Privacy Policy — Email Communications

This policy applies specifically to the emails we send to our customers and contacts. It covers the personal data we hold for that purpose, how we use it, and how you can control it.

When we send you emails, we may process:

• Contact details — your name and email address.
• Customer and business information — details relating to your dealings with us, such as products or services you have enquired about or obtained from us.
• Email engagement data — whether you open our emails, which links you click, and similar interaction data. We collect this using tracking technology (including a small invisible image, often called a "tracking pixel") embedded in our emails.
• Technical and inferred data — information such as the type of device or email client you use, and segments or preferences we infer from your activity (see Profiling below).

• Directly from you — we obtain your details solely through direct contact with you, for example when you contact us, enquire about our products or services, or deal with us in the course of business. We do not use a website sign-up form or obtain your details from third parties.
• Automatically — when you interact with our emails, our email platform records engagement data as described above.

We rely on the PECR soft opt-in to send marketing emails: we obtained your details through direct contact in the course of dealing with you, the products and services we promote are similar to those you have dealt with us about, and you were given the opportunity to opt out both when we obtained your details and in every email we send.

You can object to this marketing and profiling at any time, and we will stop. See Your rights below.

Our emails contain tracking technology that tells us whether an email was opened and which links were clicked. We use this information to understand engagement and to group contacts into segments (for example, by interest or area of business) so that the content we send is more relevant to you.

This is a form of profiling for direct marketing purposes. It does not involve any automated decision that produces a legal or similarly significant effect on you. You have an absolute right to object to processing of your data for direct marketing, including this profiling.

We use Resend (operated by Plus Five Five, Inc.) to send our emails. Resend acts as our data processor and processes your data only on our instructions and under a written agreement that requires it to keep your data secure.

We do not sell your personal data, and we do not share it with third parties for their own marketing.

Resend is based in the United States, so your personal data is transferred outside the UK. Where we transfer data internationally, we ensure it is protected by an approved safeguard — in this case the UK Extension to the EU-US Data Privacy Framework (the "UK-US Data Bridge"), supported by the UK Addendum to the EU Standard Contractual Clauses where required.

We keep your data for as long as you continue to receive our emails, and for 24 months after your last interaction or contact with us, after which it is deleted or anonymised. If you unsubscribe, we keep a minimal record of your email address on a suppression list so that we do not contact you again.

Under UK data protection law you have the right to:

• be informed about how we use your data (this policy);
• access the personal data we hold about you;
• rectify inaccurate or incomplete data;
• erase your data ("right to be forgotten") in certain circumstances;
• restrict our processing of your data in certain circumstances;
• data portability — to receive your data in a portable format;
• object to processing based on legitimate interests; and
• object to direct marketing at any time — this is an absolute right.

To exercise any of these rights, contact us at info@polymermedics.com. We will respond within one month.

You can opt out of our marketing emails at any time by clicking the "unsubscribe" link at the bottom of any email, or by contacting us at info@polymermedics.com. Once you unsubscribe, we will stop sending you promotional emails.

If you have concerns about how we handle your personal data, please contact us first so we can try to resolve them. You also have the right to complain to the UK supervisory authority:

Information Commissioner's Office (ICO) Website: ico.org.uk Helpline: 0303 123 1113

We may update this policy from time to time. The "last updated" date at the top shows when it was last revised, and any significant changes will be communicated to you where appropriate.

For any questions about this policy or your personal data, contact us at info@polymermedics.com.