Legal

Privacy policy

How OutboundBio collects, uses and protects personal data, and the choices you have.

Last updated: 3 November 2026

Who we are

OutboundBio ("OutboundBio", "we", "us") provides B2B outbound email programs and webinar outreach for CROs and CDMOs. For the purposes of data protection law, OutboundBio is the controller of the personal data described in this policy, except where we act on behalf of a client (see "Data we process for clients").

Contact: paras@outboundbio.com
Postal address: 2nd Floor, India Accelerator, Montclaire, Baner Link Road, Pune, MH, 411045, India

What this policy covers

This policy explains how we collect, use, share and protect personal data when you:

  • visit outboundbio.com;
  • receive an outreach email sent by us or on behalf of one of our clients;
  • book a call, email us, or become a client;
  • apply for a role at OutboundBio.

Data we collect

Business contact data

Name, job title, employer, work email address, business phone number, company details and professional profile information. We collect this from public sources (such as company websites and professional networks) and from licensed B2B data providers.

Information you give us

Details you share when you email us, book a call, reply to an outreach email, register for a webinar or send a job application.

Client data

Names and contact details of the people we work with at client companies, plus billing and contract information.

Technical data

When you visit our website, our hosting provider may log standard technical data such as IP address, browser type and pages requested. We do not run advertising trackers on this website. See our Cookie policy.

We do not intentionally collect sensitive personal data, such as health information, and we ask that you do not send it to us.

How we use it and our legal bases

PurposeLegal basis (EU and UK GDPR)
Sending relevant B2B outreach to professionals about services related to their roleLegitimate interests
Running webinar invitations, reminders and follow-upLegitimate interests, or consent where required
Responding to enquiries and scheduling callsLegitimate interests, or steps before entering a contract
Delivering services to clients, invoicing and account managementPerformance of a contract
Reviewing job applicationsSteps before entering a contract, and legitimate interests
Keeping suppression (do not contact) lists, security and legal complianceLegal obligation and legitimate interests

Where we rely on legitimate interests, we have balanced our interests against your rights. Our outreach is limited to business contacts, relevant to the recipient's role, and every email includes a clear way to opt out.

Data we process for clients

When we run outreach for a client, we may process contact data on that client's behalf and under their instructions. In that case the client is the controller and OutboundBio is the processor. The client's own privacy notice also applies. If you have a question about outreach sent for a specific company, you can contact us and we will help direct your request.

Who we share data with

We do not sell personal data. We share it only with:

  • Service providers who help us operate, such as email sending and deliverability tools, data verification providers, scheduling (Cal.com), webinar platforms, website hosting and font delivery (Google Fonts). They may only use the data to provide their service to us.
  • Clients, when you reply to outreach sent on their behalf and show interest, so they can respond to you.
  • Professional advisers and authorities, where required by law or to protect our rights.
  • A buyer or successor, if OutboundBio is involved in a merger, acquisition or sale of assets.

International transfers

OutboundBio is based in India and works with contacts in the US, UK and EU. Your data may be processed in countries other than your own. Where data is transferred out of the UK or EEA, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, or rely on our service providers' equivalent safeguards.

How long we keep data

  • Prospect data is kept while it is relevant to an active campaign and reviewed regularly. Data that is no longer needed is deleted.
  • Opt-outs are kept on a suppression list indefinitely, so we never contact you again. This list holds only the minimum needed, usually your email address.
  • Client and billing records are kept for as long as required by tax and accounting law.
  • Job applications are kept for as long as needed to complete hiring, unless you ask us to keep them for future roles.

Your rights

Depending on where you live, you may have the right to:

  • access the personal data we hold about you;
  • correct inaccurate data;
  • ask us to delete your data;
  • object to processing based on legitimate interests, including all direct marketing;
  • restrict processing or receive your data in a portable format;
  • withdraw consent, where we rely on consent;
  • complain to your data protection authority, such as the ICO in the UK or your local EU supervisory authority.

California residents may also request to know, delete or correct personal information, and to opt out of any sale or sharing. We do not sell or share personal information for cross-context behavioral advertising, and we will not discriminate against you for using these rights.

India: where the Digital Personal Data Protection Act applies, you may request information about, correction of, or erasure of your personal data, and nominate another person to exercise your rights.

To use any of these rights, email paras@outboundbio.com. We may need to verify your identity before acting on a request.

Opting out of emails

Every outreach email includes a clear opt-out. You can also reply "unsubscribe" or email paras@outboundbio.com. We will add you to our suppression list and stop contacting you. See our Outreach policy.

Security

We use appropriate technical and organisational measures to protect personal data, including access controls, authenticated email infrastructure and working only with reputable service providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

Our services are for businesses. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top shows when it last changed. Significant changes will be highlighted on this page.

Contact

Questions or requests about this policy: paras@outboundbio.com
2nd Floor, India Accelerator, Montclaire, Baner Link Road, Pune, MH, 411045, India