Infonote Datasystems Ltd ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our Laboratory Information Management System (LIMS).
1. Information We Collect
1.1 Personal Information
We may collect personal information that you voluntarily provide to us, including:
- Name and contact details (email address, phone number, postal address)
- Professional information (job title, organisation, department)
- Account credentials (username, password)
- Payment and billing information
1.2 Automatically Collected Information
When you access our website or services, we automatically collect certain information, including:
- Device and browser information
- IP address and location data
- Usage patterns and preferences
- Cookies and similar tracking technologies
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process transactions and send related information
- Send promotional communications (with your consent)
- Respond to your comments, questions, and requests
- Monitor and analyse usage trends
- Detect, investigate, and prevent security incidents
- Comply with legal obligations
3. Legal Basis for Processing
Under UK GDPR, we process your personal data based on one or more of the following legal bases:
- Contract: Processing necessary for the performance of a contract with you
- Legitimate Interests: Processing necessary for our legitimate business interests
- Consent: Where you have given explicit consent
- Legal Obligation: Processing necessary to comply with the law
4. Data Sharing and Disclosure
We may share your information with:
- Service providers who assist in operating our business
- Professional advisers (lawyers, accountants, auditors)
- Government authorities when required by law
- Business transferees in the event of a merger or acquisition
We do not sell your personal information to third parties.
5. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Typically, this means:
- Account data: Duration of your account plus 7 years
- Transaction records: 7 years from the date of transaction
- Marketing preferences: Until you withdraw consent
6. Your Rights
Under UK GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data
- Restriction: Request limitation of processing
- Portability: Receive your data in a portable format
- Object: Object to certain types of processing
- Withdraw Consent: Withdraw consent at any time
To exercise these rights, please contact us at privacy@corepathology.com.
7. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including encryption, access controls, and regular security assessments. However, no method of transmission over the Internet is 100% secure.
8. International Transfers
Your data is primarily stored and processed within the UK and European Economic Area. If we transfer data outside these regions, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.
9. Contact Information
If you have questions about this Privacy Policy or our data practices, please contact:
Data Protection Officer
Infonote Datasystems Ltd
123 Laboratory Lane
Birmingham B1 1AA
United Kingdom
Email: privacy@corepathology.com
Phone: 0121 234 5678
10. Complaints
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated. Visit ico.org.uk for more information.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.