Privacy Policy

1. Scope

This policy explains how Anoneurx Lab (“the lab”, “we”, “us”) handles personal information on the lab website and in the course of research, placements and collaborations. It applies to visitors, applicants, student researchers, supervisors, collaborators and reviewers.

Where the lab processes information on behalf of a university or another partner, that partner’s privacy notice may also apply. Where local law gives you stronger rights than this policy, local law prevails.

2. Information we collect

We collect only the information we need to run the lab and its research.

Information you give us

Name, email address, affiliation and the content of applications, enquiries, reviews and correspondence you send to the lab.

Application information

Education history, skills, research interests, references and work samples submitted through a placement or collaboration form.

Research records

Notes, datasets, code and authorship records produced while working on a lab problem, handled under the lab’s research ethics and data-management rules.

Technical information

Standard server logs such as IP address, browser type, requested page and timestamp, retained for security and reliability.

Preference information

Interface settings, such as light or dark theme, stored locally in your browser rather than on our servers.

The lab does not ask for government identifiers, payment details or special-category data unless a specific programme requires it and tells you first.

3. How we use information

Personal information is used to:

• Assess applications and match applicants to suitable problems and supervisors.
• Administer placements, collaborations, reviews and research outputs.
• Respond to enquiries and provide the access you request.
• Operate, secure and improve the lab website.
• Meet record-keeping, ethics and legal obligations.
• Send programme updates you have asked to receive.

We do not sell personal information, and we do not use application data for advertising.

4. Legal bases

Where the GDPR or comparable law applies, we rely on the following legal bases:

Contract

To assess and administer a placement or collaboration you have applied for.

Legitimate interests

To run, secure and improve the lab and its research, balanced against your rights.

Consent

For optional communications and any research activity that specifically requires consent.

Legal obligation

To keep records required by ethics, funding or regulatory rules.

5. When we share information

We share personal information only where there is a clear need:

• With supervisors, reviewers and collaborators involved in your application or project.
• With service providers who host, secure or support the lab, under confidentiality and data-processing terms.
• With a university or funding partner where a programme is jointly run, as described when you apply.
• Where required by law, regulation or a valid legal request.
• To protect the lab, its researchers or the public from harm.

Research datasets released publicly are de-identified or aggregated before release and are never published with personal contact details.

6. Retention

We keep personal information only as long as it is needed for the purpose it was collected for, or as required by law.

Enquiries

Retained for up to 24 months after the conversation closes.

Unsuccessful applications

Retained for up to 12 months, then deleted or de-identified, unless you ask us to keep them longer.

Active placements and collaborations

Retained for the duration of the work and for the period required to verify publications and awards.

Server logs

Retained on a short rolling basis for security and troubleshooting.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or export your personal information, to object to certain processing, and to withdraw consent where processing is based on consent.

To exercise a right, contact [Placeholder: lab governance contact email]. We will verify your request and respond within the period required by applicable law. You may also complain to your local data-protection authority.

8. Cookies and local storage

The lab website uses local storage to remember your interface preferences. It does not use advertising or cross-site tracking cookies. The separate Cookie Policy explains the categories, durations and controls in detail.

9. Security

We apply access controls, encryption in transit, least-privilege access and review procedures to protect personal information. No system is perfectly secure, so please report suspected incidents through the Security Policy rather than testing them yourself.

10. International transfers

The lab works with collaborators in several countries. Where personal information moves across borders, we use appropriate safeguards such as standard contractual clauses or an equivalent mechanism required by law.

11. Children

The lab website and programmes are intended for people aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us and we will delete it.

12. Changes to this policy

We may update this policy as the lab or the law changes. The revised version will show a new “last updated” date, and material changes will be announced on the lab home page.

13. Contact

Questions about privacy, or requests to exercise your rights, can be sent to [Placeholder: lab governance contact email]. The lab’s postal address and data-protection representative are recorded as [Placeholder: registered address and DPO details].