Privacy Notice

Here at B.SPINE we pride ourselves on adhering to GDPR and ICO regulations, storing information only when necessary and in appropriate and secure formats. Additionally we prioritise transparency with our collaborators, ensuring our respect for your intellectual property. Please read below to find out more.

Privacy Notice

BSPINE are committed to protecting your privacy and keeping your personal information safe. This policy explains how we collect, use, and store your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

We are a platform that connects students to professors for research opportunities.

Contact details:

Email: bspineresearch@gmail.com
ICO Registration Number: C1786852

2. The information we collect

When you use our website contact form, we collect:

Your name
Your email address
Your year of study

We may also collect any other information you choose to provide in your message.

3. How we use your information

We use your personal data to:

Respond to your enquiries
Send you updates about research opportunities (only if you have opted in)
Improve our services and website

4. Lawful basis for processing

Our lawful bases under the UK GDPR are:

Consent – when you opt in to receive updates about research opportunities.
Legitimate interests – when we respond to your enquiry or match you to research opportunities.

5. How we store your data

Your data is stored securely on secure cloud‑based servers via Notion. Access is limited to authorised staff only.

We keep your personal data for no longer than 2 years from your last interaction with us, unless you request deletion sooner.

6. Sharing your data

We do not sell your data. We may share it with:

Professors or academic staff for research matching purposes (only with your consent)
Service providers that help us send emails or host our website (bound by data protection agreements)

7. International transfers

We store some personal data in Notion, a secure cloud‑based workspace service operated by Notion Labs, Inc., which is based in the United States.

Notion is certified under the EU–US Data Privacy Framework and covered by the UK–US Data Bridge, which means your personal data is protected to UK GDPR standards when transferred internationally.

We also take appropriate technical and organisational measures (such as password protection and access control) to keep your data safe.

If we use other providers based outside the UK, we will ensure your data is protected using approved safeguards.

8. Your rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate information
Request deletion of your data
Withdraw consent at any time
Complain to the ICO if you believe your data is being misused (www.ico.org.uk)

To exercise your rights, contact us at bspineresearch@gmail.com.

9. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with the updated date.

10. Contact us

If you have questions about this Privacy Policy or how we handle your data, please contact us at: bspineresearch@gmail,com

Collaborator’s Notice

At B.SPINE, we deeply respect the confidentiality and intellectual ownership of all research shared with us. We understand that many of our collaborators are engaged in ongoing projects that involve sensitive data, unpublished findings, or proprietary methodologies. Any materials, discussions, or insights provided to B.SPINE — whether through consultation, interviews, or written correspondence — are treated as confidential and will not be published, distributed, or archived without the express written consent of the contributor.

When we share information about ongoing collaborations or consultant profiles on our website (for example, so that students can apply or connect), we do so transparently and collaboratively. Before any material is made public, we will consult directly with the contributor to ensure that only the minimum necessary information is included, and that every detail has been explicitly approved and signed off by them.

We do not store or post any identifiable research content, data, or project materials on our public platforms unless explicit permission has been granted. Our team operates with strict adherence to principles of academic integrity and data protection, ensuring that your intellectual property remains fully your own. Any summaries, publications, or collaborative outputs will be co-developed transparently, with all contributors acknowledged and consulted prior to release.