Privacy & Cookie Policy

This policy explains how Perrin Research (“the Institution,” “we,” “us”), a 501(c)(3) nonprofit organization located at 303 Banyan Blvd, Suite 400, West Palm Beach, FL 33401, USA, collects, uses, shares, and protects information when you use this website (the “Site”), and the choices you have. It covers the Site, including legacy publication pages on our own perrininstitution.org domain. It does not cover genuinely third-party services we link to or embed, such as video hosted by YouTube.

For the purposes of the EU/UK General Data Protection Regulation (“GDPR”), where it applies to visitors from those regions, the Institution is the data controller for personal data described in this policy.

We collect very little, and none of it is sold:

• Information you send us. If you email us (for example, a research request, verification inquiry, or media inquiry), we receive your email address and the contents of your message.
• Technical log data. Like nearly every website, our hosting infrastructure automatically records basic request data: IP address, browser type, date/time, pages requested, and referring URL. We use this for security, debugging, and capacity planning.
• Cookie consent choice. Your accept/decline decision from the cookie banner, stored in your browser (see Section 5).
• Analytics data. None at present: the Site currently runs no analytics. Any future analytics would run only with your opt-in consent, as described in the cookie table below.

We do not run accounts, we do not collect payment information through the Site, and we do not knowingly collect any special categories of personal data.

• to operate, secure, and maintain the Site;
• to respond to inquiries and verification requests;
• to understand aggregate Site usage (only if you consented to analytics);
• to establish, exercise, or defend legal claims, including addressing false claims of affiliation with the Institution;
• to comply with legal obligations.

Where GDPR applies, our legal bases are: legitimate interests (Site security and operation, responding to correspondence, defending legal claims), consent (analytics cookies and third-party embeds where required), and compliance with legal obligations.

We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising. We share information only with:

• Service providers that host the Site and our email, acting on our instructions;
• Google/YouTube, solely as a consequence of embedded video content you choose to play;
• Authorities or advisers where required by law, subpoena, or to protect the rights, safety, or property of the Institution or others.

On your first visit, a banner lets you choose “Accept all” or “Essential only.” Strictly necessary storage works regardless of your choice because the Site cannot function (or remember your refusal) without it. Everything else is off unless you opt in. You can change your mind at any time by clearing this site's data in your browser, after which the banner will reappear.

“Do Not Track” and Global Privacy Control signals: because we run no tracking without opt-in consent, the Site's default behavior already matches these signals.

• Server logs: up to 12 months, then deleted or anonymized.
• Email correspondence: as long as needed for the purpose it was sent, and afterwards only where a legal obligation or claim requires it.
• Consent records: for as long as your browser stores them.
• Analytics data (if consented): up to 13 months, aggregated.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent at any time (without affecting prior processing).

• Florida residents: the Florida Digital Bill of Rights provides certain rights against covered controllers; while the Institution falls below its revenue thresholds, we honor access and deletion requests as a matter of policy.
• California residents: we do not sell or share personal information as defined by the CCPA/CPRA, and we honor access, deletion, and correction requests.
• EU/UK visitors: you may also lodge a complaint with your local supervisory authority.

To exercise any right, email contact@perrininstitution.org with the subject “Privacy request.” We will verify the request and respond within the time required by applicable law (and in any case within 45 days).

The Site is operated from the United States. If you access it from outside the U.S., your information will be processed in the U.S., which may have different data-protection rules than your jurisdiction. Where GDPR applies to a transfer, we rely on recognized safeguards such as standard contractual clauses with our service providers.

We use reasonable technical and organizational measures appropriate to the small amount of data we handle: TLS encryption in transit, access limited to the people who administer the Site, and reputable hosting providers. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

We may update this policy from time to time. We will post the updated version here with a revised “Last updated” date, and, for material changes affecting consent, we will re-present the cookie banner.

Privacy contact: Perrin Research, 303 Banyan Blvd, Suite 400, West Palm Beach, FL 33401, USA · contact@perrininstitution.org