Last updated: October 15, 2025

1. Introduction

Welcome to the British Oncology Network for Undergraduate Societies (“BONUS”, “we”, “us”, or “our”).
This Privacy Policy describes how we collect, use, store, and protect your personal information when you use:

• Our website: bonus.oncology@gmail.com

• Our mobile application: BONUS Official (the “App”)

• Any related services offered under the British Oncology Network for Undergraduate Societies

We are committed to protecting your privacy and complying with all applicable laws, including the UK General Data Protection Regulation (UK GDPR), the EU GDPR, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the California Online Privacy Protection Act (CalOPPA).

By using our website or app, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect personal and device information in the following categories:

A. Information You Provide Directly

When you register, contact us, or use our services, we may collect:

• Full name (first and last name)

• Email address

• Phone number

• Address, postcode, and city

• Payment information (when purchasing products or services)

B. Information Collected Automatically

When you access our website or mobile app, we may automatically collect:

• Device information (type, model, operating system)

• IP address and browser type

• Location data (if you grant permission)

• Usage data, such as pages visited and time spent on the site

• Analytics data via Google Analytics or similar tracking tools

C. Information Collected Through Device Permissions

If you use our mobile app, we may request access to:

• Camera (for profile pictures or content submission)

• Phonebook/Contacts (only when explicitly permitted and required for app functionality)

• Location (for location-based services)

You can manage or revoke these permissions in your device settings at any time.

3. How We Use Your Information

We use the collected information for:

• Providing, maintaining, and improving our services

• Personalising user experience

• Processing payments for products and services

• Sending service updates and communications

• Responding to inquiries and support requests

• Conducting analytics and performance monitoring (via Google Analytics)

• Ensuring compliance with applicable laws and policies

We do not:

• Display third-party advertising

• Use remarketing or retargeting services

• Sell or rent your personal information

4. Legal Basis for Processing (GDPR)

Under the GDPR, we rely on the following legal bases:

• Consent – when you voluntarily provide information or opt-in to communications

• Contractual necessity – when processing is required to deliver services or complete a purchase

• Legitimate interests – to maintain, improve, and secure our systems

• Legal obligation – to comply with applicable laws or lawful government requests

5. Retention of Data

We retain personal data only as long as necessary to:

• Provide our services

• Comply with legal obligations

• Resolve disputes

• Enforce our agreements

When no longer required, data is securely deleted or anonymised.
If you do not want us to process your data anymore, please contact us at bonus.oncology@gmail.com 

6. Disclosure of Information

We may share your data with:

• Service providers (e.g., payment processors, cloud hosting, analytics services) who operate under confidentiality agreements

• Legal authorities when required by law or to protect rights, property, or safety

We do not sell your personal information to third parties.

7. International Data Transfers

We operate in the United Kingdom, but data may be processed in other jurisdictions.
When transferring data outside the UK or EEA, we ensure appropriate safeguards such as Standard Contractual Clauses (SCCs) are in place.

8. Your Rights (GDPR, CCPA, CPRA, CalOPPA)

A. Under the GDPR (UK & EU)

You have the right to:

• Access your personal data

• Request correction or deletion

• Restrict or object to processing

• Data portability (receive your data in a structured format)

• Withdraw consent at any time

To exercise these rights, contact us at bonus.oncology@gmail.com.

B. Under the CCPA/CPRA (California Residents)

You have the right to:

• Know what personal data we collect and how we use it

• Request deletion of your personal information

• Opt out of sale or sharing of personal information (we do not sell your data)

• Non-discrimination for exercising your privacy rights

Authorized agents may make requests on your behalf by emailing us.

C. Under CalOPPA

We post this Privacy Policy prominently on our website and:

• Identify what personal data we collect and how it’s used

• Allow users to review and request changes to their information

• Notify users of any material changes to this policy

9. Children’s Privacy

Our services are not directed at children under 13 years of age.
We do not knowingly collect personal information from children under 13.
If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Security of Your Information

We implement appropriate technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction.
However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

11. Email Communications

We may send you emails about:

• Account or service updates

• Educational or informational materials

• Administrative notices

You can opt out of non-essential communications by following unsubscribe links or contacting us directly.

12. Payments

When users pay for products or services, we use secure third-party payment processors.
We do not store or have access to your full payment card details.

13. Changes to This Policy

We may update this Privacy Policy from time to time.
The latest version will always be posted on our website, with the updated “Last updated” date at the top.
Material changes will be communicated via email or in-app notifications.

14. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our practices, please contact us at:

British Oncology Network for Undergraduate Societies (BONUS)
📧 Email: bonus.oncology@gmail.com
📍 Country: United Kingdom