Privacy Notice

Privacy Notice

Last Edited on November 28, 2023

This Privacy Notice applies to the processing of data related to the use of the website (hereinafter “the Website”) and

Verona Pharma as the Controller (hereinafter as “Verona Pharma”, “we” or “us”) of the personal data, has committed to comply with the following laws and regulations (collectively referred as “Data Protection Laws”):

  • The General Data Protection Regulation N°EU 2016/679 (hereinafter, the “GDPR”);
  • All EU applicable laws and regulations regarding data protection;
  • The General Data Protection Regulation as it forms part of the law of England and Wales, Scotland and Northern Ireland by virtue of section 3 of the European Union (Withdrawal) Act 2018 (hereinafter the “UK GDPR”) and the UK Data Protection Act 2018 (amended 2020) (hereinafter the “Data Protection Act”).

With this Privacy Notice, Verona Pharma wants to make sure that you understand what personal information is collected about you, how your personal information is used and how it is kept safe.

General warning and use of social media

Access to the Website implies the User’s full and unreserved acceptance of this Privacy Notice (hereinafter the “Notice”), as well as its general terms of use and the Cookies Notice. The User acknowledges having read the information below.

The Notice is valid for all pages hosted on the Website. It is not valid for the pages hosted by third parties to which Verona Pharma may refer and whose privacy notices may differ. Verona Pharma cannot therefore be held responsible for any data processed on these websites or by them. This Notice also applies to any other website that Verona Pharma may operate, including our Company pages on X and LinkedIn.

Please note that for the use of social media, Verona Pharma will be Joint-Controller with X and LinkedIn only for the following activities: accessing and processing statistical aggregate data provided by X and LinkedIn. For any other processing on the platform, social media platform shall be considered as the sole Data Controller.

LinkedIn have created an “addendum” to their user agreements for company pages for the processing for which they are Joint-Controllers with us. Such agreement is not currently provided by X.

1. Why, how and for how long do we collect your personal data?

Depending on the purpose for which we process your personal data, we need to process one or other personal data. We will keep them for no longer than necessary to fulfill the purposes for which we collected it, including any legal requirements.

Depending on each case, the processing will therefore be as follows:


Types of personal data

Legal basis

Retention period

To answer to your queries either by email, phone number, or through the contact form.

Our contact form requires the following information to be submitted: Full Name, email address, phone number, business organization, enquiry type, message.

In addition, depending on the means you use to contact us (e.g. phone number or email address available on the Website), we can have access to your email address or your phone number.

Please note that other Personal Data may be processed by Verona Pharma depending on your request and the information you provide us.

This processing is based on our legitimate interest in answering the requests or queries raised by you through the existing different contact channels.

We understand that the processing of these data is also beneficial to you to the extent that it enables us to assist you adequately and answer to the queries raised.

We will process your data for the time necessary to meet your request.

To send you email alerts

Name, email address.

This processing is based on your consent.

Please remember that you may unsubscribe from the email alert at any time without any cost.

We will process your data until you unsubscribe to the email alert.

For job application

Name, email, address, phone, address (optional), resume, citizenship/employment eligibility, additional information specific to the function you apply to (location, responsibilities already managed,…).

This processing is necessary in order to take steps at your request prior to entering into a contract.

You may request that we delete your data at any time by email to

We will process your data for the time necessary to manage your application and indefinitely for future job opportunities, unless and until such time that you request that we delete your data.

To organize your participation in one of our events (online webinar,…).

First Name, Last Name, Company, email address.

This processing is based on your consent.

Your data may be processed by third parties when recording your participation in one of our events.

We will process your data related to your subscription for the time necessary for the organization of your participation to one of our events.

For statistical purposes

Aggregate statistical data (e.g., Company page on X, LinkedIn,).

We consider that we have legitimate interest to understand the way our page is consulted (e.g., how many times our page is consulted, from which country,…).

Statistical information is stored by X and LinkedIn and consequently subject to their retention policy.

We may export statistical reports, but we guarantee that this is only in an anonymous form.

Use of cookies for the functioning and managing of our website

Cookies may store in certain circumstances personal data which may include: IP addresses, browser type, location, operating system,…

Please, see our Cookies Notice for more information.

Please, see our Cookies Notice

Share Verona Pharma supported publications

Authors Name

The processing is based on our legitimate interest to propose (academic) publications that provide further pharmacologic background to the research that we are engaged in.

We understand that the processing of these data is also beneficial to you to the extent it is offering visibility of your article on our website.

Publication reference, along with author’s names, remains on the website as long as they are of interest, in relation to the research we are engaged in.

2. Data sharing

We do not sell or trade to outside parties your personal data.

Nevertheless, Verona Pharma has contracted a number of service providers in connection with the Website that may have access to your personal data, including service providers for provision of the following services:

  • applying for open employment positions at Verona Pharma;
  • webcasts and event release; and
  • Website hosting.

Sharing your personal data as explained above may involve a transfer of personal data to a country outside the European Economic Area (EEA), and/or the UK. Verona Pharma is therefore committed to complying with the transfer rules under applicable Data Protection Laws and therefore ensure to:

  • Transfer your data to countries where the data recipient is located that has been recognized as adequate by the European Commission, by the UK secretary of state; or
  • Where a country has not received an adequacy decision from the European Commission, or the UK secretary of state to implement appropriate safeguards, such as the EU Standard Contractual Clauses (“SCCs”) (and the UK addendum), and/or the International Data Transfer Agreement (“IDTA”).

You can contact our Data Protection Officer, hereinafter as DPO, (see contact details below), if you want to have more details about the mechanism supporting data transfer.

3. How do we protect your information?

Verona Pharma treats your personal data in a confidential manner and provides for a sufficient and adequate level of protection of your personal data.

Your personal data are contained behind secured networks and are only accessible by a limited number of persons who have special access rights to such systems and are required to keep the information confidential.

4. Your rights

According to the GDPR and UK GDPR you have the following rights subject to limitation as set forth by applicable data protection law:

  • Access.
    You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, information related to the processing of data and a copy of the data being processed.
  • Rectification.
    You have the right to require rectification of inaccurate or incomplete data about you.
  • Right to be forgotten. To obtain the deletion of your personal data under certain specified circumstances.
  • Restrict processing. You have the right to restrict processing of data under certain specified circumstances.
  • Data portability. You have the right to request for the receipt or the transfer to another organization, in a machine-readable form, of your personal data.
  • Object to processing. You have the right to object, on grounds relating to your particular situation, at any time to the processing of your data.
  • Right to withdraw consent. When you have given your explicit consent for the processing of your data, you can withdraw it at any time without any cost nor justification.

Please note that all these rights are not absolute and will be assessed on a case-by-case basis by our DPO.

If you would like to exercise your rights, please let us know by contacting our DPO at the contact details listed below.

You have also the right to lodge a complaint if you consider that your personal data is not processed in accordance with the GDPR or the UK GDPR.

If you are an EEA resident: You have the right to lodge a complaint with the Supervisory Authority in the Member State of the European Union of your habitual residence, place of work or place of the alleged infringement.

If you are a UK resident: you may file a complaint with the Information Commissioner’s Office (“ICO”), the Supervisory Authority of UK, following the instruction available in the service channels.

Please find the contact information of all Authorities in section 6 “Contacts”.

5. Changes to this Privacy Notice

This Notice is effective as of the date stated at the top of this page. We may change this Notice from time to time. Please refer to this Notice on a regular basis.

6. Contacts

Verona Pharma acting as Controller

3 More London Riverside

London, UK SE1 2RE, GB

+44 203 283 4200

Data Protection Representative

MyData-TRUST France

Valpark, Rue Louis Duvant, 1, 59220 Rouvignies (FRANCE)

Contact: Gautier Sobczak

+33 9 70 70 20 09]

Data Protection Officer

For EU Data Protection Authorities

For UK Supervisory Authority (“ICO”)

Tel: +55 (0)3 03 12 31 11 3