Contact Information. We collect information such as End Users’ first and last name, email, phone number, fax number, employer, city, country, referral source, and areas of interest.

Message Contents. If an End User sends us messages through our Site of via email, we also collect message contents, including responses to open ended or multiple-choice questions, and any other information End Users may choose to provide.

Device Identifiers. When an End Users visit our Site, we may automatically collect information such as IP address, unique device identifiers, operating system, and other information related to the device used to interact with our Clients via the BioDuro-Sundia Platform.

Network and Activity Information. We may collect information related to how End Users interact with our Site, such as referring and exit web pages and URLs, browsing history, and other similar information. As described below in the “Our Use of Cookies” section, we may use analytics providers and technologies, including cookies and similar tools, to collect this information.

Operate Our Business. We use Personal Information we collect via the Site to communicate with End Users, send newsletters, respond to inquiries regarding our Services, and to otherwise run our day-to-day operations. When we collect Personal Information from End Users as part of their use of our Services, we use the Personal Information to ensure our development and manufacturing operations align with Client expectations and requests.

Conduct Surveys. We use Personal Information we collect to conduct surveys, such as customer satisfaction surveys and market surveys.

Augment Existing Information. We may use Personal Information to obtain additional information from our vendors or other third parties.

Evaluate and Improve Our Site and Services. We may use the Personal Information we collect to evaluate and improve our Site and improve how we communicate regarding our Services.

Security Purposes. We may use Personal Information to mitigate fraud and protect BioDuro-Sundia.

Legal Requirements. We may use Personal Information to comply with lawful court orders, law enforcement requests, or other legal requirements.

Other Operational Purposes. We may use Personal Information for purposes not provided for in this Policy, but if we do, we will notify the End User (and, if necessary, obtain consent) before using the Personal Information in that way.

Service Providers. We disclose information we collect from End Users to service providers, vendors, contractors, or agents who perform functions on our behalf. This includes entities that host the BioDuro-Sundia Site, provide marketing and direct mailing services on our behalf, assist with our research, development, and manufacturing activities on our Clients’ behalf, and assist us in performing other duties necessary to delivering our Site and Services.

Client and Business Partners. We disclose information we collect to our Clients and business partners as necessary to deliver our Services.

Affiliates. We disclose the information we collect to our affiliates or subsidiaries.

At an End User’s Request. We may disclose information to others when requested, explicitly or implicitly, by an End User.

Business Transfers. If (i) we or our affiliates are or may be acquired by, merged with, or invested in by another company, or (ii) if any of our shares or assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may transfer the information we have collected from End Users to the other company. As part of the business transfer process, we may share certain Personal Information with lenders, auditors, and advisors, including attorneys and consultants.

In Response to Legal Process. We disclose Personal Information to comply with the law, a judicial proceeding, court order, or other legal process, such as in response to a court order or a subpoena.

To Protect Us and Others. We disclose Personal Information when we believe it is appropriate to do so to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of our terms of use or this Policy, or as evidence in litigation in which we are involved.

With an End User’s Permission. We may disclose Personal Information in ways not described above. If we do so, we will notify End Users, and if necessary, obtain consent.

Performance and Analytics. Cookies help us analyze how you interact with our Clients via the Site. These Cookies enable us to monitor and improve our Site’s performance, our Services, and End User experiences.

Request Access. The right to request access to, and a copy of, Personal Information we have collected. This may also include the right to know the categories of Personal Information collected, the sources from which we have collected Personal Information, our business purposes, and the categories of third-parties to whom we have disclosed Personal Information.

Right to Correct. The right to request we correct inaccurate Personal Information.

Right to Delete. Subject to certain conditions and exceptions, the right to request we delete Personal Information.

Right to Opt-Out. The right to opt-out of our use of Personal Information for marketing and advertising purposes.

Comply with federal, state, or local laws;

Comply with a civil, criminal, or regulatory inquiry, investigation, subpoena, or summons by federal, state, or local authorities;

Cooperate with law enforcement agencies concerning conduct or activity that we reasonably and in good faith believe may violate federal, state, or local law;

Exercise or defend legal claims;

Detect security incidents and protect against fraudulent or illegal activity and prosecute those responsible for such activity;

Transfer Personal Information as part of a merger or acquisition, dissolution, bankruptcy, or any other transaction in which a third party assumes control of all or part of our business.

for billing, collections, and payment purposes;

for security and safety when you visit our facilities;

to manage our technology resources (e.g., cyber-risk management, infrastructure management and business continuity);

to detect and prevent fraud;

to protect and defend our rights or property, or the rights and property of others;

to perform corporate governance, training, and other internal functions;

for archiving and record-keeping;

in the event of corporate transactions such as a financing, merger, acquisition, takeover, amalgamation or other disposal of assets or interests;

to investigate, enforce, and apply this Policy and to otherwise protect our own rights and interests, such as to resolve any disputes or to respond to legal process;

to comply with the law, when certain information is necessary to satisfy our legal or regulatory obligations and to respond to lawful requests, court orders, and legal process.

to provide you our Services, process your transactions, and fulfill your orders.

to maintain your account and otherwise run our day-to-day operations.

to conduct business with you, including to perform our contractual obligations to your employer or principal;

to provide you and your employer with marketing materials about products, services, news, offers, promotions and events which we think may be of interest to you;

to communicate with you and your employer, including to fulfill requests and orders, answer questions and other requests from you, provide customer support, and communicate with you and your employer about business opportunities;

to operate and expand our business activities and evaluate, develop, and improve the quality of our products and services;

to manage our contracts with your employer or principal and receive products or services;

to ensure we are receiving products or services appropriately and on terms most beneficial to us;

for vendor management purposes, including vendor risk management;

Right to Opt-Out of Sale/Sharing of Personal Information. We do not currently engage in any activities that would be considered “selling” or “sharing” Personal Information under the CCPA. Therefore, there is no need to exercise this right.

Right to Limit the Use and Disclosure of Sensitive Personal Information.We do not collect any sensitive Personal Information and therefore do not engage in uses of this type of information that would trigger this right under the CCPA.

Right to Non-Discrimination.We will not discriminate against you in terms of price or service level for exercising any rights described in this Policy.

Right to Opt-Out of Sale/Sharing of Personal Information. We do not currently engage in any activities that would be considered “selling” or “sharing” Personal Information under the CCPA. Therefore, there is no need to exercise this right.

Right to Limit the Use and Disclosure of Sensitive Personal Information.We do not collect any sensitive Personal Information and therefore do not engage in uses of this type of information that would trigger this right under the CCPA.

Necessary for Performance of a Contract.We use Personal Information to take steps necessary to perform our obligations with our Clients, or to ensure our vendors perform their obligations to us. For our Legitimate Interests.We use Personal Information to further our legitimate interests in protecting the security and safety of our personnel, our Clients and vendors, and their personnel. This may include, for example, taking steps to prevent fraud, misuse, or utilization of our Services for illegal purposes. We take necessary steps to safeguard Personal Information when we rely on this legal basis. Based on Compliance with EEA/UK Law.We use Personal Information to comply with legal obligations to which we are subject. Based on Consent.Where we have obtained it, we use Personal Information with End Users’ consent. For example, we may use Personal Information to send marketing communications or newsletters based on consent. End Users are entitled to withdraw their consent at any time.

Additional Rights Regarding Personal Information

EEA and UK law provides individuals located in those regions with specific rights regarding Personal Information. In addition to the rights listed above under Your Privacy Rights, you may have the following rights:

Right to Restrict Use of Personal Information.The right to restrict our use of Personal Information where (i) you contest the accuracy of the Personal Information; (ii) the use is unlawful, but you do not want us to erase the Personal Information; (iii) we no longer need the Personal Information for the relevant purposes, but you require it for the establishment, exercise, or defense of legal claims; or (iv) you have objected to our Personal Information use justified on where we need to process the Personal Information for the establishment, exercise or defense of legal claims.

Right to Lodge a Complaint.You have the right to lodge a complain with a supervisory authority in your country of residence if you believe our use of Personal Information infringes this Policy or applicable law.