Privacy at the written scoping stage.

1. Controller and contact

ITLC Global Limited, a private company limited by shares incorporated in Hong Kong (Company No. 80811902), is the data controller for pilot enquiries. Due Science is its product brand. Registered office: Room 701, 7/F, Lucky Centre, 165–171 Wanchai Road, Wan Chai, Hong Kong. Privacy contact: privacy@duescience.com.

2. Information received and whether it is required

Providing a business email address and the category-level selections is voluntary. Without them we cannot send the requested preliminary response.

• your name, business email address, organisation and professional role as provided by your email account or message;
• category-level selections copied into the prepared email, including buyer category, decision context, molecule class, decision window, budget band, authority category and a non-personal campaign source code;
• later correspondence that we specifically request after the preliminary gate; and
• ordinary technical and security records generated by the website or email providers.

At the first-contact stage, do not send attachments, sequence data, patient or donor information, health or genetic data, clinical records, controlled- or infectious-material details, confidential information or information you are not authorised to share.

3. Purposes and grounds

We use the information to deliver the requested preliminary written response, assess whether a claim may fit the pilot, manage correspondence, maintain request and compliance records, and protect the service. We process it to take steps at your request in a business context and for our legitimate interests in operating a controlled B2B pilot. Where applicable law requires another ground, we will obtain it or stop the relevant processing.

4. Recipients and processing locations

Initial enquiries are handled by authorised ITLC Global Limited personnel and its business email and website infrastructure providers. Google Workspace carries the email. The website host and network providers may process ordinary access and security logs under their own service terms. Administration may occur from Israel. Providers may process information in jurisdictions where they operate. No laboratory, reviewer or transaction counterparty receives your enquiry at this stage unless we first explain the proposed disclosure and establish the appropriate project and contractual basis.

5. Retention

We aim to delete or de-identify an enquiry that does not become an active proposal within 90 days after the last substantive correspondence. We may retain a minimal suppression, consent or legal record for longer where reasonably necessary to respect a request, resolve a dispute, establish legal claims or meet a legal obligation. Provider security records follow the provider’s applicable retention settings.

6. Analytics, advertising and cookies

The pilot pages do not send behavioural events to Due Science analytics, create a Due Science visitor profile or set a Due Science analytics identifier. Paid advertising platforms may report aggregated ad impressions and landing-page clicks within their own services. This website does not load their advertising pixels. Language preference storage may be used on the separate multilingual product-vision pages; it is not combined with pilot enquiries.

7. Your choices and rights

You can review and edit the prepared email before sending it. You may ask for access, correction, deletion, restriction, objection or a copy of relevant information, subject to applicable law and legitimate record-keeping needs. Contact privacy@duescience.com. You may also complain to the competent privacy authority in your jurisdiction.

8. Changes

The version identifier and effective date above control this notice. A material change will receive a new revision identifier. A later controlled intake step may have a separate project-specific notice, data-processing agreement or consent process.