Privacy Policy

This policy explains what OncoWiz collects when you use oncowiz.com, why, and what you can ask us to do about it. It is written to be read rather than skimmed, and it describes what the site actually does today.

Who we are

OncoWiz is an oncology and artificial-intelligence education publication founded by Dr Aditya Narayan. For the purposes of India’s Digital Personal Data Protection Act, 2023, OncoWiz is the Data Fiduciary for the personal data described here. For visitors in the European Economic Area and the United Kingdom, OncoWiz is the data controller.

Contact for any privacy question, and the point of contact for grievances under the DPDP Act: dradityanarayan@oncowiz.com

What we collect

When you subscribe to the newsletter

We store your email address, the date you subscribed, your subscription status, and which page the subscription came from. We do not ask for your name, your specialty or your institution.

When you use the contact form

Your name, email address and message are sent to us by email so that we can reply. The contact form does not create a record in the site database.

Automatically, when you visit

• Our host records standard server logs — IP address, browser user agent, requested URL, timestamp — which is ordinary practice for keeping a site online and secure.
• Your IP address is held briefly, in a short-lived cache entry, to rate-limit form submissions and block automated abuse. It is not stored alongside your subscription or your message.

Analytics

OncoWiz is built to run with Google Analytics 4, but analytics load only when a measurement ID has been configured and you have accepted analytics cookies. Google Consent Mode v2 is set to deny analytics storage by default, and IP anonymisation is on. If no measurement ID is configured, no analytics script is requested at all and no analytics cookie is ever set.

Cookies and similar technologies

• Strictly necessary. Our host and page cache may set functional cookies needed to serve pages correctly. These carry no marketing identifier.
• Your consent choice. Accepting or declining the analytics banner stores that answer in your browser’s local storage, under the key ow_consent. It stays on your device and is never transmitted to us.
• Analytics. Set by Google only after you accept, and only if analytics is configured. Declining means they are never written.

You can clear your browser storage at any time to withdraw a previous acceptance; the banner will then ask again.

Why we process it, and on what basis

• To send the newsletter — on your consent, given when you subscribe, and withdrawable at any time.
• To answer your message — on your consent, and on our legitimate interest in responding to correspondence addressed to us.
• To keep the site available and secure — on our legitimate interest in preventing abuse and diagnosing faults.
• To understand which material is useful — on your consent, given through the analytics banner.

We do not sell personal data, we do not share it with advertisers, and we do not use it to build advertising profiles. We do not use it to train machine-learning models.

Who else handles it

• Hostinger hosts the site and its database, and therefore processes everything stored on it.
• Google processes analytics data, but only where analytics has been configured and you have accepted it.
• An email delivery service may carry messages sent from the site.
• MailerLite or Brevo would receive subscriber email addresses if newsletter delivery were connected to one of them. At the time of writing, subscriptions are stored only in the OncoWiz database and are not forwarded to any external provider.

Some of these providers operate servers outside India and outside the EEA. Where personal data is transferred internationally, it is done under the transfer terms those providers offer, including the European Commission’s standard contractual clauses where they apply.

How long we keep it

• Subscriber records are kept until you unsubscribe or ask us to erase them.
• Contact emails are kept as long as the correspondence remains useful, and are then deleted.
• Server logs are kept for the short period our host retains them.
• Rate-limiting entries expire within the hour.

Security

The site is served over HTTPS, form submissions are nonce-protected and rate-limited, and access to the database is restricted to the site itself. No system is perfectly secure, and we do not claim otherwise.

Changes to this policy

When this policy changes materially we will revise the date shown at the top of the page. Continuing to use the site after a change means you accept the revised policy.