Skip to main content
The full version MalVax Alliance website is coming soon. In the meantime, this page provides a brief introduction to the Alliance and shares key information about our inaugural Scientific Conference.

Privacy Notice

Global Strep A Conference (globalstrepavax.org) & Malaria Vaccine Alliance — MalVax (malvax.org)

‍

1. Who we are

This notice explains how [Bridges to Development— registered controller, CH entity] (“we”, “us”) collects and uses personal data when you visit globalstrepavax.org or malvax.org, or contact us through either site.

Registered addresses: Switzerland — Campus Biotech Innovation Park, Ave. de Sécheron 15, 1202 Genève. United States — 20211 Vashon Hwy SW, Suite 241, Vashon, WA 98070. Registration numbers: CHE 482.343.974 · US 83-1284174.

We are the data controller for the personal data described in this notice. If you have questions about it, contact us at info@bridgestodevelopment.org, which we monitor.

‍

2. What personal data we collect

2.1 Newsletter and conference updates

If you sign up for conference updates, we collect the fields below, which differ slightly between the two sites:

  • MalVax — name, email address, job title, organisation, gender, location, sector, area of expertise, and years of experience.
  • Strep A — first name, last name, email address, organisation, job title, and sector / area of expertise or interest (checkboxes, multiple selections permitted).

‍

2.2 Contact enquiries

If you use the contact form, we collect your name, email address, and the content of your message, together with any other details you choose to include.

‍

2.3 Website analytics

With your consent, we use Google Analytics 4 to understand how the site is used. This collects:

  1. A randomly generated identifier stored in a cookie on your device (the Google Analytics client ID)
  2. Pages and sections viewed, and how long you spent on them
  3. Which links you followed away from the site, including to our registration and abstract submission provider
  4. The website or search engine that referred you
  5. Your approximate location, at country and region level only
  6. General device information, such as whether you are on a mobile or desktop device

We do not collect city-level location data from visitors in the United Kingdom. Google Analytics does not store your IP address; it is used only to derive approximate location and is then discarded. We do not use analytics or advertising cookies unless you accept them. If you decline, no analytics data is collected.

‍

3. Why we process your data, and our legal basis

Purpose Data used Legal basis (UK/EU GDPR)
Sending you conference updates and newsletters Email address and signup fields Consent — Article 6(1)(a)
Responding to your enquiry Contact form details Legitimate interests — Article 6(1)(f): responding to a message you have sent us
Understanding how the site is used and improving it Analytics data Consent — Article 6(1)(a), and Regulation 6 PECR / Article 5(3) ePrivacy for the cookie itself

You can withdraw consent at any time. Use the unsubscribe link in any email to stop receiving updates, or change your cookie preferences using the link in the site footer. Withdrawing consent does not affect processing carried out before you withdrew it.

‍

4. Cookies and similar technologies

When you first visit the site you will be asked whether you accept non-essential cookies. Analytics cookies are not set until you accept them. We will ask you to renew your cookie choice at least once every 12 months.

The cookies we use fall into two categories:

  1. Strictly necessary — required for the site to function and to remember your cookie choice. These do not require consent.
  2. Analytics — set by Google Analytics only where you have accepted them. These expire after 12 months, at which point you will be asked to consent again.

‍

5. Who we share your data with

We do not sell your personal data. We share it with the following service providers, who process it on our behalf:

Provider Role What they receive
Webflow Website hosting and form submissions Contact and signup form submissions, stored on Webflow’s infrastructure
Intuit Mailchimp Email marketing platform Your email address and signup fields
Google Website analytics Analytics data described in section 2.3, where you have consented

Separately, if you click through to register for the conference, submit an abstract, or apply for travel support, you will be taken to Oxford Abstracts, a third-party platform. Oxford Abstracts handles that information under its own privacy notice and is responsible for it in its own right. This notice does not cover data you provide to them. Oxford Abstracts privacy notice: https://oxfordabstracts.com/privacy-policy/.

Bridges to Development has written data processing agreements in place with Mailchimp and Google. 

‍

6. International transfers

The providers listed in section 5 are based in the United States, so your personal data will be transferred outside the UK, EEA and Switzerland. These transfers rely on, Suggested: each provider self-certifies under the EU-US Data Privacy Framework and its UK Extension, with Standard Contractual Clauses as fallback. Bridges to confirm.]

‍

7. How long we keep your data

Data Retention period
Newsletter subscription Until you unsubscribe, or 3 years (36 months) of inactivity
Contact form enquiries 24 months from last correspondence
Analytics data 14 months from collection

Note: retention periods for passport / visa data, conference registration data and financial records are handled under Bridges to Development’s wider data-retention policy and, where applicable, Oxford Abstracts’ own notice. They are out of scope for this website notice, which covers only the newsletter, contact form and analytics.

‍

8. Your rights

Under the UK and EU GDPR you have the right to:

  1. Ask for a copy of the personal data we hold about you
  2. Ask us to correct data that is inaccurate or incomplete
  3. Ask us to delete your data
  4. Ask us to restrict how we use your data
  5. Object to processing carried out on the basis of our legitimate interests
  6. Receive your data in a portable format, or have it transferred to another provider
  7. Withdraw your consent at any time, where we rely on consent

‍

9. Complaints

If you are unhappy with how we have handled your personal data, you can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC), the supervisory authority for the data controller. If you are in the UK or EU, you can also complain to the data protection authority in the country where you live or work.

‍

10. Changes to this notice

We may update this notice from time to time. The current version was published on August 6 2026.