Privacy Policy

This is the Privacy Policy for Opens external link in current (Site) and applies to the processing of personal data by Diagnostica Stago S.A.S. the operator of this Site and its associated company Diagnostica Stago UK Limited (Stago, we, us and our). Please take the time to review this Privacy Policy carefully as it tells you how your personal information will be treated by us. If you have any questions or any queries concerning your personal information please contact us at Diagnostica Stago S.A.S is a company registered in France with company number 305 151 409 with registered office at 3 allée Théresa - 92600 - Asnières sur Seine (France). Diagnostica Stago UK Limited is a company registered in the United Kingdom with company number 5335357 with registered office at 2, Theale Lakes Business Park - Moulden Way - Sulhamstead - Theale - Berkshire - RG7 4GB - United Kingdom.

1. Who are we

We are a “data controller” for the purposes of the Data Protection Act 2018 and the EU General Data Protection Regulation 2016/679 (GDPR) and any successor legislation to the GDPR or the Data Protection Act 2018 ("Data Protection Law").  

This means that we are responsible for, and control the processing of, your personal information. 

We are committed to protecting your privacy. This policy is designed to ensure your personal details are protected when you register as a member by completing registration form, when you subscribe to newsletters, request information from us using the form provided for that purpose and every time you e-mail us your details. 

It is important that you read this Privacy Policy together with any other privacy notice we may provide when we are collecting personal information or data about you so that you are fully aware of how and why we are using your data. If we make any changes to this Privacy Policy, we will make this clear and publish the updated version on our website.

2. Purpose of this policy and data collected

This privacy policy aims to inform you on how we collect and processes your personal information through your use of this website, including any data (including personal data) you may provide through use of this website.

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:


  • Identity Data includes first name, last name, username or similar identifier, marital status, title, date of birth and gender.
  • Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our website.
  • Profile Data includes your username and password, bookings made by you, feedback and survey responses.
  • Usage Data includes information about how you use our website and services.
  • Marketing and Communications Data includes your preferences in receiving marketing from us and your communication preferences.
  • Contact Data includes email address and telephone numbers.
  • Financial Data includes bank account and payment card details.


We may also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal information but is not considered as personal information under Data Protection Law - as this data does not directly or indirectly reveal your identity. 

We may also collect Aggregated Data (so that no individuals are identified) for marketing and strategic development purposes.

3. Collection of data and use of your personal information

3.1 We use different methods to collect data from and about you including: When you interact with us directly, you may give us your Identity Data by filling in forms or by corresponding with us by post, phone and email or otherwise. 

3.2 We will only use your personal information lawfully and in accordance with the Data Protection Law. We will mainly use your personal information in the following circumstances:

  • where we need to perform the contract we are about to enter into or have entered into with you
  • where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests and
  • where we need to comply with a legal or regulatory obligation.

3.3 We have set out in a table below a description of all the ways we plan to use your personal information and the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

3.4 Whenever we process your personal information under the ‘legitimate interest' lawful basis, we make sure that we take into account your rights and interests and will not process your personal information if we feel that there is an imbalance.

3.5 We may process your personal information for more than one lawful ground depending on the specific purpose for which we are using your data.



Purpose / Activity

Type of data

Lawful basis for processing

To manage our relationship with you which will include:

(a) Notifying you about changes to our terms or Privacy Policy

(b) Responding to your requests

(c) Asking you to provide feedback

(d) Communicating with you

(e) Servicing your account

(f) providing you with products, services or information you may request

(a) Identity

(b) Contact

(c) Profile

(a) Perform our contract with you (if any)

(b) Necessary to comply with a legal obligation

(c) Necessary for our legitimate interests (to keep our records updated and to study how customers use our services)

To administer and protect our business and our website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)

(a) Identity

(b) Contact

(c) Technical

(a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security and to prevent fraud)

(b) Necessary to comply with a legal obligation

To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you

(a) Identity

(b) Contact

(c) Profile

(d) Usage

(e) Technical

Necessary for our legitimate interests (to study how browsers and customers use our products/services, to develop them, to grow our business and to inform our marketing strategy)

To use data analytics to improve our website, extranet, products/services, marketing, customer relationships and experiences

(a) Technical

(b) Usage

Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy)

To make suggestions and recommendations to you about our services that may be of interest to you

(a) Identity

(b) Contact

(c) Profile 

(d) Usage

(e) Technical

Necessary for our legitimate interests (to develop our services and grow our business)


3.6   You may opt-out of receiving communications from us and opt-in and opt-out of receiving communications from our distributors and any other third parties. If you have subscribed to our service and wish to stop receiving information about our products and/or services by sending us an email at 

If you wish to stop receiving communications from any of our distributors, or other third parties you must communicate with them directly.


4. Sharing your data with third parties

4.1 We may share your data (including your personal information) with our trusted partners and suppliers who work with us or on our behalf. This may include third parties who help us create and send information to you, manage our website and store and back up of data securely. Processing of such data is always carried out under our instruction. We make sure that our partners and suppliers always store any data including personal information securely, delete it when no longer needed and never use it for any other purposes.

4.2 We enter into contracts with these partners and suppliers that require them to comply with the Data Protection Law and ensure that they have appropriate control measures in place in order to secure your information.

4.3 We will never sell your personal information to any other third party organisations so that they can contact you for marketing activities. Nor do we sell any information about your web browsing activity.

4.4 We may disclose your personal information if required to do so by law (for example, to comply with applicable laws, regulations and codes of practice or in response to a valid request from a competent authority); or, in order to enforce our terms and other agreements.

5. International transfers

5.1   We may share your personal information within the Stago Group which means any entities affiliated to Diagnostica Stago S.A.S with head office located at 3 allée Théresa - 92600 - Asnières sur Seine - France (for clarity any entity which is under common ownership with Stago). This may involve transferring your data (including personal information) outside the European Economic Area (EEA). If we do this, we will ensure your personal information is protected by requiring all companies in the Stago Group to follow the same rules when processing your personal information.

5.2  We may also transfer your data to our suppliers who are based outside the EEA.  Whenever we transfer your personal information out of the EEA, we make sure your data (including your personal information) is protected in a manner which is consistent with how we protect it in at least one of the following ways:

  • by only transferring your personal information to countries that have been deemed to provide an adequate level of protection for personal information by the European Commission
  • by using contracts that give the same level of protection to personal information that it has in the EU
  • by ensuring that, if an organisation is based in the US, it is part of the EU-US Privacy Shield.

6. Data Security

6.1   We take all reasonable steps to keep data you provide (including your personal information) secure and confidential from unauthorized access, misuse or loss.

6.2   We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.

6.3   We have put in place control procedures to deal with any suspected personal information breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

7. Undertaking concerning the use of your personal information

The personal information collected at the time of your connection to the website may arise in particular from the recording of your IP address, requests for information via the form provided for that purpose, or any other information that you communicate on the website. These personal information shall be used solely for the purposes for which they were sent and collected, unless specified otherwise at the time such personal data are collected. These personal data will be used by us only.

8. Third Party Sites

Our website contains links to other websites, which are outside our control and are not covered by this Privacy Policy. If you access other sites using the links provided, the operators of these sites may collect personal information from you, which will be used by them in accordance with their own privacy policy, which may differ from our Privacy Policy.

9. How long we hold onto your data (including your personal information)

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

10. User rights

We hereby inform you that by connecting to our website, your personal information may be collected, conserved and used by us - in accordance with Data Protection Law - you have a right of access to and modification, correction and deletion of your personal information. To exercise this right, please contact the Data Protection Officer of the Stago Group at the following address: Opens window for sending

11. Your consent to the use of your personal information

By using our website, you expressly consent to the collection and use of your personal information by us.

If Stago decide to change our Privacy Policy, we will post the changes on this website and extranet site. If you do not agree to these changes, please do not continue to use the website and extranet site. 

12. Further Information

To find out more about this Privacy policy and how we look after your personal information, please contact Data Protection Officer at the following address:

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues ( We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.


Last update 24 July 2018