[Last Modified: February 5, 2026]
B.I Science (2009) Ltd. (“biScience”, “we”, “our” or “us”) respects your privacy and recognizes that your privacy is important. Therefore, we are providing this privacy policy (“Privacy Policy“) to explain our practices regarding the collection, processing, usage, and transfer of certain data, including Personal Data (as defined below), from individuals who visit or otherwise interact with our website available at: https://biscience.com/ (“Website”), or additional marketing assets (landing pages, campaigns, social pages, etc.), access or use our dashboard and platform services (“Dashboard”), submit forms or demo requests. This Privacy Policy applies to you whether you are a Website or additional marketing assets’ visitor (“Visitor”), a registered business customer-user of our Dashboard (“User”), a prospective customer submitting demo request (“Prospect”), or End User (as defined below), collectively referred to as “you” or “your”.
You provide any Personal Data voluntarily and, where required by applicable data protection laws, based on your consent. You are not under any statutory obligation to provide us with Personal Data. The Section 3 “Data Sets We Collect and for What Purpose” describes the categories of Personal Data we process, the purposes for which we process each category, and the applicable lawful basis. You also have rights in relation to your Personal Data, as detailed in the Section 7 “Your Rights” below.
This Privacy Policy is an integral part of our terms of use (“Terms”) or any other agreement referencing this Privacy Policy. Definitions used herein but not defined herein shall have the meaning ascribed to them in our Terms.
This Privacy Policy applies to Personal Data collected through the Website, Dashboard, and in connection with digital intelligence, market research, and analytics services we provide to our business customers (“Services”). Separate product-specific privacy policies that explain privacy practices regarding the collection, processing, usage, and transfer of certain data, including Personal Data, from end users (“End User”) whose data is processed in connection with individual browser extensions, software development kits (SDKs), or other products (collectively, the “Products”) offered by biScience or its affiliated companies, may apply, and those Product-specific policies shall exclusively govern the processing of End-Users’ Personal Data in connection with such Products. For information on how biScience processes data in its capacity as a data broker and digital intelligence provider, please see the “DATA BROKER DISCLOSURE AND INSIGHTS” section below.
For the avoidance of doubt, in the event of any inconsistency or conflict between this Privacy Policy and any privacy policy applicable to a Product, the privacy policy applicable to such Product shall govern and prevail.
This Privacy Policy does not apply to Job applicants, which should refer to our Job Candidates Privacy Notice, which describes our Personal Data processing practices for job applicants.
DATA BROKER DISCLOSURE AND INSIGHTS
biScience operates as a data broker and digital intelligence provider within the meaning of applicable data broker laws, including the California Delete Act, Texas Data Broker Act and the Vermont Data Broker Act. biScience is registered as a data broker with the California Privacy Protection Agency (CPPA), the Texas Secretary of State, and the Vermont Secretary of State, as required by applicable law. biScience has no activity in Oregon and therefore, is not registered as a data broker therein.
In the course of providing our Services to business customers, selling AdCalrity Intelligence, Consumer behaviour insights and eCommerce market research, biScience collects, processes, and analyses (among other sources such as public data scraping or licensing data) web browsing activity data and Connected TV (CTV) data from End Users through various methods, including browser extensions operated by our affiliated company cookies, JavaScript tags, pixel tags, software development kits (SDKs), server-to-server connections, and publicly available web data (all collectively “Raw Data”). Raw Data may include clickstream data, advertisements viewed, interactions with advertisements, advertisement placement information, unique device identifiers and panellist ID. biScience processes Raw Data to create aggregated analytics, market research insights, competitive intelligence reports, and measurements of End User engagement with digital media across online, mobile, connected television, and emerging technology platforms (“Insights”). These Insights are provided to our business customers for their commercial use, including through our AdClarity platform, Clickstream OS data feeds, and other products. In most cases, Insights are shared in an aggregated, non-identifying manner.
Raw Data does not include directly identifying Personal Data and biScience applies its own proprietary technology to filter, scrub and remove information identifying an individual (name, email, phone number, ID, or any other type of personal data), or sensitive data before the data is used or transferred.
In certain cases, Insights may include a pseudonymous unique identifier (a randomly generated serial number not linked to your name or contact information) associated with browsing activity which we consider a “Panellist ID” or “Panel ID”. In jurisdictions where such identifiers constitute Personal Data, we treat them accordingly. biScience does not use the data it processes as a data broker to directly contact, target, or profile individual End Users.
OPT-OUT OF DATA BROKER ACTIVITIES
You have the right to opt out of biScience’s collection, sale, and sharing of your Personal Data in connection with our data broker activities. To exercise your opt-out rights: (i) California residents may submit a deletion request through the California Privacy Protection Agency’s Delete Request and Opt-Out Platform (DROP) at https://cppa.ca.gov once processing begins in August 2026, or by contacting us directly at privacy@biscience.com; (ii) Texas residents may opt out by contacting us at privacy@biscience.com or through the opt-out mechanism posted on our website; (iii) Vermont residents may opt out by contacting us at privacy@biscience.com or through the opt-out mechanism posted on our website; (iv) residents of other US states with applicable opt-out rights may exercise those rights as described in Section 12 “ADDITIONAL PRIVACY NOTICE FOR CERTAIN UNITED STATES RESIDENTS” below. We also honor Universal Opt-Out Mechanisms, including the Global Privacy Control (GPC) signal, as required by applicable law. For more information about GPC, visit https://globalprivacycontrol.org/.
Otherwise, for any other jurisdiction, you will see options to opt out, restrict the processing of Personal Data, and access or delete it, all as detailed in Section 7, “Your Rights,” below.
1. POLICY AMENDMENTS:
We reserve the right to amend this Privacy Policy from time to time, at our sole discretion. The most recent version of the Privacy Policy will always be posted on the Website and the update date will be reflected in the “Last Modified” heading. In the event of a material change we will make our best efforts to send you a written notification. We will provide notice to you if these changes are material, and, where required by applicable law, we will obtain your consent. Any amendments to the Privacy Policy will become effective within 30 days upon the display of the modified Privacy Policy. We recommend you review this Privacy Policy periodically to ensure that you understand our most updated privacy practices.
2. DATA CONTROLLER INFORMATION & CONTACT INFORMATION:
biScience (B.I Science (2009) Ltd.) is the controller (as such term is defined under the General Data Protection Regulations (“GDPR”) or equivalent privacy legislation) of the Personal Data we collect from you. For any question, inquiry or concern related to this Privacy Policy or the processing of your Personal Data, you may contact us by email: privacy@biscience.com or dpo@biscience.com
Under the Israeli Protection of Privacy Law, 5741-1981, as amended by Amendment No. 13 (effective August 14, 2025) (the “Israeli PPL”), biScience serves as the database controller of Personal Data collected through the Website, Dashboard and Services. biScience has appointed a Privacy Protection Officer and a Data Security Officer as required under the Israeli PPL and GDPR.
The Israeli Privacy Protection Authority (PPA) may be contacted at: https://www.gov.il/en/departments/the_privacy_protection_authority.
EU and UK Representative: We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our EU GDPR privacy representative and your point of contact. Prighter Group gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative, Prighter Group, or make use of your data subject rights, please visit the following website. https://prighter.com/q/13252349120
3. DATA SETS WE COLLECT AND FOR WHAT PURPOSE:
In general, we may collect two types of data from you, depending on your interaction with us:
Non-Personal Data
During your interaction with our Website, Dashboard and Services we may collect aggregated, non-personal non-identifiable information, which may be made available or gathered via your access to and use of the Website, Dashboard and Services (“Non-Personal Data “).The Non-Personal Data being collected may include your aggregated usage information and technical information transmitted by your device, such as: the type of browser or device you use, operating system type and version, language preference, time and date stamp, country location, etc. We are not aware of the identity of the individual from which the Non-Personal Data was collected.
We may also collect from you, during your access or interaction with the Website, Dashboard and Services, individually identifiable information, namely information that identifies an individual or may, with reasonable effort, be used to identify an individual (“Personal Data” or “Personal Information”).
We do not knowingly collect or process any Personal Data constituting or revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data concerning a person’s health or data concerning a person’s sex life or sexual orientation (“Special Categories of Personal Data”).
The table below details the processing of Personal Data we collect, the purpose, lawful basis, and processing operations:
DATA SETS | PURPOSE OF USE | LAWFUL BASIS UNDER THE GDPR |
Online Identifiers and Usage Data: When you interact with our Website, landing pages, or otherwise, we may collect your online identifiers, such as IP address and Cookie ID, unique identifiers, etc. (“Online Identifiers”). Additional information is automatically collected regarding your website online behavior. Such information includes the pages you viewed, click stream data, access time stamp, referrals, etc. (collectively “Usage Data”). Online Identifiers and Usage Data are collected through our use of our or third party’s tools such as cookies and similar technologies. | · To operate the Website and enable its proper functionality (for example, to automatically recognize you the next time you enter the website) · For security and fraud prevention purposes (for example, to authorize you are a person), · For debugging and to resolve technical problems, · To understand how individuals use the Website. · To measure effectiveness of marketing campaigns we run in order to track conversions, build targeted audience, and market our services to people who have taken some action on the Website. · Certain Online Identifiers and Usage Data are indirectly processed by third-party marketing and analytic tools, for analytic, marketing and targeting purposes. | Online Identifiers which are collected through strictly necessary cookies which are required for the proper and basic operation of the website will be processed based on our legitimate interest. Usage Data collected through third-party tracking technologies, including any analytic or marketing cookies, will be processed based on your consent which we will obtain through our cookie notice and consent management tool. |
Contact Information: If you voluntarily contact us, including when requesting a demo, you may be required to provide us with certain information such as your name, email address, etc. (“Contact Information”), as well as the content of your communications with us (“Communication Data”). | We process Contact Information data solely for the purpose of contacting you, responding to your inquiries and providing you with the support or information you have requested. The Communication Data with you may be processed and stored by us in order to improve our customer service, as well as in the event we reasonably determine it is needed for future assistance or to handle any dispute you might have with us. | We process Contact Information and Communication Data subject to our legitimate interest in order to respond to your inquiry. |
Dashboard and Account Data: If you register for and use our Dashboard, we collect your account credentials, login information, company name, role, subscription details, usage patterns within the Dashboard, feature interactions, and preferences. | We process Dashboard and Account Data to: 1. Provide, maintain, and improve the Dashboard and related Services; 2. Manage your account and authenticate your access; 3. Provide customer support; 4. Send service-related communications; 5. Direct Marketing; 6. Authenticate access; and 7. Analyze usage patterns to improve functionality of Dashboard and Services. | Processing mentioned in items 1 – 5 is based on contract necessity for the provision of the Dashboard services. Improvement and analytics processing (item 7) is based on our legitimate interest in developing and enhancing our Dashboard and Service, securing access, or contract necessity (customer support, account creation and protection) |
Please note that the actual processing operation per each purpose of use and lawful basis detailed in the table above may differ. Such processing operation usually includes a set of operations made by automated means, such as collection, storage, use, disclosure by transmission, erasure, or destruction. The transfer of Personal Data to third-party countries, as further detailed in the Section 8 “Cross-Border Data Transfer” below, is based on the same lawful basis as stipulated in the table above.
In addition, we may use certain Personal Data to prevent potentially prohibited or illegal activities, fraud, misappropriation, infringements, identity thefts, and any other misuse of the Website, the Dashboard or the Services and to enforce the Terms, as well as to protect the security or integrity of our databases and the Services, and to take precautions against legal liability. Such processing is based on our legitimate interests.
4. HOW WE COLLECT YOUR INFORMATION:
Depending on the nature of your interaction with us, we may collect information as follows:
- Automatically – for example, we may collect directly or indirectly as part of using our Website or Dashboard to gather information automatically, such as Non-Personal Information as well as Online Identifiers.
- Provided by you voluntarily – for example, we will collect Personal Data if you choose to contact us.
- Third parties – for example, provided by our subsidiaries and affiliates and data enrichment providers that may provide contact information.
5. COOKIES & TRACKING TECHNOLOGIES
We may use cookies, other similar tracking technologies (“Cookies”) to gather, store, and track certain information related to your access and interaction with our Website. Cookies are very helpful and may be used for a variety of different purposes. These purposes for which we use Cookies include (without limitation), allowing you to navigate between pages more efficiently, enabling the automatic activation of certain features, remembering your preferences and making the interaction between you and our Website quicker and easier, to secure, prevent fraud and protect our Website. We categorize Cookies as follows: (a) Strictly Necessary Cookies, which are essential for the operation of the Website and cannot be switched off; (b) Performance and Analytics Cookies, which help us understand how visitors interact with the Website (e.g., Google Analytics); (c) Functional Cookies, which enable enhanced functionality and personalization; and (d) Marketing and Targeting Cookies, which are used by our advertising partners to build a profile of your interests and show you relevant advertisements on other websites. Non-essential cookies will only be placed with your consent, which you may manage through our cookie consent tool.
Please visit: www.allaboutcookies.org to learn more about cookies.
6. DATA SHARING – CATEGORIES OF RECIPIENTS WE SHARE PERSONAL DATA WITH:
We may disclose your information to the following parties for the following purposes:
CATEGORY OF RECIPIENT | DATA THAT WILL BE SHARED | PURPOSE OF SHARING |
Trusted Agents and Service Providers | All types of Personal Data as needed for the service provided, on a case-by-case basis | We employ other companies and individuals to perform functions and services on our behalf. Such third parties may include outsource consultants, communication service providers, storage providers, analytic service providers, marketing and sales assistance, IT service providers or tools used to identify errors and crashes, customer relationship management services, etc. These third-party service providers have access to Personal Data needed to perform their functions, but they are prohibited, through contractual obligations, from using your Personal Data for any purposes other than providing us with requested services. When we share information with third parties, we ensure they only have access to such information that is strictly necessary for us to provide the services. These parties are required to secure the data they receive and to use the data for pre-agreed purposes only while ensuring compliance with all applicable data protection regulations (such service providers may use other non-personal data for their own benefit). |
Business Customers | Insight; Raw Data and Panelist ID | As part of our offer to our Business Customers, we will provide them with Insights, and in certain cases we will also share the Panelist ID and Raw Data with the Business Customers. |
Marketing Partners | Online Identifiers and Usage Data. | We may share Personal Data with marketing partners we engage with or use their tools and services for our digital marketing campaigns, including for targeted online advertising campaigns. These marketing partners may include social media partners or other marketing services which their cookies we place on our Website. These marketing partners may combine your Personal Data with other data they collect independently from your visits and interactions on other websites. |
Affiliated Companies and Corporate Transactions | All types of Personal Data as needed, on a case-by-case basis. | We may share your Personal Data with our affiliated companies including our parent company or subsidiaries, for sales and marketing purposes, providing customer relationship services, etc., or in the event of a corporate transaction (e.g., sale of a substantial part of our business, merger, consolidation, or asset sale). |
Enforcement Of Our Rights and Security Detections. | All types of Personal Data | We may disclose Personal Data to enforce our policies and agreements, as well as defend our rights, including the investigation of potential violations thereof, alleged illegal activity or any other activity that may expose us, you, or other users to legal liability, and solely to the extent required. In addition, we may disclose Personal Data to detect, prevent, or otherwise address fraud, security, or technical issues, solely to the extent required. |
7. USERS RIGHTS:
We acknowledge that different people have different privacy concerns and preferences. Our goal is to be clear about what Personal Data we collect so that you can make meaningful choices about how it is used. We allow you to exercise certain choices, rights, and controls in connection with your Personal Data. Depending on your relationship with us, your jurisdiction and the applicable data protection laws that apply to you, you have the right to control and request certain limitations or rights to be executed.
In the table below you can review your choices depending on your interaction with us..
Right to be informed/ right to know | You have the right to be provided with information regarding our Personal Data collection and privacy practices. All is detailed under this Privacy Policy. This Privacy Policy also details our Personal Data handling practices. |
Right to access/inspect your Personal Data | You have the right to ask us to confirm whether or not we collect or use Personal Data about you, know which Personal Data we specifically hold about you, and receive a copy of your Personal Data in a portable and, to the extent technically feasible, readily usable format or otherwise access it. |
Right to correct/rectify your Personal Data | Considering the nature and purposes of the processing of the Personal Data, you have the right to ask us to correct inaccuracies or update your Personal Data we hold, or request deletion of inaccurate Personal Data. |
Right to deletion (the right “To be forgotten”) | You have the right to request the erasure of certain Personal Data if specific conditions are satisfied. This right is not absolute. We may reject your request under certain circumstances, including where we must retain the data in order to comply with legal obligations or defend against legal claims, other legitimate interests such as record keeping with regards to our engagements, completing transactions, providing a service that you requested, taking actions reasonably anticipated within the context of our ongoing business relationship with you, fulfilling the terms of a written warranty, detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, or prosecuting those responsible for such activities; debugging products to identify and repair errors that impair existing intended functionality; exercising free speech, ensuring the right of another person to exercise their free speech rights, or exercising another right provided for by law; engaging in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent. |
Right to data portability | You have the right to obtain the Personal Data in a portable, and to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance. We will select the format in which we provide you a copy. |
Right to withdraw consent | When we collect and process your Personal Data based on your consent, you have the right to withdraw such consent at any time. |
Right to opt out
| Marketing Communications: You have the right to opt-out from receiving any marketing communication from us or otherwise withdraw consent, by unsubscribing through the message received. Sale of Personal Data for targeted advertising, monetary gain or profiling, or Share or Sale of Personal Information for analytic or marketing: If and to the extent applicable, you have the right to opt out of the “sale” or “share” of your Personal Data which includes opting-out of our practice of using cookies for the purposes of targeted advertising, analytic, etc. through the browser setting or communicating your opt out through opt-out preference signals, like Global Privacy Control (learn more here). In any event, please keep in mind that opt-out tools are limited to the browser or device you use because they work off your browser ID and device ID and, accordingly, you will need to opt-out on each browser and device you use. Your browser may save some information in its cookies and cache to maintain your privacy preferences. Clearing these may remove opt-out preferences, requiring you to opt-out again. |
Right to object to the processing of your Personal Data | You have the right to object to any use of your Personal Data which we have justified by our legitimate interest if you believe your fundamental rights and freedoms to data protection outweigh our legitimate interest. |
Right to restrict processing of your Personal Data | You have the right to ask us to restrict or limit the purpose for which we process your Personal Data, where certain conditions are satisfied (for example, where you contest the accuracy of the Personal Data, for a period enabling us to verify its accuracy). |
Right not to be subject to automated decision-making | We do not make solely automated decisions that produce legal or similarly significant effects concerning you; therefore, we do not provide you an option to exercise this right. |
Right to appeal or lodge a complaint | If we decline to take action on your request, we shall so inform you without undue delay as required under applicable laws. The notification will include a justification for declining to take action and instructions on how you may appeal, if applicable. The lead supervisory authority for biScience is the Irish Data Protection Commission. To exercise your GDPR rights, contact us at privacy@biscience.com or dpo@biscience.com, or through Prighter Group, as detailed in Section 2 “DATA CONTROLLER INFORMATION & CONTACT INFORMATION” above. Additional information for the appeal procedure under certain U.S. state laws, please see Section 12 “ADDITIONAL PRIVACY NOTICE FOR CERTAIN UNITED STATES RESIDENTS” below. |
Non-discrimination | Such discrimination may include denying a service, providing a different level or quality of service, or charging different prices. We do not discriminate our users and customers. If you have any reason to believe our services caused discrimination against you, please contact us directly at: privacy@biscience.com |
HOW TO EXERCISE YOUR PRIVACY RIGHTS:
You may submit a request to exercise most of your privacy rights under applicable privacy laws by contacting our privacy team at privacy@biscience.com.
If you are an End User of our Products and wish to submit a request regarding information collected through the Products, we will typically need you to provide your unique Panelist ID, which allows us to locate your records in our systems. Any association between information collected through Products and your Panelist ID is retained in our systems for no longer than 90 days. Following this period, the information is aggregated and no longer retained in a form that enables us to associate specific information with a Panelist ID or a particular End User. Accordingly, after the 90-day period, we may be unable to locate, access, correct, delete, or otherwise respond to requests relating to information associated with a specific Panelist ID, except to the extent required by applicable law.
Locating Your Panelist ID – if you installed our browser Products, you can retrieve your Panelist ID directly from your browser as follows:
- Right-click anywhere on the page and select Inspect (or open your browser’s Developer Tools).
- Navigate to the Application tab (in some browsers, this may be labelled Storage).
- In the left-hand panel, expand Products Storage, locate our Products, and select Local.
- In the list of keys, look for panalyticsid.
- The value displayed next to this key is your Panelist ID.
Submitting a Request – to exercise your privacy rights, please contact us at privacy@biscience.com and include:
- Your Panelist ID (retrieved as described above), if available;
- A description of the request (e.g., access, deletion, correction, opt-out of sale/sharing);
- Sufficient information for us to verify your identity as the Products End User, if required under applicable law.
Certain rights can be easily exercised independently by you without the need to contact us. For example, you can opt out of receiving our marketing messages by clicking the “unsubscribe” link or following other opt-out instructions provided in the message; you can use the cookies preference management tool on our Website to change your preferences and opt out of cookies.
We will respond to and fulfill your request within the timeframe required under applicable laws. When you submit a request, we will take steps to verify your identity and your request by matching the information provided by you with the information we have in our records. In some cases, we may request additional information to verify your identity, or, where necessary, to process your request. If we are unable to verify your identity after a good faith attempt, we may deny the request and, if so, will explain the basis for denial and how to remedy any deficiencies, where applicable.
- CROSS-BORDER DATA TRANSFER:
biScience transfers Personal Data from Israel to countries that provide an adequate level of data protection as determined by the Israeli PPA, or subject to appropriate contractual safeguards in accordance with the Privacy Protection Regulations (Instructions Regarding Transfer of Data to Databases Abroad), 5761-2001. Israel holds adequacy status under the EU GDPR (renewed January 15, 2024).
Your Personal Data may be transferred to and processed in countries outside your country of residence, including Israel, the United States, and other jurisdictions where our servers, affiliates, or service providers are located. Transfers of your Personal Data will be made in accordance with applicable laws, including GDPR Chapter V, the Israeli PPL, and applicable U.S. state privacy laws. When Personal Data originating in the European Economic Area (“EEA”), the United Kingdom (“UK”), or Switzerland is transferred to a country that has not received an adequacy decision from the European Commission, we implement appropriate safeguards, including: (a) Standard Contractual Clauses (“SCCs”) as approved by the European Commission (Commission Implementing Decision (EU) 2021/914) or the UK International Data Transfer Agreement, as applicable; (b) the EU-U.S. Data Privacy Framework, the UK Extension thereto, or the Swiss-U.S. Data Privacy Framework, where the recipient is a certified participant; or (c) other approved transfer mechanisms such as Binding Corporate Rules, where applicable. For transfers of Personal Data to Israel, we comply with the requirements of the Israeli PPL and the Privacy Protection Regulations (Instructions Regarding Personal Data Transferred from the EEA to Israel), 5783-2023. We conduct transfer impact assessments where required. You may request a copy of the relevant contractual safeguards by contacting us at privacy@biscience.com.
- DATA RETENTION:
Unless you instruct us otherwise, we retain the Personal Data we collect for as long as needed to provide the applicable services and to comply with our legal obligations, and no longer than is necessary for the purposes for which it was collected. We apply the principle of data minimization and retain Personal Data only for the period required. Specifically: (a) Contact Information is retained for the duration of our business relationship or as long as necessary to respond to your inquiry, plus any applicable statutory retention period; (b) Online Identifiers and Usage Data collected through cookies are retained in accordance with the cookie lifespans disclosed in our cookie consent tool, and in any event no longer than 13 months for analytics cookies; (c) Dashboard and Account Data is retained for the duration of your account and for a reasonable period thereafter to comply with legal obligations; (d) Raw Data processed in connection with our Insights services is de-identified and aggregated promptly after collection.. Upon expiration of the applicable retention period, we securely delete or irreversibly anonymize your Personal Data in accordance with applicable law.
- SECURITY MEASURES:
We take great care in implementing and maintaining the security of your Personal Data. We employ industry standard procedures and policies to ensure the safety of individuals’ information and prevent unauthorized use of any such.
We have implemented technical, physical and administrative security measures to protect the Personal Data we process. Although we take reasonable steps to safeguard information, we cannot be responsible for the acts of those who gain unauthorized access or abuse our website, and we make no warranty, express, implied or otherwise, that we will always be able to prevent such access.
Please contact us at: privacy@biscience.com if you feel that your privacy was not dealt with properly, in a way that was in breach of our Privacy Policy, or if you become aware of a third party’s attempt to gain unauthorized access to any of your Personal Data. We will make a reasonable effort to notify you and the appropriate authorities (if required by applicable law) in the event that we discover a security incident related to your Personal Data.
- ELIGIBILITY AND CHILDREN PRIVACY:
The Website, the Dashboard and the Services are not intended for use by children (the term “child” shall mean an individual that is under the age defined by applicable law, which concerning the EEA is under the age of 16, and with respect to the US, under the age of 13), and we do not knowingly process children’s Personal Data. We will discard any data we receive from a user that is considered a “child” immediately upon discovering that such a user shared information with us. Please contact us at: privacy@biscience.com if you have reason to believe that a child has shared any information with us.
biScience does not knowingly sell or share the Personal Data of individuals under the age of 16. If we become aware that we have processed the Personal Data of a child, we will take steps to delete such data as soon as practicable.
Residents of certain U.S. states (depending on the applicable state law, acting as an individual or in the household context only and not in a commercial or employment context, as a job applicant or as a beneficiary of someone acting in an employment context or as representative of a business), may have additional rights under applicable privacy laws and be entitled to additional disclosures.
“Personal Data” under applicable US privacy laws, generally means any information that is linked or reasonably linkable to an identified or identifiable individual (and usually does not include publicly available information that is lawfully made available from government records, or that a consumer has otherwise made available to the public; de-identified or aggregated consumer information; or information excluded from the state laws scope.
“Sensitive Data” includes data revealing racial, ethnic or national origin; religious beliefs; information regarding an individual’s medical history, mental or physical health condition, diagnosis or medical treatment; neural data; status as transgender or non-binary; sex life or sexual orientation; status as a victim of a crime; citizenship or immigration status; genetic or biometric data; Personal Data collected from a known child; and precise geolocation data.
We are required to provide you with a clear and accessible privacy notice that includes the categories of Personal Data processed, including any Sensitive Data, the purpose of processing, the categories of Personal Data shared with third parties, the categories of third parties with whom Personal Data is shared, the categories of Personal Data that is sold or used for targeted advertising, if any, the categories of third parties to whom the Personal Data is sold, if any, a list of your data rights and instructions for exercising those rights and appealing decisions, and out contact information. This information is detailed under this Privacy Policy and further below.
Categories of Personal Data & Categories of Third Parties with Whom Personal Data is Shared:
Under the Privacy Policy, we describe our collection and processing of Personal Data, the categories of Personal Data that are collected or processed, and the purposes for which Personal Data is processed, stored or used. We will not collect additional categories of Personal Data or use the Personal Data we collected for materially different, unrelated, or incompatible purposes without obtaining your consent, unless we are otherwise entitled, required or permitted under applicable laws.
Additionally, this Privacy Policy, details and discloses the categories of third parties we share Personal Data with for a business purposes.
“Sale” of Personal Data:
Under US privacy laws, in principle, the term “sale” is referring to disclosing or making available Personal Data to a third-party in exchange for monetary or other valuable consideration, including for targeted advertising purposes. We do not “sell” information as this term is commonly understood, meaning – we do not, and will not, disclose your Personal Data in direct exchange for money or some other form of payment. However, subject to the definition of the term “sale” under applicable US privacy laws, our practice of using “cookies or other third-party advertising services and sharing Personal Data for such purpose to third party advertising and marketing providers (e.g., providers of marketing tools and analytic tools, advertising networks, social media networks, media buying, search platforms) is considered a “sale”.
Such practice includes the following Personal Data categories shared with these third parties:
- Identifiers – online identifiers such as IP and Cookie ID;
- Internet and electronic network activity information – such as your engagement with our website and ads.
- Geolocation data – derived from IP (country level).
DATA BROKER REGISTRATION DISCLOSURES: biScience is registered as a data broker in California, Texas, and Vermont.
- California Registration: biScience is registered with the California Privacy Protection Agency pursuant to the California Data Broker Law (Civil Code § 1798.99.80 et seq.), as amended by the Delete Act (SB 362) and the Defending Californians’ Data Act (SB 361). Beginning August 1, 2026, California residents may submit a single deletion request through the CPPA’s Delete Request and Opt-Out Platform (DROP) to request that all registered data brokers, including biScience, delete their Personal Information. biScience will access the DROP at least once every 45 days to process deletion requests, as required by law.
- Texas Registration: biScience is registered with the Texas Secretary of State pursuant to the Texas Data Broker Act. A conspicuous notice of biScience’s data broker status is posted on our website. Texas residents may opt out of data collection and request deletion of their Personal Data by contacting us at privacy@biscience.com.
- Vermont Registration: biScience is registered with the Vermont Secretary of State pursuant to the Vermont Data Broker Act. Vermont residents may opt out of data collection by contacting us at privacy@biscience.com.
It is important you understand, we are not interested in knowing who you are, target or profile you. The Raw Data is processed by BiScience for the purpose of creating the marketing Insights our business customers requested, and we share and sell these Insights with our business customers for their commercial use. In most cases the Insights are shared and sold in an aggregated non-identifying manner, however, in certain cases we will sell or share the insights with a general unique identifier, this identifier does not include your name or contact information, it is a random serial number associated with an End Users’ browsing activity. However, in certain jurisdictions this is considered Personal Data, and thus, we treat it as such.
Consumer Rights Related to Their Personal Data:
Residents of certain U.S. states may have additional rights under applicable privacy laws, subject to certain limitations, which may include:
Access – the right to confirm whether we are processing their Personal Data and to obtain a copy of their Personal Data in a portable and, to the extent technically feasible, readily usable format.
List of Third Parties – the right to receive a list of the specific third parties to which we have disclosed either your Personal Data or any Personal Data.
Delete – the right to request us to delete their Personal Data provided to or obtained by us.
Correct – the right to request us to correct inaccuracies in their Personal Data, taking into account the nature and purposes of the processing of the Personal Data.
Opt-Out – the right to opt out of certain types of processing, including: (i) to opt out of the “sale” of their Personal Data; (ii) to opt out of targeted advertising by us; and (iii) to opt out of any processing of Personal Data for profiling in furtherance of making decisions that produce legal or similarly significant effects. However, as noted above, we do not engage in profiling in furtherance of legal or similarly significant decisions.
Appeal – the right to appeal if we decline to take action in response to your exercise of a privacy right.
Non-Discrimination – the right to not be discriminated against for exercising your privacy rights.
Exercising Consumer Privacy Rights:
You may submit a request to exercise most of your privacy rights under US state privacy laws by sending an email to: privacy@biscience.com
For certain rights, we will take steps to verify your identity and your request by matching the information provided by you with the information we have in our records. In some cases, we may request additional information to verify your identity, or where necessary to process your request. If we are unable to verify your identity after a good faith attempt, we may deny the request and, if so, will explain the basis for denial and how to remedy any deficiencies, where applicable.
Authorized agents may initiate a request on behalf of another individual, provided that they provide proof of their authorization, and we may also require that the individual directly verify his/her identity and the authority of the authorized agent.
We will respond to your request within the timeframe required under applicable law, and we reserve the right to extend the response time subject to applicable law requirements. If we refuse to take action on a request, we will notify you and our notification will include a justification for declining to take action and instructions on how you may appeal. Within the timeframe set out under applicable law of our receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied, you may submit a complaint to the applicable authority or Attorney General of your jurisdiction.
Appeal Rights
Depending on your state of residency, you may be able to appeal a decision we have made in connection with your privacy rights request, by contacting us as instructed in our response. Please send your appeal request with a summary of the request and decision you want to appeal to privacy@biscience.com
Not more than 60 days after receipt of an appeal, and always in accordance with the timelines set by the applicable US Privacy Laws, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reason for the decision.
If you are not happy with our response, depending on your jurisdiction, you may have the right to lodge a complaint against us with the relevant State’s Attorney General:
- Colorado Attorney General at https://coag.gov/file-complaint .
- Connecticut Attorney General at link: https://www.dir.ct.gov/ag/complaint /.
- Delaware Attorney General at https://attorneygeneral.delaware.gov/fraud/cmu/complaint/.
- Florida Attorney General at https://www.myfloridalegal.com/consumer-protection/consumer-complaint-form.
- Indiana Attorney General at https://www.in.gov/attorneygeneral/consumer-protection-division/file-a-complaint/.
- Iowa Attorney General at https://www.iowaattorneygeneral.gov/for-consumers/file-a-consumer-complaint.
- Kentucky Attorney General at https://secure.kentucky.gov/formservices/AttorneyGeneral/ConsumerMediationForm.
- Maryland Attorney General at https://www.marylandattorneygeneral.gov/Pages/CPD/Complaint.aspx.
- Minnesota Attorney General at https://www.ag.state.mn.us/
- Montana Attorney General at https://dojmt.gov/consumer/consumer-complaints/.
- Nebraska Attorney General at https://ago.nebraska.gov/constituent-complaint-form.
- Nevada Attorney General at https://ag.nv.gov/Complaints/CSU_Complaints___FAQ/
- New Hampshire Attorney General at https://onlineforms.nh.gov/app/#/formversion/e0c5d644-c9d8-4056-a7cc-24d29c446fcb.
- New Jersey Attorney General at https://www.njoag.gov/contact/file-a-complaint/.
- Oregon Attorney General at https://www.doj.state.or.us/consumer-protection/contact-us/.
- Rhode Island Attorney General at https://riag.ri.gov/forms/consumer-complaint
- Texas Attorney General at https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint.
- Tennessee Attorney General at https://www.tn.gov/attorneygeneral/working-for-tennessee/consumer/file-a-complaint.html
- Utah Attorney General at https://www.attorneygeneral.utah.gov/contact/complaint-form/.
- Virginia Attorney General at https://www.oag.state.va.us/consumercomplaintform .