×

Important Information

This section of the website (the “Microsite”) of Mereo BioPharma Group plc (the “Company”) has been prepared solely for your information and for the purpose of providing background information on the Company, its business, the upcoming general meeting of the Company’s shareholders, and the industry in which the Company operates or any particular aspect thereof. For further information, please see the shareholder circular published by the Company in connection with the General Meeting which is available at www.mereobiopharma.com/GeneralMeeting2022 or at sec.gov.

The information contained in the Microsite has not been independently verified and no representation or warranty, express or implied, is made or given by or on behalf of the Company or any of its subsidiaries, or any of any such person’s directors, officers, employees, agents, affiliates or advisers, as to, and no reliance should be placed on, the accuracy, completeness or fairness of the information or opinions contained in the Microsite and no responsibility or liability is assumed by any such persons for any such information or opinions or for any errors or omissions. All information presented or contained in the Microsite is subject to verification, correction, completion and change without notice. In making available the Microsite, none of the Company or any of its subsidiaries, or any of any such person’s directors, officers, employees, agents, affiliates or advisers, undertakes any obligation to amend, correct or update the information contained in the Microsite or to provide the recipient with access to any additional information that may arise in connection with it. Accordingly, undue reliance should not be placed on any of the data contained in the Microsite.

Forward-Looking Statements

The Microsite and the information in it contain “forward-looking statements.” All statements other than statements of historical fact are forward-looking statements within the meaning of Section 27A of the United States Securities Act of 1933, as amended, and Section 21E of the United States Securities Exchange Act of 1934, as amended. Forward-looking statements relate to future events, including, but not limited to, statements regarding future clinical development, efficacy, safety and therapeutic potential of clinical product candidates, including expectations as to reporting of data, conduct and timing and potential future clinical activity and milestones and expectations regarding the initiation, design and reporting of data from clinical trials. Forward-looking statements are often identified by the words “believe,” “expect,” “anticipate,” “plan,” “intend,” “foresee,” “should,” “would,” “could,” “may,” “estimate,” “outlook” and similar expressions, including the negative thereof. The absence of these words, however, does not mean that the statements are not forward-looking. These forward-looking statements are based on the Company’s current expectations, beliefs and assumptions concerning future developments and involve risks and uncertainties that could cause actual results, performance, or events to differ materially from those expressed or implied in such statements. You should carefully consider the foregoing factors and the other risks and uncertainties that affect the Company’s business, including those described in the “Risk Factors” section of its latest Annual Report on Form 20-F, reports on Form 6-K and other documents furnished or filed from time to time by the Company with the Securities and Exchange Commission. You should not place undue reliance on any forward-looking statements, which speak only as of the date hereof. The Company undertakes no obligation to publicly update or revise any forward-looking statements after the date they are made, whether as a result of new information, future events or otherwise, except to the extent required by law. The Microsite and the information in it also contain estimates, projections and other information concerning the Company’s business and the markets for the Company’s product candidates, including data regarding the estimated size of those markets, and the incidence and prevalence of certain medical conditions. Information that is based on estimates, forecasts, projections, market research, or similar methodologies is inherently subject to uncertainties and actual events, or circumstances may differ materially from events and circumstances reflected in this information. Unless otherwise expressly stated, the Company obtained this industry, business, market and other data from reports, research surveys, clinical trials studies and similar data prepared by market research firms and other third parties, from industry, medical and general publications, and from government data and similar sources.

OK

Recruitment Privacy Notice

Contents

 

1. Introduction

 This Privacy Notice (this “Notice”) is made available by Mereo Biopharma Group plc and its affiliated entities (referred to as “Mereo”, “we”, “us” or “our”), and is intended to assist you in understanding how we collect, process, secure, and transfer personal data. We also describe how you can contact us to learn more information about our privacy practices. The terms “you”, “your” or “user” refer to the person applying for a job role with Merio either directly, via a recruitment agency or through a third-party source.

2. Link with other Privacy Notices

If your application become an employee, worker or contractor of Mereo is successful, your personal information will be handled in accordance with Mereo’s Employee Privacy Notice which will be notified to you and is found on Mereo’s intranet. 

It is important that you read this Notice together with any other privacy notice that we may provide you with so that you are fully aware of how and why we are using your data. This Notice supplements any other privacy notices and privacy policies that we may provide to you and is not intended to supersede them.

3. Who we are

Mereo Biopharma Group Plc is the Data Controller and is responsible for the processing of your personal data.

4. The data we collect about you

Mereo will collect and may utilize your personal data for the purposes described below:

Category of Data

Purpose for Data Processing

Contact details (Example, your name, nationality, postal address, telephone number, e-mail address)
  • Facilitating communications.
  • Communicating to provide you with information.
  • Responding to your requests or communications.

Current and former job titles and positions
  • Verifying your suitability for the job

Identification information such as passport ID, date of birth, other paper copies of identity
  • Verifying your identity as part of our recruitment process.
  • Verifying that you are legally entitled to work in the relevant country.

Academic Qualifications

Such as copies of certificates
  • Verifying your suitability for a job opening at Mereo.

Previous employment references
  • Verifying your suitability for a job opening at Mereo.

Right to live/work data
  • Complying with Mereo's legal ang regulatory obligations.

Current/Historic compensation data
  • Facilitating compliance with applicable laws, regulations or other requirements.

Assessment information such as the results of psychometric
  • Assessing your suitability for the role.

Special categories of Personal Data such as detials about your health.
  • To comply with our legal obligations, including to ensure your health and safety in the work place and to assess your fitness to work,
  • To provide appropriate workplace adjustments
  • To monitor and manage sickness and absence and to administer benefits.

We may use criminal data to verify your suitability for a role with Mereo. If we would like to offer you the role, we will request a basic disclosure of unspent criminal convictions. This information is collected on the basis of our legitimate business interest to satisfy ourselves that there is nothing in your criminal convictions history that makes you unsuitable to work for us. Once the recruitment decision has been made the information collected is destroyed in line with our retention periods.

We will only use any information relating to criminal convictions and offences where the law allows us to. And we have an appropriate policy and safeguards in place when processing such data.

5. Legal basis for processing your personal data

Processing for any of the above purposes is necessary to enable us to pursue our legitimate business interest (or the legitimate interests of one or more of our affiliates) in –

a) personnel recruitment and HR forecasting;
b) the prevention or detection of fraud or abuses in our job application process; and
c) the maintenance of records of business activities around recruitment.

Mereo may also process your personal data for other reasons, as outlined below:
• to comply with legal and regulatory obligations;
• to decide whether to enter into a contract of employment with you.
• to establish, exercise or defend our legal rights and/or for the purpose of (or in connection with) legal proceedings (including for the prevention of fraud); and
• with your consent.

At all times, Mereo will only use your personal data when the law allows us to.

Generally, we do not rely on consent as a legal basis for processing your personal data in circumstances where: (i) the law specifies that we have to process your personal data; (ii) we need to process your data to perform a contract with you; (iii) we have a public interest to do so; or (iv) we have a legitimate business reason for doing so.

Where we do rely on your consent, you have the right to withdraw it any time in the manner indicated when your consent was provided.

6. Disclosures of your personal data

Where necessary to fulfil the purposes described in this Notice, Mereo may disclose your personal data to certain third-parties, vendors and service providers or affiliated employees, contractors and entities as described below.

Whenever Mereo shares your personal data with companies acting as our authorized agents and service providers, these companies agree to use your personal data only for specified purposes. Furthermore, the recipient will implement and maintain reasonable security procedures and practices appropriate to the nature of your information to protect your personal data from unauthorized access, destruction, use, modification or disclosure.

We will transfer and disclose your personal data to the following categories of recipients where it is lawful to do so, and subject to the implementation of appropriate protections:

Category of third party

Purpose for Disclosure

Subsidaries and affiliated entities
  • Internal business requirements.
  • In connection with new job opportunities
  • Internal research and statistical analysis purposes

Recruitment or Human Resource service providers
  • Business requirement, where there is a direct applicant and we forward this application to a recruitment afency where we have contracted with them exclusively for that role.

Background check vendors
  • To verify that academic, training and professional qualifications are accurate and complete

Law enforcement, govornment, courts or regulators, or fraud prevention agencies 
  • To verify your identity.
  • Mereo's public or legal duty to assist with detecting fraud and tax evasion, litigation, investigation or defending legal rights.

7. International cross-border data transfers

Mereo operates globally and your data may be transferred outside of the country in which you interact with Mereo, including to countries whose data protection laws substantially differ from the country in which you work or reside. To accomplish the purposes described in this Notice, we may also disclose and transfer personal data to personnel and other departments throughout Mereo. For example, your personal data may be transferred or accessed by Mereo and its affiliate entities in the United States of America.

Whenever we transfer your personal data out of the UK or EEA, we ensure a similar degree of protection is afforded to it by ensuring that at least one of the following safeguards is implemented:

• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission. For further details, see here.
• Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe. For further details, see here or here, for transfers from the United Kingdom.

Please contact us here if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.

8. Data security

Mereo will implement appropriate technical and organizational security measures necessary to adequately safeguard your personal data. These safeguards will include, for example:

Security Measures

  •  Access to Personal Data is limited and provided only where necessary, to those employees, agents, contractors and other third parties who have a business need to know. 
  • All employees handling Personal Data receive security and privacy awareness training, will only process your personal data on our instructions and are subject to a duty of confidentiality. 
  • Employees with access to Personal Data are given the least privilege necessary
  • We have robust procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
  • A disciplinary policy is enforced to prevent unauthorized access
  • Where technically feasible, data is encrypted in transit and at rest

9. Data retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements. By law, we have to keep basic information about our clients (including contact, identity, financial and transaction data) for six years after they cease being clients for tax purposes.

In some circumstances you can ask us to delete your data: see your legal rights below for further information.

In some circumstances we will anonymise your personal data (so that it is no longer your personal information as it cannot be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

10. Your legal rights

You may have rights relating to your Personal Data. Depending on the applicable data privacy law, you may have the right to direct Mereo to take certain actions related to your personal data. You may have the right to request confirmation as to whether Mereo is processing your personal data, and if so:

  • You may have the right to request information relating to the categories of data involved, purposes of processing, recipients of your data, retention periods/criteria, and your rights as a Data Subject.
  • You may have the right to access any of your personal data that Mereo is processing.
  • You may have the right to rectify any inaccurate or incomplete personal data that Mereo is processing.
  • You may have the right to request erasure or restriction of any personal data that Mereo is processing, subject to certain exceptions.
  • You may have the right to obtain a copy of your personal data in a commonly-used and machine-readable format.
  • You may have the right to request your information not be sold or otherwise disclosed to a third-party.
  • You may have the right to lodge a complaint with your local Data Protection Authority or Supervisory Authority.

To exercise the rights described above, please email [email protected] with a description of your request.
You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, unless we have a lawful basis for doing so and we have notified you.

11. Changes to the notice


We keep our privacy notices under regular review. This version was last published in March 2023. 
We reserve the right, at our discretion, to change, modify, add or remove sections of this Notice at any time. You are encouraged to review this Notice from time to time for updates, or to contact Mereo for more information.

12. Your duty to inform us of changes

It is important that the personal data we hold about you is accurate and current. You are responsible for making sure the information you give us is accurate and up to date. You must tell us if anything changes, as soon as possible. 

13. Consequences of not providing personal information to us 

Providing your personal data to Mereo is voluntary for you. Should you choose not to provide your personal information to us, your interaction with us may be adversely impacted. Also, the provision of your personal information may be necessary to allow us to perform a contract with you and/or to provide services to you.

14. Providing Mereo with other people's data

If you give us any personal information that does not relate to you (e.g., information about another candidate), you must ensure that you have the required legal basis to collect and share such personal information. You must also tell them what information you have given to us, and make sure they agree we can use it as set out in this privacy notice. You must also tell them how they can see what information we have about them and correct any mistakes.

15. Questions

If you have any questions about this Notice, the use of your data, or if you would like to make a request to exercise your data protection rights, please contact the Data Protection Officer using the details set out below.

Email: [email protected] and mark your query “For the urgent attention of the Data Protection Officer”.

Post: Data Protection Officer, Mereo Biopharma Group Plc, 1 Cavendish Place, London, W1G 0QF, United Kingdom.

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance. 

16. Glossary

“Data Controller” means the person or organisation that determines how and why your data is being collected and used.

“Personal data” refers to any information relating to an identified or identifiable natural person, whether that information can be used alone or in conjunction with other information to identify a natural person.

“Aggregated Data” means summarised data derived from your personal data. Examples are statistical or demographic data. It is not considered personal data in law as this data will not directly or indirectly reveal your identity.

“Process” (or “Processing”) means any operation or set of operations which is performed on personal data or sets of personal data, whether by automated means, such as collection, use, and erasure.

Revision History 

Effective Version

Description of changes

Effective date

1.0

First Version

07-Mar-2023