01
Introduction and Scope
This Privacy Policy describes how the organization
operating the MRBI website may handle personal
information in connection with its website,
communications and services.
For this policy, MRBI refers to the
organization responsible for operating this website.
Its complete legal name, registered address and
official contact information should be identified
in the published version.
This policy should be read together with any
applicable terms, notices, consent statements
and service-specific privacy information.
02
Information That May Be Involved
Depending on the website features and services
actually provided, information may include:
-
Contact information:
information such as name, email address,
telephone number and message content when
voluntarily submitted.
-
Communication information:
enquiries, feedback, correspondence and
related records.
-
Technical information:
information such as browser type, device
information, operating system and server logs,
where collected.
-
Website usage information:
interaction and navigation information,
where analytics or similar tools are used.
-
Research or programme information:
information voluntarily supplied for a
specific approved activity, if applicable.
MRBI should not request unnecessary personal
information. Sensitive information should only
be handled where there is a clear, lawful and
properly communicated reason.
03
How Information May Be Collected
Depending on the services actually available,
information may be collected through:
- Forms or contact channels voluntarily used by visitors.
- Direct email or other communications.
- Website server logs and technical operations.
- Cookies or similar technologies, where enabled.
- Approved institutional or research activities, where applicable.
The final published policy should identify the
collection methods that MRBI actually uses and
explain whether providing particular information
is optional or necessary.
04
How Information May Be Used
Where applicable and supported by an appropriate
legal basis, information may be used for purposes
such as:
- Responding to enquiries and communications.
- Operating, maintaining and improving the website.
- Providing services or information requested by visitors.
- Protecting website systems and preventing misuse.
- Managing approved research or institutional activities.
- Meeting applicable legal or regulatory obligations.
Personal information should not be used for
unrelated purposes without an appropriate legal
basis and any notice or consent required by
applicable law.
05
Cookies and Similar Technologies
Cookies are small files that websites may store
on a visitor's device. They can support website
functionality, remember preferences or provide
analytics, depending on how a website is configured.
If MRBI uses cookies or similar technologies,
its published policy should explain:
- Which cookies or technologies are used.
- The purpose and duration of each relevant category.
- Whether third-party services place cookies.
- How visitors can manage applicable preferences.
Browser settings may allow visitors to block or
delete cookies. However, disabling certain
technologies may affect website functionality.
This page does not itself establish that MRBI
uses analytics, advertising or tracking cookies.
Actual website configuration should be checked.
06
Disclosure and Sharing
MRBI should identify any circumstances in which
personal information is shared. Depending on
actual operations and applicable law, these
circumstances may include:
- Authorized personnel who need information for their responsibilities.
- Service providers supporting approved website or organizational operations.
- Relevant authorities where disclosure is legally required.
- Other parties where the individual has provided valid consent or another lawful basis applies.
Any service provider handling personal information
should be subject to appropriate confidentiality,
security and data-handling requirements.
The final policy should identify relevant third-party
services where required. It should not promise that
information is never shared unless that statement
has been verified.
07
Information Security
Appropriate technical and organizational safeguards
should be used to protect personal information
against unauthorized access, alteration, disclosure,
loss or destruction.
Depending on the systems involved, safeguards may
include access restrictions, secure communications,
software maintenance, backups, monitoring and
appropriate staff procedures.
No website or electronic transmission method can
be guaranteed to be completely secure. Any security
statement should accurately describe the safeguards
that are actually implemented.
08
Data Retention
Personal information should be retained only for
as long as necessary for the purpose for which it
was collected, subject to applicable legal,
regulatory, research and recordkeeping requirements.
Retention periods may differ depending on the
information type and the relevant service.
Information that is no longer required should be
securely deleted, anonymized or otherwise handled
in accordance with applicable requirements.
MRBI should publish specific retention periods
or the criteria used to determine them where
required by applicable law.
09
Individual Privacy Rights
Depending on applicable law and the circumstances
of processing, individuals may have rights
concerning their personal information.
These may include:
- Requesting information about how personal data is handled.
- Requesting access to personal information.
- Requesting correction of inaccurate information.
- Requesting deletion where a legal right applies.
- Objecting to or requesting restriction of certain processing.
- Withdrawing consent where processing is based on consent.
- Requesting data portability where applicable.
- Making a complaint to an appropriate supervisory authority.
These rights are not absolute and may be subject
to legal conditions, exemptions and verification
requirements.
Requests should be submitted through an official
contact channel. MRBI should establish and publish
a procedure for handling such requests.
10
Children and Young People
Where website services or activities may involve
children or young people, additional privacy
safeguards should be considered.
Personal information about children should be
collected and processed only where appropriate
safeguards, required permissions and applicable
legal requirements are satisfied.
The organization should clearly identify any
age-related restrictions or parental and guardian
involvement requirements relevant to its actual
services.
11
External Websites and Services
The MRBI website may contain links to external
websites or services. Those websites may operate
under separate privacy policies and data practices.
MRBI should not be assumed to control the privacy,
security or content practices of independent
external services.
Visitors should review the privacy information
of third-party websites before submitting
personal information to them.
12
International Data Considerations
If MRBI uses service providers or systems located
in other countries, personal information may be
processed or stored outside the visitor's country.
Where international transfers occur, appropriate
safeguards and legal requirements should be
considered and explained in the final policy.
The organization should identify relevant transfer
arrangements where required by applicable law.
13
Changes to This Privacy Policy
This policy may need to be updated when website
features, organizational practices, services
or applicable legal requirements change.
Significant changes should be communicated
through an appropriate website notice or
another suitable channel where required.
The organization should display the actual
publication date and latest revision date
after the policy has been reviewed and approved.
14
Privacy Enquiries and Requests
For questions about this policy or requests
concerning personal information, visitors
should contact MRBI through its official
communication channel.
The organization should publish a verified
privacy contact email or the details of its
designated privacy representative here.
Please avoid sending passwords, identity
documents or unnecessary sensitive information
through general website enquiries.
