This Privacy Policy is updated and effective as of November 5, 2024.
This website and any related mobile applications (collectively the “Website”) is operated by AFT Pharmaceuticals US, Inc. (referred to as “AFT”, “we”, “our” or “us”) for users who are residents of the United States.
We have developed this Privacy Policy (the “Privacy Policy” or “Policy”) to inform you of the personal information we collect through the Website, what we do with your personal information, what we do to keep it secure, as well as the rights and choices you have over your personal information.
What Personal Information do we Collect and When?
The type of personal information that we will collect from you, and you voluntarily provide to us on this Website may include some or all of the following depending on the type of user you are:
For businesses and individuals that visit and interact with our Website we collect the following types of information.
Data Type | What We Collect and Store |
---|---|
User-Generated Content/Data | Name, Email Address, Free Format Text (Subject and Message for “Contact us” submission) |
Website Usage Data | IP Address, Browser Type and Version, Operating System, Device Information (e.g., device type, screen resolution), Date and Time of Website Visits, Pages Visited on the Website, Clickstream Data (User’s navigational path) |
Cookies and Tracking Data | Cookies (e.g., session cookies, persistent cookies), User Tracking Information (for analytics and personalization) |
Why and How We Use Your Personal Information
When you use our Website “Contact Us” submission form
When you make an inquiry on our Website using the “Contact Us” section, we will use your name, email address, phone number, and any other information provided to contact you about, and manage your inquiry. If your inquiry relates to an adverse reaction to any product, we will hold and manage your information in order to meet their legal requirements and may pass information to any relevant Regulators.
To Operate, Improve and Maintain our Business, Products, and Services
We use the personal information you provide to us to operate our business. For example, when you make a purchase, we use that information for accounting, audits, and other internal functions. We may use personal information about how you use our Website to enhance your user experience and to help us diagnose technical and service problems and administer our platform.
To Protect Our or Others’ Rights, Property, or Safety
We may also use personal information about how you use our Website and platform, to prevent, detect or investigate fraud, abuse, illegal use or violations of our Terms of Use, and to comply with court orders, governmental requests, or applicable law.
Using Your Personal Information: The Lawful Basis and Purposes
To process your personal information, we rely on certain lawful bases, depending on how you interact with our Website, platform, or services.
If we do process your personal information, we may use one or more of the following lawful bases for processing:
As Necessary for Our Legitimate Interests or Those of Other Persons and Organizations, Including:
- For market research, analysis, and developing statistics
- To ensure the security of our Website
As Necessary to Comply with a Legal Obligation, Including:
- When you exercise available rights under applicable law and make requests in accordance with such laws
- For compliance with legal and regulatory requirements and related disclosures
- For the establishment and defence of legal rights
Sharing of Your Personal Information
We do not sell your personal information.
We may share your personal information with other organizations in the following circumstances:
- We use data processors who are third parties who provide elements of services for us. We have Data Processing Agreements in place with our data processors. This means that they are not authorized to do anything with your personal information unless we have instructed them to do so. They are not authorized to share your personal information with any organization apart from us or further sub-processors authorized by us and who must also comply with our instructions concerning the handling of your personal information. They are required to handle and otherwise process your personal information securely and retain it for the period that we instruct.
- AFT’s entities for the purposes and under the conditions outlined above. This includes its subsidiaries and other affiliated companies, including such affiliates located in New Zealand.
Our Website contains links to websites owned and operated by third parties. If you use these links, you leave our Website. These links are provided for your information and convenience only and are not an endorsement by AFT of the content of such linked websites or third parties. AFT has no control over the contents of any linked website and is not responsible for such websites, their content or availability.
Cookies
We use cookies, which are small text files stored on your device. Using cookies is a way for us to make sure that our Website is continuously improved, meets your needs and can be used as a tool to optimize our business functions. For us to do this, we place functional cookies to make the Website function as well as other types of cookies that help us provide promotional information that we believe might be of interest to Website users. Some of these cookies track your use of our Website and visits to other websites and allow us to show you promotions for our products or services when you browse other websites.
Please view our Cookie Policy for more information on our use of cookies.
Third-Party Processors and Service Providers
Our third-party processors and service providers may process personal information about you on our behalf for the purposes described below:
Service Type | Description |
---|---|
Security Vendors | These trusted experts employ advanced cybersecurity measures, such as intrusion detection, threat monitoring, and malware scanning, to help protect your personal information from unauthorized access and cyber threats. |
Customer Support Providers | We work with dedicated customer support providers. They assist in addressing your queries, resolving issues by securely managing and accessing relevant customer data. |
Content Delivery Networks (CDNs) | To optimize the speed and reliability of our online services, we rely on Content Delivery Networks (CDNs). CDNs efficiently deliver web content to you by strategically distributing it across global servers. Your data is cached and served from the nearest server, reducing latency, and enhancing your overall experience. |
Content Management Systems | To assist us in the creation, management, and design of our Website. |
Analytics and Advertising | To improve our products and provide you with relevant content and advertisements, we collaborate with analytics and advertising partners. They analyze user behavior, preferences, and demographics to personalize your experience and deliver targeted promotional messages. |
Hosting Services | Providing the facilities needed to create and maintain our Website, as well as make it accessible through the internet. |
Specific Third Parties | Service Provided | Description of Service |
---|---|---|
Podcom | IT infrastructure and development services | Podcom offers managed IT support and development services for AFT Group. |
Fastly | Content Delivery Network and Web protection services | Fastly offers web efficiency and protection services for our platform. |
P29 | Website Management and Administration | P29 offer website design and management services for our product. |
WordPress | Content Management | WordPress offers web content management systems. |
How Long We Keep Your Information
We will only retain your personal information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Where the same record must be kept by us for more than one purpose and there is a different retention period for each of those purposes, the record is kept for the longer period.
To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.
Security
We have put in place appropriate security measures to help prevent your personal information from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. Platforms, systems, and facilities in which personal information are processed are protected by secure network architectures that contain firewalls and intrusion detection devices.
In addition, we limit access to your personal information to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal information on our instructions, and they are subject to a duty of confidentiality.
Contact Us
If you would like to exercise one of your rights as set out above, or if you have a question or a complaint about this Policy or the way that your personal information is processed, please contact us by one of the following means:
Mail: 42714 Woodward Ave, Bloomfield Hills, MI 48304, Suite B
Email: customer.service@aftpharm.com
Phone: 01-248-631-4810
Supplemental Terms for Residents of Certain States
A. Your U.S. State Privacy Rights.
U.S. state consumer privacy laws provide residents of certain states additional rights regarding our use of their personal information. In particular, the following state-specific rights may be applicable to you:
- California residents have the rights set forth in more detail in subsection C below of this Policy.
- Residents of Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia residents have rights to:
- Confirm whether we process their personal information.
- Access and delete certain personal information.
- Correct inaccuracies in their personal information, taking into account the information’s nature and the purpose of the processing (excluding Iowa and Utah).
- Data portability.
- Opt-out of personal data processing for:
- targeted advertising (excluding Iowa);
- sales; or
- profiling in furtherance of decisions that produce legal consequences or other similarly significant effects (excluding Iowa and Utah).
- Either limit (opt-out of) or require consent to process sensitive personal data.
To exercise any of these rights please contact us as noted in the “Contact Us” portion of this Policy.
B. Appeals of Decisions Concerning Your Rights
For residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia, to appeal any decision that we make with regard to your exercise of any of your aforementioned rights, please contact us as noted in the “Contact Us” portion of this Policy.
C. Your California Privacy Rights
The following additional privacy notices for California residents (the “California Notice”) supplement the information contained in the other portions of this Privacy Policy and apply solely to individuals who reside in the State of California (“California consumer” or “you”). The Company adopts this California Notice to comply with the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and their related regulations (collectively the “California Privacy Law” or the “CCPA”) and other applicable California laws.
Overview of Consumer Rights Under the CCPA
Under the CCPA, California consumers have certain rights regarding their personal information, including:
- The right to know the categories of personal information that we have collected and the categories of sources from which we obtained such information.
- The right to know our business purposes for sharing personal information.
- The right to know the categories of third parties with whom we shared personal information.
- The right to know if we sold or disclosed your personal information for a business purpose, comprising two separate lists disclosing:
- any sales, which list identifies the personal information categories that each category of recipient purchased (note that at present we do not sell personal information that we collect); and
- any disclosures for a business purpose, which list identifies the personal information categories that each category of recipient obtained.
- The right to know if we sold or disclosed your personal information for a business purpose, comprising two separate lists disclosing:
- The right to access the specific pieces of personal information that we have collected
- The right to correct personal information that we have collected.
- The right to delete your personal information.
- The right to not be discriminated against if you exercise your rights under the CCPA.
The provisions below of this California Notice provide further details about these and other rights and certain details about the exercise of such rights.
Information We Collect
We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California consumer, household or device (collectively, “personal information”). Personal information does not include:
- Publicly available information from government records.
- De-identified or aggregated California consumer information.
- Information excluded from the CCPA’s scope, including:
- Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data; and
- Personal information covered by certain other laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.
We have collected the following categories of personal information from consumers within the last twelve (12) months:
Category | Examples |
---|---|
Identifiers | An individual’s name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number or other similar identifiers |
Personal information categories described in Cal. Civ. Code § 1798.80(e) | A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information (Note: Certain of the above information may be considered to be sensitive personal information under the CCPA and, to the extent such data is considered to be sensitive personal information you have the right to limit the use and disclosure of such data.) |
Commercial information | Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies |
Internet or other similar network activity | Browsing history, search history, information on a California consumer’s interaction with our website, application, or advertisement and any social media sites from which user information is linked, connected or obtained |
Geolocation data | Physical location or movements (Note: Certain precise geolocation data may be considered to be sensitive personal information under the CCPA and, to the extent such data is considered to be sensitive personal information you have the right to limit the use and disclosure of such data.) |
Professional or employment-related information. | Current or past job history or performance evaluations. |
Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)). | Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. |
Inferences drawn from other personal information | Examples include a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities and aptitudes |
Sources of Personal Information
In addition to sources of personal information addressed elsewhere in this Privacy Policy, we obtain the categories of personal information listed above from the following categories of sources:
- Directly From You. For example, from forms you complete or products and services you purchase or from communications with you such as when you contact us (whether in person, by mail, by phone, online, via electronic communication or by other means) including our customer support service.
- Indirectly From You. For example, from observing your actions on our website or from products or services that you have purchased from us, if you have enabled such functionality, such as telemetry services.
- From Others.
- From third party service providers. For example, if you choose to make an electronic payment directly to us, or through a linked website or mobile application, or through an affiliate of ours, we may receive personal information about you from third parties such as payment services providers, for the purposes of that payment.
- From affiliates. We may collect personal information about you from our affiliates or others acting on their behalf.
- From Public Sources. For example, we may collect information from public records.
Uses of Personal Information
In addition to uses of personal information addressed elsewhere in this Privacy Policy, we may use or disclose the personal information we collect for one or more of the following business purposes:
- To fulfill the reason that you provided the information. For example, if you share your name and contact information to request a price quote, request to be contacted by an affiliate, or ask a question about our products or services, we will use that personal information to respond to your inquiry. If you provide your personal information to purchase a product or service, we may use that information to process your payment and facilitate delivery. We may also save your information to facilitate new product or service orders or to process returns.
- To perform services such as customer service, order fulfillment, payment processing, financing and advertising, marketing or analytic services.
- To advance our commercial or economic interests, such as by helping you to buy, rent, lease, join, subscribe to, provide, or exchange products, information, or services, or enabling or effecting, directly or indirectly, a commercial transaction.
- To verify or maintain quality or safety standards or improve or upgrade a product or service provided or controlled by or for us.
- To provide, support, personalize and develop our website, products and services such as to perform warranty related services or other post-sale activities such as product or service monitoring or repairs.
- To create, maintain, customize and secure your account with us.
- To process your requests, purchases, transactions and payments and prevent transactional fraud.
- To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses.
- To personalize your website experience and to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our website, third-party sites and via mail, email or text message (with your consent, where required by law).
- To help maintain the safety, security and integrity of our website, products and services, databases and other assets and business.
- For testing, research and analysis purposes, including to develop and improve our website, products and services.
- To respond to law enforcement requests and as required by applicable law, court order or governmental regulations.
- As described to you when collecting your personal information or as otherwise set forth in the CCPA or applicable law.
- To send you information relevant to your past purchases and interests, subject to compliance with applicable laws regarding direct marketing.
- To otherwise use as reasonably necessary and proportionate to achieve our operational or notified purpose for collecting personal information and as compatible with the context in which we collected the information.
- To perform services on behalf of a CCPA-covered business or its service provider, such as customer service, order fulfillment, payment processing, financing and advertising, marketing, or analytic services.
- To review and audit our business interactions with you.
- To detect or prevent security incidents or other illegal activity.
- To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of a bankruptcy, liquidation, or similar proceeding, in which personal information held by us about our website users, including California consumers, is among the assets transferred.
We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated or incompatible purposes without providing you notice.
Sharing Personal Information
We may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.
In the preceding twelve (12) months, we have disclosed the following categories of personal information for a business purpose:
- Identifiers
- Personal information categories described in Cal. Civ. Code § 1798.80(e)
- Commercial information
- Internet or other similar network activity
- Professional or employment-related information
- Non-public education information
- Inferences drawn from other personal information
The categories of third parties to which we may disclose personal information collected by us include the following:
- Service providers
- Affiliates
- Recipients of data from cookies
Sales of Personal Information
The Company does not sell personal information to third parties.
Exercising Your CCPA Rights and Choices
The sections below describe how you may exercise your rights under the CCPA.
Access to Specific Information and Data Portability Rights. You have the right to request that we disclose certain information to you about our collection and use of your personal information. Once we receive and confirm your verifiable consumer request (see “Exercising Access, Data Portability and Deletion Rights” below), we will disclose to you:
- The categories of personal information we collected about you.
- The categories of sources for the personal information we collected about you.
- Our business or commercial purpose for collecting that personal information.
- The categories of third parties with whom we share that personal information.
- The specific pieces of personal information we collected about you (also called a data portability request).
- If we disclosed your personal information for a business purpose, a list disclosing the personal information categories that each category of recipient obtained.
As allowed by the CCPA, we do not provide these access and data portability rights for business-to-business personal information.
Deletion and Correction Request Rights.
You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request (see “Exercising Access, Data Portability, Deletion and Correction Rights” below), we will delete (and direct our service providers to delete) your personal information from our (and service provider) records, unless an exception applies.
We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:
- Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with you.
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
- Debug products or services to identify and repair errors that impair existing intended functionality.
- Exercise free speech, ensure the right of another California consumer to exercise their free speech rights, or exercise another right provided for by law.
- Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et seq.).
- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.
- Enable solely internal uses that are reasonably aligned with California consumer expectations based on your relationship with us, such as future field campaigns or product safety issues.
- Comply with a legal obligation.
- Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
As allowed by the CCPA, we do not provide these deletion rights for business-to-business personal information.
In addition, if you provide us with a verifiable consumer request to correct inaccurate personal information that we maintain about you, we will use commercially reasonable efforts to correct such information in accordance with your instructions.
Exercising Access, Data Portability, Deletion and Correction Rights.
To exercise the access, data portability, deletion and correction rights described above, you should submit a verifiable consumer request to us by using the contact information above under “Contact Information”.
Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of a minor child for whom you are a parent or legal guardian.
You may only make a verifiable consumer request for access or data portability twice within a twelve (12) month period. The verifiable consumer request must provide sufficient information that allows us to reasonably verify that you are the person about whom we collected personal information or an authorized representative, which may include:
- Your name
- Your address
- Additional information depending upon the type of request and the sensitivity of the information involved with such request
- Describe your request with sufficient detail to enable us to properly understand, evaluate and respond to such request.
We cannot respond to your request or provide you with personal information if we cannot verify your identity or your authority to make the request and confirm that the personal information involved with the request relates to you.
Making a verifiable consumer request does not require you to create an account with us. However, we will consider requests made through a password-protected online account that you maintain with us to be sufficiently verified when the request relates to personal information associated with that online account, provided such online account functionality is then made available by us on the website.
We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
Response Timing and Format
We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time, we will inform you of the reason and extension period in writing.
If you have an online account with us, we may deliver our written response to that online account, provided that such online account functionality is then made available by us on the website. If you do not have an online account with us, or such functionality is not available for your online account we will deliver our written response by mail or electronically, at your option.
If we’re unable to comply with your request, the response we provide will also explain the reasons we cannot comply with the request. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Non-Discrimination
We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA or other applicable law, we will not as a result of you exercising any of your rights under the CCPA:
- Deny you goods or services;
- Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
- Provide you a different level or quality of goods or services; or
- Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer will reasonably relate to your personal information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time.
Retention of Personal Information
Our policy is to retain personal information only for as long as is necessary to fulfill the reason for which the personal information was collected and as necessary to process such personal information. In addition to the above, we will retain your personal information for the purposes of satisfying any professional, legal, accounting or reporting requirements to which we are subject. To determine the appropriate retention period for personal information, we consider the scope, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of the personal information, the purposes for which we collected and processed your personal information and whether we can reasonably achieve those purposes through other means, as well as any applicable legal and professional requirements.
Other California Privacy-Related Disclosures
Sharing Personal Information for Direct Marketing Purposes. Before sharing personal information of California consumers with third parties for direct marketing purposes we will obtain opt-in consent from the applicable California consumers or provide such California consumers with a cost-free method to opt out.
California Do-Not-Track Disclosure. At this time, the website is not set up to honor web browser do-not-track settings. Do-not-track is a privacy preference that users can set in their web browsers. When a user activates the do-not-track settings in browsers that offer this setting, the browser sends a message to websites or applications requesting them not to track the user. For more information about do-not-track matters, please visit www.allaboutdnt.org.
Information on Marketing Disclosures. California Civil Code Section 1798.83 permits our users who are California residents to request and obtain from us once a year, free of charge, information about the personal information (if any) we disclosed to third parties for direct marketing purposes in the preceding calendar year. If applicable, this information would include a list of the categories of personal information that was shared and the names and addresses of all third parties with which we shared information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us by using the contact information above under “Contact Information”.
Content Removal Requests for website Users Under 18 Years Old. If you are a website user under 18 years of age and reside in California, you may request and obtain removal of, content or information that you have posted on the website. You may send us any such requests by one of the following methods: (i) by email (writing “Privacy Policy/Removal Request” in the subject line) or (ii) by postal mail by using the contact information above under “Contact Information”. We will review the request and respond promptly. You should be aware that a request to remove content or information posted by you on the website does not ensure or require complete or comprehensive removal of such content or information from our databases.
Complaints
If you have any complaint about use of the website, you may contact us by email or by postal mail by using the contact information above under “Contact Information”. In accordance with California Civil Code Section 1789.3, California residents may also file complaints with the Complaint Assistance Unit, Division of Consumer Services, California Department of Consumer Affairs by postal mail at 1625 North Market Road, Suite N112, Sacramento, CA 95834 or by telephone at 800-952-5210.
Changes to Our California Notice
We reserve the right to amend this California Notice at our discretion and at any time. When we make changes to this California Notice, we will post the updated California Notice on the website and update the California Notice’s effective date. Your continued use of our website following the posting of changes constitutes your acceptance of such changes.