Privacy & Data Protection Policy

Effective Date: March 1, 2026 • Zyppy BioNature Research Ltd.

1. Overview and Data Controller

Welcome to Shufflespotzyppy, operated by Zyppy BioNature Research Ltd. (Company No. 13894021), registered at 42 Pangolin Way, BioVault District, Oxford, OX2 7HG, United Kingdom ("we", "our", or "us"). We are committed to safeguarding the privacy of our academic researchers, students, and natural science enthusiasts.

This Privacy Policy explains the nature, scope, and purpose of personal data processed through our website, catalog directories, research journals, and submission contact forms in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Personal Data We Collect

We only collect data strictly necessary to provide biological content, respond to field submissions, and ensure cyber-security across our knowledge base:

3. Lawful Bases for Processing

Processing Activity Data Involved Lawful Basis (UK GDPR)
Field Query & Peer Review Replies Name, Email, Message data Legitimate Interests / Contractual Performance
Bio-Dispatch Newsletter Delivery Email address Explicit Consent (Opt-in)
Cybersecurity & Server Maintenance Server access logs, Anonymized IP Legitimate Interests (System Security)

4. Data Retention Periods

We retain personal data only for as long as necessary to fulfill the research, administrative, or compliance purposes for which it was obtained:

🔒 Security Standards & Zero Monetization Guarantee

Zyppy BioNature Research Ltd. does not sell, lease, or monetize user data under any circumstance. All communications are encrypted in transit using Transport Layer Security (TLS 1.3), and internal access to submission data is restricted to verified research staff.

5. Your Statutory Rights Under UK GDPR

As a data subject, you possess enforceable legal rights regarding your personal information:

6. International Data Transfers

Our primary servers are located within the United Kingdom and the European Economic Area (EEA). If technical infrastructure requires secondary routing outside the UK/EEA, transfers are safeguarded through UK International Data Transfer Agreements (IDTAs) and Standard Contractual Clauses (SCCs).

7. Contacting Our Data Protection Officer

If you wish to exercise your statutory rights, withdraw consent, or submit a compliance inquiry, please contact our Data Governance Desk: