Privacy Policy

Relation Therapeutics Ltd ("the Company," "we," "us," or "our") (84 Wood Lane, Translation and Innovation Hub, London W12 0BZ, United Kingdom) is the data controller for personal data processed through relationrx.org under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. The Company operates a single-cell genomics research platform that trains foundation models on transcriptomic datasets to surface cell-population-level drug target hypotheses for computational biology researchers and drug discovery teams. This policy explains what personal data we process, why we process it, and your rights.

1. Data Controller

Relation Therapeutics Ltd (84 Wood Lane, Translation and Innovation Hub, London W12 0BZ, United Kingdom) is the data controller. You can reach us at [email protected] or +44 20 7946 0820.

Our platform is a pre-clinical research tool. It processes publicly sourced single-cell genomics reference data (scRNA-seq datasets from resources such as the Human Cell Atlas and CELLxGENE) to generate target hypotheses. It does not process patient clinical records or identifiable genomic data belonging to data subjects as part of its core service.

2. Personal Data We Process

We process the following categories of personal data when you interact with the Company or the platform:

  • Identity and contact data: name, email address, phone number, institution or organisation name, and role title provided when you submit a research access request or contact form;
  • Account data: email address and encrypted credentials for users granted access to the research portal;
  • Research interest descriptions: free-text descriptions of your disease indication focus or target discovery programme, submitted during the access application process;
  • Communications content: the content of emails and messages sent to [email protected] or through our contact form;
  • Technical data: IP address, browser type and version, operating system, referring URL, pages visited on relationrx.org, session duration, and device identifiers collected via server logs and, where you consent, analytics cookies;
  • Analytics data: aggregated usage patterns collected with your prior consent through analytics cookies, as described in our Cookie Policy.

We do not collect special-category personal data (such as health data, genetic data, biometric data for identification, or racial or ethnic origin) about platform users. The single-cell genomics datasets processed by the platform's foundation model are drawn from published public reference collections and are not linked to identifiable individuals in our systems.

3. Lawful Bases (Article 6 UK GDPR)

We rely on the following lawful bases:

  • Performance of a contract or steps prior to entering a contract (Article 6(1)(b)): to process your research access application, create and manage your platform account, and provide the research tool service;
  • Legitimate interests (Article 6(1)(f)): to operate and secure the platform infrastructure, respond to support enquiries, prevent fraud and misuse, and improve the foundation model and platform features. Our legitimate interests are not overridden by your rights where the processing involves ordinary operational and security activities for a research-tool service;
  • Legal obligation (Article 6(1)(c)): to comply with applicable UK law including recordkeeping and response to lawful requests from authorities;
  • Consent (Article 6(1)(a)): for non-essential cookies (analytics) and any direct marketing communications, where you have given specific and informed consent.

4. How We Use Your Data

We use personal data collected from drug discovery researchers and design partners to:

  • Review and respond to research access requests and evaluate whether an applicant's programme is within the scope of the platform's current capabilities;
  • Create and administer platform accounts for researchers granted early access;
  • Communicate with you about the status of your access request, your use of the platform, and updates to the service;
  • Improve the platform's target hypothesis output, cell-population retrieval, and interface based on aggregated usage signals (not individual research queries);
  • Operate the technical infrastructure of the platform securely, including authentication, session management, and CSRF protection;
  • Comply with our legal obligations.

We do not use your research interest descriptions or communications to train the platform's foundation model. The foundation model is trained on publicly available single-cell genomics reference datasets, not on data submitted by platform users.

5. Recipients and International Transfers

We share personal data only with processors acting under Article 28 UK GDPR contracts. These include cloud infrastructure providers and, where you consent, analytics providers. We do not sell personal data to third parties.

Transfers of personal data to processors outside the United Kingdom are protected by the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or a relevant UK adequacy regulation, as applicable to each transfer.

6. Retention

We retain personal data only for as long as it is needed for the purpose for which it was collected:

  • Research access application data and related communications: 24 months from the date of the last interaction, after which we delete or anonymise it;
  • Platform account data: retained while your account is active and for 12 months after account closure or last login, unless a longer period is required by law;
  • Server access logs: 90 days, after which logs are deleted or anonymised;
  • Analytics data (where consented): up to 13 months as noted in our Cookie Policy.

Retention periods may be extended where we are subject to a legal obligation to retain data for longer, or where data is required for the establishment, exercise, or defence of legal claims.

7. Your UK GDPR Rights

Under the UK GDPR and Data Protection Act 2018, you have the following rights in relation to your personal data:

  • Right of access: you may request a copy of the personal data we hold about you;
  • Right to rectification: you may ask us to correct inaccurate or incomplete data;
  • Right to erasure: you may ask us to delete your personal data in certain circumstances;
  • Right to restriction of processing: you may ask us to limit how we use your data in certain circumstances;
  • Right to data portability: you may request your data in a structured, commonly used, machine-readable format where processing is based on consent or contract and carried out by automated means;
  • Right to object: you may object to processing based on legitimate interests. You may also object to direct marketing at any time and without giving a reason;
  • Rights related to automated decision-making: we do not make automated decisions about you that produce legal or similarly significant effects.

To exercise any of these rights, email us at [email protected]. We respond within one month of receipt of a valid request. That period may be extended by up to two further months where your request is complex or where we receive a large number of requests at the same time; we will notify you of any extension within the first month.

8. Right to Lodge a Complaint with the ICO

You have the right to lodge a complaint with the UK Information Commissioner's Office ("ICO") if you believe we have not handled your personal data in accordance with the UK GDPR. The ICO's website is ico.org.uk; helpline 0303 123 1113. We ask that you contact us first so we can try to resolve your concern.

9. Cookies

We use cookies and similar technologies on relationrx.org. Non-essential cookies (analytics) are not set until you give your prior consent through our cookie banner, consistent with the Privacy and Electronic Communications Regulations (PECR). See our Cookie Policy for full details of the cookies we use and how to manage your preferences.

10. Security

We implement technical and organisational security measures appropriate to the risks of processing personal data in a research-tool context. The platform infrastructure is designed with access controls, encrypted data at rest and in transit, and authentication mechanisms. These controls are reviewed and updated as the platform develops.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes are reflected by an updated "Last updated" date at the top of this page. We encourage you to review this page periodically.

12. Contact

Relation Therapeutics Ltd
84 Wood Lane, Translation and Innovation Hub
London W12 0BZ, United Kingdom
Email: [email protected]
Phone: +44 20 7946 0820