This is a notice to inform you of our policy about all information that we record about visitors to the Canterbury Scientific website and representatives or beneficial owners of our customers. It sets out the conditions under which we may process any information that we collect from you, or that you provide to us. It covers information that could identify you (personal information) and information that could not. In the context of the law and this notice, “process” and “use” means collect, store, transfer, use or otherwise act on information.
Your privacy is critically important to us. At Canterbury Scientific we have a few fundamental principles:
• We don’t ask you for personal information unless we truly need it. (We can’t stand services that ask you for things like your gender or income level for no apparent reason.)
• We don’t share your personal information with anyone except to comply with the law, develop our products, to provide our services or protect our rights.
• We don’t store personal information in our systems unless required for the on-going operation of one of our services.
Canterbury Scientific Limited (“Canterbury Scientific”) operates the Canterbury Scientific.com website and provider the certain goods and services described on the website (Goods and Services). It is Canterbury Scientific’s policy to respect your privacy regarding any information we may collect while operating our website or while providing you Goods or Services.
Information from customer representatives and owners
This section applies to personal data that Canterbury Scientific receives from representatives, employees or owners of our customers that have either contracted with us or made contact with us to enquire about, or request Goods or Services from us in the future (Customer(s))
• The purpose for which we process your personal data is for the conclusion and execution of agreements with Customers.
• When a Customer enters into a contractual relationship with us, we process your personal data for administrative purposes such as sending invoices and making payments and contacting you concerning specific Canterbury Scientific Goods or Services.
• Canterbury Scientific will process your personal data to further perform and execute our agreement, including for the delivery of customer services. The basis for processing your personal data is the performance of the contract with the Customer you represent.
• For this purpose, we process your contact details, ie address and email address and personal details, ie your name and date of birth.
• For this purpose, your personal data will be retained for the duration of the contractual relationship and for so long as we reasonably need to retain the same to comply with any laws. After this period, personal data will be deleted but may be retained where our software has performed database backups.
Like most website operators, Canterbury Scientific collects non-personally-identifying information of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site, and the date and time of each visitor request. Canterbury Scientific’s purpose in collecting non-personally identifying information is to better understand how Canterbury Scientific’s visitors use its website. From time to time, Canterbury Scientific may release non-personally-identifying information in the aggregate, e.g., by publishing a report on trends in the usage of its website.
Canterbury Scientific also collects potentially personally-identifying information like Internet Protocol (IP) addresses for logged in users and for users leaving comments on our blog. Canterbury Scientific only discloses logged in user and commenter IP addresses under the same circumstances that it uses and discloses personally-identifying information as described below, except that blog commenter IP addresses are visible and disclosed to the administrators of the blog where the comment was left.
Gathering of Personally-Identifying Information
Certain visitors to Canterbury Scientific’s websites choose to interact with Canterbury Scientific in ways that require Canterbury Scientific to gather personally-identifying information. The amount and type of information that Canterbury Scientific gathers depends on the nature of the interaction. For example, we ask visitors who make an enquiry through the website to provide a name, phone number and email address. In each case, Canterbury Scientific collects such information in order to:
• verify your identity for security purposes;
• sell products to you;
• provide you with our services; or
• provide you with suggestions and advice on products, services and how to obtain the most from using our website.
We keep personally identifiable information associated with your message, such as your name and email address so as to be able to track our communications with you to provide a high quality service. Canterbury Scientific does not disclose personally-identifying information other than as described below. And visitors can always refuse to supply personally-identifying information, with the caveat that it may prevent them from engaging in certain website-related activities.
Canterbury Scientific may collect statistics about the behaviour of visitors to its websites. . Canterbury Scientific does not disclose personally-identifying information other than as described below.
Protection of Certain Personally-Identifying Information
Canterbury Scientific discloses potentially personally-identifying and personally-identifying information only to those of its employees, contractors and affiliated organisations that (i) need to know that information in order to process it on Canterbury Scientific’s behalf or to provide services to Canterbury Scientific, and (ii) that have agreed not to disclose it to others. Some of those employees, contractors and affiliated organisations may be located outside of your home country; by using Canterbury Scientific’s website or otherwise agreeing to abide by this policy, you consent to the transfer of such information to them. Canterbury Scientific will not rent or sell potentially personally-identifying and personally-identifying information to anyone. Other than to its employees, contractors and affiliated organisations, as described above, Canterbury Scientific discloses potentially personally-identifying and personally-identifying information only in response to a subpoena, court order or other governmental request, or when Canterbury Scientific believes in good faith that disclosure is reasonably necessary to protect the property or rights of Canterbury Scientific, third parties or the public at large. If you are a user of a Canterbury Scientific website or have otherwise agreed to abide by this policy and have supplied your email address, Canterbury Scientific may occasionally send you an email to tell you about new features, solicit your feedback, or just keep you up to date with what’s going on with Canterbury Scientific and our products. Canterbury Scientific takes all measures reasonably necessary to protect against the unauthorised access, use, alteration or destruction of potentially personally-identifying and personally-identifying information.
Personal identifiers from your browsing activity
Requests by your web browser to our servers for web pages and other content on our website are recorded.
We record information such as your geographical location, your Internet service provider and your IP address. We also record information about the software you are using to browse our website, such as the type of computer or device and the screen resolution.
We use this information in aggregate to assess the popularity of the webpages on our website and how we perform in providing content to you.
If combined with other information we know about you from previous visits, the data possibly could be used to identify you personally, even if you are not signed in to our website.
If Canterbury Scientific’s business and assets were acquired, or in the unlikely event that Canterbury Scientific goes out of business or enters liquidation, user information would be one of the assets that is transferred or acquired by a third party. You acknowledge that such transfers may occur, and that any acquirer of Canterbury Scientific’s business and assets (or any part thereof) may continue to use your personal information as set forth in this policy.
If you are located in certain countries, including those that fall under the scope of the European General Data Protection Regulation (GDPR), subject to some limitations, data protection laws give you rights with respect to your personal data, including the rights to:
• request access to your personal data;
• request correction or deletion of your personal data;
• object to our use and processing of your personal data;
• request that we limit our use and processing of your personal data; and
• request portability of your personal data.
If you need to access, correct, or delete your personal data please contact us here. EU individuals also have the right to make a complaint to a government supervisory authority.
Our website is hosted in New Zealand.
We may also use outsourced services in countries outside New Zealand and/or the European Union from time to time in other aspects of our business.
Accordingly data obtained within New Zealand or any other country could be processed outside New Zealand and/or the European Union.
For example, some of the software our website uses may have been developed in the United States of America or in Australia.
We use safeguards with respect to data transferred outside the European Union including (without limitation) the data protection clauses in our contracts with data processors include transfer clauses written by or approved by a supervisory authority in the European Union.
Such measures may also include (without limitation) transferring the personal information to a recipient in a country that the European Commission has decided provides adequate protection for personal data (e.g., New Zealand), to a recipient in the United States that has certified its compliance with the EU-US Privacy Shield, or to a recipient that has executed standard contractual clauses adopted or approved by the European Commission. You can ask us for more information about the steps we take to protect your personal information when transferring it from the EU.
If we believe that our processing of personal information is likely to result in a high risk to the data protection rights and freedoms of data subjects, we will inform you and provide reasonable cooperation to you in connection with any data protection impact assessment necessary under the applicable data protection law.
We will implement technical and organisational measures, to protect personal information (i) from accidental or unlawful destruction, and (ii) loss, alteration, unauthorised disclosure of, or access to the personal information (a Security Incident). If we become aware of a confirmed Security Incident, we will promptly inform you and provide reasonable information and cooperation to you so that you can fulfil any data breach reporting obligations you may have under (and in accordance with the timescales required by) applicable data protection law. We will also take reasonably necessary measures and actions to remedy or mitigate the effects of the Security Incident and keep you informed of all material developments in connection with the Security Incident.
We will, on your request, delete or return the personal information in our possession or control (in a manner and form decided by us, acting reasonably). This requirement shall not apply to the extent that we are required by applicable law to retain some or all of the personal information, or to personal information it has archived on back-up systems.
We regret that if there are one or more points above with which you are not happy, this may limit our ability to provide goods or services to you and if you are only a website visitor and not a an existing or prospective customer, your only recourse is to leave our website immediately.