01Who we are
Pharmaexpo Ltd (trading as PExpo) is the data controller for personal data processed in connection with this website and the PExpo platform.
Company registered in England & Wales, company number 12993595. Registered office: 277–279 Chiswick High Road, London, W4 4PU, United Kingdom. We are registered with the UK Information Commissioner's Office (ICO).
02What personal data we collect
Depending on how you interact with us, we may collect:
- Contact form submissions — name, email, organisation, role, message, and anything else you choose to send via our JotForm-hosted forms.
- Booking data — meeting times, attendee names and emails captured via Cal.com.
- Cookies — essential session cookies, plus optional analytics and marketing cookies where consented.
- Server and security logs — IP address, user agent, request timestamps, referrer.
- Ad pixel data — anonymous identifiers and event payloads passed to Meta, Google, Reddit, TikTok and similar platforms where consented.
For clinic and white-label accounts in production, we will additionally process the data described in your signed Data Processing Agreement. We do not collect patient-identifiable clinical data through this marketing website.
03Legal bases under UK GDPR
We rely on the following lawful bases under Article 6 of the UK GDPR:
- Legitimate interests — for responding to enquiries, qualifying leads, fraud prevention and securing our infrastructure. We have balanced our interests against your rights and freedoms.
- Consent — for non-essential cookies, marketing emails, and ad pixel placement. You can withdraw consent at any time.
- Contract — to perform our agreements with clinic and white-label customers.
- Legal obligation — to meet HMRC, ICO, GPhC and MHRA record-keeping requirements.
04Why we collect it
- To respond to enquiries you submit through our forms.
- To qualify whether the clinic or white-label model is appropriate, and route you to the correct team.
- To schedule onboarding and discovery calls.
- To send onboarding, transactional and (where consented) marketing communications.
- To measure marketing performance and improve the product.
- To keep the platform secure, available and audit-ready.
05Who we share it with
We use a small number of carefully chosen subprocessors to operate the platform. Personal data may be shared with:
- JotForm Inc. — form intake and submission storage.
- Cal.com, Inc. — calendar booking and meeting reminders.
- Cloudflare, Inc. — DNS, CDN, security and edge compute.
- Customer.io, Inc. — transactional and lifecycle email.
- Google LLC / Meta Platforms, Inc. — analytics and advertising pixels, where consented.
- GitHub, Inc. — source hosting and operational tooling.
- Your clinic or brand contact — where you have engaged us under a clinic or white-label agreement, your data may be shared with the relevant counterparty.
Where any subprocessor is based outside the UK, transfers are protected by the UK International Data Transfer Addendum and Standard Contractual Clauses.
06How long we keep it
- Lead and enquiry data — 24 months from last contact, unless we enter a contract.
- Marketing data — until you opt out or unsubscribe.
- Transactional and financial records — 7 years per HMRC requirements.
- Security and access logs — 90 days as standard, longer where retained for investigation.
07Your rights under UK GDPR
You have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erasure ("right to be forgotten") of your data, subject to legal hold periods.
- Restrict processing in certain circumstances.
- Portability — receive your data in a structured, machine-readable format.
- Object to processing based on legitimate interests or for direct marketing.
- Withdraw consent for any consent-based processing.
- Lodge a complaint with the Information Commissioner's Office at ico.org.uk.
To exercise any of these rights, email hello@pexpo.co.uk. We respond within one calendar month.
08Children
The PExpo platform is a B2B service for UK clinics and brands. It is not directed at children, and we do not knowingly collect personal data from anyone under 18 through this website.
09Updates to this policy
We may update this policy from time to time. The "Last updated" date at the top of the page reflects the most recent revision. Where changes are material, we will notify customers directly.
For any privacy questions, requests or complaints, contact:
Pharmaexpo Ltd
277–279 Chiswick High Road
London, W4 4PU, United Kingdom
Email: hello@pexpo.co.uk