Draft — manual process, not yet automated
There is no self-service export or deletion in the product yet. Requests are
handled by hand, and privacy@organthis.com must exist and be monitored before launch.
Your data
You have rights over the personal data we hold about you. This page explains how to use them, and — because OrganMatch holds scientific records as well as account details — what we can and cannot remove.
Get a copy of your data
Email privacy@organthis.com from the address on your account. We will send a machine-readable export of your account details, protocols, experiments, lab book records and saved items within one month.
Correct something
Most profile details can be changed directly in your account settings. If something is wrong that you cannot edit yourself, write to us and we will correct it.
Delete your account
Write to us and we will erase your account. Your name, email, organisation, profile, saved protocols and notifications are removed.
What survives deletion, and why
Some records cannot simply be deleted, because doing so would damage the scientific and financial integrity of the platform for other people.
- Audit records stay, with your identity replaced by an anonymous marker. They exist so that a change to a shared protocol remains attributable and reversible. Removing them entirely would let a change to someone else's record become untraceable.
- Published protocols that other researchers are relying on stay available, with your authorship attribution removed if you ask. If you want the protocol itself withdrawn rather than anonymised, tell us and we will treat it as a withdrawal request.
- Financial records — invoices, subscription and licence history — are kept for as long as tax and accounting law requires.
NEEDS COUNSEL — confirm this balance is defensible under Article 17(3), and state the statutory retention period for financial records.
Object or restrict
You can object to us using your data for a particular purpose, or ask us to pause using it while a dispute is resolved. Tell us which use you mean and we will confirm what we have stopped.
If you are not satisfied
Write to us first and we will try to put it right. You also have the right to complain to the data protection authority in the country where you live or work.
NEEDS COUNSEL — name the lead supervisory authority for the controller's establishment.
How long we take
We answer within one month. If a request is complex we may extend that by two further months, and we will tell you why within the first month.