Privacy Policy

Last updated: September 2026

FINLAN - MEDICAL AFFAIRS CONSULTANCY LTD, trading as F-MAC, respects your privacy and is committed to protecting personal information in accordance with applicable UK data protection law.

For the purposes of UK data protection legislation, FINLAN - MEDICAL AFFAIRS CONSULTANCY LTD is the data controller for personal information covered by this notice.

Contact Details

FINLAN - MEDICAL AFFAIRS CONSULTANCY LTD
Trading as F-MAC
Company number: SC771673

Registered office:
52 Bruce Street
Dunfermline
Scotland
KY12 7AG
United Kingdom

Information We May Collect

When you contact or interact with F-MAC, we may collect information including:

your name;
business email address and telephone number;
company, organisation and job title;
information you provide through our website contact form, email or other correspondence;
information relating to a prospective or existing business relationship; and
limited technical information generated when you visit our website, such as IP address, browser information and cookie data where applicable.

As a business-to-business consultancy, F-MAC does not normally seek to collect sensitive personal information through this website.

Please do not submit patient information, identifiable health information or other special-category personal data through the website contact form.

How We Use Your Information

We may use personal information to:

respond to enquiries;
discuss potential consultancy engagements;
provide and administer contracted services;
communicate with clients, prospective clients and professional contacts;
maintain appropriate business and contractual records;
manage our website and information security;
comply with legal, regulatory, tax and accounting obligations; and
protect F-MAC's legitimate business interests.

Lawful Basis for Processing

Depending upon the circumstances, we process personal information because:

Legitimate interests — where it is reasonably necessary to operate and develop our B2B consultancy, respond to professional enquiries and maintain business relationships;

Contract — where processing is necessary to take steps at your request before entering into a contract or to perform an existing contract;

Legal obligation — where information must be retained or processed to meet legal, regulatory, tax or accounting requirements; or

Consent — where consent is specifically required, for example for certain non-essential website cookies or marketing activities.

The ICO requires privacy notices to explain what data is used, why it is processed, the lawful basis, sharing, retention and individuals' rights.

Business and Professional Contacts

F-MAC may hold professional contact information relating to individuals working within biotechnology, pharmaceutical, healthcare, academic and associated organisations.

Such information may be provided directly by the individual or obtained from legitimate publicly available professional sources, such as company websites, professional directories, conference information or professional networking platforms.

Where appropriate, this information may be used for legitimate business-to-business communication relevant to F-MAC's professional services.

Sharing Personal Information

F-MAC does not sell personal information.

We may share information where reasonably necessary with trusted service providers supporting our business, such as:

website and hosting providers;
email and IT service providers;
professional advisers, accountants and legal advisers; and
other service providers engaged in supporting F-MAC's operations.

We may also disclose information where required by law or where reasonably necessary to establish, exercise or defend legal rights.

Service providers are expected to process personal information only for appropriate purposes and subject to applicable data-protection requirements.

International Transfers

Some technology or service providers may process information outside the United Kingdom.

Where personal information is transferred internationally, F-MAC will take appropriate steps to ensure that a lawful transfer mechanism and suitable safeguards are in place where required.

How Long We Keep Information

Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected.

As a general approach:

unsuccessful or preliminary business enquiries may normally be retained for up to 24 months after the last meaningful contact;
information relating to client engagements may be retained for the duration of the relationship and afterwards where reasonably required for contractual, professional, accounting, tax or legal purposes; and
information may be retained for longer where required by law or in connection with a legal claim.

Information that is no longer required will be securely deleted or anonymised where appropriate.

Your Data Protection Rights

Depending upon the circumstances, UK data-protection law may give you rights to:

request access to personal information held about you;
request correction of inaccurate information;
request deletion of your information;
request restriction of processing;
object to certain processing;
request transfer of information where applicable; and
withdraw consent where processing is based upon consent.

Not every right applies in every circumstance.

To exercise a data-protection right, contact F-MAC using the details above.

Complaints

If you have concerns about how F-MAC uses your personal information, please contact us first so that we can try to resolve the matter.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data-protection regulator.

Information about raising a concern is available from the ICO website.

Security

F-MAC takes reasonable organisational and technical measures to protect personal information against unauthorised access, loss, alteration or disclosure.

However, no internet-based system can be guaranteed to be completely secure.

Changes to This Privacy Notice

We may update this Privacy Policy from time to time to reflect changes in our services, technology or legal requirements.

The current version will be published on this website together with its latest revision date.

Cookie statement

I would also add a short Cookies section to the Privacy Policy:

This website may use cookies and similar technologies required for its operation and, where enabled, for functions such as website analytics.

Strictly necessary cookies may be used without consent where permitted by law. Non-essential cookies, including analytics or similar tracking technologies, will only be used where the required consent has been obtained.

Visitors can manage their choices through the website's cookie settings where available.

The ICO currently says visitors must be told what cookies are used and why, and non-essential cookies generally require active consent before they are placed. Analytics cookies are not automatically treated as strictly necessary