Privacy Notice 

Medicxi takes the issue of privacy seriously.

This Privacy Notice (the "Notice" applies to the processing of your personal data when you visit our website and when you use our mobile application, and the Notice explains the personal data we collect, how we use it, who we share it with, and your rights under applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR).

What personal data we collect

We may collect the following types of data:

• Contact data: Your contact details (name, job title, address, email addresses, telephone numbers).
• Identity and financial data: Information required to meet legal and regulatory requirements, including anti-money laundering legislation.
• Cookies data: the information collected through the cookies and similar technologies listed in our Cookies settings.
• Communications data: Other information that you may provide to us directly in correspondence.
• Technical data: IP address and cookie data (please also refer to our Cookie settings).
• Employment information: If you are applying for a job with us, we may collect personal information relating to your previous employment, qualifications, your nationality and immigration/residential status and references from third parties.
• Content data: information that you store or generate in the mobile application.
• Usage data: logs and detail of your use of our mobile application and services, including, but not limited to the dates and times on which you download, access and update the mobile application, any error or debugging information, and the resources that you access, and the actions we and you take in relation to them and Cookies Data.
• Other personal data that is publicly available.

How we collect your data

• Medicxi will generally collect data directly from you but we may collect data from third parties or publically available sources such as internet, social networks or commercial registers.

How we use your data

Medicxi may use this data:

• to perform a contract which we may have with you.
• to comply with our legal and regulatory obligations, including AML/KYC checks
• for our legitimate business interests, including:
  • to provide our services to you as effectively as possible
  • to run our day-to-day business operations
  • for our recruitment processes
  • to host relevant events

If there is no other lawful basis under EU / UK GDPR to process your personal data, then we will obtain your consent before processing.

Data Sharing and Transfers

We may share your personal data with:

• Entities within the Medicxi group.
• Third-party service providers such as legal advisers, auditors, IT support, payroll and compliance providers.
• Regulators, authorities, or legal institutions when required by law.

Where we transfer your personal data to another country outside of the EEA or UK, we will ensure that it is protected and transferred in accordance with the legal requirements, including using Standard Contractual Clauses (SCCs) approved by the European Commission or UK Information Commissioner if no EU / UK adequacy decision in respect of that country exists.

In respect of transfers of personal data within the Medicxi group, all our offices are in jurisdictions for which EU and UK adequacy decisions are in place (UK, Switzerland, Jersey).

Data Retention

We will retain your personal data for the duration of our business relationship and, thereafter, only as long as is reasonably required to fulfil legal, contractual or statutory obligations and/or where we have a legitimate business interest to do so.

Your Data Protection Rights

In accordance with the applicable law, you have the following rights (each, a “Right”) in respect of your personal data:

• the Right to request details of your personal data that we hold and receive a copy of such details.
• the Right to have any of your incorrect personal data corrected.
• the Right to request that your personal data is deleted or that we cease processing your personal data.
• the Right to withdraw your consent to our processing of your personal data, where we rely on such consent.
• the Right to have your personal data sent to yourself or another organization in machine readable format.
• the Right to object to, or the Right to request that we restrict, our processing of your Personal Data in certain circumstances.

Please note that the above-mentioned Rights, except for the Right to withdraw your consent, are not absolute. Under certain conditions, we may refuse to comply with your request to exercise the above-mentioned Rights. If we refuse your request, you will be informed of the reasons for refusal.

Your Data Protection Rights

If you wish to exercise any of the Rights set out above or have any questions about our Privacy Notice, please contact info@medicxi.com.

We aim to address any privacy-related questions, concerns or complaints promptly and effectively. You have the right to raise the matter with the relevant data protection authority in your jurisdiction. In the UK, this is the Information Commissioner’s Office (www.ico.org.uk / Tel: 0303 123 1113).

We would, however, appreciate the chance to deal with your concerns before you approach the relevant data protection authority. We therefore would like to ask you to please contact us in the first instance.

Mobile Application and Push Notifications

If you use our mobile application, we may collect technical data such as device identifiers, app version, crash diagnostics and analytics to help us operate and improve the app. We may also process your preferences for in-app communications and push notifications to deliver relevant service messages.

Where you enable push notifications, we may use a push notification service provider (such as Firebase Cloud Messaging) to send notifications to your device; this involves the processing of device tokens and related metadata to route messages. You can control push notifications through your device settings and, where applicable, within the app. We rely on our legitimate interests to operate and secure the app and to provide service communications, and we will seek your consent where required by applicable law for optionals notifications or analytics.

Third Party Links and Sites

Our mobile application and service may, from time to time, contain links to and from the websites of third parties. Please note that these websites (and any services accessible through them) are controlled by those third parties and are not covered by this privacy notice. You should review their own privacy notices to understand how they use your personal data before you submit any personal data to these websites or use these services.

Cookies and Tracking Technologies

If you use our website and mobile application, we may use cookies or similar technologies for functionality and analytics. For more information, please see our Cookie settings.

Updates to This Notice

We may change our Privacy Notice from time to time. Please check this page from time to time to ensure you are aware of any changes that are adopted.

We last updated this Notice in March 2026.