Acidophil LLC is a US Limited Liability Company with operations in Lutherville, Maryland, USA, and in Cambridge, UK through its wholly owned subsidiary Acidophil Ltd (a UK private limited company). This Policy applies to both entities, collectively referred to as Acidophil in this Policy.
Acidophil understands that your privacy is important to you and that you care about how your personal data is used and shared. We respect and value the privacy of everyone we interact with and will only collect and use personal data in ways that are described here, and in a manner that is consistent with US law and the EU General Data Protection Regulations (GDPR).
1. What Does This Policy Cover?
The purpose of this Policy is to inform you about the types of personal data we may collect about you and how we will use it, so that you can then make an informed choice about whether to provide us with your personal data. “Personal data” means any and all data that relates to an identifiable person who can be directly or indirectly identified from that data. In this case, it means personal data collected by Acidophil via business interactions or via our website at www.acidophil.com.
2. Your Rights
GDPR defines rights for data subjects (individuals to whom personal data relates), which this Policy and our use of personal data have been designed to uphold:
- The right to be informed about our collection and use of personal data (see sections 3 and 4);
- The right of access to the personal data we hold about you (see section 12);
- The right to rectification if any personal data we hold about you is inaccurate or incomplete. (We can be contacted about this using the details in section 14);
- The right to be forgotten – i.e. the right to ask us to delete any personal data we hold about you. (We only hold your personal data for a limited time, as explained in section 4 but if you would like us to delete it sooner, please contact us using the details in section 14);
- The right to restrict (i.e. prevent) the processing of your personal data;
- The right to data portability (obtaining a copy of your personal data to re-use with another service or organisation; see section 7);
- The right to object to us using your personal data for particular purposes; and
- Rights with respect to automated decision making and profiling (see section 8).
If you have any queries or complaints about the personal data we hold on you and how we use it, please contact us using the details provided in section 14 and we will do our best to solve the problem for you. If you are an EU subject, you also have the right to lodge a complaint with your nation’s supervisory authority; in the UK, this authority is the Information Commissioner’s Office ico.org.uk/.
For further information about your rights, please contact the Information Commissioner’s Office.
3. What Data Do We Collect?
We may collect some or all of the following personal data, including collection of data via Cookies (please also see section 13 on our use of Cookies):
- Personal data collected about users of our website
– Information collected from your use of our website. This includes: IP addresses, preferences, web pages you visited prior to coming to our or our users’ sites, information about your browser, network or device (such as browser type and version, operating system, internet service provider, preference settings, unique device IDs and language and other regional settings), information about how you interact with the Services and our users’ sites (such as timestamps, clicks, scrolling, browsing times, searches, transactions, referral pages, load times, and problems you may encounter, such as loading errors);
– Any personal data you provide via the Acidophil website Contact Us form, email or other communication to us, such as your name, email address, telephone number and any details provided to us as part of your enquiry. - Personal data collected as part of doing business
– Business/company name;
– Profession;
– Job title;
– Contact details, such as your name, email address, business and personal address and telephone number;
– CV/resume;
– Information for contractual or legal reasons. - Personal data collected about employees and job applicants
– Contact details, such as your name, email address, postal address and telephone number;
– Educational and professional background information;
– CV/resume;
– Previous and current employment details;
– Date of birth;
– Gender;
– Family information;
– Citizenship information;
– Information on who to contact in an emergency and contact details;
– National Insurance number;
– Social security number
– Payroll tax information;
– Citizenship information;
– Bank details.
4. How Do We Use Your Data?
- All personal data is processed and stored securely, for no longer than is necessary in light of the reason(s) for which it was first collected. We will comply with our obligations and safeguard your rights under the GDPR at all times. For more details on security see section 6, below.
- Our use of your personal data will always have a GDPR lawful basis. This will usually be because it is necessary for our performance of a contract with you, because you have consented to our use of your personal data, or because it is in our legitimate interests. Specifically, we may use your data for the following purposes:
– Responding to your requests, inquiries, comments or concerns;
– Supplying our products or services or doing business with you (please note that we require your personal data to enter into a contract with you);
– Personalising and tailoring our products, services and business for you;
– Replying to emails from you;
– Assessing you for employment.
If you no longer wish for us to process your personal data, please contact us on gdpr@acidophil.com.
5. How Long Do We Store Your Personal Data?
- We only keep your personal data for as long as we need to in order to use it as described above in section 4, and/or for as long as we have your permission to keep it, as described in our Data Retention Policy.
- To see a full copy of our Data Retention Policy please contact gdpr@acidophil.com.
Type of Personal Data |
Retention Period or Criteria |
Review Period |
Comments |
Business Contact
|
As long as Acidophil maintains a legitimate business interest in interacting with the business contactor as long as allowed by the individual. | ||
Customer Personal Data |
As long as Acidophil maintains a legitimate business interest in interacting with the customer, or as long as allowed by the individual. | Yearly | |
Employee Records |
Duration of employment plus 6 years. | Yearly | Data such as employees’ personal records, performance appraisals, employment contracts, etc. |
Employee Payroll Data |
6 years | Yearly | Data relating to PAYE, maternity pay or SMP (statutory mandatory pay). |
Recruitment Details |
1 year | Yearly | Unsuccessful Applicants. |
Health and Safety |
7 years | Yearly |
To see a full copy of our Data Retention Policy please contact gdpr@acidophil.com.
6. How and Where Do We Store Your Personal Data?
- We use data hosting service providers and company computers to store personal data outside of the European Economic Area (“the EEA”). (The EEA consists of all EU member states, plus Norway, Iceland, and Liechtenstein). We do this because some of our operations which process personal data are based outside of the EEA. We take all reasonable steps to ensure that your data is treated as safely and securely as it would be within the EEA and under the GDPR.
- Data security is very important to us, and to protect your data we have taken suitable measures to safeguard and secure data we have collected.
- Steps we take to secure and protect your data include:
– Restricted sharing and access to data;
– Secure storage and transmission systems;
– Secure deletion and disposal;
– Awareness of data protection and security policies and procedures by employees, agents, contractors and other parties working for or on behalf of the Company.
7. About Data Portability
- Personal data provided in response to requests for data portability can be delivered in commonly used machine readable formats.
8. Automated decision making and profiling
- We do not perform automated decision making using personal data or carry out profiling using personal data.
9. Do We Share Your Data?
- We will not share any of your personal data with any third parties, except for the purposes outlined in sections 9 and 10.
- In certain circumstances, we may be legally required to share certain data held by us, which may include your personal data, for example, where we are involved in legal proceedings, where we are complying with legal obligations, a court order, or a governmental authority.
10. What Happens If Our Business Changes Hands?
- We may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of some or all of our business, where it is relevant to the part of our business that is being transferred. Any personal data that you have provided to the company will be transferred along with that part and the new owner or newly controlling party will, under the terms of this Privacy Policy, be permitted to use that data only for the same purposes for which it was originally collected by us.
- In the event that any of your data is transferred in such a manner, you will be contacted and informed of the changes.
11. Your Right to Withhold Information
- You may restrict your use of Cookies. For more information, see section 13.
- You may access our website without providing any data at all.
12. How Can You Access Your Data?
You have the right to ask for a copy of any of your personal data held by us (where such data is held). There is no fee is payable and we will provide any and all information in response to your request. Please contact us for further information, or for a Subject Access Request Form using the contact details below in section 14.
13. Our Use of Cookies
- Cookies are small text files that are placed on your computer, smartphone or other device when you access the internet.
- Our website may place and access certain first party Cookies on your computer or device. First party Cookies are those placed directly by us and are used only by us. We use Cookies to facilitate and improve your experience of our website and to provide and improve our products and services. We have carefully chosen these Cookies and have taken steps to ensure that your privacy and personal data is protected and respected at all times.
- All Cookies used by and on our website are used in accordance with current Cookie Law.
- An individual can choose to accept or decline cookies and you can choose to enable or disable Cookies in your internet browser. Most internet browsers also enable you to choose whether you wish to disable all Cookies or only third-party Cookies. By default, most internet browsers accept Cookies but this can be changed. For further details, please consult the help menu in your internet browser or seek systems/software support assistance elsewhere.
- It is recommended that you keep your internet browser and operating system up-to-date and that you consult the help and guidance provided by the developer of your internet browser and manufacturer of your computer or device if you are unsure about adjusting your privacy settings.
14. Contacting Us
If you have any questions about our website or this Privacy Policy, please contact us by email at gdpr@acidophil.com, or by post to Acidophil LLC, 10751 Falls Road, Suite 300, Lutherville, MD 21093, USA or Acidophil Ltd, 20 Station Road, Suite 103, Cambridge, CB1 2JD, United Kingdom.
15. Changes to Our Privacy Policy
We may change this Privacy Policy from time to time (for example, if the law changes). Any changes will be immediately posted on our website and those using our website will be deemed to have accepted the terms of the Privacy Policy on their first use of our website following the alterations.
We recommend that all individuals who share personal data with the Company check our Privacy Policy via www.acidophil.com regularly to keep up-to-date.