Privacy Policy

Last Updated: July 31, 2026

If you are based in China, please refer to the Privacy Policy in Chinese.

BioDuro LLC (“BioDuro,” “Sundia,” “BioDuro-Sundia,” “we,” “our,” and “us”) is committed to protecting individual privacy and maintaining trust with our business clients(“Clients”), prospective clients, suppliers, other business partners, and others with whom we do business (“Business Partners”), and anyone who uses or interacts with our website (“End Users”). This Privacy Policy (“Policy”) describes how we collect and use Personal Information (defined below) on and offline, including across our website – www.bioduro.com (the “Site”) and as part of our business activities and services (“Services”). This Policy does not apply to our collection of applicant and employee Personal Information, all of which may be governed by separate privacy policies.

If you are a California resident, please see additional information about our collection and use of your Personal Information, and your rights, in Additional Information for California Residents.

If you are residing in the European Economic Area (EEA) or the UK, please see additional information about our collection and use of your Personal Information, and your rights, in Additional Information for Individuals Located in the European Economic Area (EEA) or United Kingdom (UK).

Note that if you are a participant in a clinical study managed by one of our Clients we do not receive your Personal Information from our Client. Therefore, if you have questions or requests regarding your Personal Information you should direct these according to what our Client has indicated in the relevant privacy statement you received in connection with your participation in the clinical study.

Information We Collect
Purposes for Which We Use Personal Information
How We Disclose Information
Our Use of Cookies
Do Not Track
Information Regarding Children
Your Privacy Rights
Legal Disclaimers
Links
Updates to This Policy
Contact Us
Additional Information for California Residents
Additional Information for Individuals Located in the European Economic Area (EEA) and United Kingdom (UK)

1. Information We Collect

We collect information that identifies, describes, or is reasonably capable of being associated with an individual, or is otherwise defined as personal information or personal data under applicable law, (“Personal Information”). We collect and use different types of Personal Information for various reasons depending on how Clients, Business Partners and End Users interact with us or use our Site or Services. The following describes the types of Personal Information we collect.

Personal Information We Collect Directly

We may collect Personal Information directly from Clients, Business Partners and End Users. The Personal Information we collect includes:

Contact Information. We collect information such as first and last name, business email address, company, job title. business phone number, fax number, employer/company, location (city, state, country), referral source, and areas of interest, through our Services and Site, at events, and Including when you submit forms, register for events, request information, or otherwise interact with us.

Message Contents. If a Client, Business Partner or End User sends us messages, such as through our Site or via email, we also collect message contents, including responses to open ended or multiple-choice questions, and any other information Clients, Business Partners or End Users may choose to provide.

Personal Information We Collect from Others

We may collect Personal Information from affiliates and subsidiaries; business partners; vendors and service providers; webinar providers, event organizers, and prospective client enrichment services; publicly available sources; Internet service providers; operating systems and platforms; social networks; data analytics providers; and other entities both within and outside the BioDuro group.

Personal Information Collected Passively or Automatically

We may automatically collect the following Personal Information from or about End Users who visit our Site:

Device Identifiers. When End Users visit our Site, we may automatically collect information such as IP address, unique device identifiers, operating system, and other information related to the device used to interact with our Clients via the Site.

Network and Activity Information. We may collect information related to how End Users interact with our Site, such as referring and exit web pages and URLs, browsing history, clickstream data, search history, and information regarding a Site visitor’s interaction with an internet website, application, or advertisement. and other similar information. As described below in the “Our Use of Cookies” section, we may use analytics providers and technologies, including cookies and similar tools, to collect this information.

To the extent permitted by applicable law, we may combine this information with other information we collect, including End Users’ Personal Information.

If we request your Personal Information and you do not provide it to us, we may not be able to comply with a request you make, such as a request for information.

2. Purposes for Which We Use Personal Information

We may use the Personal Information we collect for the following purposes:

Operate Our Business. We may use Personal Information to communicate with End Users, send newsletters, respond to inquiries regarding our Services, and to otherwise run our day-to-day operations such as to solicit offers; respond to bids, proposals, quotations and other business opportunities, manage relationships and contracts with Clients and Business Partners; maintain contact and account records; route inquiries to the appropriate business development representative based on the individual’s location or selected area of interest; schedule meetings; follow up on inquiries received through the website, webinars, conferences and trade shows; manage ongoing client and business-partner communications and service requests, and similar purposes. When we collect Personal Information from Clients, Business Partners and End Users as part of their use of our Services, we use the Personal Information to ensure our development and manufacturing operations align with Client expectations and requests.

Marketing. We may use Personal Information to market our Services; send newsletters, service updates, webinar and event invitations and other promotional communications; understand prospective clients’ interests and engagement with our services; follow up with individuals who attend events, submit website forms or download resources; segment contacts based on company, job title, location, areas of interest and engagement; deliver and measure targeted or retargeted advertising through platforms such as Google Ads and LinkedIn Ads and similar purposes.

Conduct Surveys. We use Personal Information we collect to conduct surveys, such as Client satisfaction surveys and market surveys.

Augment Existing Information. We may use Personal Information to obtain additional information from our vendors or other third parties.

Evaluate and Improve Our Site and Services. We may use the Personal Information we collect to evaluate and improve our Site and improve how we communicate regarding our Services.

Security Purposes. We may use Personal Information to mitigate fraud and protect BioDuro, our Clients, End Users, employees and other stakeholders.

Business Transfers. We may use Personal Information to plan or effect a business transfer, such as a potential or actual acquisition, merger, investment, asset or business sale, dissolution, reorganization, bankruptcy or insolvency proceeding or otherwise.

Exercise Legal Rights. We may use Personal Information to establish, exercise and defend our rights, and protect the interests of our business, our Clients, Business Partners, End Users, employees or other stakeholders.

Legal Requirements. We may use Personal Information to comply with lawful court orders, law enforcement requests, or other legal requirements.

Other Purposes. We may use Personal Information for purposes not provided for in this Policy, but if we do, we will notify the Client, Business Partner or End User (and, if necessary, obtain consent) before using the Personal Information in that way.

3. How We Disclose Information

We may disclose Personal Information to the following parties:

Service Providers. We disclose information we collect to service providers, vendors, contractors, or agents who perform functions on our behalf. This includes entities that host the BioDuro Site, provide marketing and direct mailing services on our behalf, assist with our research, development, and manufacturing activities on our Clients’ behalf, and assist us in performing other duties necessary to operate our business, including delivering our Site and Services.

Clients and Business Partners. We disclose information we collect to our Clients and Business Partners as necessary to deliver our Services, and professional advisors and agents.

Affiliates. We disclose the information we collect to our affiliates or subsidiaries.

We also may disclose Personal Information in the following circumstances:

Upon Request. We may disclose information to others when requested, explicitly or implicitly, by a Client, Business Partner or End User.

Business Transfers. If (i) we or our affiliates are or may be acquired by, merged with, or invested in by another company, or dissolved, or (ii) if any of our shares or assets or a business are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may transfer the information we have collected from Clients, Business Partners and End Users to the other company. As part of the business transfer process, we may share certain Personal Information with lenders, auditors, and advisors, including attorneys and consultants.

In Response to Legal Process or to Exercise Legal Rights. We disclose Personal Information to comply with the law, a judicial proceeding, court order, or other legal process (including to establish, exercise or defend legal rights), such as in response to a court order or a subpoena, or in the context of legal proceedings, to regulators, government entities, law enforcement, professional advisors.

With Permission. We may disclose Personal Information in ways not described above. If we do so, we will notify relevant Clients, Business Partners and End Users, and if necessary, obtain consent.

Third parties. Third party advertising networks and analytics providers for purposes of marketing and advertising as further described below, “Our Use of Cookies”.

4. Our Use of Cookies
Our Site uses tracking tools (“cookies”), some provided by third parties, to collect information about you online, including IP Address, browser and device information, interactions, and other usage and activity data. Some of these technologies are “necessary” for our site to function properly. Others may be used to enable third-party features and functionality, such as social media and chat, analyze traffic and usage, record user sessions, detect and remember user settings, personalize experiences, and measure and target content and ads, both on this site and on third party sites.

Cookies. A cookie is a small piece of text that is placed on your device’s browser when you visit a website. These include our own first-party cookies as well as third-party cookies of our service providers and partners. Some cookies are only stored temporarily and are destroyed each time you close your web browser. We also use persistent cookies, which do not delete when you close your browser and may collect and store data for a set period of time after leaving our platform. Cookies help us to provide you with a custom experience when you use the Site or Services and also allows us to improve the Site and Services. We also measure certain traffic patterns, which areas of our Site you have visited, and your visiting patterns. We use this research to understand how our users’ habits are similar or different from one another so that we can customize experiences on the Site.

Pixel Tags. Pixel tags (sometimes called web beacons or clear GIFs) are tiny graphics with a unique identifier, similar in function to cookies. While cookies are stored locally on your device, pixel tags are embedded invisibly within web pages and online content. We may use these, in connection with our Services to, among other things, track the activities of users, and help us manage content and compile usage statistics. We may also use these in our emails to let us know when they have been opened or forwarded, so we can track response rates and gauge the effectiveness of our communications.

Local Storage Objects. Local storage is a web storage mechanism that allows us to store data on a browser that persists even after the browser window is closed. Local storage may be used by our web servers to cache certain information in order enable faster loading of pages and content when you return to our Services. You can clear data stored in local storage through your browser. Please consult your browser help menu for more information.

Software Development Kits (SDKs). We may use third-party software development kits (“SDKs”) in our Site. An SDK is a collection of software tools and resources third party developers often use to build applications for specific platforms. SDKs allow us, our service providers, and third-party partners to collect information about your device and usage patterns. We use SDKs to, for example, add features or functionality to our Site, provide us with analytics regarding your use of our Site, to integrate with social media, or to facilitate advertising.

Third-Party Analytics and Tools. We use third party analytics tools, such as Google Analytics, and Salesforce trackers, which are operated by third party companies. These third-party analytics companies may use cookies, pixels, and other similar tools to collect usage data about our Services in order to provide us with reports and metrics that help us evaluate usage of our Services and improve performance and user experiences. Salesforce trackers may associate website visits, form submissions, areas of interest and other engagement activity with a prospective client or contact record.

To learn more about Google’s privacy practices, please review the Google Privacy Policy at https://www.google.com/policies/privacy/partners/. You can also download the Google Analytics Opt-out Browser Add-on to prevent your data from being used by Google Analytics at https://tools.google.com/dlpage/gaoptout.

Third-Party Advertising. We work with third parties (including Google and LinkedIn), such as ad networks, analytics, marketing partners, and others (“third-party ad companies”) to personalize content and display advertising within our Services, as well as to manage our advertising on third-party sites. We and these third-party ad companies may use cookies, pixels tags, and other tools to collect usage data and device data within our Services (as well as on third-party sites and services), as well as IP address, unique ID, cookie and advertising IDs, and other online identifiers. We and these third-party ad companies may use this information to provide you more relevant ads and content within our Services and on third-party sites, and to evaluate the success of such ads and content. To learn more about Google’s privacy practices, please review the Google Privacy Policy at https://www.google.com/policies/privacy/partners/.

How We Use Cookies

We use cookies for the following purposes and collect the following information:

Necessary cookies. These cookies are necessary for the site to function properly and securely and cannot be switched off using this cookie preferences center. They enable us to, among other things, distribute traffic, detect and prevent fraud and misuse, secure and operate our online services, facilitate secure logins, and store your cookie preferences.
Performance cookies. These cookies collect information about how you use this site and our other online services so we can measure and improve the performance of our site. We also use these cookies to tailor content and information to you and otherwise personalize your experiences while interacting with our site and online services, and to otherwise improve the functionality of the site. Some Performance cookies are managed for us by third parties.
Functionality cookies. These cookies enable this site and our other online services and third parties we work with to provide enhanced functionality and personalization. They may be set by us or by third-party providers, including those whose services we have added to our sites. For example, we use these cookies to remember settings you have applied, such as language preference, to provide and show embedded videos and content, and to make available certain other features.
Targeting and Social Media cookies. These cookies enable us and third parties to deliver relevant advertising and content to you on this site and on third-party websites, platforms, and online services, and to measure and improve our marketing efforts. They record data about your online activities, which may be combined with information collected across third-party sites, and allow third-party companies to track your activity to understand your interests and serve more relevant ads on our behalf and on behalf of others. If you do not allow these cookies, you will still see ads, but they may be less relevant to you.

How to Manage Cookies

Depending on your location when you visit our Site, you may have the option to opt into, or opt out of, the setting of cookies on your device, and you may have the option of adjusting the use of certain types of cookies on the site. Cookies that are “Necessary” cannot be adjusted as those Cookies are strictly necessary for providing a safe and secure site consistent with your requests. Click the floating cookie icon on any of our webpages to adjust cookies on your device. If you are a California resident, see additional information below at Additional Information for California Residents.

If you wish to prevent cookies from tracking your activity on our Site or visits across multiple websites, you can set your browser to block certain cookies or notify you when a cookie is set; you can also delete cookies. The “Help” portion of the toolbar on most browsers will tell you how to prevent your device from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to delete cookies. Visitors to our Site who disable cookies will be able to browse the Sites, but some features may not function.

You can also control how participating third-party ad companies use the information that they collect about your visits to our Sites and use of our mobile applications, and those of third parties, in order to display more relevant targeted advertising to you. If you are in the U.S., you can obtain more information and opt out of receiving targeted ads from participating third-party ad networks at aboutads.info/choices (Digital Advertising Alliance).

You may also download the DAA AppChoices tool in order to help control interest-based advertising on apps on your mobile device: https://youradchoices.com/appchoices

Information for website users in Europe is available here: Your Online Choices | EDAA

We are not responsible for the completeness, effectiveness, or accuracy of any third-party opt-out options or programs.

5. Do Not Track
Some web browsers and mobile operating systems offer a “Do Not Track” setting you can activate to signal your preference not to have data about your online browsing activities monitored and collected. Currently, our site does not recognize “Do-Not-Track” requests.

6. Information Regarding Children
We do not knowingly collect Personal Information from persons under the age of eighteen (18). If we become aware that we have collected information from a child under 18 years old, we will delete such information from our records. If you are a parent or legal guardian and believe your child has given us information and you did not provide consent, please contact using the information provided in the “Contact Us” section below.

7. Your Privacy Rights
Depending on where they are located, Clients and End Users may have certain rights regarding their Personal Information. Please note End User’s rights are generally exercisable against BioDuro’s Clients and not against BioDuro because BioDuro is acting as a service provider to our Clients.

End Users who have questions or concerns about the data handling practices of our Clients or who wish to exercise privacy rights should contact the relevant Client directly. Where necessary, BioDuro will assist our Clients with an exercise of a privacy right by an End User.

Where BioDuro collects Personal Information for its own purposes, Clients, Business Partners and End Users may have the right to request the following:

Request Access. The right to request access to, and a copy of, Personal Information we have collected. This may also include the right to know the categories of Personal Information collected, the sources from which we have collected Personal Information, our business purposes, the categories of third-parties to whom we have disclosed Personal Information and other information provided by applicable law.

Right to Correct. The right to request we correct inaccurate Personal Information.

Right to Delete. Subject to certain conditions and exceptions, the right to request we delete Personal Information.

Right to Opt-Out/Object. The right to opt-out of (object to) our use of Personal Information for marketing and advertising purposes, including profiling.

If you would like to exercise your privacy rights, please contact us through our Privacy Request Form or at privacy@bioduro.com.

Verification. Before we comply with your request, we may need to verify your identity. Please provide us with your name, the email address with which you have communicated with us in the past, and, if applicable, the name of the Client or vendor on whose behalf you interacted with us. In some cases, we may need to request additional information to verify your identity. If we cannot verify your identity after a good faith attempt, we may deny your request and will explain the basis for the denial.

8. Legal Disclaimers
Subject to applicable law, nothing in this Policy restricts our ability to:

Comply with federal, state, or local laws;
Comply with a civil, criminal, or regulatory inquiry, investigation, subpoena, or summons by federal, state, or local authorities;
Cooperate with law enforcement agencies concerning conduct or activity that we reasonably and in good faith believe may violate federal, state, or local law;
Exercise or defend legal claims;
Detect security incidents and protect against fraudulent or illegal activity and prosecute those responsible for such activity;
Transfer Personal Information as part of a merger or acquisition, dissolution, bankruptcy, or any other transaction in which a third party assumes control of all or part of our business.

9. Links

Our Site may contain links to unaffiliated websites. Any access to and use of such linked websites is not governed by this Policy, but instead is governed by the privacy policies of those websites. We are not responsible for the information practices of such websites.

10. Updates to This Policy

This Policy is current as of the last updated date given above. We may change this Policy from time to time, so please be sure to check back periodically. Where we make changes to this Policy that materially impact the use of Personal Information we will attempt to notify End Users, such as via email or by placing a notice on our homepage.

11. Contact Us

If you have questions about this Policy, our internal data handling practices, or would like to make a complaint, please contact us at:

Email: Privacy@bioduro.com

12. Additional Information for California Residents

This section of our Policy provides additional information about how we handle Personal Information of California residents, as required under the California Consumer Privacy Act and its implementing regulations, each as amended (the “CCPA”). In general, this section applies to California residents whose Personal Information we collect in connection with our business activities, including through our Site, Services, and other online and offline interactions.

Categories of Personal Information We Collect

Below, we identify the categories of Personal Information we may collect about you (and may have collected in the prior 12 months), as defined by the CCPA. We may disclose each category of Personal Information we collect to a service provider or contractor for a business purpose.

Categories of Personal Information

Identifiers, such as a real name, address, unique personal identifier, online identifier, Internet Protocol (IP) address, email address

Internet or other electronic network activity information, including, but not limited to, IP address, unique device identifiers, operating system, exit web pages and URLs, browsing history, clickstream data, search history, and information regarding a resident’s interaction with an internet website, application, or advertisement.

Professional or employment-related information such as first and last name, business email address, business phone number, employer/company, job title, business location (city/state/country), referral source, areas of interest.

Electronic information such as message contents when a Client, Business Partner or End User sends us messages, such as through our Site or via email.

Personal information described in Cal. Civ. Code § 1798.80(e), such as phone number and employment.

Inferences drawn from the categories of Personal Information listed above to understand individual preferences such as by potential client scoring based on online engagement, area of interest.

Disclosures to Recipients

We may disclose the above categories of Personal Information to the following categories of recipients: service providers; vendors; third-party advertising networks and analytics providers for purposes of marketing and advertising; contractors; agents; Clients; Business Partners, professional advisors, regulators, government entities, law enforcement, and affiliates and subsidiaries.

Sources of Personal Information

We collect Personal Information about individuals (including California residents) both directly or indirectly from them, and from affiliates and subsidiaries; business partners; vendors and service providers; webinar providers, event organizers, and prospective client enrichment services; publicly available sources; Internet service providers; operating systems and platforms; social networks; data analytics providers; or other entities both within and outside the BioDuro group.

How We Use Personal Information

We may use the Personal Information we collect for the following business or commercial purposes (and any directly related purposes) as further described in the Purposes for Which We Use Personal Information section above:

Operate our business
Conduct surveys
Augment existing information
Evaluate and improve our site and services
Security purposes
Business transfers
Exercise legal rights
Legal requirements
Other purposes

Sales and Sharing of Personal Information. The CCPA defines “sale” as disclosing or making available Personal Information to a third party in exchange for monetary or other valuable consideration, and “sharing” includes disclosing or making available Personal Information to a third party for purposes of cross-contextual behavioral advertising.

While we do not disclose Personal Information to third parties in exchange for monetary compensation, we may be considered as “selling” or “sharing” Personal Information under the CCPA because of our use of third-party ad or analytics cookies and other tools. We “sell” or “share” the following categories of Personal Information: identifiers and Internet or other electronic network activity information. We disclose these categories to third-party advertising networks and analytics providers for purposes of marketing and advertising. We do not sell or share sensitive Personal Information or Personal Information about individuals we know are under the age of 16.

Sensitive Personal Information

Notwithstanding the purposes described above, we do not collect, use, or disclose “sensitive personal information” beyond the purposes authorized by applicable privacy law. Accordingly, we only use and disclose sensitive personal information as reasonably necessary and proportionate: (i) to perform our services requested by you; (ii) to help ensure security and integrity, including to prevent, detect, and investigate security incidents; (iii) to detect, prevent and respond to malicious, fraudulent, deceptive, or illegal conduct; (iv) to verify or maintain the quality and safety of our services; (v) for compliance with our legal obligations; (vi) to our service providers who perform services on our behalf; and (vii) for purposes other than inferring characteristics about you.

Retention Of Personal Information

We retain the Personal Information we collect only as reasonably necessary for the purposes described in this Policy, or otherwise disclosed to you at the time of collection. For example, we will retain certain identifiers for as long as it is necessary to comply with our accounting and recordkeeping obligations, to provide our Clients and End Users with Services, and for research, development, and safety purposes, plus an additional period of time as necessary to protect, defend, or establish our rights, defend against potential claims, and to comply with our legal obligations.

Deidentification Of Personal Information

Occasionally, we may deidentify or aggregate Personal Information and use the deidentified or aggregated information for our internal purposes. We commit to maintaining and using this information in deidentified form and will not attempt to reidentify the information except to determine whether our deidentification process is effective.

California Rights Regarding Personal Information

The CCPA provides California residents with specific rights regarding Personal Information. California residents may have the following rights subject to certain limitations and exceptions:

Request Access. The right to request access to, and a copy of, Personal Information we have collected. This may also include the right to know the categories of Personal Information collected, the sources from which we have collected Personal Information, our business or commercial purposes for collecting, selling, or sharing Personal Information, the specific pieces of Personal Information we have collected, the categories of third parties to whom we have disclosed, sold, or shared Personal Information, and other information provided by applicable law.

Right to Correct. The right to request we correct inaccurate Personal Information.

Right to Delete. Subject to certain conditions and exceptions, the right to request we delete Personal Information.

Right to Opt-Out of Sale/Sharing of Personal Information. To opt out of “selling” or “sharing” Personal Information under the CCPA.

Right to Limit the Use and Disclosure of Sensitive Personal Information. We do not collect any sensitive Personal Information and therefore do not engage in uses of this type of information that would trigger this right under the CCPA.

Right to Non-Retaliation. We will not retaliate against you for exercising any rights described in this Policy.

Exercising Your Rights

Right to Know/Access, Delete, and Correct. You may exercise these rights by contacting us at privacy@bioduro.com or using our Privacy Request Form.

Right to Opt-Out of Sale/Sharing. You may exercise your right to opt-out of the “sale” or “sharing” of your Personal Information via our cookie preference manager. We will apply your opt out based upon the Personal Information in our records that is linked or reasonably linkable to the information provided in your request. You may also click the “Your Privacy Choices ” link at the bottom of our Site.

In addition, if we detect that your browser or device is transmitting an opt-out preference signal, such as the “global privacy control” or (“GPC”) signal, we will opt that browser or device out of cookies that result in a “sale” or “sharing” of your Personal Information. If you come to our Site or use our Services from a different device or from a different browser on the same device, you will need to opt-out, or use an opt-out preference signal, for that browser and/or device as well. More information about GPC is available at Global Privacy Control.

California Shine the Light Law. Under California’s “Shine the Light” law (Cal. Civ. Code § 1798.83), California residents who provide us certain personal information are entitled to request and obtain from us, free of charge, information about the personal information (if any) we have shared with third parties for their own direct marketing use. Such requests may be made once per calendar year for information about any relevant third-party sharing in the prior calendar year. To submit a “Shine the Light” request, email us at legal@bioduro.com, and include in your request a current California address and your attestation that you are a California resident.

13. Additional Information for Individuals Located in the European Economic Area (EEA) or United Kingdom (UK)

This section of our Policy provides additional information about how we handle Personal Information of individuals located in the EEA or UK. In general, this section applies to employees of our Clients and Business Partners who are located in the EEA or UK, as well as any visitors to our Site from the EEA or UK.

Controller

The controller of your Personal Information is BioDuro LLC, with offices at 9601 Jeronimo Road, Suite A, Irvine, CA 92618, USA. You may reach our EU representative by contacting EURep@bioduro.com. You may reach our UK representative by contacting UKRep@bioduro.com.

Legal Bases for Processing

We rely on one of several different legal bases to process your Personal Information, as follows:

Necessary for Performance of a Contract. We use Personal Information to take steps necessary to perform our contractual obligations with you.

For our Legitimate Interests. We use Personal Information to further our legitimate interests provided those interests are not overridden by your fundamental rights, freedoms and interests. With respect to Personal Information processing that is governed by UK law, our legitimate interests may be considered ‘recognized legitimate interests’ where necessary processing is in the public interest.

Based on Compliance with EEA/UK Law. We use Personal Information to comply with legal obligations to which we are subject.

Based on Consent. Where we have obtained consent, we use Personal Information with Client, Business Partner or End User consent. For example, we may use Personal Information to send marketing communications or newsletters based on consent. If we rely on your consent, you are entitled to withdraw consent at any time.

The relevant legal basis and category of Personal Information for each purpose of processing is set out below:

Purpose: Operate Our Business. We use Personal Information we collect via the Site to communicate with End Users, send newsletters, respond to inquiries regarding our Services, and to otherwise run our day-to-day operations by soliciting offers; responding to bids, proposals, quotations and other business opportunities, managing relationships and contracts with Clients and Business Partners; maintaining contact and account records; route inquiries to the appropriate business development representative based on the individual’s location or selected area of interest; scheduling meetings; following up on inquiries received through the website, webinars, conferences and trade shows; and managing ongoing client and business-partner communications and service requests. When we collect Personal Information from End Users as part of their use of our Services, we use the Personal Information to ensure our development and manufacturing operations align with Client expectations and requests. Legal Basis: Our legitimate interests in developing our business by performing Client contracts, responding to Client requests and communicating about our offerings. Categories of Personal Information: Contact Information, Message Contents, Device Identifiers.

Purpose: Marketing. We use Personal Information to market our Services; send newsletters, service updates, webinar and event invitations and other promotional communications; understand prospective clients’ interests and engagement with our services; follow up with individuals who attend events, submit website forms or download resources; segment contacts based on company, job title, location, areas of interest and engagement; and deliver and measure targeted or retargeted advertising through platforms such as Google Ads and LinkedIn Ads. Legal Basis: Consent, where required by law or if we otherwise obtain your consent to market, target or use cookies/trackers. In all other cases, our legitimate interests in promoting our Services to grow our business and profitability. Categories of Personal Information: Contact Information, Device Identifiers.

Purpose: Conduct Surveys. We use Personal Information we collect to conduct surveys, such as Client satisfaction surveys and market surveys. Legal Basis: Our legitimate interests in developing our business by understanding Client and market needs in order to develop offerings meeting those needs. Categories of Personal Information: Contact Information, Message Contents, Device Identifiers.

Purpose: Augment Existing Information. We may use Personal Information to obtain additional information from our vendors or other third parties, including webinar providers, event organizers, prospective client enrichment services, business partners, and publicly available sources, in order to maintain accurate records, communicate about our services, and support our marketing and business development activities. Legal Basis: Our legitimate interests in developing our business by promoting our Services. Categories of Personal Information: name, business email address, business phone number, company, job title, business location (city/state/country), referral source, and areas of interest.

Purpose: Evaluate and Improve Our Site and Services. We may use the Personal Information we collect to evaluate and improve our Site and improve how we communicate regarding our Services. Legal Basis: Our legitimate interests in developing our business by improving Services on the Site and communicating about our offerings. Categories of Personal Information: Contact Information, Message Contents, Device Identifiers, Network and Activity Information.

Purpose: Security. We may use Personal Information to mitigate fraud and protect BioDuro, our Clients, End Users, employees and other stakeholders. Legal Basis: Our legitimate interests in protecting our business operations and therefore our reputation, including with current and potential Clients. Categories of Personal Information: Contact Information, Message Contents, Device Identifiers, Network and Activity Information.

Purpose: Business Transfers. We may use Personal Information to plan or effect a business transfer, such as a potential or actual acquisition, merger, investment, asset or business sale, dissolution, reorganization, bankruptcy or insolvency proceeding or otherwise. Legal Basis: Our legitimate interests in efficiently organizing our business operations and thereby improving our profitability. Categories of Personal Information: Contact Information, Message Contents.

Purpose: Exercise Legal Rights. We may use Personal Information to establish, exercise and defend our rights, and protect the interests of our business, our Clients, Business Partners, End Users, employees or other stakeholders. Legal Basis: Our legitimate interests in protecting our business operations by defending our rights and those of stakeholders, including employees and Clients. Categories of Personal Information: Contact Information, Message Contents, Device Identifiers, Network and Activity Information.

Purpose: Legal Requirements. We may use Personal Information to comply with lawful court orders, law enforcement requests, or other legal requirements. Legal Basis: Our legal obligations, if we are subject to EEA or UK law. Otherwise, our legitimate interests in protecting our business integrity and reputation by complying with all laws applicable to us. Categories of Personal Information: Contact Information, Message Contents, Device Identifiers, Network and Activity Information.

Retention Of Personal Information

Rights Regarding Personal Information

EEA and UK law provides individuals located in those regions with specific rights regarding Personal Information:

Right of Access. The right to obtain confirmation as to whether we are processing Personal Information about you, and if so, to request a copy of the Personal Information, as well as the right to obtain information about the processing of such Personal Information.

Right to Correction. The right to correct any inaccuracies in the Personal Information that we hold and, where applicable, to complete any incomplete Personal Information that we hold.

Right to Erasure. The right, in some circumstances, to require us to erase Personal Information. The right to erasure does not apply in certain circumstances, including where the processing is necessary for the establishment, exercise, or defense of legal claims.

Right to Restrict Use of Personal Information. The right to restrict our use of Personal Information where (i) you contest the accuracy of the Personal Information; (ii) the use is unlawful, but you do not want us to erase the Personal Information; (iii) we no longer need the Personal Information for the relevant purposes, but you require it for the establishment, exercise, or defense of legal claims; or (iv) you have objected to our Personal Information use justified on where we need to process the Personal Information for the establishment, exercise or defense of legal claims.

Right to Withdraw Consent. If we process your Personal Information on the basis of your consent, you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Right to Data Portability. If we rely upon your consent as the legal basis for processing, or where processing is necessary to perform a contract to which you are party or to take steps at your request prior to entering a contract, and the Personal Information is processed by automated means, you have the right to receive all such Personal Information which you have provided to us in a structured, commonly used and machine-readable format, and also to require us to transmit it to another controller where this is technically feasible.

Right to Object to Processing Justified on Legitimate Interest or for Direct Marketing. Where we are relying upon legitimate interests to process Personal Information, you have the right to object to that processing based on grounds related to your particular situation. If you object, we must stop that processing unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or we need to process the Personal Information for the establishment, exercise or defense of legal claims. You may also object at any time to our processing of your Personal Information for direct marketing purposes, which includes profiling to the extent that it is related to such direct marketing.

Right to Lodge a Complaint with an Authority. You have the right to lodge a complaint with a supervisory authority if you believe our use of Personal Information infringes this Policy or applicable law.

Right to Lodge a Complaint with Us. If you are based in the UK, you have the right to lodge a complaint with us about our processing of your Personal Information if you consider that it infringes applicable law

You may exercise your rights (other than the right to lodge a complaint with an authority) by contacting us at privacy@bioduro.com. You may also use our Privacy Request Form.

Transfer of Personal Data

We transfer your personal data to the United States, which is not deemed to have an adequate level of data protection unless the recipient of the data is certified under the EU-U.S. Data Privacy Framework and the UK Extension thereto (the “DPF”). When transferring personal data to entities located in a country outside the EEA or UK that is not deemed to have an adequate level of data protection, we take measures to provide adequate protection for your personal data. We enter into data processing agreements and data transfer agreements that include standard contractual clauses approved by the European Commission or the UK Government. Where required, we conduct transfer risk assessments and put in place supplementary measures to protect any personal data we transfer outside the EEA or UK to countries that do not have an adequate level of data protection. Otherwise, we rely on the recipient’s certification to the DPF, or the recipient’s Binding Corporate Rules approved by the relevant EEA or UK data protection supervisory authority. To obtain information about standard contractual clauses or Binding Corporate Rules, please contact us at privacy@bioduro.com.

Celebrating 30 Years

Privacy Policy

Table of Contents