Privacy policy for Biocybercare
This Privacy Policy explains how Biocybercare (“we”, “us”, “our”) collects, uses, discloses, and safeguards personal information when you visit our website, use our tools, subscribe to our newsletter, or engage with our services. By using our site, you acknowledge this Policy and the practices described here.
Scope and who this applies to
- Covered services: Website, calculators/tools, store/merch, reviews, blog, courses, contact forms, newsletter, and any related features we operate.
- Regions: We serve users globally. This Policy is designed to be consistent with major frameworks including GDPR (EU/UK), CCPA/CPRA (California), and NDPR (Nigeria). Your rights may vary based on your location.
- Updates: We may revise this Policy as needed. We will update the “Effective date” and, where appropriate, provide notice of material changes.
Effective date: 10 November 2025
Information we collect
- Information you provide:
- Account and profile: Name, email, password, country/region.
- Transactions: Shipping/billing details, order history (if store is active).
- Communications: Messages via contact forms, support requests, survey responses.
- Preferences: Newsletter topics, content interests, consent choices.
- Information collected automatically:
- Usage data: Pages viewed, clicks, time on page, referring/exit URLs.
- Device and log data: IP address, browser type/version, OS, device identifiers.
- Cookies and similar tech: Session cookies, preference cookies, analytics pixels.
- Information from third parties:
- Analytics/ads: Aggregated metrics from services like Google Analytics and ad platforms.
- Email platforms: Subscription status, campaign performance (open/click rates).
- Payment processors: Transaction confirmations and fraud signals (we do not store full card numbers).
How we use your information
- Provide and improve services:
- Core functionality: Operate the site, tools, and features you request.
- Personalization: Tailor content, recommendations, and experiences.
- Quality and reliability: Debugging, performance monitoring, and security.
- Communications:
- Transactional: Confirmations, receipts, service notifications.
- Marketing (with your consent or as permitted): Newsletters, updates, offers, product announcements, and course/store launches.
- Surveys and feedback: Improve accuracy and usefulness of content/tools.
- Compliance and protection:
- Legal obligations: Record-keeping, tax, regulatory requests.
- Safety and integrity: Fraud prevention, abuse detection, enforcement of Terms.
Legal bases for processing (GDPR/UK GDPR)
- Contract: To deliver requested services/features.
- Consent: For newsletters, non-essential cookies, and certain marketing.
- Legitimate interests: Site analytics, product improvement, security measures (balanced against your rights).
- Legal obligation: Where laws require processing or retention.
Cookies and tracking technologies
- Types we use:
- Strictly necessary: Enable core site functions and security.
- Preferences: Remember settings (language, theme).
- Analytics: Understand usage and improve performance.
- Marketing: Measure campaign effectiveness and tailor content.
- Your choices:
- Cookie banner: Manage non-essential cookies via our consent controls.
- Browser controls: Adjust cookie settings or use private browsing.
- Opt-outs: Use analytics/ad platform opt-out tools where available.
Data sharing and disclosures
- Service providers (processors):
- Examples: Hosting, security, analytics, email marketing, payment processing, customer support.
- Safeguards: Contractual obligations, confidentiality, and limited access.
- Business operations:
- Transactions: In case of merger, acquisition, or asset transfer, your data may be part of the transaction subject to protections.
- Legal and safety: We may disclose information if required by law or to protect rights, safety, and integrity.
- Affiliates and recommendations:
- Disclosure: We use affiliate links in reviews and recommendations. If you purchase through those links, we may earn a commission at no extra cost to you.
- No sale of personal information: We do not sell your personal information. For California residents, “sharing” for cross-context behavioral advertising is handled via consent mechanisms.
Data retention
- Retention periods:
- Account and communications: Kept as long as necessary to provide services or as required by law.
- Newsletter data: Retained until you unsubscribe or request deletion.
- Transaction records: Retained per tax/legal obligations.
- Analytics data: Kept for a limited period to evaluate trends and performance.
- Deletion:
- Upon request: We will delete or anonymize personal data unless retention is required by law or legitimate interests (e.g., fraud prevention).
Security
- Technical and organizational measures:
- Encryption and HTTPS: Protect data in transit.
- Access controls: Limit internal access based on roles.
- Monitoring: Detect anomalies and potential threats.
- Your responsibility:
- Account security: Keep passwords confidential, use strong credentials, and enable available safeguards.
- Phishing awareness: Verify communications and report suspicious activity.
Your privacy rights
- Access and portability:
- Right to know: Obtain a copy of your personal data and related information.
- Portability: Receive data in a commonly used format where applicable.
- Correction and deletion:
- Rectify: Fix inaccurate or incomplete data.
- Erase: Request deletion, subject to legal or legitimate retention.
- Restriction and objection:
- Restriction: Limit processing in certain cases.
- Object: Opt out of processing based on legitimate interests or direct marketing.
- Consent management:
- Withdraw consent: At any time for newsletter and non-essential cookies without affecting prior lawful processing.
- Region-specific (examples):
- EU/UK (GDPR): Rights above plus the right to lodge a complaint with a supervisory authority.
- California (CCPA/CPRA): Right to know, delete, correct, and opt out of sharing for cross-context behavioral advertising; no discrimination for exercising rights.
- Nigeria (NDPR): Rights to be informed, access, rectification, erasure, and data portability consistent with NDPR provisions.
Children’s privacy
- Intended audience: Our services are not directed to children under 13 (or local age threshold).
- Parental consent: We do not knowingly collect personal information from children. If we learn we have collected such data, we will delete it promptly.
International data transfers
- Global operations: Your data may be processed in countries outside your residence.
- Safeguards: Where required, we use appropriate mechanisms (e.g., Standard Contractual Clauses) to protect data transferred internationally.
Marketing choices and controls
- Email preferences:
- Unsubscribe: Use link in any email or manage preferences in your account.
- Frequency: We aim for thoughtful, non-intrusive communication.
- Cookies and ads:
- Consent: Adjust via our cookie banner.
- Opt-out: Use platform tools (e.g., Google’s Ad Settings) where available.
How to exercise your rights
- Submit a request:
- Email: privacy@biocybercare.com
- Subject line: “Privacy Request – [Access/Deletion/Correction/Objection]”
- Details: Include your name, email, and the nature of your request.
- Verification:
- Identity check: We may ask for additional information to verify your identity before acting on requests.
- Response time:
- Timing: We aim to respond within 30 days, or as required by applicable law.
Third-party links and services
- External sites: Our site may link to third-party websites or services.
- Responsibility: We are not responsible for their privacy practices. Review their policies before providing personal information.
Changes to this policy
- Revision process: We update this Policy to reflect changes in our practices or legal requirements.
- Notice: Material changes will be communicated via the website or email where appropriate.
Contact us
- Primary contact: privacy@biocybercare.com
- Alternative: support@biocybercare.com
- Mailing address: Biocybercare, Lagos, Nigeria (include full address if applicable)
Quick summary
- We collect: Information you provide, usage data, cookies, limited third-party data.
- We use: To operate and improve services, communicate, and comply with law.
- We share: With service providers and when legally required; we do not sell personal information.
- You control: Consent, marketing preferences, and legal rights to access/correct/delete.
- We protect: Security measures, limited retention, and international safeguards.
