Privacy Notice

RND Emi is primarily designed to process information about companies. Some company information can also relate to identifiable people, particularly directors, officers, decision-makers and business contacts.

Depending on how the service is used, data may include names, job titles, business contact details, company affiliations, public professional information, prospect notes, lifecycle status, and records of business communications or follow-up activity.

Users should not add special-category data, private personal information or information that is not genuinely needed for the stated business purpose.

Information may come from Companies House, official company websites, public technical or professional sources, information supplied directly by a company or individual, and information entered by authorised RND Emi users.

Where personal data is obtained from public or third-party sources rather than directly from the individual, the organisation using RND Emi is responsible for providing any privacy information required by UK data-protection law.

Typical purposes include identifying and prioritising potential R&D prospects, researching company activity, assessing likely technical-development signals, managing a business-development pipeline, recording qualification activity and supporting human review of commercial opportunities.

RND Emi should not be used to make solely automated decisions about individuals that produce legal or similarly significant effects.

The organisation operating RND Emi must identify and document an appropriate lawful basis for each processing purpose. For business prospecting, legitimate interests may be appropriate in some circumstances, but it is not automatic and should be supported by a legitimate-interests assessment where required.

If RND Emi data is later used for direct marketing, the organisation must also comply with applicable electronic-marketing rules and respect objections and opt-outs.

RND Emi can use automated analysis to create R&D probability scores, summaries, indicators, suggested projects and recommended next actions. These outputs are probabilistic decision-support tools rather than verified facts.

Users should review important outputs before acting on them, particularly where information is incomplete, historic, ambiguous or relates to an identifiable person.

The organisation operating RND Emi may use infrastructure, database, hosting, authentication, AI and other technology providers to deliver the service. Those providers should only receive data needed for their function and should be covered by appropriate contractual and security arrangements.

Before public launch, the operator should maintain an accurate list of material processors and international-transfer safeguards relevant to its actual deployment.

Personal data should not be kept indefinitely. Prospect and business-contact data should be reviewed at appropriate intervals and deleted, anonymised or archived when it is no longer needed for the purpose for which it was collected.

The operator should document practical retention periods for prospect records, suppression records, account data and audit or security records, and should be able to justify those periods.

Users should keep prospect information reasonably accurate and collect only what is relevant to the business purpose. Publicly available information should not be assumed to be current simply because it is accessible online.

Access to RND Emi should be restricted to authorised users. Appropriate technical and organisational measures should be used for authentication, access control, database security, backups, software updates, secrets management and incident response.

Depending on the circumstances, individuals may have rights to be informed, access their personal data, request correction or erasure, restrict or object to processing, and exercise rights relating to certain automated processing.

Objections to direct marketing should be respected. Where a minimal suppression record is needed to ensure a person is not contacted again, retaining that limited record may be appropriate.

RND Emi may use storage that is necessary for authentication, security and requested application functionality. If the operator introduces non-essential tracking, advertising or other storage technologies, it must assess whether consent or another applicable exception is required and provide clear information about their use.

Before public launch, insert the operator's privacy contact details here so individuals can make privacy requests or object to processing.

Individuals may also have the right to complain to the UK Information Commissioner's Office if they are unhappy with how their personal data is used.

This notice should be reviewed whenever the data sources, AI providers, prospecting features, marketing processes or other material processing activities change.

Last reviewed: 30 August 2026.