Privacy Policy

Who we are

Sora Lifesciences is a healthcare advisory firm providing market intelligence, commercialization, and clinical-evidence services to MedTech, IVD, BioTech, and BioPharma organizations. For the purposes of GDPR, Sora is the data controller for personal data collected through this website.

If you have any questions about this policy or how we handle your data, contact us using our contact form at /contact.

What data we collect

• Contact and enquiry data you submit through our forms — such as your name, work email, company, and the content of your message or matchmaking request.
• Technical and usage data — such as IP address, approximate location derived from it, browser and device type, referring page, and the pages you view. This is collected by Google Analytics only where you have consented to analytics cookies, and is not collected at all if you decline.
• Communication data — records of correspondence when you contact us by email or through the site.

How we use your data and our legal bases

We use your personal data to respond to enquiries, provide and improve our services, and communicate with you about engagements you have requested.

• Consent — for analytics cookies, the only non-essential technology on this site. You may withdraw consent at any time via “Cookie Settings” in the footer.
• Legitimate interests — to respond to your enquiries, operate and secure the website, and understand how it is used, balanced against your rights.
• Contract — where processing is necessary to take steps at your request before entering into, or to perform, an engagement.
• Legal obligation — where we must retain records or comply with applicable law.

Cookies

We use a small number of cookies and similar technologies. Strictly necessary cookies are always active. The only non-essential technology is Google Analytics, which loads solely after you consent; we use no advertising, social or cross-site tracking cookies. You can change or withdraw your choice at any time via the “Cookie Settings” link in the footer. See our Cookie Policy for full details.

Sharing your data

We do not sell your personal data, and we do not share it for advertising purposes. We share it only with the service providers needed to run this website, each acting on our instructions under a data-processing agreement:

• Google (Google Analytics 4) — receives technical and usage data described above, but only if you consent to analytics cookies. We run Analytics with all advertising features disabled, so this data is not used for ad targeting or cross-site tracking.
• Our form-handling provider — receives the details you submit through a contact or enquiry form, in order to deliver that enquiry to us.
• Our hosting and email providers — process data incidentally in the course of serving the website and handling correspondence.

International transfers

Google Analytics is operated by Google, which may process data on servers outside the EEA and the UK, including in the United States. Where that happens we rely on the safeguards in Google’s data-processing terms, which incorporate the European Commission’s Standard Contractual Clauses, together with Google LLC’s certification under the EU–US Data Privacy Framework and its UK extension.

If you do not consent to analytics cookies, no data is sent to Google and no such transfer takes place.

How long we keep it

We keep personal data only for as long as necessary for the purposes described above, to comply with our legal obligations, and to resolve disputes. Enquiry data is retained for the period needed to handle your request and any resulting engagement, then deleted or anonymized.

Analytics data is retained by Google Analytics for the retention period configured on our property, after which it is deleted automatically. Your cookie choice itself is stored on your device for up to 180 days, so that we do not have to ask again on every visit.

Your rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data (“right to be forgotten”).
• Object to or request restriction of our processing.
• Request portability of data you provided to us.
• Withdraw consent at any time, without affecting prior lawful processing.
• Lodge a complaint with your local data-protection authority.

Contact

To exercise any of your rights, or for any privacy question, reach us using our contact form at /contact. We will respond within the timeframes required by applicable law.