Privacy Policy

1. Who We Are

Priya Life Science is an online news and information platform focused on the pharmaceutical and life science sector in Ireland, the EU and worldwide. We are the data controller for personal data collected through this website. Our registered address and contact details are provided in Section 13 below.

This policy applies to all personal data processed through priyalifescience.com in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Irish Data Protection Act 2018, and the ePrivacy Regulations (SI 336/2011).

2. What Data We Collect

Newsletter Subscribers

If you subscribe to our newsletter, we collect your email address only. We do not collect your name, location, or any other personal information for newsletter subscriptions.

Contact Form

If you submit our contact form, we collect your name, email address, and message. This data is used solely to respond to your enquiry and is not used for marketing.

Writer Accounts (Email Registration)

If you register as a writer using our email registration form, we collect:

• Full name
• Email address
• Username
• Password (stored encrypted using bcrypt hashing — we never store plain-text passwords)
• Phone number (optional)
• Professional biography (optional)
• Profile photo (optional)
• Social media links: LinkedIn, Twitter/X, Instagram, Facebook, personal website (all optional)
• How you heard about us, referrer name and organisation (collected during onboarding)

Writer Accounts (Google Sign-In)

If you register or sign in using Google OAuth, we receive the following data from your Google account:

• Email address
• Full name
• Profile picture URL

We do not receive or store your Google password. We do not access your Gmail, Google Drive, contacts, calendar, or any other Google services. We only request the basic profile scope (openid email profile) required to identify you.

What We Do NOT Collect

We do not collect payment or financial information of any kind. We do not collect sensitive personal data as defined under GDPR Article 9 (racial or ethnic origin, political opinions, religious beliefs, health data, sexual orientation, biometric data, etc.). We do not engage in automated profiling or decision-making as defined under GDPR Article 22.

3. Why We Collect It (Legal Basis)

Under GDPR Article 6, we process personal data on the following lawful bases:

• Consent (Art. 6(1)(a)): Newsletter subscriptions. You can withdraw consent at any time by unsubscribing.
• Contract (Art. 6(1)(b)): Writer account registration and management. Processing is necessary to provide the writing and publishing services you signed up for.
• Legitimate Interest (Art. 6(1)(f)): Responding to contact form enquiries, maintaining website security, preventing abuse, and improving our services. We have assessed that these interests do not override your fundamental rights and freedoms.

4. Newsletter

We collect your email address only when you voluntarily subscribe to our newsletter. We use this solely to send you updates about pharmaceutical and life science news, articles published on our platform, and occasional announcements about new features or tools.

We do not share your email with third parties, sell subscriber lists, or use your email for purposes other than the newsletter. You can unsubscribe at any time by clicking the unsubscribe link in any newsletter email or by contacting us at info@priyalifescience.com.

5. Writer Accounts

Writer accounts are created either through our email registration form or through Google Sign-In. After registration, new writers complete an onboarding profile and are placed in a pending approval queue. An administrator reviews and approves each writer before they can publish content.

Your writer profile information (name, bio, photo, and social links) is displayed publicly on your author profile page alongside articles you publish. You can edit or remove any of this information at any time through your profile settings. Your email address and phone number are never displayed publicly.

Passwords for email-registered accounts are stored using bcrypt encryption. We never store, display, or transmit passwords in plain text. If you registered via Google Sign-In, no password is stored on our system.

You may request deletion of your writer account at any time by contacting us at info@priyalifescience.com. Upon deletion, your personal data will be removed. Published articles may be retained in an anonymised form.

6. Third-Party Authentication (Google & LinkedIn)

We offer Google OAuth as an alternative login method for writer accounts. When you choose to sign in with Google, the authentication process works as follows:

• You are redirected to Google’s secure login page where you enter your Google credentials directly with Google — we never see or handle your Google password.
• Google sends us a one-time authorisation code, which we exchange for a temporary access token.
• We use this token to retrieve your basic profile information (name, email, profile picture) and then discard the token. We do not store Google access tokens or refresh tokens.
• We create or update your writer account using this profile information.

The data we receive from Google is governed by Google’s Privacy Policy. You can revoke our access at any time through your Google Account permissions page.

We may add LinkedIn Sign-In as an additional authentication option in future. If implemented, it will follow the same principles: we will only request basic profile data (name, email), we will not store LinkedIn access tokens, and you will be able to revoke access through your LinkedIn settings. This policy will be updated before any such feature goes live.

7. Cookies, Analytics & Advertising

Essential Cookies

• Session cookie (PHPSESSID): A temporary cookie that maintains your login session. It expires when you close your browser. This is a strictly necessary cookie under ePrivacy Regulations and does not require consent.
• Consent record (pls_consent): Stores your cookie consent choice so we do not have to ask on every visit. Strictly necessary for GDPR compliance.

Analytics (Google Analytics 4)

We use Google Analytics 4 to understand how visitors use our website (pages visited, traffic sources, aggregate usage patterns). We have implemented Google Consent Mode v2: analytics cookies are disabled by default and are only activated if you click “Accept all” on our cookie banner. If you decline, Google Analytics operates in cookieless mode and no identifying cookies are placed on your device. IP anonymisation is applied by default in GA4.

You can withdraw or update your consent preferences at any time. Clicking the button below will reopen our consent banner where you can adjust your choices:

Manage Cookie Preferences

You can also read our full Cookie Policy page, or install the Google Analytics Opt-out Browser Add-on.

Usage analytics (Microsoft Clarity)

With your consent, we also use Microsoft Clarity to see how pages are used (clicks, scrolling and anonymised session recordings and heatmaps), so we can find and fix pages that are hard to use. Clarity loads only after you click “Accept all” on our cookie banner; if you decline, it is not loaded at all. Clarity is provided by Microsoft Corporation and its data is processed under the Microsoft Privacy Statement.

Advertising

We do not currently display advertising on this website, and no advertising cookies are set. If we introduce advertising in future, we will update this policy first and ask for your consent through our cookie banner before any advertising cookie is used.

The legal basis for analytics cookies is your consent (GDPR Art. 6(1)(a)), collected through our cookie banner. We do not use Facebook Pixel or perform any cross-site tracking beyond what is described above. See our Cookie Policy for the full list of cookies.

8. Data Sharing & Third-Party Services

We share personal data only with the following third parties, solely for the purposes of operating this website:

• Hostinger International Ltd (hosting provider) — Your data is stored on Hostinger’s servers in the EU. Hostinger acts as a data processor under GDPR and processes data in accordance with their Privacy Policy.
• Google LLC (authentication only) — When you use Google Sign-In, your authentication data is processed by Google. We only receive basic profile data as described in Section 6. Google’s privacy practices are governed by their Privacy Policy. Data transfers to Google (a US-based company) are covered by the EU-US Data Privacy Framework.
• Google Fonts — We load fonts from Google Fonts (fonts.googleapis.com). Google may log your IP address when these fonts are loaded. See Google Fonts Privacy FAQ.
• Google Analytics 4 — Consent-gated website analytics as described in Section 7. Data is processed under Google’s Privacy Policy and the EU-US Data Privacy Framework.
• Microsoft Corporation (Clarity) — Consent-gated usage analytics as described in Section 7, processed under the Microsoft Privacy Statement and the EU-US Data Privacy Framework.

We do not sell, rent, or trade personal data to any third party. We do not share data with data brokers. We do not transfer personal data outside the European Economic Area (EEA) except as described above for Google and Microsoft services, which are covered by appropriate safeguards (EU-US Data Privacy Framework).

9. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy:

• Newsletter emails: Retained until you unsubscribe. Deleted within 30 days of unsubscription.
• Contact form messages: Retained for up to 12 months, then permanently deleted.
• Writer account data: Retained for the lifetime of your account. Deleted within 30 days of an account deletion request. Published articles may be retained in anonymised form.
• Session cookies: Expire when you close your browser.
• Google OAuth tokens: Not retained. Tokens are used once during authentication and immediately discarded.

10. Your Rights Under GDPR

Under the GDPR and the Irish Data Protection Act 2018, you have the following rights:

• Right of Access (Art. 15): You can request a copy of all personal data we hold about you.
• Right to Rectification (Art. 16): You can request correction of inaccurate personal data.
• Right to Erasure (Art. 17): You can request deletion of your personal data (“right to be forgotten”).
• Right to Restriction (Art. 18): You can request that we restrict processing of your data in certain circumstances.
• Right to Data Portability (Art. 20): You can request your data in a commonly used, machine-readable format.
• Right to Object (Art. 21): You can object to processing based on legitimate interests.
• Right to Withdraw Consent (Art. 7(3)): Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the Data Protection Commission (see Section 13).

To exercise any of these rights, contact us at info@priyalifescience.com. We will respond within 30 days as required by the GDPR.

11. Children

Priya Life Science is not directed at children. In accordance with the Irish Data Protection Act 2018, we do not knowingly collect personal data from anyone under the age of 16. The digital age of consent in Ireland is 16 years. If we become aware that we have collected data from a person under 16 without appropriate parental consent, we will delete that data immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically. Continued use of our website after changes constitutes acceptance of the updated policy.

13. Contact and Complaints

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with the Irish Data Protection Commission: