UPDATED: May 22, 2020
CDI Laboratories Inc. (“we” “us” or “our”) is committed to protecting and respecting your privacy. This policy (together with our Website Terms and Conditions and any other documents referred to on it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be used by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. For the purpose of the CAN SPAM Act 2003 (the “Act”) and from May 25 2018 the General Data Protection Regulation (“GDPR”) and all relevant legislation implementing the same (the “Data Protection Laws”), the data controller is CDI Laboratories Inc., 12 W Mendez Vigo Avenue, Mayaguez, Puerto Rico USA 00680.
We may collect and process personal data about you when providing our core services, for example:
We may also use your data for marketing and publicity purposes or to provide you with information about goods and services which may be of interest to you which we offer from time to time, and we may contact you about these. We will only do this where you have given us your consent. Where you have inquired about, or purchased products or services from us, we may contact you with details of our other products and services that we think may interest you. If you do not want us to use your data in the ways set out in this paragraph, or to pass your details on to third parties, please email us directly at [email protected]. Please see the relevant pages of our Website.
We will only hold your information for as long as is necessary for the purpose we have collected it for, plus a period of time to allow us to deal with any follow up issues that may arise. This will typically be for 6 years.
Typically, where we provide services to you, or you purchase goods from us, we will hold your information for the duration of our engagement or until the goods are received by you, and for a period of 6 years after the date that those goods or services are no longer offered by us to enable us to deal with any payment or follow up issues that may arise.
If you ask to register for updates from us, we will hold your information until you tell us that you no longer wish to be subscribed, or to receive our updates.
For the purposes of direct marketing by us information will be retained on our marketing database until we receive an opt-out from you or until we decide that there is no longer a ‘legitimate interest’ in retaining the information, for whatever reason.
We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is mainly statistical data about our users’ browsing actions and patterns, but some information may be personal data for the purposes of Data Protection Laws.
Cookies enable us to:
The data that we collect from you may be transferred to, and stored at, a destination outside the United States. It may also be processed by staff operating outside of the United States who work for us or for one of our suppliers. Such staff maybe engaged in, among other things, the fulfillment of your order, the processing of your payment details and the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing. This is also undertaken in our business interests in order to perform certain functions where we have appointed third party service providers.
Where we have given you (or where you have chosen) a username and password which enables you to access certain parts of our Website, you are responsible for keeping this username and password confidential. We ask that you do not share your username and password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Website. Any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access.
You have the right to ask us not to process your personal data for direct marketing purposes at any time. We will inform you before collecting your data if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes and seek your consent as appropriate. Please note that unless you consent to our use of your data for these purposes you can withdraw that consent whenever you wish.
We are obliged to ensure that the information we hold about you is accurate and up to date. You have a right to ensure that any inaccuracies in your personal data are corrected or removed by us. We will promptly correct any information found to be incorrect. You also have the right to require us to provide your personal data in a portable format, and in some circumstances, to ask us to erase it.
Where we have stated that we may use your personal data on the basis of ‘our legitimate interests,’ you have a right to object to us processing your information on this basis. You can also exercise any of your rights at any time by contacting us using the details set out below. You also have the right to raise any concerns about the way in which we handle your personal data with the Federal Trade Commission (FTC).
Under Data Protection Laws you have the right to access any personal data we hold about you. You can ask us to confirm if we are using any of your personal data, to give you a description of the data we are processing and/or to send you a copy of it. You can request this from us at any time by writing to: CDI Laboratories Inc., Request for information, P.O. Box 569, Mayaguez, PR 00681-0569