1. About Us
Hinksey Labs, Ltd. ("we," "us," "our") is a company incorporated in the United Kingdom, passionate about empowering exceptional high school students around the world. Our mission is to provide a rigorous programme that blends university-level research with practical applications. By combining mentorship from leading academics and industry experts in social impact, business, and entrepreneurship, we guide students to explore global challenges and create innovative solutions. Our registered address is The Wheelhouse, Angel Court, 81 St Clement's Street, Oxford, OX4 1AW, and our company registration number is 16075919.

2. What Information Do We Collect?
We collect the following categories of personal information to ensure a smooth application process and deliver the best programme experience:
A. Identifiers: Name, email address, date of birth, and contact information.
B. Educational Information: School name, grade, academic history (e.g., scores, test results).
C. Programme-Related Information: Essays, motivation statements, and projects submitted as part of the application process or programme activities.
D. Attachments: Documents such as recommendation letters, résumés, and evidence of academic performance.
E. Sensitive Information: Proof of family income, if applying for a need-based scholarship. This information is deleted or anonymised once eligibility is determined, unless required by law.
F. Commercial Information: Billing and transaction details to process payments securely through our third-party provider, Stripe. Sensitive payment data, such as credit card numbers, is handled directly by Stripe in compliance with their security standards.
G. Internet or Usage Data: Information on how you interact with our website, including pages visited, time spent on the site, navigation patterns, and engagement with our content. This data is collected through cookies and similar technologies, including optional tools like Meta Pixel, which track user interaction for marketing purposes when consent is provided.

3. Legal Basis for Processing
We process your personal data under the following legal bases:
— Contractual Necessity: To evaluate your application, enrol you in the programme, and provide services you request.
— Legitimate Interests: To improve our programme, communicate updates related to the services you’ve signed up for, and maintain the security of our website.
— Consent: For optional data like proof of income for scholarships, sending marketing communications, or tracking user behaviour through non-essential cookies. You can withdraw consent at any time by contacting us at team@hinkseylabs.com, using the "unsubscribe" link in our marketing emails, or where relevant changing your cookie preferences through the methods described in the Cookies and Tracking Technologies section of this policy.
— Legal Obligations: To comply with applicable laws and regulations.

4. How Do We Use Your Information?
We use the information you share with us to:
— Evaluate your application and help you join the programme.
— Customise your learning experience and provide support.
— Communicate updates about the programme, events, and opportunities.
— Improve the programme and ensure compliance with legal obligations.
— Facilitate secure payment processing through our third-party provider, Stripe, without storing sensitive payment details like credit card numbers on our servers.
— Analyse website usage and optimise content delivery using cookies and tracking tools.
— If you apply for a scholarship, we use optional data (like proof of income) only to determine eligibility.

5. Is This Programme for Students Under 18?
Yes, our programme is designed for high school students.
— If you are under 18, we require consent from a parent or guardian to collect and process your personal data.
— If you are under 13, we’re sorry, but you cannot use our programme or website.

In compliance with COPPA, we do not knowingly collect data from children under 13. If we discover that personal information has been provided by someone under 13, we will delete it promptly. Parents or guardians may contact us at team@hinkseylabs.com to review or request the deletion of their child’s information.

6. Who Do We Share Your Information With?
We do not sell your personal information—ever. However, we may share it with:
A. Service Providers: Companies that process data on our behalf, such as payment processors, hosting services, and email platforms.
B. Programme Partners: Academic and industry experts involved in evaluating applications or delivering programme content.
C. Impact Organisations: To validate or share your research-based project outputs with relevant organisations.
D. Marketing Communications: Trusted service providers, such as email marketing platforms, to send updates about our programmes, events, or other opportunities. We will only send you these communications if you have explicitly opted in to receive them. You can withdraw your consent at any time by clicking the “unsubscribe” link in our emails or contacting us at team@hinkseylabs.com.
E. Cookies and Tracking Tools Providers: We may share data collected through cookies and similar tracking technologies with trusted third-party providers, such as analytics and advertising platforms (e.g., Google Analytics, Meta Pixel), to improve user experience and provide tailored content. For further information, please refer to the Cookies and Tracking Technologies section of this policy. 
F. Legal Reasons: If required by law, we may share data with regulatory authorities or comply with legal obligations. 
G. Business Reasons: In the event of a merger, acquisition, or sale of our business, your data may be transferred to the acquiring organisation as part of the transaction.

All third parties are contractually obligated to protect your data and use it solely for the agreed purposes.

7. International Data Transfers
Your personal information may be stored or processed in countries outside your jurisdiction, such as Europe, the United States, or other countries where our service providers operate. While these countries may have different data protection laws, we ensure your information is protected through:
— Standard Contractual Clauses (SCCs): Legal agreements approved under GDPR to ensure your data receives the same level of protection as in the European Economic Area (EEA).
— Additional Measures: Technical safeguards, such as encryption and pseudonymisation, to enhance data security during transfers.

8. Use of Photos and Participant Materials
By participating in our programme, you (or your parent/guardian if you are under 18) grant us permission to use photos, videos, or recordings of programme sessions, as well as materials created by participants, for promotional purposes. These may include testimonials, marketing materials, and content shared on our website, social media, or other platforms.
— We will not include personal information (such as names or contact details) in promotional materials without explicit consent.

If you or your parent/guardian prefer that we do not use your photos, videos, or materials, you can opt out at any time by contacting us at team@hinkseylabs.com. 

9. How Long Do We Keep Your Information?
— Personal Information: We retain your personal information only for as long as necessary to stay in touch about future opportunities and improve our services. You can ask us to delete or anonymise your data at any time by emailing team@hinkseylabs.com. Upon receiving your request, we will securely delete or anonymise your data unless we are required to retain it to comply with legal obligations.
— Cookies and Tracking Data: Please refer to the Cookies and Tracking Technologies section of this policy. 

10. How Do We Keep Your Data Safe?
We take your data security very seriously and use industry-standard tools and practices to protect your personal information from unauthorised access, loss, or misuse. Here’s how we keep your data safe:
— Secure Storage: Data is stored in systems with encryption, access controls, and regular security updates.
— Limited Access: Only authorised personnel can access your information, and they are trained on data privacy practices.
— Regular Monitoring: We monitor for potential security threats and update our processes to address emerging risks.

While we work hard to protect your data, no system is completely secure. We encourage you to exercise caution when sharing personal information online. If a data breach occurs and your personal information is impacted, we will notify you and any relevant authorities in accordance with applicable laws.

11. Your Rights
We believe you should have control over your personal information. Here’s how you can manage your data and stay in charge:
— See Your Data: Want to know what information we have about you or have its copy? Just ask, and we’ll share it.
— Fix It: If something’s not right or needs updating, let us know, and we’ll correct it.
— Delete It: You can request that we delete your personal data, unless we need to keep it for legal reasons.
— Opt-Out: Don’t want emails from us about future programmes or opportunities? You can unsubscribe at any time.

If located in specific jurisdictions, such as the EU, UK, California, or Virginia, additional rights may apply under GDPR, CCPA, CDPA, or similar laws. To exercise your rights, email team@hinkseylabs.com. To keep your data safe, we might ask you to verify your identity first. We’ll get back to you as quickly as possible, usually within the timeframe required by law.

12. Cookies and Tracking Technologies
A. Why Do We Use Cookies?
Cookies are small text files placed on your device (such as your computer, tablet, or smartphone) when you visit a website. We use cookies to:
— Ensure the Website Works Properly: Some cookies are essential for the website to function (e.g., enabling navigation and access to secure areas).
— Enhance Your Experience: Cookies save your preferences and make the site easier to use.
— Provide Analytics: To understand how visitors interact with our website, such as which pages are visited most often.
— Customise Content: Cookies help us show content that is more relevant to you.
— Support Marketing: Cookies may be used to display ads tailored to your interests, utilising third-party services, such as Meta Pixel.

B. Types of Cookies We Use:
— Strictly Necessary Cookies: Ensure the website functions properly.
— Performance Cookies: Analyse user behaviour to improve the website.
— Functional Cookies: Remember preferences to enhance your experience.
— Targeting/Advertising Cookies: Deliver tailored content or advertisements.

C. Third-Party Cookies:
Some cookies are provided by third-party services, such as Google Analytics or Meta Pixel. These services may set cookies to track user interaction or preferences as described below. We do not merge this data with personally identifiable information. 
— Google Analytics: Collects data on how often users visit the site, which pages they visit, and how they arrive at the site.
— Meta Pixel: Tracks user behaviour to deliver targeted ads and measure ad performance across platforms. This includes interactions like clicks, conversions, and other engagement metrics.

D. Cookie Duration:
— Session Cookies: Deleted when you close your browser.
— Persistent Cookies: Remain on your device until deleted manually or automatically after a set duration.

E. Managing Cookies:
When you first visit our website, you’ll see a cookie consent banner where you can accept or reject non-essential cookies. Some browsers allow users to send a "Do Not Track" (DNT) signal to websites, indicating a preference not to be tracked. Currently, no standard has been adopted to govern how websites respond to DNT signals. Therefore, we do not change our practices in response to DNT signals at this time. However, you can control your cookies and change your consent at any time through the methods below.
— Browser Settings: Manage or delete cookies via browser settings.
— Withdrawing Consent: Adjust settings via the "Manage Cookies" option, located in the footer of our website.

13. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other operational reasons. Updated versions will be posted on this page with a revised "Last Updated" date, and for significant changes that affect your rights or how we handle your data, we will notify you via email. We encourage you to review this policy periodically to stay informed about how we protect your information.

14. Contact Us
If you have questions about this Privacy Policy or your data, please contact us at team@hinkseylabs.com. If you are located in Europe or the UK and feel we have not adequately resolved your concerns, you can file a complaint with an EU supervisory authority, or the UK’s Information Commissioner’s Office, as appropriate.