Privacy Policy
Microbiome & Cancer Working Group is the data controller for the personal information we collect from you. We are committed to protecting your privacy and ensuring you have a positive experience on our website and when you interact with us.
This privacy notice explains how we collect, use, and protect your personal data, in accordance with the Data Protection (Jersey) Law 2018.
The Data Protection Officer (“DPO”)
We have appointed an external Data Protection Officer to oversee our data protection compliance and to help ensure your rights are protected. If you have any questions about our data protection practices, or if you would like to exercise your data protection rights, you can contact our DPO:
Name: Paul Byrne
Email: dataprotection@seerave.org
Phone: +44 (0) 1534 735330
The kind of information we hold about you
We collect and process personal data from visitors to our website. This includes information that you actively provide to us (such as if you sign up for a newsletter or make an enquiry) and information that we collect automatically when you visit our website (such as cookie and website tracking data).
We do not collect extensive amounts of personal data; our processing is limited to what is necessary to operate our informational websites and to understand how our services are being used.
How is your personal information collected?
We collect your personal data in the following ways:
— Directly from you: When you complete forms on our website, subscribe to our mailing list, or contact us with an enquiry, you voluntarily provide us with personal data.
— Automatically: When you visit our website, we collect information about your activity using cookies and website tracking technology. This helps us to understand how you use our website, to improve the user experience, and to comply with legal requirements around cookie consent.
What information do we collect about you?
The categories of personal data we collect and the purposes for which we use it are set out below:
Contact details — Name, email address, and telephone number collected when you contact us or sign up for newsletters or updates about our microbiome and cancer research initiatives.
Website activity and cookie data — Information about how you interact with our website, including pages visited, time spent on pages, and click patterns. This is collected to improve website functionality, to monitor website performance, and to ensure our cookie consent management is compliant with data protection law.
Device and browser information — Technical data such as your IP address, browser type, and device type, collected automatically when you visit our website to enable website operation and security.
Contact details
Name, email address, and telephone number collected when you contact us or sign up for newsletters or updates about our microbiome and cancer research initiatives.
Website activity and cookie data
Information about how you interact with our website, including pages visited, time spent on pages, and click patterns. This is collected to improve website functionality, to monitor website performance, and to ensure our cookie consent management is compliant with data protection law.
Device and browser information
Technical data such as your IP address, browser type, and device type, collected automatically when you visit our website to enable website operation and security.
Special Category Data
We do not routinely collect special category data (also known as sensitive personal data), which includes information about your health, ethnicity, religion, sexual orientation, political beliefs, trade union membership, genetic data, or criminal convictions. If, in future, we engage with you for a specific purpose that requires us to collect special category data, we will seek your explicit consent and will inform you of the legal basis and safeguards that apply.
How we will use information about you
We process your personal data on the basis of one or more of the following lawful grounds under the Data Protection (Jersey) Law 2018:
1. Consent (Schedule 2, Part 1, Condition 1, Data Protection (Jersey) Law 2018)
Where you have given us your consent, we use your personal data for the purpose you have consented to. For example, if you sign up to receive updates about our microbiome and cancer research, we will use your email address to send you newsletters and news about our work. You can withdraw your consent at any time by contacting us or by unsubscribing from our mailing list.
2. Legitimate Interests (Schedule 2, Part 1, Condition 5, Data Protection (Jersey) Law 2018)
We rely on legitimate interests to process certain categories of data where it is fair and reasonable to do so. For example, we use website tracking and analytics data to improve the performance of our website, to understand how users navigate our sites (Oncobiomeatlas.org and microbiomecancer.org), and to ensure that our website is secure and functioning properly. We balance your privacy interests against our interests in running an effective informational service.
3. Contractual Necessity (Schedule 2, Part 1, Condition 2, Data Protection (Jersey) Law 2018)
Where you have entered into a relationship with us (for example, if you have requested information or agreed to participate in a survey), we may process your personal data as necessary to fulfil that arrangement. For example, if you ask us a question via a contact form, we will use your name and email address to respond to your enquiry.
Change of purpose
We will only use your personal data for the purposes set out in this privacy notice. If we wish to use your data for a new purpose that is not compatible with the original purpose, we will provide you with information about that new purpose and the lawful basis for it, and where applicable we will ask for your consent before proceeding. If you object to a new use of your data, you have the right to do so by contacting us or our DPO.
Data sharing
We share your personal data with the following processors who act on our instructions and are bound by strict confidentiality and data protection obligations:
Propelfwd
Data Protection Managers. They provide advice and assistance with our data protection requirements and have no access to your data. They will only access your data if you submit a data rights request or if we have a data incident or breach.
Seerave Foundation
A Jersey-based foundation advancing microbiome and cancer science to improve patient outcomes.
Processors are other organisations/services carefully chosen by Seerave Foundation to process your information correctly and securely. In the case of organisations outside of Jersey, the United Kingdom and the European Economic Area (EEA):
(a) we have prior written instructions for the transfer or
(b) we have entered into specific contractual terms with them to ensure that they treat your personal data in a way equivalent to that in which they would be required if they were established in Jersey.
We ensure that your privacy rights are respected in line with this Notice and the same protection is given to your personal data as laid down by the DPJL.
Data security
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction. These include encryption, access controls, and secure deletion procedures. However, no method of transmission over the internet is entirely secure. While we strive to protect your data, we cannot guarantee absolute security, and you use our services at your own risk. In the event of a suspected data breach, we will notify you and the Jersey Office of the Information Commissioner in accordance with the Data Protection (Jersey) Law 2018.
Data retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law. We operate a data retention schedule which is managed by our Data Protection Officer and senior management. When your data is no longer needed, we securely erase and delete it using secure digital deletion methods. Specific retention periods depend on the type of data and the purposes of processing; for further details about how long we retain your information, please contact us using the details provided below.
Rights of access, correction, erasure and restriction
Under the Data Protection (Jersey) Law 2018, you have the following rights:
— Right of access: You have the right to obtain confirmation as to whether we hold your personal data and, if we do, to receive a copy of that data and information about how we process it.
— Right to rectification: You have the right to request that we correct or update any inaccurate or incomplete personal data we hold about you.
— Right to erasure: You have the right to request that we erase your personal data in certain circumstances, such as where it is no longer necessary for the purposes for which it was collected, or where you withdraw your consent.
— Right to restrict processing: You have the right to request that we limit how we use your personal data in certain circumstances, such as where you dispute its accuracy or where you object to our processing.
— Right to data portability: You have the right to request that we provide your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another organisation.
— Right to object: You have the right to object to our processing of your personal data on grounds relating to your particular situation, or to object to processing for direct marketing purposes.
These rights are not absolute and may be limited in certain circumstances. If you wish to exercise any of these rights, please see the section below.
How to request your information
To exercise any of your data subject rights (including access, rectification, erasure, restriction, portability, or objection), the easiest way is to submit your request via our Data Rights Portal.
Alternatively, you can also email your request to our Data Protection Officer:
Paul Byrne, Data Protection Officer
Email: dataprotection@seerave.org
Phone: +44 (0) 1534 735330
Or write to us at:
Microbiome & Cancer Working Group
c/o Seerave Foundation
35-37 New Street
St Helier
Jersey
JE2 3RA
When you submit a request, please provide enough information to help us identify you (such as your full name, email address, and any other relevant details). We will aim to respond to your request within four weeks of receipt. If your request is complex or if you have made multiple requests, we may extend this period by a further eight weeks. If an extension is necessary, we will inform you of this within the original four-week period and explain the reason for the delay. Please note that certain data subject rights may be subject to limitations under the Data Protection (Jersey) Law 2018.
Right to withdraw consent
Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. You can withdraw consent by submitting a request via our Data Rights Portal, by emailing us, or by writing to us using the contact details above. Withdrawing consent will not affect the lawfulness of our processing based on consent before the withdrawal.
Automated Decision-Making
We do not use automated decision-making or profiling in relation to your personal information.
Changes to this Privacy Notice
We may update this privacy notice from time to time to reflect changes in our data processing practices, legal requirements, or other relevant developments. Any changes will be posted on our website at microbiomecancer.org and will take effect immediately upon posting. We encourage you to review this notice regularly to stay informed about how we protect your personal data. If we make material changes that affect your rights or the way we process your data, we will provide additional notice as required by law.
Complaints
If you have any concerns about how we handle your personal data or wish to lodge a complaint, please contact us first:
Microbiome & Cancer Working Group
c/o Seerave Foundation
35-37 New Street
St Helier
Jersey
JE2 3RA
Web: microbiomecancer.org
Data Protection Officer: Paul Byrne
Email: dataprotection@seerave.org
Phone: +44 (0) 1534 735330
If you are not satisfied with our response, or if we do not respond within a reasonable timeframe, you have the right to lodge a complaint with the supervisory authority:
Jersey Office of the Information Commissioner
2nd Floor
5 Castle Street
St Helier
Jersey
JE2 3BT
Web: jerseyoic.org
Email: enquiries@jerseyoic.je
Phone: +44 (0) 1534 716530
Last updated: 2 June 2026