Envision Pharma Group (“Envision Pharma Group”/”we”/”us”/”our”) respects an individual’s right to privacy. This Privacy Notice explains our approach to any Personal Information that we collect when you:
- Visit our website https://www.envisionpharmagroup.com , social media accounts, or any of the services that link to this Privacy Notice (“Websites”).
- Communicate with us.
- Attend our events.
- Interact with us as a prospective or current client, candidate, partner, freelancer, or vendor.
In particular, this Privacy Notice describes:
- Who we are.
- How we collect Personal Information.
- What Personal Information we collect.
- How we use and disclose Personal Information, and the legal basis for use.
- How long we keep Personal Information.
- How we protect Personal Information.
- International transfers of Personal Information.
- An individual’s rights regarding their Personal Information.
“Personal Information” means any information or a set of information that identifies or is used by or on behalf of Envision Pharma Group to identify an individual.
Who we are
Envision Pharma Group is a full-service global medical strategy and communications agency, and our services include the provision of market-leading hosted software applications.
“Envision Pharma Group” refers to Envision Pharma Group Limited (registered in England and Wales under company no. 10117262), its parent companies and its and their respective subsidiaries. For purposes of applicable data protection law, the Envision Pharma Group entity responsible for determining why and how Personal Information is processed will generally act as the controller of that Personal Information. Depending on the relevant activity, another Envision Pharma Group entity may act as a joint controller or process Personal Information on behalf of the responsible entity. Additional information about the relevant entity and its role may be provided at the point of collection or upon request.
The website is operated by Envision Pharma Limited (registered in England and Wales under company no. 04486293).
How we collect Personal Information
The Personal Information that we process includes:
- Directly from individuals, including when they use our Websites, download content, communicate with us, submit an inquiry, apply for an open position, attend an event, or interact with us as a client, prospective client, business partner, freelancer, or vendor.
- From our clients and business partners, including business contact and professional information relating to individuals who work with us or interact with our hosted software applications, where we are permitted to use that information for our own purposes.
- From publicly available and professional sources, such as company websites, professional directories, and social media platforms.
- From marketing, advertising, analytics, and technology service providers, including information generated through audience matching, campaign delivery, and engagement with our advertisements.
- Automatically when individuals use our Websites, including through cookies, pixels, and similar technologies, as described in our Cookies Notice.
What Personal Information we collect
The Personal Information that we may collect includes:
- Personal contact details such as name, title, addresses, telephone numbers, email addresses, and business.
- Professional and business information, such as employer, job function, seniority, industry, business interests and client relationship information.
- Education and career history.
- Information related to current employment.
- Information regarding professional services and performance, including feedback, ratings, evaluations, service quality, responsiveness, reliability, expertise, engagement history, and suitability for current or future assignments.
- Online and advertising information, such as social media or platform identifiers, advertising audience membership, campaign and engagement data, and inferences about professional interests or characteristics used to select relevant business audiences.
- Payment and financial data.
- Date of birth.
- Gender.
- Nationality.
- Photographs.
- Information provided to us regarding marketing preferences.
- Technical information (such as Internet Protocol (IP) address) from visits to our Websites.
- Any other information relating to individuals which they may provide to us without request.
Sensitive Personal Information
Sensitive Personal Information (also referred to as “special categories” of personal data in some jurisdictions) includes data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health, or data concerning a person’s sex life or sexual orientation.
If we need to process Sensitive Personal Information, we will do so only in compliance with the legal requirements applicable in each jurisdiction, including, where required, obtaining the individual’s prior explicit consent. We will not condition the provision of any service, product, benefit, or employment opportunity on the individual’s provision of Sensitive Personal Information, unless such information is strictly necessary for the specific purpose and legally permitted.
How we use and disclose Personal Information, and the legal basis for use
We only use Personal Information when the law allows us to do so and for the specific purposes identified in this Privacy Notice. We are committed to processing Personal Information only for those purposes that are legitimate, specific, and have been previously informed to the individual. The applicable legal basis for processing Personal Information may vary depending on the data protection laws of each jurisdiction where we operate or where the individual is located.
Most commonly, we will use Personal Information in the following circumstances:
- Where we need to perform relevant contract.
- Where we need to comply with a legal and regulatory obligations.
- Where it is necessary for our legitimate interests (or those of a third party such as our clients).
- When consent is obtained.
The types of Personal Information that we use depends on the relevant circumstances; however, some of the key types of Personal Information that we may use together with the relevant basis for such use and details of any third parties with whom such information is shared, are set out below. Please also see our Cookies notice.
| Purposes for which we use Personal Information | Legal Basis for use | Sharing of Personal Information |
|---|---|---|
| To send requested information about EPG and/or our service offerings | Legitimate Interests | None |
| To provide content requested or downloaded from our Websites and to obtain feedback regarding such content | Legitimate Interests | None |
| To market our services including communicating about updates, news, newsletters and event invitations which are relevant the individual’s activities and in line with stated preferences | Legitimate Interests Consent | Consulting, marketing and advertising agencies; social media and advertising platforms; and analytics and technology service providers |
| To create B2B advertising audiences by matching business contact information with advertising platform users and identifying similar organizations and professional audiences. | Legitimate Interests | Consulting, marketing and advertising agencies, social media and advertising platforms, including LinkedIn; and analytics and technology service providers |
| For the purposes of recruitment | Legitimate Interests | Third party technology service providers such as applicant tracking systems |
| To manage our relationship with our existing or potential clients and third party providers, including collecting and reviewing feedback, ratings, evaluations, service quality, expertise, performance, and suitability for current or future engagements | Legitimate Interests Contractual Performance | None |
| To provide and improve our Websites | Legitimate Interests | Third party technology service providers and cookie providers |
| To compile anonymous statistics including for managing our business performance and assessing client satisfaction to improve our services. | Legitimate Interests | Third party technology service providers |
| To enable us to provide webinars, meetings and events. | Legitimate Interests | Third party travel and hospitality service providers that we engage |
For business-to-business advertising, we may share limited business contact information with marketing agencies and advertising platforms to match business contacts with platform users, create and manage advertising audiences, measure campaign performance, and identify similar professional audiences. We require appropriate privacy and security safeguards, including restrictions on how the information may be used and retained.
“Third-party organizations” does not include any companies within Envision Pharma Group. However, we are an international business and any Personal Information provided to us may be shared with and used by an entity within Envision Pharma Group (including those outside of the United Kingdom and European Economic Area (“EEA”)).
Where necessary, or for the reasons set out in this Privacy Notice, Personal Information may also be shared with regulatory authorities, courts, tribunals, government agencies and law enforcement agencies. While it is unlikely, we may be required to disclose Personal Information to comply with legal or regulatory requirements. We will use reasonable endeavors to notify the individual before we do this, unless we are legally restricted from doing so.
Our services include hosted software applications that we provide to clients. When an individual submits Personal Information through a client’s licensed application or portal, the client will generally determine the purposes for which that information is processed and will ordinarily act as the controller. Individuals should review the client’s applicable privacy notice. In those circumstances, we generally process the Personal Information on the client’s behalf and access, use, or disclose it only as permitted or required by our agreement with that client, unless we separately notify the individual that we process particular information for our own purposes.
How long we keep Personal Information
Personal Information will be retained in accordance with our global data retention policy which categorizes all of the information held by us and specifies the appropriate retention period for each category of Personal Information. Those periods are based on the requirements of applicable data protection laws and the purpose for which the information is collected and used, taking into account legal and regulatory requirements to retain the information for a minimum period, limitation periods for taking legal action, good practice and our general business purposes.
How we protect Personal Information
A key principle of data protection legislation is that Personal Information must be dealt with securely by means of ‘appropriate technical and organizational measures’. This involves considering matters such as risk analysis, organizational policies, and physical and technical measures, all of which contribute to ensuring the confidentiality, integrity and availability of systems and processes. Envision Pharma Group is certified under ISO 27001:2022, which is an auditable international best practice standard that formally outlines requirements for an Information Security Management System.
International Transfers
We may need to transfer Personal Information to locations outside of the EEA and/or outside the jurisdiction where the Personal Information was originally collected from the individual.
The level of information protection in countries outside the EEA or outside your country of residence may be less than that offered within the EEA or your country of residence. Where this is the case, we will implement appropriate measures (such as the EU standard contractual clauses or other legally recognized mechanisms depending on the applicable jurisdiction) to ensure that Personal Information remains adequately protected and secure in accordance with applicable data protection laws.
An individual’s rights regarding their Personal Information
Under certain circumstances, an individual has rights under certain data protection legislation with respect to their Personal Information which may include some or all of the following:
- The right of access. Subject to certain exceptions, this is the right to know, access and request a copy of the Personal Information we hold about an individual and how we use it.
- The right to rectification or update. This is the right to require Personal Information be corrected, updated or completed if it is inaccurate incomplete, or outdated.
- The right to erasure (right to be forgotten). This is the right to request the removal or deletion of Personal Information that we use about an individual, unless we are required to retain such data in order to comply with a legal obligation or to establish, exercise or defend legal claims, or if there is no compelling reason for us to continue using it.
- The right to restrict use. This is the right to request that we restrict our use of Personal Information where: (i) such Personal Information is inaccurate, (ii) our use is unlawful, or (iii) we no longer need to use such Personal Information for a particular purpose, and we are unable to delete the Personal Information due to a legal or other obligation.
- The right to data portability. This is the right to request that we transmit the relevant Personal Information to a third party, provided that the individual provided such personal data to us and that we are using such personal data on the basis of that individual’s consent or in order to perform our obligations under contract with the individual, and the use is carried out by automated means.
- The right to object. This is the right to object to us using Personal Information if the use is based on our legitimate interest. Where Personal Information is used for direct marketing, including related profiling and advertising audience activities, an individual may object at any time and we will stop using the Personal Information for those purposes. For other legitimate-interest processing, we will comply unless we demonstrate compelling legitimate grounds that override the individual’s interests and rights, or the use is required for the establishment, exercise or defense of legal claims.
- The right to withdraw consent. If we are using Personal Information pursuant to the lawful basis of consent, the individual has the right to withdraw such consent at any time.
- The right to request proof of consent. This is the right to request proof that you provided valid consent for the processing of your personal data, where applicable.
- Automated individual decision-making and profiling. This is the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Such individual may also have the right to lodge a complaint in relation to our use of Personal Information with a local supervisory authority.
If an individual objects to our use of their Personal Information for marketing, targeted advertising or related profiling, or withdraws consent where consent is the applicable legal basis, we will respect that choice in accordance with applicable law. We may retain limited information on a suppression list to ensure that the individual’s preference continues to be honored.
The California Consumer Protection Act, as amended by the California Privacy Rights Act
The California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), provides California residents with certain rights regarding their Personal Information. Subject to applicable exceptions, these rights may include the rights to know and access, delete, and correct Personal Information; to opt out of the sale or sharing of Personal Information; to limit certain uses and disclosures of Sensitive Personal Information; and not to receive discriminatory treatment for exercising CCPA rights.
A California resident is entitled to request details of the information we hold about him or her and how we use it and, under certain circumstances, has the right to request that his or her Personal Information be deleted. Such requests may be submitted through the following methods:
- By calling this toll-free number: +1 888 230-8287; or
- Through this website by completing the “Get in Touch” form at the bottom of this page.
We will acknowledge receipt of any request within ten (10) days and begin the process of verifying such request. Depending upon the sensitivity of the data collected and the nature of the request, we are required to verify an individual’s identity to a reasonable degree of certainty or a reasonably high degree of certainty. A reasonable degree of certainty requires matching at least two pieces of personal information provided via the toll-free number or “Get in Touch” form with information already maintained by us. Whereas a reasonably high degree of certainty requires matching at least three pieces of personal information. The verification process also requires us to consider whether it is likely the submitted request is fraudulent.
A California consumer may also designate an authorized agent to make a request under the CCPA on the California consumer’s behalf. When a request is submitted by an authorized agent, we will require written evidence of the authorization and, except when the authorized agent has a power of attorney pursuant to California Probate Code sections 4000 to 4465, we will also need to verify the agent’s identity as well as the consumer’s identity.
Further questions
Please direct Data Subject Access Requests, requests related to the exercise of any rights or further questions to the Envision Pharma Group Legal Department at [email protected] or to our Data Protection Officer at either of the following:
By Email:
[email protected]
By Post:
Bird & Bird DPO Services SRL
Avenue Louise 235 b 1
1050 Brussels
Belgium
Attention: DPO for Envision Pharma Group
Changes to this Privacy Notice
Envision Pharma Group may revise or update this Privacy Notice from time to time. Any material changes to this Privacy Notice will be communicated through reasonable means, such as by posting a notice on our Websites or by sending a direct communication, where appropriate and required by applicable law.
Last updated: 27 October 2026
California Consumer Protection Act Contact Form
Please complete the form below and we will be in touch as soon as possible.
Fields marked with an * are mandatory.