Privacy and data control

Your data. Your control.

This notice explains what information this website collects, why it is used, who helps process it and how you can exercise your rights.

NOTICE AT A GLANCE

Clear choices, limited collection.

01Privacy-controlled measurement

Anonymous page totals and operational HTTP-error totals remain cookie-free. Estimated visitors, sessions, reading engagement, performance, cities, acquisition, technology and interactions are measured only after analytics permission.

02Optional Google Analytics

Google Analytics activates only if you choose to allow it. Nexus does not use advertising or cross-site marketing trackers.

03Contact data is voluntary

We collect enquiry details only to respond. Patient information and other sensitive clinical data must not be submitted.

Last updated: 22 August 2026

01

Who controls your data

Nexus Health Research Alliance is responsible for the personal information collected through this website. Nexus is a Ghana-led research alliance. For privacy questions or requests, use the secure enquiry form and select “Privacy or data rights request.” This allows you to contact us without publishing a private email address.

Make a privacy request
02

What we collect

When you use the contact form, we collect the information you choose to provide: your name, email address, organisation, enquiry type and message. Required fields are clearly marked.

Our hosting and form-delivery providers may also process limited technical information needed to operate and secure their services, such as IP address, browser type, access time and referring page.

The website maintains aggregate page-view totals containing only the UTC date, public page path, approximate country code and number of page loads. This cookie-free counter operates for all public page visits. Country is estimated by the hosting network at request time. The website also maintains cookie-free operational totals for genuine public HTML errors by path and status category. Automated security probes are stored only as an aggregate blocked-probe category, without retaining the attempted probe path. These counters do not store a visitor identifier, raw IP address, precise location, referrer or device detail.

If you allow analytics, Nexus also creates random browser and 30-minute session identifiers in your browser. Before storage in the analytics database, these identifiers are transformed into one-way hashes. We then measure estimated browsers and sessions, active time, maximum scroll depth, entry and last pages, broad programme-journey stages, approximate city, traffic source, campaign tags, browser language, broad device, browser, operating-system and screen-size categories, selected site interactions, web performance measurements, JavaScript error counts and contact-form failure counts. Form contents, error text, names, email addresses, raw IP addresses, exact screen dimensions and device fingerprints are not included. City, acquisition, technology, page engagement and website-health totals are stored separately from visitor hashes. A hashed session record stores only timestamps, active seconds, page count, first and most recently viewed pages, and broad journey milestones such as visiting programme or contact content or successfully submitting an enquiry.

This public website is not a clinical data collection system. Do not submit patient names, medical records, genetic information, research participant data or other sensitive clinical information. Research participants will receive separate programme-specific information and consent materials through approved study processes.

03

How and why we use information

We use contact information to receive and answer enquiries, evaluate potential collaborations, maintain appropriate correspondence, protect the website from misuse and meet legal or institutional obligations. Anonymous page and operational error totals help us understand which public information is being used and whether the website is operating reliably. Optional reading, journey and performance measurements help us improve navigation, content and technical quality.

Depending on the context, processing is based on your request, your consent, Nexus’s legitimate operational interests or a legal obligation. We do not use enquiry details for automated decision-making or sell them to data brokers.

04

Service providers and sharing

Contact submissions are processed by Formspree, which provides form delivery, spam protection, notification and submission storage. Formspree states that it may process data in the United States and other countries where it operates. Review the Formspree privacy policy for details.

If you allow analytics, Nexus processes the first-party measurements described above within its website hosting environment. Google Analytics also processes limited website-use information on our behalf, including pages viewed, approximate location derived from IP address, referral source and broad browser or device information. Google may process this information in countries outside your country of residence. Review Google’s privacy policy for details.

We may share an enquiry internally with the Nexus team or with relevant institutional advisers when necessary to assess or respond to it. We may also disclose information where required by law, regulation or a valid legal process. We do not sell or rent contact-form information.

05

Retention and security

Routine enquiries are normally retained for no longer than 24 months after the last meaningful contact. If an enquiry develops into an active collaboration, contract or legal matter, relevant correspondence may be retained for the duration of that relationship and for up to seven years afterwards, or longer where law or an institutional obligation requires it. Records of privacy requests may be retained for up to three years so that we can demonstrate how the request was handled.

Anonymous daily page-view, country and operational HTTP-error totals, consented hashed browser and session records, and consented aggregate city, acquisition, technology, hourly, interaction, page-engagement and website-health totals are retained for no longer than 400 days. They are automatically removed after the retention period.

Information that is no longer required under this schedule is deleted or anonymised. Nexus periodically reviews retained enquiry records and access permissions.

We use access controls and reputable service providers to reduce risk. No internet transmission or storage system can be guaranteed completely secure, so sensitive clinical information must never be sent through this form.

06

Your data rights

Subject to applicable law, you may ask to be informed about processing, access your information, correct inaccurate information, object to or restrict certain processing, withdraw consent and request deletion where appropriate. You may also object to direct marketing and complain about how your information is handled.

To make a request, use the contact form and select “Privacy or data rights request.” We may need to verify your identity before acting on a request. You may also raise a concern with Ghana’s Data Protection Commission.

07

Cookies and browser storage

Cookies and similar technologies can store or access information on a device. This site uses local browser storage to remember your privacy selection. If you allow analytics, it also stores random browser and session identifiers. Google Analytics is optional and does not load unless you allow analytics. The anonymous first-party page counter does not use cookies or identify visitors. Nexus does not use advertising trackers.

ItemPurposeDuration
nexus-privacy-preference-v7Stores whether you allowed optional analytics on this device.Until you clear browser storage or the policy version changes.
Anonymous page-view, error and probe totalsCounts public page loads by UTC date, page and approximate country; genuine public HTML errors by path and status category; and automated security probes only as an aggregate category, without visitor identifiers or browser storage.Up to 400 days.
nexus-analytics-visitor-v1Stores a random browser identifier only after analytics permission. The database receives a one-way hash, not this raw identifier.Until analytics permission is withdrawn or browser storage is cleared.
nexus-analytics-session-v1Groups consented page loads into an estimated visit without storing a name or raw IP address.A new session starts after 30 minutes of inactivity.
nexus-analytics-excluded-v1Lets Nexus staff exclude the current browser from optional first-party analytics. It contains only an on or off setting.Until the setting is removed or browser storage is cleared.
Google Analytics cookies, including _ga and _ga_0HZW84SMJ2Distinguish visits and produce aggregate website-usage statistics. Created only after analytics consent.Up to 2 years, or until you withdraw consent or clear cookies.
Cloudflare security technologies, including __cf_bm when issuedSupports website delivery, bot management, security and abuse prevention.Short-lived and provider controlled. The __cf_bm cookie normally expires after about 30 minutes of inactivity.

You can reopen the controls at any time to allow or withdraw analytics consent. Withdrawing consent stops future optional Nexus and Google Analytics collection, removes the Nexus analytics identifiers and removes accessible Google Analytics cookies from this website. Changes apply on the device and browser where you make the selection.

08

Changes to this notice

We may update this notice when the website, our providers or legal requirements change. Material changes to optional tracking will trigger a new consent request. The revision date at the top shows when this notice was last updated.