Privacy Policy




We are an AI company with end-to-end capability from early drug discovery to late-stage clinical development. BenevolentAI combines the power of computational medicine and advanced AI with the principles of open systems and cloud computing to transform the way medicines are designed, developed, tested and brought to market.



BenevolentAI Limited and its Subsidiary (“BenevolentAI”, ’We”, “Us” BAI) is committed to conducting its businesses in accordance with all applicable Data Protection laws and regulations and in line with the highest standards of ethical conduct. This policy sets forth the expected behaviours of BAI’s practices in relation to the collection, use, retention, transfer, disclosure and destruction of any Personal Data belonging to all BAI Contacts (i.e. the Data Subjects).

At BAI, we strive to ensure continued and effective implementation of this policy and expects all BAI Employees and Third Parties to share in this commitment. This policy (together with our “Terms” of use and any other documents referred to on it) sets out the basis on which any Personally Identifiable Information (PII) we collect from you, or that you provide to us, will be processed by us.

Please read the following carefully to understand our views and practices regarding your Personal Data and how we will treat it. If you have any concerns or need further information, our GDPR Compliance Manager and data protection representatives can be contacted directly here:


BenevolentAI Limited

4 - 8 Maple Street, London W1T 5HD

United Kingdom

Phone: +44 (0)2037 819 360




Information we may collect from you:

We may collect and process some or all of the following types of information from you:

Data Type (that we may hold at any time)

Employees/Contingent Workers Information

  • Names

  • Home address

  • Email address

  • Phone number

  • Data of birth

  • NI / SS Number

  • Passport Number

  • Bank Account details

  • Loan Account details (Only where applicable)

  • Other Credit Information (as necessary)

Source (obtained data from)

  • Job Agencies

  • Given by Employees on resumption of work

  • Internal referral

  • Online

  • Onsite visitors’ registration system

  • Direct email messages

  • Direct phone calls

Pseudonymous / Patient Level Data Sets

  • De-identified data sets

  • De-identified patient level data

Source (obtained data from)

  • Data banks

  • CROs

Processors/Suppliers/Investors/Partners Information

  • Supplier/Vendor/Contact ID

  • Email address            

  • Company Physical Addresses

  • Company Contact Information

  • Name

  • Home Addresses

  • Phone number

  • Financial Information

  • Bank Account

Source (obtained data from)

  • Onsite visitors’ registration system

  • Direct email messages

  • Phone calls

Technical information we may collect:

  • Internet Browsing

  • Activity data, such as when you completed a form on this website;

  • Information from your visits to this website, including the type of browser and operating system you use,

  • access times, pages viewed, URLs clicked on, your IP address and the pages you visited

  • Tracking pixels that allow platforms such as Facebook and Twitter to interact with this website and give feedback on your actions; and

  • Device information, including the unique device identifier, hardware model, operating system and version and mobile network information

Source (obtained data from)

  • Cookies

  • Online contact form

  • Social Media Visitors


Purposes of processing

The personal data we collect will be used for:

  • Accounting and Payroll

  • Recruitment

  • Research

  • Security purposes

  • Statistical analysis

  • Contractual obligations

  • For general compliance with relevant legislations

  • To help BenevolentAI improve our services

Our legal basis for processing for the personal data:

  • Consent

  • Contractual obligation

  • Legitimate Interest

Any legitimate interests pursued by us, or third parties we use, are as follows:

  • Administration and record keeping (HR)

  • Accounting and payroll system

  • Clinical research/assessments for public interest

  • Contractual administrative purposes


The special categories of personal data concerned are:

  • Pseudonymised / Patient data sets


Information we receive from other sources

We may also receive information from other sources from time to time which may be combined with information you give to us and information we collect about you. We may use this information and the combined information for the purposes set out above (depending on the types of information we receive) and you will be informed, to seek your consent whenever we intend to use your data for reasons outside the scope set out in this policy.


How we store your personal data - (lawful basis for processing)

We rely on Consent, Contractual, Legitimate Interest and Legal Obligation as the lawful basis on which we collect and use your personal data. We use your data to provide you with information about our products, services and to improve those products and services. With your consent, we will also use your data to notify you about changes and events and to ensure that content on our site is presented in the most effective manner for you and your computer.


All the information we collect from you are used for administrative (HR) purposes and drugs discovery purposes. We will inform and seek your consent if there’s a need to disclose your personal information to other third parties for a new purpose outside the scope or is materially different from that for which it was originally collected. BenevolentAI will give you the opportunity to choose whether to have your Personal Data disclosed or opt-out. However, note that in certain circumstance where BenevolentAI might be required to disclose your Personal Information in response to lawful requests by public authorities, to meet national security, law enforcement or investigations, we will oblige accordingly.

Additionally, your details may also be shared with external organisation that manages our payroll system to ensure your monthly wages are paid, approved CROs, Contractors, Partners, Suppliers and with your consent, shared with approved insurance companies for employment-oriented insurance cover.


We take appropriate measures to ensure all personal data is kept secured including security measures to prevent personal data from being accidentally collected, recorded, organised, structured, stored, altered, retrieved, consulted, used, disclosed by transmission, disseminated or otherwise made available, aligned or combined, restricted, erased or destroyed in an unauthorised way. We limit access to your personal data to those who have a genuine business need and duly trained for such processing. Those processing your information will do so only in an authorised manner that ensures confidentiality and accountability. We also have technical and organisational procedures in place to deal with any suspected data security breach. We will notify you and all applicable regulators of a suspected data security breach where we are legally required to do so within 72 hours.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted through any online means outside the scope of this policy, therefore any of such transmission remains at your own risk.

Where we store your data

When we store your personal data in our own systems, it is stored within EEA. The data that we collect from you and process may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers/processors. Such staff maybe engaged in, among other things, the fulfilment of your monthly newsletter and the provision of support services. In these cases, BenevolentAI ensures an agreement with security clauses are signed with its data processors.

If you would like further information, please contact us (use ‘Contact Details’ below). We will not otherwise transfer your personal data outside of the United Kingdom OR EU or to any organisation (or subordinate bodies) governed by public international law or which is set up under any agreement between two or more countries without your knowledge.


How long we keep your data

BAI will process personal data for as long as we have an active contractual agreement, consent, legal obligation or clear vital interests in place and will store the personal data for another 7 years post expiration of our contractual agreement.

Information collected and used for our clinical research purposes are kept indefinitely for further future analysis as allowed in Article 17(3)d and Article 89(1) of the GDPR.



Under the General Data Protection Regulation, you have a number of important rights summarised below:

  • The right of access: You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please email or write to us at the address outlined below and it will be sent to you for free after due verification has been carried out to ensure your safety and in compliance with the GDPR.

  • The right to rectification: If the data we hold of you are inaccurate or incorrect, you have the right to request for them to be corrected accordingly.

  • The right to erasure or be forgotten:You can request the erasure of your personal data in certain situations.

  • The right to restriction of processing: Under the scope of the GDPR, you can ask us to limit the processing of your personal data under certain circumstances and with exceptions.

  • The right to be informed: In general, the GDPR asks us to clearly and correctly inform you of key processing activities regarding your personal data in order for you to make unambiguous and informed decision whether to consent or not. You therefore have the right to request for this information and we will oblige you where feasible.

  • The right to data portability: As a data subject, you have the right to ask for the transfer of your personal data to another controller in a machine-readable electronic format.

  • The right to object: you can object to the processing of the personal data concerning you for direct marketing or any other processing deemed unlawful (subject to certain circumstances) at any time.

  • The right to object to automated processing: This includes profiling, which produces legal effects concerning you or may significantly affects you. You have the right to object to this process.


We comply with the EU-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union to the United States. We have certified to the Department of Commerce that it adheres to the Privacy Shield Principles.  If there is any conflict between the terms in this privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern.  To learn more about the Privacy Shield program, and to view our certification, please visit We are also subject to investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).



In compliance with the Privacy Shield Principles, BenevolentAI commits to resolve complaints about our collection or use of your personal information.  EU individuals with inquiries or complaints regarding our Privacy Shield policy should first contact Us at:  

By email:

Or post at:

UK Office:

The Compliance Unit,

BenevolentAI Limited

4 - 8 Maple Street, London W1T 5HD

Phone: +44 (0) 2037 819 360 (Monday – Friday)


US Office:

Benevolent Technology, Inc.

81 Prospect St, Brooklyn,

New York 11201

United States

Phone: +1 (929) 295-6550 (Monday – Friday)

We have further committed to cooperate with the panel established by the EU data protection authorities (DPAs) with regard to unresolved Privacy Shield complaints concerning human resources data transferred from the EU in the context of the employment relationship.

We are committed to cooperate with the panel established by the EU data protection authorities (DPAs) with regard to unresolved Privacy Shield complaints concerning human resources data transferred from the EU in the context of employment relationship. As an EU Persons, you have the option to select binding arbitration under the Privacy Shield Panel for the resolution of your complaint under certain circumstances. For further information on this Framework, refer to the Privacy Shield website at: 

Under the Privacy Shield Policy, you have the rights to personal information that BenevolentAI holds about you as stated in “YOUR RIGHT” session above if it has been processed in violation of the Principles (except when the burden or expense of providing access, correction, amendment, or deletion would be disproportionate to the risks to the Data Subject’s privacy, or where the rights of persons other than the Data Subject would be violated). Requests can be sent to: using the  downloadable “DSAR” form on our website:



As stated in our disclosure commitment above, your Personal Data are used solely for administrative (HR) purposes and you will be duly informed if your personal information is to be shared with other third parties for a new purpose outside the scope or is materially different from that for which it was originally collected. We will give you the opportunity to choose whether to have your Personal Data disclosed or opt-out. However, note that in certain circumstance where BenevolentAI might be required to disclose your Personal Information in response to lawful requests by public authorities, to meet national security or law enforcement or investigations, we will oblige accordingly.



Before any onward transfer of your Personal Data to third parties, we will ensure measures are in place that meets the level of security appropriate to such onward transfer in terms of contract (SCCs/BCRs) or agreement as appropriate to ensure adequacy in line with the provision of the Privacy Shield Principles. We will ensure that any third party receiving such Personal Information from us has entered into a written agreement or contract with Us requiring that such third party provide at least the same level of privacy protection as the Privacy Shield Principles.

We remain responsible and liable under the Privacy Shield tenets, if any such third-party processes such Personal Information in a manner inconsistent with the terms of this policy, unless BAI can prove that it is not responsible for the event leading to any breach. We will ensure that the third-party notify Us if it makes a determination that it can no longer meet the stated terms. The contract shall provide that when such a determination is made, they cease processing or take reasonable and appropriate steps to remediate so as to align the Privacy Shield Principles.


These are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity which is in line with the processing activities outlined in this policy. You can adjust or disable all cookies and protect your information from being collected by following the steps below:


Chrome on Windows:

A: Select the Chrome menu icon.

B: Select Settings.

C: Near the bottom of the page, select Show advanced settings.

D: In the "Privacy" section, select Content settings.

E: Select Block sites from setting any data.

F: Select Finished.


Chrome on Android

A: Tap Menu > Settings > Site settings.

B: Tap Cookies.

C: Tap the slider to turn cookies off.


Internet Explorer on Windows

A: Select the gear in the upper-right corner of the screen, then select 'Internet Options'. If you have the Menu Bar enabled, you can select 'Tools' > 'Internet Options'.

B: Click the 'Privacy' tab.

C: Select the 'Advanced' button.

D: Under 'First-party Cookies' and 'Third-party Cookies', choose Block to automatically block cookies or Prompt to prompt with each cookie request.

E: Click 'OK' and you have successfully set your cookie settings.


Firefox on Windows

A: Click the menu button and choose Options/Preferences.

B: Select the Privacy panel.

C: Set Firefox will: to Use custom settings for history.

D: Uncheck Accept cookies from sites to disable cookies.

E: Close the about: preferences page.


Safari on Mac

A: Choose Safari > Preferences

B: Click Privacy

C: Set Block cookies to Always.


For more details information on cookies, please visit: OR


Other websites

Our website may contain links to other websites from time to time. Note that this privacy policy only applies to this website. Whenever you are redirected or linked to other websites, you should read their own privacy policies to ensure you understand their use of your personal information they may collect from you before consenting. we do not accept any responsibility or liability for these external policies.


Changes to our privacy policy

At BAI, we keep our privacy policy under regular review to continuously capture each requirement and we will place any updates on this webpage. This privacy policy was last updated in June 2019 to comply with GDPR requirements.


How to complain

We do believe we can resolve any query or concern you may raise about our use of your Personal Information. The General Data Protection Regulation also gives you right to lodge a complaint with a supervisory authority, in particular within the European Union (or European Economic Area) state where you work, normally live or where any alleged infringement of data protection laws may have occurred. The supervisory authority in the UK is the Information Commissioner (ICO) who may be contacted at:


Telephone: 0303 123 1113.


How to contact us

Please contact us if you have any questions about our privacy policy or how we process the information we hold about you:

By email:

Or write to us at:

The Compliance Unit,

BenevolentAI Limited

4-8 Maple Street, London, W1T 5HD, United Kingdom

You can also call us on +44 (0)2037 819 360 (Monday - Friday, 9:00am - 5:00pm)


Last updated: 27/06/2019