Document Classification: Institutional Privacy Notice (GDPR & UK DPA 2018 Compliant)
Data Controller: Omnirhythm Health Research Ltd (CRN 08492014)
Effective Date: January 1, 2018 • Last Recertified: October 2026

Privacy Policy & Data Protection Notice

Omnirhythm Health Research Ltd ("Omnirhythm", "we", "us", or "our") operates the academic informational portal hosted at https://omnirhythmsq.info. We are committed to safeguarding the privacy and digital rights of our research readers, academic contributors, and newsletter subscribers. This Privacy Policy details the categories of information we collect, the lawful grounds for processing under the UK General Data Protection Regulation (UK GDPR) and EU Regulation 2016/679, and the rights afforded to you.

1. Identity and Contact Details of the Data Controller

The entity responsible for processing personal data on this platform is:

Entity Name: Omnirhythm Health Research Ltd
Company Registration Number: 08492014 (England & Wales)
Registered Office: 74 Great Russell Street, Bloomsbury, London, WC1B 3DA, United Kingdom
Data Protection Officer (DPO): Dr. Eleanor Hayes, M.Sc.
Direct Data Protection Inquiries: [email protected]

2. Categories of Information We Process

Depending on your interaction with the Omnirhythm portal, we may process:

Voluntary Communications & Inquiry Data: When you submit questions, feedback, or research inquiries via our contact forms or email, we collect your full name, email address, institutional affiliation (if provided), and message content.
Interactive Assessment Inputs: Data inputted into our Circadian Chronotype & Micronutrient Timing Calculator (wake-up time, energy slump pattern, activity tier) is processed strictly client-side in your browser and is not stored or linked to personal identifiers unless voluntarily attached to an inquiry.
Technical & Telemetry Data: IP addresses (anonymized/truncated), browser user-agent, operating system, referring URL, timestamp of access, and pages viewed for server security, DDoS mitigation, and server performance optimization.

3. Lawful Bases for Processing

We process personal data strictly under valid lawful grounds defined in Article 6 of the UK GDPR:

Consent (Art. 6(1)(a)): Explicit consent given when subscribing to our research digest or submitting an inquiry. You may withdraw consent at any time.
Legitimate Interests (Art. 6(1)(f)): Ensuring the technical resilience, integrity, and security of our educational infrastructure and preventing abusive bot traffic.
Legal Obligation (Art. 6(1)(c)): Maintaining corporate records, accounting ledgers, and compliance with statutory regulatory obligations in the United Kingdom.

4. Data Retention Periods

Editorial inquiries and communication records are retained for a maximum duration of 24 months following the resolution of the matter. Technical server log files are automatically purged after 30 days. You may request earlier erasure of your contact records at any time.

5. Sharing and Third-Party Disclosures

Omnirhythm operates an independent informational repository. We do not sell, rent, monetize, or trade your personal data with pharmaceutical manufacturers, third-party advertisers, or data brokers. Disclosures are limited strictly to cloud hosting infrastructure providers operating under formal Data Processing Agreements (DPAs) with strict Standard Contractual Clauses (SCCs).

6. International Data Transfers

When technical telemetry or secure cloud backups are stored on servers outside the United Kingdom or the European Economic Area, transfers are governed by UK International Data Transfer Addendums (IDTA) or European Commission Adequacy Decisions ensuring an equivalent level of privacy protection.

7. Your Statutory Rights

Under applicable data protection legislation, you possess the right to:

Right of Access: Request a copy of the personal information we hold concerning you.
Right to Rectification: Request correction of inaccurate or incomplete records.
Right to Erasure ("Right to be Forgotten"): Request deletion of your communication logs where retention is no longer necessary.
Right to Restrict Processing: Request suspension of data processing during dispute resolution.
Right to Data Portability: Receive your provided data in a structured, commonly used, machine-readable format.
Right to Object: Object to processing carried out under the legitimate interest basis.

To exercise any of these rights, contact our Data Protection Officer at [email protected]. We will respond within one calendar month without charging a fee.

8. Supervisory Authority

If you believe that our processing of your personal data infringes data protection law, you have the right to lodge a formal complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or your local EEA supervisory authority.