Privacy Notice
Krzysztof Gizynski — Independent Consultant
| Version | 1.0 - 8 October 2026 |
|---|---|
| Contact | krzysztof.gizynski@kgbioscience.com |
| Website | kgbioscience.com |
1. Who I am
I am Krzysztof Gizynski, an independent scientific consultant providing services in molecular diagnostics, genomics and computational biology. For personal information that I process for my own consultancy purposes, I act as the data controller.
If you have a question about this notice or how I use your personal information, contact me at krzysztof.gizynski@kgbioscience.com.
2. Personal information I may collect
Depending on how you interact with me, I may collect your name, job title, organisation, professional contact details, correspondence, meeting notes, enquiry or project information, contractual and billing information, and records of our professional relationship.
For business development, I may also use professional information obtained from publicly available sources such as company websites, professional profiles, conference or publication information, or referrals. I do not intentionally collect more personal information than is reasonably necessary for the relevant purpose.
3. Why I use personal information
| Purpose | Typical information | Lawful basis |
|---|---|---|
| Responding to enquiries and discussing potential work | Contact details, correspondence, project/enquiry information | Legitimate interests; or steps requested before entering a contract |
| Providing consultancy services and managing client relationships | Professional contact details, project communications and administration | Contract where you are personally the client; otherwise legitimate interests in delivering and administering services |
| Contracts, invoicing, accounting and legal/insurance records | Contact, contractual and financial-administration records | Contract, legal obligation and/or legitimate interests |
| Relevant professional networking and business development | Professional identity, role, organisation, public professional information and business contact details | Legitimate interests, subject to applicable direct-marketing rules and your right to object |
| Protecting systems, information and legal rights | Account/access records, correspondence and incident or dispute records where relevant | Legitimate interests; legal obligation where applicable |
Where I rely on legitimate interests, I consider whether the use is necessary and proportionate and whether your interests, rights or reasonable expectations override those interests.
4. Professional outreach
I may occasionally contact relevant organisations or professional contacts about consultancy services where I reasonably believe the communication is relevant to their professional role. Where contact information was obtained from a public professional source or referral rather than directly from you, I will provide appropriate privacy information within the period required by applicable data-protection law.
You can ask me at any time not to use your personal information for direct marketing or professional outreach. I will respect that request. This privacy notice does not itself provide permission to send electronic marketing; any outreach must also comply with applicable electronic-marketing rules.
5. Client project data
Some consultancy projects may involve data supplied by a client. Where I process personal data solely on a client's instructions, the client may be the controller and I may act as its processor. In that situation, the applicable client agreement and, where required, a Data Processing Agreement will govern that processing.
Identifiable or pseudonymised human genomic or health data will only be processed where necessary for an agreed project and subject to appropriate contractual, security and data-protection requirements.
6. Visitors to this website
This website is hosted using GitHub Pages. GitHub states that when a GitHub Pages site is visited, the visitor's IP address is logged and stored for security purposes. Technical information may therefore be processed by GitHub in connection with hosting and securing the website.
Cloudflare provides domain-name and DNS services for kgbioscience.com. The website is currently configured so that Cloudflare provides DNS rather than proxying website traffic.
I do not use website-visitor information to make solely automated decisions that have legal or similarly significant effects on individuals.
7. Analytics, cookies and similar technologies
I do not currently use website analytics, advertising pixels or other technologies intended to track visitors to this website. Cloudflare Web Analytics is not currently enabled.
I do not currently set cookies for analytics or advertising purposes. If the technologies used by this website change, I will update this notice and provide any additional information or consent mechanism required by applicable law.
8. Sharing personal information
I do not sell personal information. I may share limited information with service providers that support the consultancy. These currently include GitHub for website hosting, Cloudflare for domain and DNS services, and Microsoft 365 for business email and related communications, together with accounting, legal, insurance or other professional services where reasonably necessary. Such sharing is limited to what is appropriate for the service and subject to applicable contractual, security and data-protection protections.
I may also disclose information where required by law, a competent authority, or where reasonably necessary to establish, exercise or defend legal rights.
9. International processing
Some technology or professional-service providers may process information outside the UK. Where UK data-protection law requires safeguards for an international transfer of personal data, I will rely on an appropriate lawful transfer mechanism or another permitted basis. Client-specific data-location restrictions will be respected where agreed.
10. How long I keep information
I keep personal information only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, tax, insurance, contractual or professional-defence requirements.
Project data is handled in accordance with the applicable client agreement, Statement of Work, NDA or Data Processing Agreement. Business-development contact information will be reviewed periodically and removed or suppressed where it is no longer reasonably needed. If you object to direct marketing, I may retain minimal information on a suppression list so that I can respect that preference.
11. Security
I use reasonable technical and organisational measures appropriate to the information and risk, including access controls, device and account security, multi-factor authentication where available, and proportionate controls for confidential or restricted information. Further project-specific safeguards may be agreed with clients where required.
12. Your data-protection rights
Depending on the circumstances and applicable law, you may have rights to ask for access to your personal information, correction, deletion, restriction of processing, or transfer of certain information, and to object to processing based on legitimate interests. You have an absolute right to object to the use of your personal information for direct marketing.
Where processing is based on consent, you may withdraw that consent at any time without affecting processing already carried out lawfully. Some rights are subject to legal conditions or exemptions.
13. Complaints
Please contact me first if you have a concern about how I use your personal information, so that I can try to resolve it. You also have the right to complain to the UK Information Commissioner's Office (ICO). Information about making a complaint is available from the ICO at ico.org.uk.
14. Changes to this notice
I may update this notice when my services, systems or legal requirements change. The current version and date will be shown on my website.