Privacy Policy | Oncology Data Advisor

Last Updated: May 4, 2026

This Privacy Policy describes how Oncology Data Advisor ("we," "us," or "our") collects, uses, discloses, and safeguards your information when you visit oncdata.com or use the Oncology Data Advisor services (collectively, the "Services"). By using the Services, you consent to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide

Account Information: Name, email address, professional credentials, specialty, and organization.
Communications: Information you provide via contact forms, support requests, or surveys.
User-Generated Content: Comments, feedback, or other content you submit.

1.2 Information Collected Automatically

Device Information: IP address, browser type, operating system, device identifiers.
Usage Data: Pages visited, time on page, links clicked, search queries.
Cookies and Similar Technologies: See Section 4.
Server Logs: Access times, referring URLs, and error reports.

2. How We Use Your Information

To provide, maintain, and improve the Services.
To personalize content and deliver relevant updates.
To respond to inquiries and provide customer support.
To send administrative information and (with your consent) marketing communications.
To analyze usage and optimize the platform.
To detect, prevent, and address security threats.
To comply with legal obligations and enforce these terms.

3. Information Sharing and Disclosure

We do not sell your personal information. We may share information with:

Service Providers: Vendors who perform services on our behalf (hosting, analytics, email delivery, payment processing) under confidentiality obligations.
Legal Requirements: When required by law, subpoena, court order, or governmental request.
Protection of Rights: To protect the rights, property, or safety of Oncology Data Advisor, our users, or the public.
Business Transfers: In connection with a merger, acquisition, or sale of assets.
With Your Consent: When you have given explicit permission.

4. Cookies and Tracking

We use cookies and similar tracking technologies to remember preferences, authenticate users, prevent fraud, analyze traffic, and (where applicable) deliver targeted content. You can manage cookie preferences through your browser; disabling cookies may affect functionality.

5. AI / Machine Learning Restriction

Use of oncdata.com content to train, fine-tune, or evaluate any artificial intelligence, machine-learning, or large-language-model system is strictly prohibited without express written permission from Oncology Data Advisor. This restriction is binding on all visitors, users, scrapers, and automated agents.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce agreements. When data is no longer needed, we securely delete or anonymize it.

7. Data Security

Encryption of data in transit (TLS) and at rest where feasible.
Access controls and authentication requirements for our systems.
Regular security monitoring and assessments.
Employee training on data protection.

No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security.

8. Your Rights and Choices

Subject to your jurisdiction, you may have the right to:

Access a copy of your personal information.
Request correction of inaccurate data.
Request deletion of your personal information.
Receive your data in a portable format.
Opt out of marketing communications.
Request restriction of processing.

To exercise these rights, contact us at [email protected].

9. Children's Privacy

The Services are not directed to individuals under 18. We do not knowingly collect personal information from children. If we become aware that we have collected such data, we will take steps to delete it promptly.

10. International Data Transfers

Your information may be processed in the United States or other countries. We use appropriate safeguards in compliance with applicable laws.

11. California Privacy Rights (CCPA / CPRA)

California residents have the right to know what personal information we collect, request deletion, opt out of sale (we do not sell personal information), and not be discriminated against for exercising privacy rights.

12. EU/UK Residents (GDPR)

If you are in the European Economic Area or the United Kingdom, our legal bases for processing include consent, performance of a contract, compliance with legal obligations, and legitimate interests. You have the right to lodge a complaint with your local data protection authority.

13. Changes to This Policy

We may update this Privacy Policy periodically. The "Last Updated" date reflects the latest revision. Material changes will be communicated via the Services or by email where appropriate.

14. Contact

Oncology Data Advisor
Website: oncdata.com
Privacy contact: [email protected]

Additional Disclosures

Payments and Purchases

When you buy a subscription, course, event registration, or membership, our payment processor handles card details directly; we receive only a token, the last four digits, and the billing information needed for receipts and tax records.

Learning and Certification Records

Where we offer courses, assessments, or continuing education, we retain your progress, responses, completions, and certificates for as long as any applicable accreditation or professional-record obligation requires.

Push Notifications

If you opt in to browser notifications, we store a browser-issued subscription token used only to deliver the alerts you requested. You can revoke it in your browser or account settings at any time.

AI-Assisted Content and AI Training Restriction

We use AI tools to help our editors draft, summarize, translate, and tag content; output is reviewed by a human before publication, and we do not use AI to make automated decisions with legal or similarly significant effects about you. Our published content may not be used to train, fine-tune, or evaluate any artificial-intelligence, machine-learning, or large-language-model system without our express written permission.

API and Developer Access

If you hold API credentials, we log request metadata (credential identifier, endpoint, timestamp, volume) to enforce rate limits, bill usage, and investigate abuse.

Service Provider Categories

Hosting, database, and file storage
Email delivery (transactional and newsletter)
Payment processing
Analytics and search-performance reporting
AI providers used for editorial drafting and tagging
Content delivery and domain routing

A current named list is available on request through our Legal Inquiries page, and workspace customers may request a Data Processing Addendum (DPA) the same way.

Retention

Account records: kept while your account is active, then deleted or anonymized within 90 days after closure.
Purchase and tax records: kept as long as accounting and tax law requires.
Analytics and server logs: kept in aggregate or pseudonymous form on a rolling basis.
Marketing suppression lists: kept indefinitely so we can honor your opt-out.

Opt-Out Preference Signals

We honor Global Privacy Control (GPC) and comparable opt-out preference signals as an opt-out of non-essential analytics and of any sharing where applicable law requires. We do not sell personal information or share it for cross-context behavioral advertising.

Breach Notification

If a security incident affects your personal information, we will notify you and any required regulator without undue delay and consistent with applicable law.

Your Rights and Legal Inquiries

To access, correct, delete, export, or restrict your information, to withdraw consent, or to appeal a decision, use our Legal Inquiries page. We respond within the period required by applicable law and will not discriminate against you for exercising these rights.