How we handle your personal information.

NEUROssance [legal entity name and company number to be confirmed] is based at First Floor, Beaumont House, Beaumont Road, Oxford OX16 1RH, United Kingdom. We are the controller of the personal information described in this notice: that means we decide why and how it is used.

Questions about this notice and about your information go to info@neurossance.com, or by post to the address above. We have not appointed a data protection officer; the people who run NEUROssance handle these questions themselves.

This notice covers the website at neurossance.com and the contact form on it.

Enrolment, payment and the courses themselves take place on our course platform, at its own address, which has its own privacy and cookie notices [link to be added when the platform moves to its new address]. Our page on LinkedIn is run under LinkedIn’s own notice.

What you give us

When you write to us through the contact form, we receive what you type: your name, your email address, the name of your organisation if you give it, what your message is about, and the message itself. If you reach the form from our “page not found” page, the address of the missing page comes with your message so that we can fix the link.

You do not have to give us any of this: there is no legal or contractual requirement to write to us. Without a name and an email address, though, we have no way to reply.

We do not ask for, and do not need, sensitive information such as health details, political opinions or financial information. Please do not put it in your message.

What the website collects on its own

Like every website, ours is served by computers that keep short-term technical logs: the address of the device that asked for a page (the IP address), the type of browser, the page requested and the time. Our hosting provider keeps these logs to run and protect the service. When you send the form, the same address is used for ten minutes to limit how many messages one connection can send; it is not stored with your message.

The website does not set cookies and does not use analytics at present. If that changes, we will ask for your consent first and this notice and our cookie notice will say so.

UK data protection law requires a lawful basis for every use of personal information. These are ours.

Replying to you

We use what you send through the form to answer your enquiry. Our lawful basis is our legitimate interest in running NEUROssance and answering the people who write to us; where you ask about a course or a programme for your organisation, it is also the steps you ask us to take before a contract.

Keeping the website secure and available

The technical logs and the limit on messages protect the site against attacks and misuse. Our lawful basis is our legitimate interest in network and information security.

Measuring how the site is used

We do not measure usage today. If we introduce analytics, we will do so only with your consent, and you will be able to withdraw it at any time.

Keeping automated spam out of the form

The form has quiet protections against automated submissions that use no personal information. If we add a bot check from a third party, our lawful basis will be our legitimate interest in keeping the form usable, and we will name the provider here.

Where we rely on legitimate interests, we have weighed them against your interests and rights and concluded that they do not override them. You can object at any time: see “Your rights” below.

We do not sell your information and we do not share it with advertisers. We use a small number of service providers, who act on our instructions and under written agreements:

Vercel Inc.

Hosts the website and runs the small program that receives the contact form. United States.

Plus Five Five, Inc., trading as Resend

Delivers each message from the contact form to our mailbox as an email. United States. [To be confirmed: the email provider may change before launch.]

Google LLC

Only if we introduce analytics, and only with your consent: measures how the site is used. United States.

Cloudflare, Inc.

Only if we add a bot check to the form: tells automated submissions from people. United States.

Your message then sits in our mailbox, where the people who run our courses and programmes read and answer it. We may share information if the law requires it, for example with a court or a regulator.

Our providers are based in the United States, so your information leaves the United Kingdom. Where a provider is certified under the UK Extension to the EU-US Data Privacy Framework, we rely on the United Kingdom’s adequacy regulations for the United States. Otherwise we rely on the International Data Transfer Addendum to the European Commission’s standard contractual clauses, which forms part of our agreements with them. You can ask us for details of the safeguards that apply.

Messages and our replies

Kept in our mailbox for up to 12 months after our last exchange, then deleted, unless the conversation leads to enrolment or a contract, in which case the records that belong to it are kept for as long as that relationship and our legal obligations require. [Period to be confirmed.]

Copies held by our email provider

The provider that delivers the form to our mailbox keeps a copy of each message and its delivery record for 30 days, then deletes them.

Technical logs

Kept by our hosting provider for a short period to run and protect the service, and not used to identify you.

Analytics data

None today. If we introduce analytics, we will set the shortest retention the tool allows and say what it is here.

You have rights over your personal information. You can ask us:

• for a copy of the information we hold about you (the right of access);
• to correct information that is wrong or incomplete (the right to rectification);
• to delete your information (the right to erasure);
• to limit how we use it while a question about it is settled (the right to restriction);
• for a copy of the information you gave us in a form you can take elsewhere (the right to portability);
• to withdraw any consent you have given, for example to analytics, at any time.

Your right to object

Where we use your information on the basis of our legitimate interests (replying to you, keeping the website secure), you have the right to object at any time, for reasons to do with your particular situation. If you object, we will stop unless we can show compelling grounds that override your interests, rights and freedoms. We never use your information for direct marketing, so there is nothing of that kind to object to.

To exercise a right, write to info@neurossance.com. We will reply within one month; if a request is complex we may take up to two months more, and we will tell you if so. We may ask you to confirm who you are before we act. There is normally no charge.

We do not make decisions about you by automated means, and we do not profile you.

If you are unhappy with how we have handled your information, please tell us first at info@neurossance.com. We will acknowledge your complaint within 30 days and tell you the outcome without undue delay.

You also have the right to complain to the ICO, the United Kingdom’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113. You can do this at any time, whether or not you have complained to us.

Our courses are for adults and, in the case of Quantum in Pictures, for learners aged 14 and over. This website is written for adults and we do not knowingly collect personal information from anyone under 13. If you are under 18 and would like to write to us, you are welcome to; you may prefer to ask a parent, guardian or teacher to write for you. Enrolment on the course platform follows the platform’s own rules.

This website does not set cookies and stores nothing in your browser. Our cookie notice explains this, and what will change if we introduce usage statistics.

The site links to our course platform, to LinkedIn, and to the publishers, universities and journals behind our courses and research. Each of them handles your information under its own notice, which we do not control.

We will update this notice when what we do changes, and show the version and date at the top. If a change matters to you, for example a new use of your information, we will say so on the website.

Email: info@neurossance.com

Post: NEUROssance, First Floor, Beaumont House, Beaumont Road, Oxford OX16 1RH, United Kingdom