Privacy policy

This notice explains how the INSPIRE National Medical Research Conference (“INSPIRE”, “we”) collects and uses personal data through this website, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who is responsible for your data

INSPIRE is the controller for personal data collected through this website. [Organisation to confirm the legal entity and contact details.]

What we collect and why

• Account details (name, email, institution, programme and year of study) to provide your delegate account. Lawful basis: performance of a contract / legitimate interests in running the conference.
• Registration records and check-in status to manage attendance. Lawful basis: legitimate interests.
• Abstract submissions, including author details and any uploaded files, to run peer review and the programme. Lawful basis: legitimate interests; publication in the public showcase only with your explicit consent.
• Reviews written by reviewers, which are confidential to reviewers and administrators.
• Contact enquiries to respond to you. Lawful basis: consent, which you give on the form.
• Saved agenda items and saved opportunities, to personalise your experience.

We do not sell personal data or use it for advertising.

Who can see it

Access is restricted by role and enforced in the database. Delegates see only their own data. Reviewers see only abstracts assigned to them. Administrators can see what they need to run the conference. Every sensitive change is recorded in an audit log.

Processors

We use Supabase (database, authentication and file storage), Vercel (website hosting) and, once enabled, Resend (email delivery). These providers process data on our behalf under data processing terms. [Organisation to confirm hosting regions and transfer safeguards.]

How long we keep it

• Contact enquiries: up to 12 months after the enquiry is closed.
• Abstracts and reviews: up to 2 years after the conference, unless published with consent.
• Delegate accounts: until you delete your account or after 2 years of inactivity.

[Organisation to confirm retention periods.]

Your rights

You can ask to access, correct or delete your data, object to processing, or withdraw consent at any time. You can delete your account from your profile settings. To exercise any right, contact us. You can also complain to the Information Commissioner's Office (ico.org.uk).

Cookies

See our cookie policy.