Privacy policy

Last updated: 6 October 2026. We review this policy every year, and whenever the site changes in a way that matters for your data.

This policy explains how Bioscience Foundation processes the personal data of people who visit biosciencefoundation.org and of people who write to us through its contact form, under the UK General Data Protection Regulation and, for visitors in the European Union, Regulation (EU) 2016/679 (together, “GDPR”).

1. Data controller and contacts

Bioscience Foundation Limited 38 Canonbury Park South, London N1 2JH, United Kingdom Email: info@biosciencefoundation.org

2. The data we process

When you browse. The systems that run the site receive the technical data of every visit: IP address, browser and device, the page requested, date and time, and the page you came from. We use them to show you the pages, to protect the site from abuse and to find faults. Only with your consent do we also collect visit statistics and measure our campaigns (see the Cookie policy).

When you write to us. The contact form asks for your first and last name, email, phone number, country, age and your message; we also record the page you write from. Please do not include health information in your message.

Anti-spam check. To tell people from automated programs, the form uses Cloudflare Turnstile, which analyses technical signals from your browser, such as the IP address and device characteristics.

3. Why we process your data, and on what legal basis

The data marked as required are needed to answer you: without them we cannot reply. Consent to statistics and marketing is optional; you can refuse or withdraw it at any time.

4. Who receives your data

Your data are processed by the people who work for the Foundation and, when your request concerns them, by Bioscience Institute, our science partner. We also use providers who process data on our behalf, as processors:

• Cloudflare, Inc.: hosting and delivery of the site, security and the anti-spam check (Turnstile);
• The Rocket Science Group LLC (Mailchimp Transactional, “Mandrill”): sending the emails generated by the form;
• Google Ireland Limited: Google Tag Manager and Google Analytics (only with your consent), Google Fonts and the YouTube video player;
• Meta Platforms Ireland Limited: the Meta pixel (only with your consent);
• Vimeo.com, Inc.: the video player on some pages;
• the providers that support our IT systems.

Data may be disclosed to authorities when the law requires it. We do not sell your data and we do not publish it.

5. Transfers outside the UK and the European Union

Some providers are based in the United States (Cloudflare, Mailchimp, Vimeo) or may access data from there (Google, Meta). In those cases the transfer relies on the EU-U.S. Data Privacy Framework and its UK Extension, for certified providers, or on standard contractual clauses (with the UK Addendum where needed). You can ask us about the safeguards in place.

6. How long we keep your data

• Requests sent through the form: for as long as needed to handle the request and any follow-up; we then delete or anonymise them, unless the law requires us to keep them longer or we need them to protect our rights.
• Technical browsing data: for short periods, as long as needed for security and fault finding.
• Statistics: according to the Google Analytics retention settings, 14 months at most.

7. Your rights

At any time you can ask us to:

• tell you whether we process data about you, and give you a copy (access);
• correct or complete them (rectification);
• delete them when they are no longer needed, when you withdraw consent or when the processing is unlawful (erasure);
• limit their use (restriction);
• give them to you in a structured, commonly used format and send them to another controller (portability);
• stop processing based on our legitimate interest and, always, direct marketing (objection);
• withdraw your consent, without affecting processing already carried out.

Write to info@biosciencefoundation.org. We answer free of charge within one month. You can also complain to the Information Commissioner’s Office in the UK (ico.org.uk) or to the supervisory authority of the EU country where you live or work.

8. Cookies

The site uses technical cookies and, only with your consent, statistics and marketing cookies. The details are in the Cookie policy; you can change your choices at any time from Cookie settings.

9. Security

Communication with the site is encrypted (HTTPS), access to data is limited to the people who need it for their work, and our providers apply appropriate security measures.

10. Minors

The contact form is meant for adults. If you are under 18, please ask a parent or guardian to contact us for you.

11. Changes

We may update this policy; the date at the top shows the version in force. If a change affects processing based on consent, we will ask for your consent again.