How we got your details, and what we do with them

Last updated 10 July 2026. This notice is for people we contact about Cell and Gene Leaders London or Onyx Live who did not give us their details directly. It is provided under Article 14 of the UK GDPR.

If you would rather we didn't contact you again: reply to the email with the word "no", or write to lewis@onyxnewsroom.com. We action it the same working day, permanently, across every mailbox and every future campaign. You do not have to give a reason and we will not ask for one.

Who we are

The data controller is Onyx Newsroom Ltd, a company registered in England and Wales, company number 15348780, whose registered office is 63c Penkvale Road, Stafford, ST17 9HX, United Kingdom. Onyx Newsroom is a biotech media company; it runs Onyx Live (broadcast interviews), Onyx Summit (events, including Cell and Gene Leaders London) and Onyx Signals.

For anything in this notice, contact lewis@onyxnewsroom.com. We have not appointed a Data Protection Officer, as we are not required to.

What we hold about you

Only professional details: your name, your work email address, your job title, the organisation you work for, and a short note on your publicly stated professional focus so that we contact you about something actually relevant to your role.

We do not hold your home address or personal phone number, and we hold no special category data - nothing about your health, beliefs, politics, or private life.

Where we got it

We did not get your details from you. We obtained them from one or more of the following:

• business contact databases, principally Apollo.io;
• your employer's public website;
• public professional sources, such as your professional profile, conference speaker listings, or published company announcements.

Why we are using it, and our lawful basis

We use it to send you a small number of emails inviting you to Cell and Gene Leaders London, or to take part in an Onyx Live interview. That is direct marketing, and our lawful basis is legitimate interests under Article 6(1)(f) of the UK GDPR.

The legitimate interests are our commercial interest in filling an invitation-led industry event and sourcing editorial contributors, and your professional interest in hearing about a relevant event in your own field. We assessed whether those interests are overridden by your rights and concluded that they are not, given that this is low-sensitivity business contact data, used in the professional context in which we found it, with an immediate and permanent opt-out. We keep a written record of that assessment and will share a copy on request.

We contact no more than three times in total if you do not reply, and not at all once you have told us to stop. We do not use tracking pixels, so we do not know whether or when you opened an email.

Who else sees it

We do not sell your data or share it for anyone else's marketing. It is handled on our behalf by the service providers that run our email, records and workflow systems - currently Google (email), Attio (contact records), Anthropic (drafting and reply classification), Slack (internal approvals) and our own hosted database. Each acts on our instructions.

Some of these providers are based outside the United Kingdom, mainly in the United States. Where personal data is transferred outside the UK, we rely on UK adequacy regulations or on the UK International Data Transfer Addendum to the European Commission's standard contractual clauses.

How long we keep it

We keep prospect details for the duration of the campaign and delete them within twelve months of the event, unless we have begun a business relationship with you.

If you opt out, we keep a minimal record of your email address on a suppression list indefinitely. That record exists for one reason only: it is how we make sure we never contact you again. Deleting it would defeat your own request.

Your rights

You have the right to object to this processing at any time. Where the processing is for direct marketing, that right is absolute - we must stop, and we will, without argument.

You also have the right to ask us for a copy of the data we hold about you, to have it corrected if it is wrong, to have it erased, to restrict how we use it, and to receive it in a portable form. Exercise any of these by emailing lewis@onyxnewsroom.com. We respond within one month.

We make no decisions about you by automated means that produce legal or similarly significant effects.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the UK's supervisory authority, the Information Commissioner's Office, at ico.org.uk, or on 0303 123 1113.

Changes to this notice

If we change how we use these details, we will update this page and change the date at the top before contacting you again.