Privacy Policy

1. INTRODUCTION

Cellcolabs Clinical Ltd, Business License: 10330640, (“Cellcolabs Clinical”, “we”, “our” or “us”) values your privacy and is committed to protecting your personal data. Therefore, we strive to ensure that you are fully informed about the use and processing of your personal data in a manner that is readable, transparent, and in compliance with applicable data protection laws and regulations. This privacy policy (the “Privacy Policy”) outlines our practices regarding the collection, use and protection of your personal data, as well as delineating your rights concerning that data. We operate under the legislation of The Bahamas and EU.

As the data controller under the GDPR for the personal data processing activities detailed in this Privacy Policy, Cellcolabs Clinical is responsible for the processing of your personal data and providing clear, accurate, and comprehensive information about the processing activities we undertake. We have taken considerable care to ensure this Privacy Policy contains all the information you may need. However, should you have any questions, please do not hesitate to contact us at info@cellcolabsclinical.com  

For additional details regarding our use of cookies and similar technologies, please refer to our Cookie Policy.

Cellcolabs Clinical regularly reviews and may amend this Privacy Policy from time to time at our sole discretion. We recommend you periodically review this Privacy Policy to stay informed about our personal data practices and understand your position. Should we implement any significant updates to this Privacy Policy that could materially affect you, we will provide you with prior notification of such changes before commencing any new processing activities.

2. THE SOURCE OF YOUR PERSONAL DATA

We collect and process various types of personal data depending on your relationship with Cellcolabs Clinical . Section 3 of this Privacy Policy provides a detailed description of these practices and further delineates the categories of personal data processed, the purposes for which the personal data are intended, and the legal grounds for such processing.

3. HOW AND WHY WE PROCESS YOUR PERSONAL DATA

3.1 Customers and Prospective Customers

Purposes and types of personal data processed

If you are a customer or prospective customer, i.e., if you have placed an order for any of our products or if you have requested a quote for our products, we may collect and process, inter alia, the following types of personal data for the specified purposes stated below:

Personal identification information: We may collect personal data such as your name, business address, shipping/billing address, email address, phone number, and payment information. This information allows us to respond to your inquiries, provide information about our products, process your orders, offer customer support, manage our business relationship, and fulfil our contractual obligations.

Professional data: We may collect information related to your professional role, such as your job title, department, and the organisation you work for. This information helps us understand your role and responsibilities in our business relationship.

Transactional data: We collect information related to our business transactions with the organisation you represent, such as the products you purchase, your payment details, your payment history, and your interactions with our customer support. This information assists us in managing our business relationship with you, understanding your preferences, and improving our services.

Legal grounds

The primary legal ground for processing our customers’ personal data is the performance of the contract between us and the organisation you represent. This processing includes activities essential for the execution of the contract, such as communication, managing business relationships, fulfilling contractual obligations, processing payments, and maintaining accurate business records.

Additionally, we process certain personal data based on our legitimate interests, particularly during the preliminary stages leading up to entering a contract. This includes processing professional data to assess your or your organisation’s business capabilities and suitability for a prospective business relationship.

3.2 Suppliers and Business Partners

Purposes and types of personal data processed

If you represent a supplier or business partner, we may collect and process, inter alia, the following types of personal data for the specified purposes stated below:

Personal identification information: We collect personal data such as your name, business address, shipping/billing address, email address, and phone number. This information allows us to communicate with you, manage our business relationship, and fulfil our contractual obligations.

Professional data: We may collect information related to your professional role, such as your job title, department, and the organisation you work for. This information helps us understand your role and responsibilities in our business relationship.

Transactional data: We collect information related to our business transactions with the organisation you represent, such as the products or services you supply to us, your payment details, and your payment history. This information allows us to manage our contracts, process payments, and maintain accurate business records.

Legal grounds

The primary legal ground for processing personal data of our suppliers and business partners is the performance of the contract between us and you or the organisation you represent. This processing includes activities essential for the execution of the contract, such as communication, managing business relationships, fulfilling contractual obligations, processing payments, and maintaining accurate business records.

Additionally, we process certain personal data based on our legitimate interests, particularly during the preliminary stages leading up to entering a contract. This includes processing professional data to assess your or your organisation’s business capabilities and suitability for a prospective business relationship.

3.3 Website Visitors

Purposes and types of personal data processed

If you visit our website (www.cellcolabsclinical.com), we may collect and process, inter alia, the following types of personal data for the specific purposes stated below:

Personal identification information: If you choose to provide it, we may collect personal data such as your name, email address, and phone number, for example, when you fill out a form to inquire about our products or services. This information allows us to respond to your inquiries and engage in further communication.

Technical data: When you visit our website and have allowed our use of cookies, we automatically collect certain technical data about your device and your interaction with our website. This includes your IP address, browser type and version, time zone setting and location, operating system and platform, and other technology on the devices you use to access our website. We use this information to ensure that our website functions properly on your device and to enhance and personalise your online experience.

Usage data: We collect information about how you use our website, such as the pages you view, the links you click, and other actions you take on our website. This helps us understand what parts of our website are most interesting and useful to our visitors, so we can improve our website and provide more relevant content.

Marketing and Communications data: This includes your preferences in receiving marketing from us and your communication preferences. This information allows us to engage with you in accordance with your preferences. If a form is submitted, you automatically opt in for data processing.

Legal grounds

The primary legal ground for processing the personal data of visitors to our website is either our legitimate interests or your consent.

If you provide us with your name, email address, or phone number, we process this information to communicate with you about your interest in our products or services. We also collect technical and usage data to make sure our website works as intended. These processing activities are based on our legitimate interests to respond to your inquiries, manage your cookie preferences and ensure that our website functions properly.

The processing of personal data for marketing purposes, as well as the utilisation of certain cookies and similar technologies on our website designed to enhance your online experience and understand how users interact with our site, necessitates your consent. Please note that you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

4. HOW LONG WE STORE YOUR PERSONAL DATA

Cellcolabs Clinical will store your personal data for as long as it is necessary to fulfil the purposes for which it was collected, or as required to satisfy any other legitimate purposes not incompatible with the original purpose of collection. We will delete personal data that is no longer required for these purposes. However, we may retain specific personal data to comply with legal and regulatory obligations, including any minimum retention periods mandated by law. Upon your request to unsubscribe from direct marketing or other informational communications, your personal data will cease to be processed for these specific purposes.

5. SAFETY MEASURES

We take reasonable and appropriate measures to safeguard your personal data against unauthorised access, disclosure, alteration, or destruction. To protect your personal data, we have implemented technical, administrative, and physical security measures, including encryption and the use of secure servers.

6. TRANSFER AND DISCLOSURE OF PERSONAL DATA

We may share your personal data with other organisations that process data on our behalf to perform our services. Where appropriate, we have entered into data processing agreements with such organisations to ensure that your personal data is processed securely and confidentially. Additionally, we may share your personal data with third parties who assist us in our marketing efforts. We strictly ensure that these third parties use the personal data solely to operate our services according to our instructions.

7. YOUR RIGHTS

The protection of your personal data is a fundamental right. In accordance with the GDPR, you are afforded specific rights that may be exercised under various circumstances. You are entitled to the rights listed in Sections 7.1–7.8, as detailed below.

7.1 Your right to access

You have the right to demand and receive confirmation on whether or not we process personal data which concerns you. If such personal data is being processed, you have the right to receive information regarding the processing and a copy, free of charge, of the personal data being processed. If you request additional copies, we are entitled to charge you a reasonable administrative fee.

7.2 Your right to rectification

You have the right to request rectification of your personal data if the information is incorrect, including the right to have incomplete personal data completed.

7.3 Your right to erasure (“right to be forgotten”)

You have the right to have your personal data erased without undue delay, and we are obligated to erase personal data in the following situations:

  • the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
  • the processing is based on your consent, and you withdraw that consent, unless there are any other legal grounds for the processing.
  • you object to the processing based on a weighing of interests and there are no overriding legitimate grounds for the processing (note however that you always have the right to erasure of your personal data used for direct marketing purposes);
  • the personal data has been unlawfully processed.

However, please note that the right to erasure does not apply in certain circumstances, such as when processing is necessary for compliance with a legal obligation under The Bahamas or EU law or the law of any Member State of the EU to which we are subject, or for the establishment, exercise, or defence of legal claims.

7.4 HIPAA Email Consent

HIPAA stands for the Health Insurance Portability and Accountability Act.

HIPAA was passed by the U.S. government in 1996 to establish privacy and security protections for health information.

Most popular email services (ex. Hotmail®, Gmail®, Yahoo®) do not utilize encrypted email.

When we send you an email, or you send us an email, the information that is sent is not encrypted. This means a third party may be able to access the information and read it since it is transmitted over the Internet. In addition, once the email is received by you, someone may be able to access your email account and read it..

Email is a very popular and convenient way to communicate for a lot of people, so in their latest modification to the HIPAA act, the federal government provided guidance on email and HIPAA.

The information is available in a pdf (page 5634) on the U.S. Department of Health and Human Services website

The guidelines state that if a patient has been made aware of the risks of unencrypted email, and that same patient provides consent to send and receive health information via email, then a health entity may send that patient personal medical information via unencrypted.

7.5 Your right to restriction

You have the right to restrict our processing of your personal data where one of the following applies:

  • the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the data.
  • the processing is unlawful, and you oppose the erasure of the personal data, requesting instead a restriction on its use.
  • we no longer need the personal data for the purposes of the processing, but you require the data for the establishment, exercise, or defence of legal claims; or
  • you have objected to the processing based on a weighing of interests, pending the verification of whether our legitimate grounds to process the data override yours.

A restriction on processing means that the personal data will continue to be stored but Cellcolabs Clinical will not process any personal data without your consent, except for the establishment, exercise, or defence of legal claims, or when the processing is necessary for the protection of the rights of another natural or legal person.

7.5 Your right to data portability

You have the right to request access to personal data that you have provided to Cellcolabs Clinical in a structured, generally used, and machine-readable format. Furthermore, you have the right to transmit this data to another controller, provided the processing is based on your consent or on the performance of a contract, and the processing is carried out by automated means. Where technically feasible, you have the right to have the personal data transmitted directly from Cellcolabs Clinical to another controller.

7.6 Your right to object

You have the right to object, at any time, to the processing of personal data which is based on a legitimate interest. Upon such an objection, Cellcolabs Clinical  will cease processing the personal data unless Cellcolabs Clinical  can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defence of legal claims.

Where personal data is processed for direct marketing purposes, you have the right to object at any time to such processing of personal data, and if you do so, we will no longer process your personal data for these purposes.

7.7 Your right to withdraw consent

If you have provided Cellcolabs Clinical consent, you may withdraw it at any time. When you withdraw your consent, the processing that the consent referred to will cease to occur and the personal data collected on the basis of your consent will be deleted, if the personal data is not needed for another purpose for which Cellcolabs Clinical has the right to process your personal data.

7.8 Your right to lodge a complaint with our data controller

For any inquires related to this Privacy Policy, to exercise any of your data protection rights, or if you have a compliant, please contact us using the details provided below in Section 7.8  

Should you have any questions or concerns regarding our privacy practices or this Privacy Policy, please do not hesitate to contact us at:

Cellcolabs Clinical

Ltd60 Montrose Avenue

P.O. Box N-9932

Nassau, New Providence, The Bahamas

Email: info@cellcolabsclinical.com

We will address your inquiries within the legally mandated timeframes, and in accordance with this Privacy Policy. As detailed in Section 7 above, please note that certain legal exemptions or limitations may apply to the exercise of your rights. Additionally, verification of your identity may be required prior to processing your request. If we are unable to comply with your request, we will explain the reasons for this and inform you of your options.