INQUIRY INFORMATION

Inquiry privacy notice

Who operates this form

Eluma Bio Limited, Hong Kong, operates this website and handles general research and partnership inquiries. Effective 15 October 2026. For privacy requests, email hello@elumabio.com and include your inquiry reference if available. Erik handles these requests.

What we collect

Work email, organization or team, a general question, purpose and language are required to submit the form. Name and country or region are optional. Without the required fields we cannot process a form inquiry; you can contact us by email instead. We also record a reference, receipt time, source page and subsequent project follow-up status. When you submit, we also save controlled campaign/source categories, a public entry-page path and a coarse referrer category to understand which routes produce useful inquiries. These are browser-reported context, not verified identities or acquisition sources; arbitrary campaign text and full referring URLs are not saved.

Why we use it

We use these details to review your inquiry, respond, assess project fit and manage the related conversation. We do not use inquiry text for advertising, sell it or submit it to an AI model for training. Reading this notice is an acknowledgment, not consent to marketing.

Access and service providers

Erik is the initial inquiry owner. Authorized Eluma personnel may receive information needed for the relevant project. Vercel hosts the website and backend; Neon stores inquiry records in Ohio, United States; Microsoft 365 handles notifications and direct email. These providers process information to deliver their services. Internal notifications contain a reference and authenticated record link, without your contact details or question.

International processing

The inquiry database is in the United States. Hosting and email services may process information outside your country, including normal service and security logs. Please use this form only for general business and research planning. Do not submit participant information, raw measurement data, confidential datasets or proprietary details. Attachments are not accepted.

Retention

The inquiry database removes spam after 30 days without activity, closed or lost inquiries after 90 days, and other pre-contract inquiries after 365 days without a recorded follow-up. A verified privacy request or necessary retention review can place a record on hold, with a review due within 30 days. Signed and active project records receive a separate review under the project agreement and applicable recordkeeping obligations. Database erasure removes the inquiry, queued notification and associated history; a reference-only erasure journal is kept for 30 days to help reapply deletions after a restore. Provider logs, backups, sent notifications and direct emails follow their separate retention and request processes.

Access, correction and deletion

Email hello@elumabio.com to request access, correction or deletion. We verify your identity before releasing or changing information and review whether any project or recordkeeping obligation requires retention. We explain any restriction that prevents the requested action. Keep confidential material out of the request until a suitable channel has been agreed.

Cookies and the study brief

The study-brief tool runs in your browser and does not send or store its entries. Resource search filters already loaded public resources in your browser; its queries are not sent or stored. This website uses no advertising cookies or third-party analytics. Public navigation carries only controlled source/campaign categories and page paths in links, without a visitor identifier or browser storage. These categories are sent to our backend only with an inquiry. Our private reports count retained inquiries and recorded follow-up outcomes; we do not collect page-view or tool-use telemetry. The form uses a short-lived validation proof; rate limiting stores a hashed hourly network identifier for up to 48 hours. Hosting providers also receive ordinary request information such as IP addresses. The private owner area uses a necessary sign-in cookie that expires after one hour.