This policy applies to the public BOSAD website. Separate research projects, clinical registries and other institutional systems may operate under their own privacy, consent, ethics and data-governance arrangements.
1. Information we collect
Information you provide
When you submit an enquiry through the Contact form, we collect the information you enter, including:
- Your name.
- Your email address.
- Your organization, if provided.
- Your selected enquiry type.
- Your message subject.
- Your message and any information you choose to include.
The Contact form supports research and publication enquiries, collaboration requests, questions about educational resources, content corrections, general enquiries and other messages.
We do not require visitors to register for a public account to read the website’s health information, research records or educational resources.
Technical information
When you access the website, the hosting infrastructure and website software process technical information needed to deliver pages, maintain security and support normal operation.
This may include your IP address, browser and device information, requested pages, access times and technical error or security information.
Such information is processed as part of the website’s hosting, security and operational services.
2. How we use your information
We use personal information for purposes directly related to operating the website and responding to visitors.
These purposes include:
- Receiving, reviewing and responding to enquiries.
- Considering research and institutional collaboration requests.
- Responding to questions about educational materials.
- Reviewing reported errors or outdated content.
- Maintaining the functionality and security of the website.
- Preventing spam, automated abuse and unauthorized activity.
- Meeting applicable legal and institutional obligations.
Contact-form information is used to handle the enquiry for which it was submitted. Submitting a message does not automatically register you for a newsletter or marketing service.
Personal information is processed on an appropriate basis under the law applicable to the particular processing activity.
3. Contact form and email communication
Messages submitted through the Contact form are processed by the website and delivered to BOSAD’s designated institutional email system.
The information provided in your message is used to understand your request, communicate with you and determine any appropriate follow-up.
The selected Enquiry Type helps identify the subject of the message. It does not prevent you from describing your request in your own words.
Access to received enquiries is restricted to people authorized to manage BOSAD’s correspondence and related responsibilities.
Messages and associated delivery records may be retained in the institutional mailbox and relevant operational systems according to their purpose, applicable requirements and the organization’s retention arrangements.
4. Website security and spam protection
BOSAD uses technical safeguards to protect the website and Contact form against automated submissions, spam and misuse.
The Contact form uses Cloudflare Turnstile, which processes technical signals to distinguish legitimate visitors from automated activity. Its verification process may involve information about your browser, device and connection.
Turnstile verification is used for website security and spam prevention.
For information about Cloudflare’s processing, see the Cloudflare Turnstile Privacy Addendum:
Cloudflare Turnstile Privacy Addendum
The website also uses server-side validation and other appropriate security measures to protect form processing.
5. Cookies and similar technologies
The website and its supporting services may use cookies or similar technologies for functions such as security, session management, website administration and embedded content.
WordPress uses cookies where needed for administrative authentication and other applicable functions. Public visitors do not need a WordPress account to access published information.
Security services and externally hosted media may also process browser information or use technologies necessary for their operation.
When a page includes a third-party service, that provider’s applicable privacy practices may govern its processing.
BOSAD does not use information entered into the Contact form as an automatic subscription to advertising or promotional mailing lists.
Your browser provides controls for managing and deleting cookies. Restricting certain necessary technologies may affect the functionality of some website features.
6. Third-party services and external content
BOSAD uses service providers to support its website, including hosting, email delivery and security.
These providers process information as necessary to perform their respective services and according to the arrangements applicable to them.
The website also links to externally hosted research publications, educational material and video content. External websites and media platforms may collect information under their own privacy policies when you access their services.
BOSAD does not control the independent data practices of third-party websites.
Personal information may be processed or accessed in other countries where a relevant service provider operates. Such arrangements are subject to applicable data-protection requirements.
7. Data retention
BOSAD retains personal information only for as long as it is needed for its relevant purpose, including responding to enquiries, maintaining necessary records, protecting the website and meeting applicable legal or institutional obligations.
Different information may have different retention periods depending on its purpose and the systems in which it is held.
Information that is no longer required is deleted or otherwise handled according to the applicable retention and disposal arrangements.
Technical records and backups may be subject to the retention practices of the relevant hosting and service infrastructure.
8. Information security
BOSAD uses appropriate technical and organizational measures to protect personal information against unauthorized access, loss, alteration, disclosure and misuse.
These measures include controlled access to institutional correspondence, secure website administration, validated form processing and website-security protections.
Access to personal information is limited according to relevant responsibilities.
Although reasonable safeguards are applied, no internet-based system or method of electronic communication can guarantee absolute security.
9. Health and research information
The public BOSAD website is an educational and institutional information platform. It is not a patient portal or a system for collecting identifiable clinical records or confidential research datasets.
Please do not submit medical records, identifiable patient photographs, research participant information, unpublished datasets, passwords or other sensitive material through the public Contact form.
Information relating to separate research studies, clinical registries and institutional projects is governed by the arrangements applicable to those activities.
The publication of research information on the BOSAD website does not mean that confidential research or clinical data is available through the public website.
10. Your privacy rights
Depending on the applicable law and the circumstances of processing, you may have rights relating to your personal information, including requesting access, correction, deletion or other available protections.
You may contact BOSAD to ask what information you have provided through the website, raise concerns about its handling or make a request concerning your personal information.
Requests are considered in accordance with the applicable legal requirements and any relevant obligations to retain particular records.
If you believe your personal information has been handled improperly, you may also have the right to seek assistance from the competent data-protection authority under applicable law.
11. Children’s privacy
BOSAD publishes educational information that may be relevant to children, parents and caregivers. The public website is not designed to collect personal information directly from children for clinical assessment, registration or treatment.
Parents, caregivers and other visitors should avoid submitting identifiable information about children or their medical circumstances through the public Contact form.
Any separate research activity involving children is subject to the relevant research, ethics, consent and data-protection arrangements.
12. Changes to this policy
BOSAD may update this Privacy Policy when website functionality, service providers, information-processing arrangements or applicable legal requirements change.
The current version will be made available on this page. Material changes will be communicated where required.
13. Contact about privacy
For questions about this Privacy Policy, the handling of your personal information or a privacy-related request, please contact BOSAD through the Contact page.
Select General enquiry and identify your message as a privacy-related request.