Governance & Compliance
Privacy Policy
This page explains what personal data we process, why we process it, how we secure it, and how users can request access, correction, or review.
Scope
This policy applies to public pages, submission and review workflows, editorial operations, author and reviewer accounts, support communications, and other related services provided through IORO Publication.
Data we collect
Account and identity data
Names, email addresses, affiliations, roles, profile information, and optional identifiers such as ORCID.
Submission and review data
Manuscripts, metadata, revision files, reviewer reports, editorial notes, and workflow history.
Operational and security data
Login activity, audit trails, IP address, browser or device signals, and service integrity logs.
Support and communication data
Messages submitted through platform forms, notifications, and administrative correspondence.
Purposes and legal basis
We process personal data to operate accounts, manage editorial and peer-review workflows, support publication and archiving, secure the platform, respond to support requests, and comply with legal or record-keeping obligations.
Sharing and disclosure
- Editorial participants may access the information necessary to assess and process submissions.
- Infrastructure or service providers may process limited information under operational safeguards.
- Published metadata may be transmitted to DOI, indexing, archiving, or discovery services.
- Information may be disclosed where required by law, policy enforcement, or platform security obligations.
Retention and security
Publication and editorial records may be retained for long-term scholarly and audit purposes. Administrative and technical records are kept only as long as needed for operations, legal obligations, service integrity, and archival continuity.
Your rights
- Request access to the personal data we hold about you.
- Request correction of inaccurate or incomplete information.
- Request restriction or deletion where editorial and legal obligations allow.
- Object to non-essential processing or ask for clarification of specific data uses.
International processing
Where services or collaborators operate across jurisdictions, we aim to maintain consistent privacy protections, contractual safeguards, and proportionate access controls.
Contact
Questions about this policy can be submitted through the platform contact page.