Legal

Legal & Privacy

Who runs this website, and what happens to your data when you visit it.

Legal notice

This information is provided in accordance with the Electronic Commerce (EC Directive) Regulations 2002 and the Provision of Services Regulations 2009.

Website operator

Gereon Elvers
168E Cowley Road
Oxford OX4 1UE
United Kingdom

Contact

Phone: +49 1520 4446662
E-mail: [email protected]

Disclaimer

The content of this website is provided for general information only. It describes research and early-stage development work and does not constitute medical advice, an offer of a medical device, or a statement that any product is available, approved or effective. Nothing on this site should be relied on as a substitute for advice from a qualified healthcare professional.

We take reasonable care to keep the content accurate and up to date, but we give no warranty, express or implied, as to its accuracy or completeness. To the extent permitted by law, we exclude liability for loss or damage arising from use of this website or reliance on its content. Nothing in this notice limits liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot be excluded under the law of England and Wales.

External links

This website may link to third-party websites. We have no control over their content and accept no responsibility for it. A link does not imply endorsement.

Copyright

Unless otherwise stated, the text, images and design of this website are protected under the Copyright, Designs and Patents Act 1988 and are owned by or licensed to the website operator. You may view and print pages for personal, non-commercial use. Any other reproduction, distribution or adaptation requires our prior written permission.

Governing law

This notice and any dispute arising from use of this website are governed by the law of England and Wales, and the courts of England and Wales have exclusive jurisdiction.

Privacy notice

This notice explains how we handle personal data when you visit bitterbio.com or contact us. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who is responsible

The data controller is:

Gereon Elvers
168E Cowley Road
Oxford OX4 1UE
United Kingdom
E-mail: [email protected]

We have not appointed a data protection officer. For any question about this notice or your data, contact us at the e-mail address above.

2. What we collect and why

Server logs

When you visit this website, our hosting provider and content delivery network automatically record technical data about the request: your IP address, the date and time, the page requested, the referring page, and your browser and operating system type. This is needed to deliver the site, keep it secure and diagnose faults.

Lawful basis: our legitimate interest in running a secure and reliable website (Article 6(1)(f) UK GDPR).
Retention: log data is held by our providers for a short period, typically no more than 30 days, and then deleted.

Contacting us

If you e-mail us, join the waitlist or otherwise get in touch, we keep your message, your e-mail address and any details you choose to share so that we can respond, keep in touch about what we are building and, where you have asked for it, let you know about opportunities to take part.

Lawful basis: our legitimate interest in responding to enquiries and building relationships with people who ask to hear from us (Article 6(1)(f) UK GDPR). If your message includes information about your health, we rely on your explicit consent (Article 9(2)(a) UK GDPR), which you give by choosing to share it and can withdraw at any time.
Retention: for as long as needed to deal with your enquiry or, for the waitlist, until you ask to be removed.

Web fonts

This site loads the Inter typeface from Google Fonts. When a page loads, your browser requests the font files from Google's servers, which means Google (Google Ireland Limited and Google LLC) receives your IP address. We do this so the site displays consistently. Google's privacy policy is at policies.google.com/privacy.

Lawful basis: our legitimate interest in a consistent presentation of the site (Article 6(1)(f) UK GDPR).

Cookies and analytics

This website does not set cookies, does not use analytics and does not track you across other sites.

3. Who we share data with

We do not sell personal data and do not share it with anyone for their own marketing. We use the following service providers, who process data on our behalf:

Railway Corp. (United States) hosts the website.
Cloudflare, Inc. (United States, with UK and EU infrastructure) provides the content delivery network and DNS.
Google provides the web fonts as described above.

We may also disclose personal data where required by law.

4. International transfers

Some of the providers above are based in the United States, so technical data such as your IP address may be transferred outside the UK. Where this happens, the transfer is covered by the UK Extension to the EU-US Data Privacy Framework where the provider is certified, or otherwise by the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with appropriate safeguards.

5. Your rights

Under the UK GDPR you have the right to:

ask for a copy of the personal data we hold about you (access);
have inaccurate data corrected (rectification);
have your data deleted in certain circumstances (erasure);
restrict how we use your data in certain circumstances (restriction);
receive the data you gave us in a portable format (portability);
object to processing based on our legitimate interests, including any direct marketing (objection); and
withdraw consent at any time where we rely on it, without affecting processing carried out before withdrawal.

To exercise any of these rights, e-mail [email protected]. We will respond within one month. There is normally no charge.

6. Complaints

If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: ico.org.uk/make-a-complaint, helpline 0303 123 1113.

7. Security

This site is served over HTTPS, so data you send to us through it is encrypted in transit. We take reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access.

8. Changes to this notice

We may update this notice as the website or our work changes. The current version is always published on this page.

Last updated: 12 September 2026