Privacy Policy

Scope of this policy

This policy is maintained by Cytosomatic Labs and describes how we handle personal information collected through this website. It covers visitors who browse the site, people who submit a partnership or general enquiry, and people who create an account for the research portal.

It does not cover clinical or research participant data. We do not run clinical trials and do not collect patient health information through this website.

Information we collect

• Account information: your email address and, if you provide it, your name and organisation. This is created when you register for the research portal.
• Enquiry information: the name, email, organisation and message you enter into a partnership or contact form.
• Authentication information: if you sign in with Google, we receive the basic profile details Google shares with us — we never receive your Google password.
• Technical information: standard server and security logs generated when a browser requests a page, such as IP address, timestamp and user agent.
• Preferences: your selected site language, stored locally in your browser.

How we use it

We do not sell personal information, and we do not use it for advertising or behavioural profiling.

• To respond to partnership, collaboration and general enquiries.
• To create and secure your research portal account and show you your own enquiry history.
• To keep the site available, detect abuse, and investigate security incidents.
• To improve the clarity and accuracy of the information we publish.

Why we are allowed to process it

• Consent — when you choose to submit a form or create an account.
• Legitimate interests — operating, securing and improving the website.
• Legal obligation — where we must retain records to comply with applicable law.

Where information is stored

Account and enquiry data are stored in our managed cloud database, protected by row-level access rules so that a signed-in user can read only their own records. Access by our team is limited to the people who need it to respond to your enquiry or operate the site.

Data may be processed on infrastructure located outside your country of residence. Where that happens we rely on the safeguards offered by our infrastructure providers.

Service providers

These providers act on our instructions. We do not share your information with anyone else except where required by law.

• Our hosting and application platform, which serves this website.
• Our managed database and authentication provider, which stores accounts and enquiries.
• Google, only if you choose to sign in with a Google account.

Retention

Enquiries are retained while a collaboration conversation is active and for a reasonable period afterwards for record-keeping. Account records are retained until you ask us to delete the account. Technical logs are kept for a short operational window and then rotated.

Your rights

Depending on where you live, you may also have the right to lodge a complaint with your local data protection authority.

• Ask what personal information we hold about you.
• Ask us to correct information that is inaccurate.
• Ask us to delete your account and associated enquiries.
• Withdraw consent, or object to processing based on legitimate interests.

Children

This website is intended for researchers, clinicians, investors and other professional audiences. It is not directed at children, and we do not knowingly collect information from them.

Changes to this policy

We update this page when our practices change. The date at the top reflects the most recent revision. Material changes affecting account holders will also be communicated by email where we have one on file.