookies in your browser settings, although some parts of the website may not work properly if you do.

12Changes to This Policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.

13Contact Us and Complaints

If you have any questions about this policy or how we handle your information, email info@onesc.com or write to us at 124 City Road, London, EC1V 2NX.

If you are not happy with our response, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.