Privacy Policy
This Privacy Policy explains how Atolla, operated by SJR LLC ("Atolla", "we", "us", or "our"), collects, uses, and protects information when you visit atolla.bio or get in touch with us.
We collect the minimum data necessary to operate this site and respond to you. We do not sell your data and we do not share it with advertisers. This policy is written in plain English — if anything is unclear, contact us.
Our baseline: if you only browse this website and do not submit a form, we do not collect information that directly identifies you (such as your name or email). We do use privacy-conscious product analytics that collect limited technical and usage data — see Sections 2 and 7.
Who We Are
Atolla is an early-stage company that licenses proprietary research data from independent scientists to the organizations that need it — and pays the scientists who created it. Atolla is operated by SJR LLC.
For the purposes of data protection law, the data controller is:
SJR LLC / Atolla
Email: privacy@atolla.bio
Website: atolla.bio
What We Collect
We collect personal data only when you choose to contact us through one of the forms on this site or by email.
"I have data" form (for scientists)
When you tell us about research data you hold, we collect:
- Your name
- Your email address
- The description of your data that you provide (field, region, how it was funded, and anything else you choose to include)
"I need data" form (for buyers)
When you request early access to datasets, we collect:
- Your name
- Your work email address
- Your organization
Email contact
If you email us directly (for example at hello@atolla.bio), we receive your email address, your name if provided, and the contents of your message.
Technical data (automatic)
Like most websites, our hosting infrastructure may automatically log basic technical data when you visit, including your approximate IP address, browser type, and the pages you view. This data is used solely for server security and uptime monitoring. It is not linked to any personal profile.
Analytics data (automatic)
We use PostHog, a product-analytics service, to understand how visitors use the site. PostHog collects usage data such as the pages you view, links and buttons you click, how far you scroll, your browser and device type, and an approximate location derived from your IP address. It sets a first-party cookie so we can recognise returning visits. We have configured PostHog so that it does not build an identified personal profile for anonymous visitors, and we do not use this data for advertising. See Section 7 for cookie details.
| Data type | When collected | Required? |
|---|---|---|
| Name, email, data description | "I have data" form | Yes (to respond to you) |
| Name, work email, organization | "I need data" form | Yes (to respond to you) |
| Name, email, message | Direct email to us | You choose what to send |
| IP address, browser type | Automatically on each visit | Automatic (server logs) |
| Usage data, device/browser, approximate location (from IP) | Automatically via PostHog analytics | Automatic (analytics) |
How We Use Your Information
We use your information only for the purpose for which you provided it:
- Scientist enquiries: to evaluate the data you describe, follow up personally, and discuss whether and how it could be licensed.
- Buyer enquiries: to understand what you need and show you what datasets may be available.
- Direct email: to respond to your message.
- Server logs: to maintain site security and diagnose technical issues — never for profiling or marketing.
We will never use your data to send unsolicited commercial messages, share it with advertisers, or build profiles for targeting purposes. Submitting a form does not place you on any mailing list.
Legal basis (GDPR)
If you are located in the European Economic Area or United Kingdom, our legal basis for processing your data is:
- Legitimate interests — responding to business enquiries you initiate and keeping our site secure.
- Consent — where you have given it for a specific purpose. You can withdraw consent at any time.
Storage & Security
Your data is stored on secure servers. We take reasonable technical and organisational measures to protect it against unauthorised access, loss, or disclosure.
Form submissions are processed by our form provider (Sheet Monkey) and stored as rows in a private Google Sheet (Google Workspace), accessible only to the Atolla team. Analytics data is stored by PostHog. We do not share this data with third parties beyond what is described in Section 5 below.
No method of transmission over the internet is 100% secure. While we do our best to protect your data, we cannot guarantee absolute security.
Sharing Your Data
We do not sell, rent, or trade your personal data. We share it only in the following limited circumstances:
- Service providers: we use third-party tools to operate the site and process your data — our website host (Vercel), our form-handling provider (Sheet Monkey) and the private Google Sheet your enquiry is stored in (Google), and our product-analytics provider (PostHog). These providers process your data only to provide their service to us.
- Legal requirements: we may disclose your data if required to do so by law, court order, or to protect the rights and safety of Atolla, its team, or the public.
- Business transfer: if Atolla or SJR LLC is transferred or restructured, your data may be transferred as part of that transaction. You will be notified in advance if this occurs.
In all other cases, we ask for your explicit consent before sharing.
How Long We Keep Your Data
| Data type | Retention period |
|---|---|
| Form submissions (scientist & buyer enquiries) | Up to 2 years, then deleted unless an ongoing relationship requires otherwise |
| Direct email correspondence | Up to 2 years, then deleted unless ongoing correspondence requires otherwise |
| Server access logs | Up to 90 days, then automatically deleted |
You can request earlier deletion at any time — see Section 8 (Your Rights).
Cookies
A cookie is a small text file stored on your device when you visit a website.
What we currently use
atolla.bio uses two kinds of cookies: the basic session cookies necessary for the site to function, and a first-party analytics cookie set by PostHog (see Section 2) that lets us recognise returning visits and measure how the site is used. We do not use advertising cookies and we do not sell cookie data, and PostHog does not track you across other websites.
You can opt out of analytics at any time by enabling your browser's "Do Not Track" setting or by blocking cookies for this site (see below). Blocking the analytics cookie does not affect your ability to use the site or submit a form.
How to control cookies
You can set your browser to refuse all or some cookies, or to alert you when websites set or access cookies. If you disable certain cookies, some parts of this site may not function properly. For more information, visit allaboutcookies.org.
Your Rights
Depending on where you are located, you have certain rights over your personal data. We honour all of the following:
To exercise any of these rights, email us at privacy@atolla.bio. We will respond within 30 days and will never charge a fee for a legitimate request.
If you are in the EEA or UK and believe we have not handled your data lawfully, you have the right to lodge a complaint with your local data protection authority.
California residents (CCPA)
If you are a California resident, you have the right to know what personal information we collect, request deletion of your personal information, and opt out of any sale of personal information. We do not sell personal information. To exercise your California rights, contact us at privacy@atolla.bio.
Children's Privacy
This website is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with their information, please contact us and we will delete it promptly.
Changes to This Policy
We will update this policy when our data practices change — in particular when we add analytics or cookie tracking. When we make material changes, we will update the "Last updated" date at the top of this page.
Contact Us
For any privacy-related question, request, or complaint, please reach out:
Atolla / SJR LLC
Email: privacy@atolla.bio
Website: atolla.bio
We aim to respond to all privacy requests within 5 business days, and within 30 days at the latest.