Privacy notice

Who we are

Modex Ventures (“Modex”, “we”, “us”) is the parent laboratory and holding studio operated from the United Kingdom. The parent site is modexventures.com. Operating companies close on their own subdomains. This parent is not a product SKU.

For the purposes of UK GDPR, Modex is the controller of personal data collected on modexventures.com (introduce forms, research-queue signals, and server logs). Each operating company is a separate controller for data processed on its own domain. We do not sell personal data.

What we collect

Institutional introduce: organisation name, contact name, email, interest, and optional notes. Research signals: name, email, optional referral code, and a one-time payment reference when Stripe is configured. Server logs: IP address, user-agent, and request path for security and abuse prevention.

We do not ask this parent site for special-category data. Clinical, AML, housing, or pupil data never land here — those rails exist only on the relevant engine.

Lawful bases

Legitimate interests (Article 6(1)(f)): answering an introduce, securing the site, and recording a research signal. Contract (Article 6(1)(b)): if a later MSA is signed. Consent (Article 6(1)(a)): optional marketing, which this parent does not run today.

You may object to legitimate-interests processing, request access, rectification, erasure, restriction, or portability, and complain to the Information Commissioner’s Office (ico.org.uk).

Processors and transfers

Hosting and edge delivery may use EU/UK or adequacy-covered infrastructure. Stripe, when configured, is a processor for research-signal payments under Stripe’s UK terms. We do not enable membership checkouts on this parent.

International transfers, if any, use UK adequacy regulations or the UK International Data Transfer Addendum. We do not operate a US advertising pixel on this site.

Retention

Introduce stubs: 24 months unless a live mandate is opened. Research-queue records: until you ask us to delete them, or seven years where a payment record must be kept for accounting. Server logs: 90 days unless needed for an incident.

Contact

Privacy requests: use the Access Terminal introduce form on this site with the subject “Data rights”. We will respond within one month as required by UK GDPR.