Privacy Notice

Last updated: 6 August 2026

This Privacy Notice explains how Preologi Ltd (“Preologi,” “we,” “us,” or “our”) collects, uses, and protects personal data when you visit preologi.com (the “Site”) or otherwise interact with us as a website visitor or prospective customer. It applies to visitors in the United Kingdom and the European Union.

This notice covers the Site only. If you receive a Galleri® test through Preologi as a patient, separate information about how your clinical and test data are handled is provided in your Patient Information Sheet and the GRAIL privacy notice referenced there.

1. Who We Are

Preologi Ltd is the data controller responsible for your personal data in connection with this Site. Our registered address and contact details are set out in Section 10 below.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

  • Contact details you provide, such as name, email address, and phone number, for example when you submit an enquiry form.
  • Technical data, such as IP address, browser type, device information, and pages visited, collected automatically via cookies and similar technologies.
  • Communications data, such as the content of messages you send us and records of our correspondence with you.
  • Marketing preferences, such as whether you have opted in to receive updates from us.

We do not collect special category data (such as health information) through the Site itself. Health information is collected separately as part of the clinical testing service and is governed by the Patient Information Sheet and Clinical Partner Agreement, not this notice.

3. How We Use Your Data and Our Legal Basis

We use your personal data for the following purposes, relying on the legal bases indicated:

  • To respond to enquiries and provide information you request — legal basis: legitimate interests in operating our business and communicating with prospective customers.
  • To operate, maintain, and improve the Site, including analytics — legal basis: consent (for non-essential cookies) and legitimate interests (for essential functionality).
  • To send marketing communications, where you have opted in — legal basis: consent, which you may withdraw at any time.
  • To comply with legal and regulatory obligations — legal basis: legal obligation.

4. Cookies

The Site uses cookies and similar technologies. Full details of the cookies we use, their purposes, and how to manage your preferences are set out in our separate Cookie Policy, available on the Site.

5. Sharing Your Data

We do not sell or share your personal information with third parties for advertising purposes. We may share personal data with:

  • Service providers who support our IT systems, hosting, and analytics, acting under contract and only on our instructions.
  • Professional advisers, such as lawyers and auditors, where necessary.
  • Regulators or law enforcement, where required by law.

6. International Transfers

Some of our service providers may process data outside the United Kingdom or European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or EU Standard Contractual Clauses, or transfers to jurisdictions benefiting from an adequacy decision.

7. Data Retention

We retain personal data collected through the Site only for as long as necessary for the purposes described in this notice, or as required by law, after which it is securely deleted or anonymised.

8. Your Rights

Under the UK GDPR and EU GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request erasure of your data, in certain circumstances.
  • Object to or restrict certain processing, including direct marketing.
  • Request data portability, where technically feasible.
  • Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, please contact us using the details in Section 10. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk) or your local EU data protection authority.

9. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Contact Us

If you have questions about this Privacy Notice or wish to exercise your data protection rights, please contact us at:

Preologi Ltd, The Surrey Technology Centre, 40 Occam Road, Guildford, Surrey, UK, GU2 7YG. Email: enquiries@preologi.com. Phone: 0330 555 0444.

11. Changes to This Notice

We may update this Privacy Notice from time to time to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised “Last updated” date. We encourage you to review this notice periodically.