Privacy Policy

This section includes some key highlights of our Privacy Policy. We recommend that you read the entire Privacy Policy, as it contains important information about how we process your personal information.

We may collect or process various categories of personal information. The sections titled “Personal Information We Collect” and “Personal Information Sources” contain information on the categories of personal information collected and where we collect your personal information. As an overview, we collect your account information, usage information, request messages and device information. We collect and use this information to complete user account configuration, to handle and respond to your inquires and requests, to provide, tailor and improve our services, to maintain the security and operations of our platform and to improve customer services and functions as listed in the “How We Use Your Personal Information” section below. We will retain your information for as long as needed to fulfill the purpose for which it is collected and to comply with our legal obligations, resolve disputes, and enforce our agreements. Your personal information may be transferred or disclosed to our affiliates, vendors who perform services on our behalf and other third parties as outlined in “How We Disclose Personal Information”. As described in greater detail under “International Transfers”, your personal information may be transferred outside of the jurisdiction in which you are located. We do not sell your personal information. If you would like to exercise your rights, please visit the “Your Rights and Choices” section of this Privacy Policy.

This Privacy Policy describes how Biocytogen Boston Corp (hereinafter referred to as “we”, “our” or “us”) collects, uses, stores, transfers, shares, discloses (collectively, “process” or “processing”) and protects your personal information when you (a) visit our website at https://web-dev.biocytogen.com.cn to register as the user; (b) browse library database services available on the platform (the “Services”); (c) communicate with us.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the processing of your personal information as described in this Privacy Policy.

This Privacy Policy covers the following:

• Personal Information We Collect
• Personal Information Sources
• How We Use Your Personal Information
• How We Disclose Personal Information
• Children’s data
• Security of Your Personal Information
• Retention of Your Personal Information
• International Transfers
• Your Rights and Choices
• Do Not Sell
• tCalifornia “Shine the Light” Law
• Changes to This Privacy Policy
• Contact Us

“Personal information” refers to information that identifies, describes, is capable of being associated with or could reasonably be linked, directly or indirectly, with a particular individual, device or household, and does not include anonymized information.

We may collect or process (and may have collected or processed during the 12-month period prior to the last updated date of this Privacy Policy) the following categories of personal information when you use the following features in the platform, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

• Enterprise user account activation. When you create an account, either for yourself or as an administrator for your enterprise, you need to provide us with your account information including your first name and last name, email address and password, institutions and departments you represent for, your job title for the purpose of verifying your identity and completing the process of user activation.
• Individual user account management within enterprises. We may also configure individual user accounts based on the list of personnel within the enterprise provided by our enterprise clients. When the enterprise client uses our paid services, the administer of the enterprise can add individual users by searching emails with the same email domain to the enterprise through the administrator account.
• Online library database browsing and querying. When you enter our website and use the function of library database, we may collect your usage information including browsing, saving or searching records generated for the purpose of targeting recommendations to you. For different level of user accounts you registered, we open up different ranges of data access permissions.
• Customer request response. When you submit a request through our website, we may collect the specific request information you provided for the purpose of responding promptly and supporting your request.
• System operation and security management. We may collect your device information including your device ID, browser, network connection, IP address, and other unique identifiers for the purpose of ensuring the security and continuous normal operation of the website backend system.

We may collect (and may have collected during the 12-month period prior to the last updated date of this Privacy Policy) personal information from the following sources:

• Directly from you including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information;
• Automatically through the Services including from your device when you visit and use our websites, through the use of cookies and similar technologies.

Depending on how you interact with us or which of the Services you use, we may use (and may have used during the 12-month period prior to the last updated date of this Privacy Policy) personal information for the following purposes:

• to verify your identity and configure user account permissions;
• to handle your inquiries, requests, doubts, clarifications and claims;
• to respond to and process your requests to exercise your personal information subject rights;
• to provide, tailor, and improve the Services such as targeted advertising and recommendation to you;
• to maintain and protect the security of information and operation of our platform, preventing and detecting security threats, fraud or other criminal or malicious activities;
• to improve customer services and functions, including updating, securing, troubleshooting, providing support.

We will not use your personal information for any other commercial purposes.

In certain circumstances, we may disclose (and may have disclosed during the 12-month period prior to the last updated date of this Privacy Policy) your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

• with affiliates of our corporate group;
• with vendors and other third parties who perform services on our behalf (including IT maintenance, data analytics, customer support, cloud storage, and molecular visualization tools).
• with law enforcement, public authorities or judicial bodies, if required by applicable laws and regulations or to comply with a legal obligation including to respond to subpoenas, search warrants and similar requests, enforce our terms of services, address security or fraud issues, or protect the rights, property or safety of us, our users or the public.
• with prospective buyer or other third parties in case of a business transaction such as we are acquired and merged, and a bankruptcy.

We may use cookies and other similar tracking technologies in support of our online services. These tracking technologies provided by third parties include:

• AWS
• Google analytics
• Google ads
• SEO tools and other third-party tools to assist website operations.

In some U.S. states, marketing use of cookies or other similar tracking technologies may be considered “sales” of personal information. All of our US visitors and users may opt out of such sales at the point of collection online. For more information about our use of cookies and tracking technologies, please see our Cookie Policy.

The Services of our website are provided for the enterprise clients and their personnel. Therefore, it is not intended to be used by children, and we do not knowingly collect any personal information about children under the age of majority in your jurisdiction.

We strive to protect your personal information by means of administrative, physical and technical measures that are in line with the industry standards, such as establishing the management, support, oversight, and regular training of information security at an organizational level, preventing unauthorized access, damage, or interference to physical facilities, critical organizational areas, equipment, and information as well as ensuring secure disposal, and implementing data encryption while restricting access to logical databases or information in logical format to identified and authorized personnel, limited to the activities required for the performance of the functions within the website.

For how long we will hold your personal information will vary and will be determined by the following criteria.

• The purpose for which we are using it: we are required to retain the personal information for as long as is necessary to satisfy or meet the purpose for which it was obtained or any other legal purpose.
• Legal Obligations: laws or regulations may set a minimum period for which we must retain your personal information.

Your personal information is stored in United States. Since we operate business globally, we may transfer your personal information outside the country you live in.

Please note that different countries or regions offer different levels of data protection. This means that your personal information could be stored in a country that offers a level of protection that may, in certain instances, be less protective of your personal information than the country or region in which you are located. However, when we transfer your personal information internationally, we will take measures to ensure an adequate level of protection, as required by applicable laws. For example, we might obtain your consent to transfer your personal information, implement adequate security measures (such as encryption, de-identification where possible) and sign the necessary data transfer agreements with the recipients of your personal information prior to the transfer taking place.

If you are a residence in the European Union or United Kingdom, and in case your personal information will be transferred to jurisdictions located outside of the European Economic Area or the United Kingdom, we will rely on adequate measures like the European Commissions Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

California residents are entitled to the following rights. If you are not California residents, depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by applicable laws.

• Right to access / know. You have the right to know or request access to personal information that we hold about you.
• Right to delete. You have the right to request that we delete personal information we maintain about you.
• Right to correct. You have the right to request that we correct inaccurate personal information we maintain about you.
• Right of portability. You have the right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
• Right to opt-out of sale, sharing, and targeted advertising. You have the right to opt out of the “sale” and/or “sharing” of your personal information or to opt out of the processing of your personal information for purposes considered to be “targeted advertising”, as defined in applicable laws.
• Right to revote or withdraw consent. You may have the right to withdraw consent to the continued use or disclosure of your personal information, subject to legal or contractual restrictions and reasonable notice.
• Right to nondiscrimination. We will not discriminate against you for exercising any of your rights.
• Right not to be subject to automated processing. We will not make any decision based solely on automated processing of your personal information.
• Right to lodge a complaint with the relevant data protection regulator. Depending on where you live, you may have the right to appeal our decision by contacting us using the contact details set out below, or lodge your complaint with your local data protection authority.

You may exercise any of these rights where indicated on the Services or by contacting us using the contact details provided below. We may need to verify your identity before we can process your requests, as permitted or required under applicable laws.

In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable laws.

Based on the CPRA’s definitions of “sell”, we do not believe we engage in such activities and have not done so in the past 12 months from the effective date of this Privacy Policy.

California’s “Shine the Light” law (Civil Code Section §1798.83) grants California residents with an established business relationship with us the right to request information about personal information disclosed to third parties for direct marketing purposes. Our website is aimed at enterprise clients and their personnel, not designed for personal, family, or household use. We also do not disclose personal information to third parties for direct marketing purposes.

We may update this Privacy Policy from time to time. If there is any material change to this Privacy Policy, we will notify you either by posting a notice within our website or by sending you a notice to the email address registered. We will require your consent again if required by applicable laws to continue processing your personal information. You will be able to see our current Privacy Policy along with its most recent revision date. The revised Privacy Policy will take effect from the date of publication.

You should review this Privacy Policy periodically. By continuing to use our Services, you will be deemed to have accepted the changes or updates to this Privacy Policy.

If you have any further questions about the processing of your personal information, about the online services and products via our website or about this Privacy Policy, or if you would like to exercise any of the rights available to you, you can always contact us:

by e-mail: rensuper.privacy@biocytogen.com

by mailing to: 300 Third Ave, FL6, Waltham, MA, 02451, USA.