Effective date / Last updated: 6 June 2026
This GDPR Consent Policy explains how StarliteBio (starlitebio.com) obtains, records and manages consent and how we respect the rights of individuals located in the European Economic Area (EEA) and the United Kingdom under the General Data Protection Regulation (GDPR) and the UK GDPR. It supplements our Privacy Policy and Cookie Policy.
1. Scope
This policy applies to visitors who access our website from the EEA, the UK, and any other jurisdiction that requires consent before processing personal data or placing non-essential cookies.
2. Lawful Basis for Processing
We process personal data only where we have a lawful basis to do so. Depending on the activity, our lawful basis may be:
- Consent — for non-essential cookies and personalised advertising. You may withdraw consent at any time.
- Legitimate interests — for basic analytics, website security and fraud prevention, balanced against your rights.
- Legal obligation — where we are required to process data to comply with the law.
3. Consent for Advertising and Cookies
Before serving personalised advertisements or placing non-essential cookies on the devices of users in the EEA/UK, we request consent through a consent management mechanism (a consent banner). In line with Google’s EU User Consent Policy, we seek consent for:
- The use of cookies or other local storage where legally required; and
- The collection, sharing and use of personal data for the personalisation of ads.
If you do not consent, you may still use the website and may be shown non-personalised (contextual) ads instead.
4. Withdrawing Consent
You can withdraw or change your consent at any time using the consent option/banner on our website, or by adjusting your browser cookie settings. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
5. Your Rights Under GDPR
If you are in the EEA or UK, you have the following rights:
- Right of access — to obtain confirmation of whether we process your data and a copy of it.
- Right to rectification — to correct inaccurate or incomplete data.
- Right to erasure (“right to be forgotten”) — to request deletion of your data.
- Right to restrict processing — to limit how we use your data.
- Right to data portability — to receive your data in a structured, commonly used format.
- Right to object — to object to processing based on legitimate interests or for direct marketing.
- Rights related to automated decision-making — we do not carry out automated decision-making that produces legal effects.
6. How to Exercise Your Rights
To exercise any of these rights, email us at contact@starlitebio.com with the subject line “GDPR Request”. We will respond within one month, as required by law. We may ask you to verify your identity before fulfilling your request.
7. Data Transfers
Some of our service providers (such as Google) may process data outside the EEA/UK. Where this happens, appropriate safeguards (such as Standard Contractual Clauses) are relied upon to protect your data.
8. Complaints
If you believe we have not handled your personal data in accordance with the law, you have the right to lodge a complaint with your local data protection authority. We would, however, appreciate the opportunity to address your concerns first — please contact us.
9. Contact
For any consent or data-protection matter, contact us at contact@starlitebio.com.