Privacy policy and personal data

General principle

Your health data belongs only to you. On pmos-pcos.com, we have made a deliberate choice not to collect health data by default. The tools and interactive features calculate locally in your browser. Your responses are not sent to our servers.

Data processed by default

When you visit the site, your browser automatically sends certain technical data to our hosting provider, necessary for the site to function:

• IP address (anonymised in logs where possible);
• Browser type and operating system;
• URL of the page visited and referring page;
• Date and time of the request.

This data is retained in server logs for up to 12 months, for security, attack prevention, and technical diagnostics (legal basis: legitimate interest under applicable data protection law).

Health data

Health data is a special category of data afforded heightened protection under the GDPR and equivalent national laws. On pmos-pcos.com:

• tool responses remain in your browser for the duration of your session;
• they are not sent to our servers or to any third party;
• the PDF you download is generated locally, without passing through our servers;
• if you close the tab, your responses are discarded by default.

If a future save feature were to be offered, it would require your explicit consent and an appropriate hosting framework compliant with applicable health data regulations.

Cookies and analytics

This site uses Google Analytics 4 (GA4) to measure its audience. It collects only: pages visited, session duration, device type, and country (not raw IP addresses, thanks to the anonymize_ip option). No advertising or retargeting cookies are used.

Data is retained for 14 months at Google (configured in our GA4 property). You can withdraw or modify your consent at any time:

External links

Pages on this site regularly link to external sources (Endocrine Society, WHO, NIH, NHS, Monash University, Verity, PCOS Awareness Association, etc.). These sites have their own privacy policies, which we encourage you to review.

Your rights

Under the GDPR and equivalent data protection laws, you have the right to access, rectify, erase, object to, and port your personal data. You can exercise these rights by contacting us via the About page.

You may also lodge a complaint with your national data protection authority — for example, the ICO (UK) or your country's equivalent supervisory authority.

Hosting

The site is served from a server located in the European Union. No health data is processed by our hosting provider, in accordance with the principles above.

Updates to this policy

This page will be updated whenever a significant change is made. The date of last update appears above. For any question or report, contact us via the About page.