LEGAL · PRIVACY

Privacy Policy

BioVoxel.Earth processes personal data for professional contact, the handling of strategic briefing requests, institutional communication and continuous improvement of the site. This policy describes what data we collect, for what purpose, which technical tools are involved and what rights you have. Last updated: 2026-08-14.

1 · Data controller

BioVoxel.Earth, the company that owns and operates this site. Operating address: Panama, Republic of Panama. General contact: contacto@biovoxel.earth. For specific privacy and data protection matters, write to contacto@biovoxel.earth with the subject "Privacy — Request".

2 · Applicable jurisdiction

Processing is operated from Panama under Law 81 on Personal Data Protection and Executive Decree 285/2021. Where the GDPR (EU 2016/679) applies through its territorial or extraterritorial scope, its requirements on individual rights, transparency and international transfers are also observed.

3 · Categories of data we may collect

(a) Contact data: name, organisation, role, email and optional phone. (b) Professional context: country, actor type, territory or jurisdiction, timeframe and support sought. (c) Message data: description of the decision or problem and additional context. (d) Navigation data: public page, traffic source, referrer, device and performance, according to consent. (e) Acquisition data linked to a request: source, medium, campaign, content, public landing path, and first and latest interaction dates. This signal comes from the browser, is restricted to normalised values, and is not treated as verified evidence of identity or origin.

4 · Purposes by category

Contact and context data: respond to the request, assess case fit and open a professional conversation. Message data: understand the problem before a meeting. Technical and acquisition data: measure channels, content and conversions and associate a request with its campaign. BioVoxel does not use form data for automated decisions with legal effects. If advertising is authorised, LinkedIn may process technical data for campaign measurement, Website Actions, audience creation and retargeting under its own policy.

5 · Legal basis for processing

Explicit user consent when submitting the form and accepting cookie banner categories. Legitimate interest in responding to a professional request initiated by the user. Compliance with tax or regulatory legal obligations where applicable.

6 · Technical tools and providers

(a) Plausible Analytics — cookieless aggregate analytics hosted in the EU. (b) Google Analytics 4 — optional acquisition and interaction analytics, active only with a valid configuration and analytics consent. For Plausible and GA4, BioVoxel sends manual pageviews with a location reduced to origin and path; supported campaign parameters are validated before transmission. (c) Vercel Speed Insights — technical performance metrics activated with analytics consent and a sanitised URL. (d) LinkedIn Insight Tag — optional and active only with advertising consent and on public locations with an empty query or canonical UTMs and a non-sensitive fragment; it may transmit URL, referrer, IP address, user agent, device information and timestamp for conversions, Website Actions, audiences and retargeting. (e) Resend — transactional delivery. (f) Neon Database — encrypted storage. No third-party analytics tool is loaded inside private client microsites, protected presentations or Atlas/NDA rooms.

7 · International transfers

Some technical providers (Google, Vercel, LinkedIn, Resend and Neon) may host or process data outside Panama and the European Union, mainly in the United States and the EU. Applicable contractual and technical safeguards depend on the provider and processing destination and are reviewed before each service is activated. Users may request details of providers and specific transfers by writing to privacy.

8 · Retention periods

Contact, context and acquisition data linked to a request: as long as needed to handle it and, if a professional relationship is established, up to 3 years from the last active contact unless another legal obligation applies. Analytics data: according to each provider's current configuration and contract. Contractual events: according to contract duration and associated legal obligations. You may request the applicable retention detail by writing to privacy.

9 · User rights

Access, rectification, erasure, restriction, objection and portability, as well as the right not to be subject to automated decisions with legal effects where applicable. To exercise a right, write to contacto@biovoxel.earth with the subject "Privacy — [right exercised]". We respond without undue delay and within the applicable legal period. You may also file a claim with ANTAI in Panama or, where relevant, another competent supervisory authority.

10 · Withdrawal of consent

You may withdraw consent at any time without affecting the lawfulness of prior processing. The privacy control can disable Google Analytics 4, Plausible, Speed Insights and LinkedIn Insight Tag by category; withdrawing a category reloads the page to stop its tags. For form data already submitted, write to privacy requesting erasure.

11 · Cookies and trackers

(a) Necessary: session cookies and minimal preferences required for the site, including the consent record. (b) Analytics: Plausible uses no cookies; Google Analytics 4 may use analytics identifiers and cookies only after authorisation; Speed Insights collects technical metrics under the same category. (c) Advertising: LinkedIn Insight Tag may set measurement cookies only with advertising consent. The privacy control allows these choices to be changed at any time.

12 · Security and confidentiality

We apply reasonable technical and organizational measures: in-transit encryption (HTTPS/TLS), encrypted storage at database providers, role-based access control, logging of critical events (access to NDA dossiers), and periodic provider review. The team operates under professional confidentiality with explicit contractual commitments.

13 · Sensitive professional information sent via the form

If your message includes sensitive information about your organization, jurisdiction or end client, we recommend limiting what you send to the minimum necessary to frame the conversation. You may request NDA signature before sharing confidential details by writing to contact.

14 · Changes to this policy

This policy is reviewed periodically and updated when technical tools, providers or the applicable regulatory framework change. Material changes will be communicated via visible notice on the site. The last updated date appears at the beginning of this page.

15 · Privacy contact

Any inquiry about this policy or request related to your personal data may be directed to contacto@biovoxel.earth with subject "Privacy". The data controller maintains a specific channel to handle data subject rights according to applicable regulations.