Privacy Policy

Last updated: March 2026

1. Who We Are

BioTracker is operated as a sole trader business based in the UK. We operate the BioTracker life sciences internship aggregator platform at biotracker.uk. For privacy enquiries contact us at info@biotracker.uk.

2. Data We Collect

Account data — your name, phone number, email address and hashed password, collected when you register.

Billing data — your subscription status and Stripe customer identifier. We do not store your card number or bank details; these are held exclusively by Stripe.

Usage data — pages visited and features used, collected automatically to help us improve the product.

3. How We Use Your Data

We use your personal data to: create and manage your account and provide the service; process subscription payments; send transactional emails such as account confirmation and payment receipts; monitor and improve the platform; and respond to your support requests.

4. Legal Basis for Processing

Contract performance — to provide the service you have subscribed to.

Legitimate interests — to understand how the platform is used and improve our product, where these interests are not overridden by your rights.

Legal obligation — to comply with applicable laws, including tax and financial regulations.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account we will remove your personal data within 30 days, except where we are required to retain it for longer by law (for example, billing records for tax purposes may be retained for up to 7 years).

6. Third-Party Processors

Supabase — database hosting and authentication. Your account credentials and data are stored on Supabase's infrastructure.

Stripe — payment processing. Stripe handles all card data and subscription billing. Stripe is PCI DSS Level 1 certified.

PostHog — product analytics. We track anonymised usage events to understand how users interact with the platform.

We do not sell your personal data to any third party.

7. Cookies

We use session cookies set by Supabase to maintain your authenticated session. These are strictly necessary to provide the service. We also use PostHog analytics cookies to understand platform usage in an anonymised way.

8. Your Rights

Under UK GDPR you have the right to: access a copy of your data; request correction of inaccurate data; request deletion of your data; restrict or object to processing; and data portability. To exercise any of these rights, email info@biotracker.uk. We will respond within one calendar month.

9. Right to Complain

If you are unhappy with how we handle your data you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

10. Changes

We may update this Privacy Policy periodically. The date at the top of this page indicates when the policy was last revised.

11. Contact

For any privacy-related questions, email us at info@biotracker.uk.