Privacy Notice

Privacy Notice last updated 11/02/2026

  1. Who we are

Surrey Satellite Technology Ltd (“we”, “us”, “our” or “SSTL”) is the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This privacy notice explains how we collect, use, store and protect your personal data when you sign up for and use the MERRByS data.

  1. Personal Data We Collect

When you register for an account or use our services, we will collect the following personal data:

  • Name
  • Email Address
  • Academic Institutional Name
  • Academic Institutional Address

We do not knowingly collect special category data

  1. How we use your personal data

We process your personal data for the following purposes:

  • To create, administer and manage your user account and password
  • To provide access to our data
  • To communicate with you about your account, service updates or important notices
  • To verify academic affiliation and eligibility
  • To screen academic institution details and associated addresses in order to comply with UK Export Control regulations, trade and sanction compliance obligations
  • To maintain the security and integrity of our website and services
  • To comply with any applicable legal and regulatory obligations
  1. Export Control and Sanctions Screening

To comply with UK export control legislation and sanctioned countries regimes, we may screen:

  • Academic institution names and any associated addresses

This screening is undertaken to confirm that neither you nor your affiliated institution is listed on any UK or other applicable prohibited or sanctioned company, country or persons list. Where required by law, access to the service may be restricted, suspended or refused.

  1. Lawful Bases for processing

Under UK GDPR, we rely on the following lawful bases to process your personal data:

  • Article 6(1)(b) – Performance of a contract: to provide and manage your subscription and access to services
  • Article 6(1)(c) – Legal obligation: to comply with UK export control, sanctions, and other applicable legal requirements
  • Article 6(1)(f) – Legitimate interests: to operate, secure, and maintain our website and services, provided these interests do not override your rights
  • Article 6(1)(a) – Consent: consent is obtained when you submit your personal data via the website to sign up for an account. You may withdraw consent at any time via the details in section 11.
  1. Data Retention

We retain your personal data:

  • For the duration of your active subscription, and
  • For a minimum of 12 months after you end your active subscription, or your academic email address is no longer valid

We may periodically check in with you to see if you would like to continue to receive the data. If an email address is undeliverable, or you inform us otherwise, your account will be removed.

  1. Data Sharing

We do not sell personal data. We may share your personal data only:

  • With trusted service providers who process data on our behalf
  • Where required to comply with legal obligations, including export control or sanctions enforcement
  • With regulatory or law enforcement where legally required
  • To protect the rights, safety or security of our users or services

All third parties used by SSTL are required to sign into contractual agreements, and to handle personal data in accordance with UK GDPR. If you would like to know more about any of the third parties who may process personal data on our behalf, please contact us using the information in section 11.

  1. Data Security

We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, destruction, alteration, unauthorised disclosure or access.

  1. Your rights under UK GDPR

You have the right to:

  • Access your personal data
  • Request rectification of inaccurate or incomplete data
  • Request erasure of your personal data, where applicable
  • Request restriction of processing
  • Object to processing based on legitimate interests
  • Request data portability
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

You can exercise your rights by contacting us using the details below.

  1. Changes to this privacy notice

We may update this privacy notice from time to time. Any changes to this privacy notice will be posted on this page with an updated “Last updated” date.

  1. Contact Details

If you have any questions about the privacy notice or our data protection practices, please contact:

SSTL Privacy Officer: data.protection@SSTL.co.uk

Surrey Satellite Technology Ltd
Surrey Research Park
20 Stephenson Road
Guildford
GU2 7YE

01483 803803