Last updated: February 16, 2026
VIDAC PHARMA HOLDING PLC and Vidac Pharma Ltd. (together, “Vidac”, “we”, “our”, or “us”) are committed to protecting personal data and complying with applicable data protection laws, including Regulation (EU) 2016/679 (GDPR), the UK GDPR, and the Israeli Privacy Protection Law, 1981.
This Privacy Policy explains how we process personal data in connection with:
- Use of our website (www.vidacpharma.com)
- Corporate and investor relations activities
- Clinical trial and research activities
1. Data Controllers
Depending on the processing context, the following entities act as Data Controllers:
VIDAC PHARMA HOLDING PLC
20–22 Wenlock Road
London N1 7GU
United Kingdom
Email: info@vidacpharma.com
Vidac Pharma Ltd.
Reg. No. 514717651
Oppenheimer 7
Rehovot 7670107
Israel
Email: info@vidacpharma.com
For clinical trial activities, Vidac Pharma Ltd. acts as Sponsor and Data Controller.
2. EU Representative (Article 27 GDPR)
In accordance with Article 27 GDPR, Vidac Pharma Ltd. has appointed:
My-Data-TRUST SA (“MD-T”)
Boulevard Initialis 7, Box 3
7000 Mons
Belgium
Belgian Trade and Companies Register No.: 0678.930.912
Email: r.a.khater@mydata-trust.com
The EU Representative may be contacted regarding matters relating to personal data processing within the European Union.
3. Data Protection Officer (DPO)
Vidac Pharma Ltd. has appointed a Data Protection Officer pursuant to Articles 37–39 GDPR.
Email: dpo@vidacpharma.com
Postal Address: Vidac Pharma Ltd., Oppenheimer 7, Rehovot 7670107, Israel
4. Categories of Personal Data
Website Users
- Contact details (e.g., name, email address)
- Technical data (IP address, browser type, device information, usage data)
Investors and Business Contacts
- Name and contact details
- Professional and corporate information
Clinical Trial Participants
- Coded subject identifiers (pseudonymized data)
- Health and medical data (special category data)
- Laboratory results
- Adverse event and safety data
- Demographic information
Investigators and Site Staff
- Name and contact details
- Professional qualifications and certifications
- Regulatory documentation
5. Legal Bases for Processing
Website and Business Communications
- Article 6(1)(a) GDPR – Consent
- Article 6(1)(f) GDPR – Legitimate interests
Clinical Trial Activities
- Article 6(1)(c) GDPR – Legal obligations
- Article 6(1)(e) GDPR – Public interest in scientific research
- Article 9(2)(i) and/or 9(2)(j) GDPR – Processing of health data for scientific research
- Regulation (EU) No. 536/2014 (EU Clinical Trials Regulation)
- Applicable national laws
Clinical trial participation is subject to informed consent in accordance with applicable clinical trial regulations.
6. Purposes of Processing
- Operate, maintain, and secure our website
- Respond to inquiries and communications
- Manage investor and corporate relations
- Conduct and manage clinical trials
- Monitor safety and pharmacovigilance obligations
- Comply with legal and regulatory requirements
7. Data Sharing
- Contract Research Organizations (CROs)
- Clinical trial sites and investigators
- Regulatory authorities and ethics committees
- Professional advisors and service providers
All processors are subject to contractual data protection obligations.
8. International Transfers
Personal data may be transferred outside the EU/UK, including to Israel and other jurisdictions.
Where required, transfers are safeguarded by adequacy decisions, Standard Contractual Clauses (SCCs), or other lawful transfer mechanisms.
9. Data Retention
Clinical trial data is retained for at least 25 years, or longer where required by applicable law, including EU CTR and ICH-GCP requirements.
Other personal data is retained only as long as necessary for the purposes described above.
10. Your Rights
- Access personal data
- Request rectification
- Request erasure (where applicable)
- Restrict processing
- Object to processing
- Data portability
- Lodge a complaint with a supervisory authority
To exercise your rights, please contact our DPO.
11. Security Measures
We implement appropriate technical and organizational safeguards, including encryption, secure hosting environments, access controls, and periodic security assessments.
12. Updates to This Policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with a revised “Last updated” date.