Privacy Policy
What data BCI Lab collects through this website, how it is used, and how to request its correction or removal.
This revision replaces a general reference to international best practices and the EU GDPR with an accurate, specific account of what this website actually collects: an optional email subscription and Google Analytics. It aligns the governing law with every other BCI Lab document, the laws of the Hong Kong Special Administrative Region, while continuing to honor a data request from a visitor in a jurisdiction with its own framework, including the EU or the UK, on the same basis.
This Policy explains what data BCI Lab collects through this website, how it is used, and how a visitor can ask questions about it or request that their data be removed.
Where a visitor submits an email address to subscribe to BCI Lab's research updates, that email address is the only information collected through that submission, described in full in the Terms of Service and not repeated here.
BCI Lab uses Google Analytics to understand how this website is used. Google Analytics uses cookies and similar technology to collect technical and behavioral information about a visit, including browser type, device type, operating system, an approximate region derived momentarily from IP address before that address is discarded, the pages viewed, and the time spent on them. BCI Lab does not use this information to identify an individual visitor and does not combine it with a subscriber's email address.
BCI Lab does not collect financial account credentials, government identification, or other sensitive personal data through this website.
Data described in Section II is used only to respond to an inquiry, deliver a requested subscription update, understand which research resonates with readers, and maintain the security of this website. BCI Lab does not sell or monetize a visitor's personal data.
Google Analytics is provided by Google and is the only third-party analytics service BCI Lab currently uses. Google processes this data under its own privacy terms, published on Google's website. A visitor may decline Google Analytics tracking using a browser extension or setting of their choice, without affecting access to any Content on this site.
If BCI Lab adopts an additional third-party service that processes personal data, this Policy is updated to disclose it before that service begins operating, consistent with the practice described in the Terms of Service.
A subscriber's email address is retained until the subscriber requests its removal or unsubscribes. BCI Lab has not set a fixed retention period for this data, since a fixed period does not correspond to any operational need it currently has, and a removal request is honored promptly upon receipt.
Google Analytics data is retained under Google's own retention settings, as configured by BCI Lab within Google's platform.
A visitor or subscriber may contact BCI Lab at any time to ask what data BCI Lab holds about them, and to request that it be corrected or deleted. Where a visitor is located in a jurisdiction with its own data protection framework, including the European Economic Area or the United Kingdom, BCI Lab honors a request made under that framework's terms on the same basis.
BCI Lab takes reasonable technical and organizational measures to protect the data it holds against unauthorized access, alteration, or loss. No method of transmission or storage is completely secure, and BCI Lab cannot guarantee absolute security.
Given the global nature of this website, data may be processed on servers located outside a visitor's country of residence, including by Google in connection with the service described in Section IV.
A material change to this Policy is dated and recorded in the Methodology Version Register, in the same way as a change to any other BCI Lab governing document.
This Policy, and BCI Lab's frameworks and reports generally, are governed exclusively by the laws of the Hong Kong Special Administrative Region.