The short version: this website asks you for nothing.

This website

These pages are served as static files. There are no analytics scripts, no advertising pixels and no cookie banner — because there are no cookies to consent to.

The pages are served by a hosting provider, and like any web host it keeps standard server logs — including the IP address your browser connects from — for security and reliability. We do not use those logs for analytics, and nothing on this site links them to a person.

Signing up happens in the Dr Costa application itself. These pages are static files with no forms — no account detail, and no personal data of any kind, ever touches them.

The Dr Costa platform

This website describes the Dr Costa research platform, which is a separate thing from the site itself: no research data, and no participant data, ever touches these pages.

The platform handles research data about real people, so its privacy posture is built into the architecture rather than written afterwards:

• Names and contact details belong in a separate identity vault with its own keys. Participants appear in the research store only under a code — it has no participant name, email or date-of-birth column.
• Every state change writes an audit event to an append-only, hash-chained ledger, in the same transaction as the change itself.
• Data is encrypted in transit and at rest, with identifying data under its own keys.
• Runs on UK-based infrastructure: the deployment region is AWS London.
• AI inference runs through EU-resident endpoints — never a global route.

Planned: a full platform privacy notice — including a named privacy contact — published before the platform processes any personal data.

If you are taking part in a study

Participants only ever join through their study team. There is no public participant sign-up, on this site or anywhere else.

Your first point of contact about your information is your study team. Their information sheet explains what their study collects and why, and their phone number is on it.

Dr Costa will never ask you for money, card details or bank details.

Who we are

Dr Costa was founded by Dr José Maia e Costa, a UK consultant paediatrician in allergy, and is built with Datrics Ltd.