Privacy and Terms of Service

Privacy and Terms Of Service

Privacy

This statement explains how the Centre for Genomic Pathogen Surveillance (“CGPS”) uses the personal information we collect from you when you visit Data-flo website. By visiting Data-flo website you are consenting to our use of your information in this way.We may make changes to this statement so please check from time to time for any updates.

Information about you we may collect and use

Data-flo accesses your name and email when signing in with Google, Twitter, or Facebook. Other information (such as your profile photo, tweets, or Facebook friends) is not accessed, collected or stored by Data-flo. When you visit Data-flo, we collect certain technical information from your device including Page URL, HTTP Referer, Browser, Operating system, Device type, and your location (Country, region, city). We do not track anything more granular than the city level and the IP address of the visitor is discarded. We never store IP addresses in our database or logs.

How we use your information

We display the information you give us (your name and email) in your account page.

Cookies

When you visit Data-flo we use cookies to automatically collect information about how you use our sites. Please see our Cookies information (below).

Sharing your information

We do not share your personal information with any organisation. Your name and email are not displayed to other Data-flo users.We use an open-source web analytics tool to capture privacy friendly analytics which we store on our servers. Your data is not sent to, shared with, or sold to any third-parties.

Personal Data and Your Responsibilities

The CGPS is based in the UK and operate under the The Data Protection Act 2018, the UK’s implementation of the General Data Protection Regulation (GDPR). You may be in a different legal jurisdiction so must ensure that you follow UK GDPR as well as your own local laws. For more information on UK GDPR please see Information Commissioner's Office (ICO). When you use Data-flo, CGPS is the Data Processor and you are the Data Controller, as you have control over the data you collect and CGPS only acts on your instructions.

Publication of Data

If you make a Data-flo public, ALL data within the Data-flo will be visible to anyone on the internet. Please ensure that you are not breaking any Data Protections laws that may apply. CGPS cannot be held responsible for data published by users.

Reasonable Use and Data Retention

The service is provided at no cost to you, however we incur costs for managing and processing the data. We reserve the right to delete excessively large or dormant data sets after a period of time, however we will attempt to contact you by email before doing so.

Protecting Your Data

Data-flo is part of the Big Data Institute at the University of Oxford (https://www.bdi.ox.ac.uk) and hosted on DigitalOcean (a world-class cloud provider). DigitalOcean services comply with GDPR (https://www.digitalocean.com/legal/gdpr​), you can find more about DigitalOcean data security on: ​https://www.digitalocean.com/legal​Data-flo embraces industry-standard best practices to protect against unauthorised access of your data. Data is sent over HTTPS protocol and its TLS certificate uses SHA-256 with RSA encryption as a signature algorithm.

Sharing your information

The CGPS does not share your personal information with any external organisation. Your name and email are not displayed to other Data-flo users. We use an open-source web analytics tool to capture privacy friendly analytics which we store on our servers. Your data is not sent to, shared with, or sold to any third-parties.

Data Deletion

Please contact [e-mail] if you would like to delete your account.

Cookies

Data-flo uses cookies only when you sign in to your Data-flo account. A cookie is a small file of letters and numbers that we save to your computer or device if you agree. By signing in, you agree to that we save the following cookies to your computer or device.

Details of cookie usage on Data-flo webiste

Type	Name	Purpose	Duration	Used By
Your visit	__Host-next-auth.csrf-token	Authentication cookie.	Session cookie	GCPS
Your visit	__Secure-next-auth.callback-url	Authentication cookie.	Session cookie	GCPS
Your visit	__Secure-next-auth.session-token	Authentication cookie.	14 days	GCPS

Third-party cookies

Data-flo does not use third party cookies.