Privacy Policy

HOSS Life Sciences
Last updated: 3 November 2026

1. Who we are

HOSS Life Sciences is an independent life sciences consultancy operated by Frank Ferrari, a sole trader who also trades as HOSS Publishing.

For the purposes of UK data protection law, Frank Ferrari is the data controller responsible for personal information collected through this website.

Website: https://hosslifesciences.com
Privacy enquiries: frank@hosslifesciences.com

If you have questions about this Privacy Policy or how your personal information is handled, please contact us using the email address above.

2. What personal information we collect

We may collect and process the following information:

• Contact information: Your name, email address and any other contact details you voluntarily provide.

• Enquiry information: Details included in messages submitted through our website contact form or sent directly by email.

• Business correspondence: Information exchanged during discussions about potential or existing consultancy engagements.

• Technical and security information: Information processed when you visit the website, including information used by security and spam-prevention services.

• Cookie preferences: Your choices about cookies and similar technologies, recorded through our consent management system.

We do not intentionally collect sensitive personal information through the website. Please avoid including confidential medical information, patient details or other sensitive personal data in general enquiries.

3. How we use your information

We use personal information to:

• Respond to enquiries and communicate with people who contact us.

• Discuss, prepare for and deliver consultancy services.

• Maintain relevant business records and correspondence.

• Meet applicable legal, accounting and tax obligations.

• Protect the website and its contact form against spam, automated submissions and misuse.

• Record and respect visitors' cookie preferences.

We do not sell personal information or use contact-form submissions to build marketing lists.

We do not currently operate a newsletter or use website enquiries for unsolicited marketing emails.

4. Our lawful bases for processing

Under the UK General Data Protection Regulation (UK GDPR), we rely on the following lawful bases where appropriate:

Legitimate interests: To respond to business enquiries, maintain professional relationships, administer our consultancy and protect our website against misuse, provided those interests are not overridden by individuals' rights and freedoms.

Contract: Where processing is necessary to take steps at someone's request before entering into a contract, or to perform an existing contract.

Legal obligation: Where we must retain or disclose information to comply with applicable legal, tax or accounting requirements.

Consent: Where consent is required, including for optional cookies or similar technologies. Consent can be withdrawn at any time through the relevant consent controls.

The applicable lawful basis depends on the specific purpose for which information is processed.

5. Contact forms and email communications

When you submit an enquiry through our website, the information you provide is sent to our business email address so that we can respond.

Our website uses a Divi contact form. Enquiries are delivered by email rather than intentionally maintained as a separate contact-form submission database within WordPress.

Our business email service is provided through Namecheap. We currently access email using Roundcube webmail and may also use Microsoft Outlook as an email application.

If Outlook is used as an email client connected to our existing mailbox, the precise handling of email data may depend on the Outlook version and configuration.

Please do not submit sensitive personal or patient information through the contact form.

6. Cookies and similar technologies

Our website uses cookies and similar technologies for purposes including website operation, remembering privacy preferences and supporting security features.

We use Complianz to provide a cookie consent banner and manage visitors' preferences.

Complianz may store cookies on your device to remember whether you have accepted, rejected or customised your cookie preferences. These cookies help the website respect your choices on subsequent visits.

You can review or change your cookie preferences using the consent management controls available on the website.

We do not currently have Google Analytics configured to collect website visitor statistics.

For further information about cookies and the services used on this website, please see our Cookie Policy.

7. Google reCAPTCHA and spam protection

Our website uses Google reCAPTCHA v3 to help protect the contact form against spam, automated submissions and abuse.

reCAPTCHA may process technical information about visitors and their interactions with the website to assess whether activity appears legitimate. This may include information about the device, browser, IP address and interactions relevant to Google's security assessment.

Our current website configuration loads reCAPTCHA when the Contact page is visited, including before a visitor has made a choice on the cookie consent banner. This involves communication with Google's servers.

Google processes information associated with reCAPTCHA under its own applicable privacy terms and policies.

Further information is available from:

• Google Privacy Policy: https://policies.google.com/privacy

• Google Terms of Service: https://policies.google.com/terms

We use reCAPTCHA for website security and spam prevention, not for advertising or marketing.

8. Who we share information with

We share personal information only where reasonably necessary for the purposes described in this policy.

This may involve:

• Namecheap: For website hosting, email hosting and associated technical services.

• Google: In connection with reCAPTCHA spam protection.

• Microsoft: If Microsoft Outlook or other Microsoft services are used to access or process business correspondence.

• Professional advisers or service providers: Where necessary for legitimate business administration, accounting, technical support or legal compliance.

• Public authorities: Where disclosure is required by law.

We do not sell or rent personal information to third parties.

9. International transfers

Some of the technology providers used by this website may process or access personal information outside the United Kingdom.

Where personal information is transferred internationally, we aim to ensure that appropriate safeguards apply, as required by UK data protection law. These may include UK adequacy regulations or approved contractual safeguards, depending on the provider and circumstances.

The specific locations and safeguards may vary according to the services and configurations in use.

10. How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

As a general approach:

• Enquiries that do not lead to a business engagement: Normally retained for up to 12 months after the last meaningful correspondence, unless there is a legitimate reason to retain them longer.

• Client and contractual correspondence: Retained for the duration of the business relationship and for an appropriate period afterwards, taking account of contractual, legal and business requirements.

• Accounting and tax records: Retained for the periods required by applicable law.

• Cookie preferences: Retained in accordance with the consent management system's configuration and applicable requirements.

We may retain information for longer where necessary to establish, exercise or defend legal claims or comply with legal obligations.

11. How we protect your information

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.

These measures include using reputable hosting and email providers, maintaining website security protections and restricting access to business correspondence and administrative systems.

No method of transmitting or storing information online is completely secure. We therefore cannot guarantee absolute security.

12. Your data protection rights

Under UK data protection law, you may have the right to:

• Request access to the personal information we hold about you.

• Ask us to correct inaccurate or incomplete information.

• Request deletion of your information in certain circumstances.

• Ask