Privacy notice

Who is responsible for your information

Peter Cowling is the data controller for the personal information processed to operate Science Beneath.

For privacy enquiries, email sciencebeneath@gmail.com.

If you email us

If you email us, we receive your email address and any information you include in your message or attachments. We use this information to respond to your enquiry and manage the correspondence.

Please include only the information needed for your enquiry and avoid sending medical records or other sensitive personal information.

Information processed when you visit

We use Cloudflare to deliver and protect the website.

When your browser requests a page or another website resource, Cloudflare receives technical information needed to handle that request, including your IP address and the requested web address. Depending on the services enabled, request and security records may also include the time of the request, browser information, response details and information about suspected malicious traffic.

This information is processed to deliver content, maintain availability, investigate technical problems and protect the website against abuse. Some of it may be recorded in service or security logs.

The website does not maintain a personal health profile.

How search works

Search filtering takes place in your browser using an index included with the website. It does not require a separate external search service to process each search.

Some search terms may also appear in the page address. When a page request includes a search term in its query string—for example, when you open or reload a saved search link—that term is sent with the request and may appear in Cloudflare’s request or security logs.

The website does not save your searches in browser storage. However, your browser may retain page addresses in its history, bookmarks or synchronised browsing data. A search term included in an address will also be visible to anyone with whom you share that address.

Please avoid entering your name, contact details or confidential personal medical information into the search field.

Why we process information

Our legal basis under the General Data Protection Regulation for delivering the website, maintaining its availability and protecting it against abuse is our legitimate interests in operating a secure, reliable information service.

Responding to ordinary enquiries is based on our legitimate interests in communicating with readers and managing the website.

Handling data protection requests and meeting applicable legal requirements is based on compliance with a legal obligation.

Where we rely on legitimate interests, the processing must be necessary and proportionate and must not override your rights and freedoms.

Cookies and similar technologies

The website code does not include advertising scripts, analytics scripts, third-party trackers or fonts loaded from external font services.

Cloudflare’s delivery and security features may use cookies or similar technologies, depending on the services enabled. These can operate separately from the website’s own code.

If we introduce optional tracking that requires consent, we will explain it and obtain your consent before it is activated. You will be able to withdraw that consent.

Your browser also provides controls for managing cookies and stored website information. Blocking technologies needed for delivery or security may affect access to the website.

Service providers and access to information

We use Cloudflare for website delivery and security. Cloudflare processes certain information on our behalf and certain information for its own purposes, as described in its privacy policy.

We use Gmail to receive and send email correspondence.

Access to information held by us is limited to people who need it to operate the website, handle an enquiry or meet a legal obligation. We may disclose information where required by applicable law.

International processing

Cloudflare and Google operate international networks. Information used to deliver the website or handle correspondence may be processed outside the European Economic Area (EEA), including in the United States.

Cloudflare, Inc. and Google LLC participate in the EU–US Data Privacy Framework. For eligible transfers from the EEA to a participating US organisation, the framework can provide a legal basis for the transfer. Cloudflare’s self-service data processing addendum also includes standard contractual clauses for relevant transfers.

You can request further information about the safeguards for this website by emailing sciencebeneath@gmail.com.

How long information is kept

Cloudflare security event records, where available, may be retained for up to 31 days. If we export or otherwise keep copies of website logs, we keep them for no more than 12 days from the date of the log entry.

We keep email correspondence for up to 12 months after the enquiry is resolved.

We may keep records for longer where necessary to address an ongoing complaint or security incident, or to meet an applicable legal obligation.

Other information that Cloudflare processes for its own purposes is subject to the retention practices described in its privacy policy. Browser history, bookmarks and other information maintained by your browser are controlled through your browser or account settings.

Your rights

To exercise these rights, email sciencebeneath@gmail.com.

Subject to the conditions in applicable data protection law, you can ask us to confirm whether we process personal information about you and provide access to it; correct inaccurate or incomplete information; delete information or restrict how it is used; or provide information in a portable format where that right applies.

You can also object to processing based on our legitimate interests on grounds relating to your particular situation.

Where processing is based on consent, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it was withdrawn.

We may request information reasonably needed to verify your identity or locate the relevant records. We will respond without undue delay and normally within one month. If a legally permitted extension is necessary, we will explain the reason within that initial period.

You can also complain to a data protection authority, including the authority in the EU country where you live, work or believe an infringement has occurred. In Italy, this is the Garante per la protezione dei dati personali. You do not have to contact us first.

External websites

Links to research papers and other external sources take you to websites operated by other organisations. Those organisations handle information under their own privacy notices.

Please review their notices when visiting their websites or using their services.

Changes to this notice

We may update this notice when the website, its supporting services or applicable requirements change.

The date at the top identifies the latest revision. Where a change requires additional information or consent, we will provide that information or obtain consent before the relevant processing begins.