Privacy Policy

Last updated: 6 November 2026

This privacy policy explains how KnowledgeXfer.com ("we", "us", "our") collects, uses, stores and protects personal data when you use KnowledgeXfer.com, including when you submit our contact form.

We are the data controller for personal data collected through this website. Our contact details are:

  • Organisation: Life Science Academy Ltd
  • Address: Arravale, Tipperary, Ireland
  • Email: info@knowledgexfer.com

What personal data we collect

When you complete our contact form, we collect:

  • Your name.
  • Your email address.
  • Your phone number, if you choose to provide it.
  • The content of your message or enquiry.
  • Any other information you voluntarily provide.
  • Technical information associated with the form submission, such as the date and time of submission and, where necessary for security or troubleshooting, your IP address.

We ask you not to send sensitive personal data—such as health information, religious beliefs, trade-union membership, or details about criminal offences—through the contact form unless it is necessary for your enquiry.

Why we use your data

We use the personal data you provide to:

  • Respond to your enquiry or request.
  • Provide the information, service or support you have asked for.
  • Follow up on your enquiry where appropriate.
  • Keep necessary records of communications.
  • Protect the website and prevent misuse, spam or security incidents.

We process contact-form data because it is necessary to take steps at your request before entering into a contract, or because it is necessary for our legitimate interests in responding to enquiries and operating a secure website. Where we rely on legitimate interests, we balance those interests against your rights and expectations.

Lawful basis for processing

Under the EU General Data Protection Regulation, we rely on the following lawful bases:

Purpose: Responding to your enquiry Lawful basis: Consent where you actively submit an enquiry and/or legitimate interests in responding to it.

Purpose: Providing a requested service or following up before a contract. Lawful basis: Necessary for steps prior to entering into a contract, or performance of a contract.

Purpose: Keeping business records and handling complaints. Lawful basis: Legitimate interests and, where applicable, legal obligation.

Purpose: Website security, spam prevention and troubleshooting. Legal basis: Legitimate interests.


If we ever need to process your data for a new purpose, we will explain this to you and, where required, seek your consent or rely on another appropriate lawful basis.

Who we share data with

We do not sell your personal data.

We may share it only with:

  • Professional advisers, where necessary.
  • Law enforcement, regulators or other bodies, where we are legally required or permitted to disclose information.

Where we use third-party processors, we put appropriate contracts in place requiring them to protect personal data and process it only on our instructions.

International transfers

We aim to keep personal data within the European Economic Area (EEA). If a service provider transfers data outside the EEA, we will ensure an appropriate safeguard is in place, such as an adequacy decision or Standard Contractual Clauses, together with any additional measures required.

How long we keep your data

We keep contact-form personal data only for as long as necessary for the purpose for which it was collected.

  • General enquiries: 12 months after the enquiry is closed.
  • Customer/service records: 6 years where needed for contract, tax, accounting or legal reasons.
  • Security logs: 90 days, unless needed longer to investigate an incident.

After that, we securely delete or anonymise the data. Data minimisation and limited retention are core GDPR requirements.

Security

We use appropriate technical and organisational measures to protect personal data, including:

  • HTTPS encryption on the website.
  • Access controls so only authorised people can view submissions.
  • Secure storage and, where appropriate, encryption.
  • Regular review of access, systems and retention practices.

No online transmission is completely secure, so please avoid sending highly sensitive information through the contact form.

Your rights

You have rights under data protection law, including the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Have your data erased in certain circumstances.
  • Restrict or object to processing in certain circumstances.
  • Receive a copy of your data in a portable format, where applicable.
  • Withdraw consent at any time, where consent is our lawful basis.
  • Complain to the Data Protection Commission.

To exercise your rights, contact us at info@knowledgexfer.com. We may need to verify your identity before responding.

You can contact the Irish Data Protection Commission at www.dataprotection.ie. The DPC is Ireland's independent supervisory authority for GDPR and related Irish ePrivacy functions.

Cookies and analytics

If the website uses cookies, analytics, embedded videos, social-media pixels or advertising technologies, include a separate Cookie Policy and obtain consent where required. A privacy policy alone is not sufficient for non-essential cookies or similar tracking technologies.

Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the "last updated" date shown above.