Your consent to this Privacy Policy
By using our web site or providing us with Personal Information, as defined below, you signify that you agree with the terms of our current Privacy Policy as posted in this area of the site. If you do not agree with any term in this Policy, please do not use the site or provide us with Personal Information.
The web site you have entered is operated by or on behalf of CINRG Systems Inc. (“CINRG”, “we”, “us”, or “our”), which acts as the data controller for the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR.
Please be assured that CINRG is committed to protecting your personal privacy. This Privacy Policy describes the type of information that CINRG collects, how we use and protect that information, the legal basis for our processing, and the rights you have over your information.
Collection of Personal Information
“Personal Information” (also referred to as “Personal Data” in EU/UK contexts), as referenced in this Privacy Policy, means personally-identifiable information including, without limitation, your name, street address, telephone number, screen name and e-mail address.
When you are visiting our site, requesting documents or entering contests, you may be asked for Personal Information so that you can register for e-mail service reminders concerning your CINRG products, request information or mailings, fill out a survey, participate in a contest or for a variety of other reasons. CINRG will not collect any Personal Information unless and until you provide it to us voluntarily. When you provide us with Personal Information, you are authorizing us to use that information in accordance with the terms of this Privacy Policy.
If you do not want CINRG to have access to your Personal Information, please do not provide it to CINRG. Certain services available through this site and offline can only operate in conjunction with your Personal Information. If you do not provide us with your Personal Information, we may not be able to offer you certain services.
Legal basis for processing (EU / UK)
If you are located in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR / UK GDPR to process your Personal Data:
- Consent — where you have given us clear, specific consent (for example, when subscribing to a newsletter or filling out a contact form).
- Contract — where processing is necessary to perform a contract with you, including pre-contractual sales and quotation requests.
- Legitimate interests — where the processing is necessary for our legitimate interests (such as responding to a support inquiry, securing our web site, or improving our products) and your rights do not override those interests.
- Legal obligation — where we must process the data to comply with a legal obligation (for example, retaining records for tax or audit purposes).
How we use your information
Any Personal Information that you provide will be used for the express purpose for which it was collected (e.g., to send you a letter). It may also be used by CINRG to contact you regarding other products and services that may be of interest to you. If you do not want to be contacted about products or services, you can request that we limit our contact with you to the express purpose that you provided your Personal Information (see Privacy Office in the sidebar).
Other information we may collect
CINRG may collect information about you during your visit to our web site, but this information will not be linked to your Personal Information and will only be collected in the aggregate in connection with all the users of our site. For example, we may collect:
- Information about your computer, such as your IP address, the type of Internet browser you are using, the type of computer operating system you are using, and the domain name of the web site from which you linked to our site.
- Information about the areas you visit on our web site.
Cookies
Cookies are files or pieces of information that may be stored in your computer's hard drive when you visit a web site. CINRG uses cookies as a tool to let us know how and when a user visits areas within our site. They also help speed up your future activities. CINRG does not share Personal Information obtained through cookies with any third parties.
Most browsers are initially set to accept cookies. If you do not wish to accept cookies, you can set yours to refuse cookies or to alert you when cookies are being sent.
We do not share Personal Information with third parties
CINRG does not share any Personal Information with any third parties, except as provided in this Policy.
CINRG may retain third parties to act as our agent to analyze data we collect, solely to help us improve our products and our web sites. These third parties are expressly prohibited from using your Personal Information in any other way.
CINRG may also offer promotions or contests in conjunction with a partner (the “Promotion Partner”). These co-promotions will clearly indicate the identity of the Promotion Partner and provide the URL for the privacy policy of the Promotion Partner.
We will release Personal Information if in our opinion we are required or authorized to do so by or pursuant to law, or by a search warrant, subpoena, court order or other legal process.
Data retention
We retain Personal Information only for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements. Typical retention periods:
- Sales / contract records: seven (7) years after the conclusion of the business relationship.
- Support tickets: three (3) years after the ticket is closed.
- Marketing contact information: until you unsubscribe or otherwise withdraw consent, plus 12 months in suppression-list form to prevent re-contact.
- Web-analytics information: aggregated indefinitely; raw logs are typically rotated within 90 days.
When Personal Information is no longer required, we securely delete or irreversibly anonymize it.
International transfers
CINRG is headquartered in Canada. If you access our services from outside Canada, your Personal Information may be transferred to, stored, and processed in Canada or another country where our servers or service providers are located. Where such transfers involve Personal Data of EU/UK residents, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the UK Addendum, and Canada's status as a country with adequacy under EU law for commercial organizations subject to PIPEDA.
Information security
We use reasonable administrative, technical, and physical safeguards designed to protect Personal Information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These include encryption in transit (HTTPS), access controls, logging, and regular review of security practices. No method of transmission over the Internet or method of electronic storage is 100% secure, however, so we cannot guarantee absolute security.
Children's privacy
Our web site and products are intended for business and laboratory professionals and are not directed at children. We do not knowingly collect Personal Information from children under 16 years of age (or the equivalent minimum age in the relevant jurisdiction). If you believe a child has provided us with Personal Information, please contact us at info.policy@cinrg.com and we will take steps to delete that information.
Your rights under GDPR / UK GDPR (EU, UK and Switzerland residents)
If you are located in the EU, EEA, UK, or Switzerland, you have the following rights with respect to your Personal Data:
- Right of access — you may ask us to confirm whether we hold Personal Data about you and request a copy.
- Right to rectification — you may ask us to correct any inaccurate or incomplete Personal Data we hold about you.
- Right to erasure (“right to be forgotten”) — you may ask us to delete your Personal Data, subject to certain legal exceptions.
- Right to restriction of processing — you may ask us to limit how we use your Personal Data in certain circumstances.
- Right to data portability — where processing is based on your consent or on a contract, you may ask us to provide a copy of your Personal Data in a structured, commonly-used, machine-readable format, or to transmit it directly to another controller where technically feasible.
- Right to object — you may object to processing based on our legitimate interests, including for direct marketing.
- Right to withdraw consent — where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
- Right to lodge a complaint — you have the right to lodge a complaint with the supervisory authority in the EU/EEA member state, UK, or Switzerland in which you reside or where the alleged infringement occurred.
To exercise any of these rights, see How to exercise your rights below.
Your rights under CCPA / CPRA (California residents)
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) gives you specific rights regarding your Personal Information.
Categories of Personal Information collected in the past 12 months may include identifiers (name, email, postal address, phone number), commercial information (records of products and services purchased or considered), Internet/network activity (browsing on our site), and professional/employment information (company name, role).
Sources include directly from you (forms, support tickets, sales inquiries), automatically through your interaction with our site, and from authorized partners and dealers.
Business purposes for collection include responding to inquiries, providing and improving our products and services, processing transactions, providing customer support, communicating with you, and complying with legal obligations.
Your rights as a California consumer:
- Right to know — you may request to know the categories and specific pieces of Personal Information we have collected about you.
- Right to delete — you may request that we delete Personal Information we have collected from you, subject to legal exceptions.
- Right to correct — you may request that we correct inaccurate Personal Information.
- Right to opt-out of sale or sharing — CINRG does not sell your Personal Information and does not share it for cross-context behavioral advertising. If this changes in the future, this Policy will be updated and the opt-out will be made available.
- Right to limit use of sensitive Personal Information — we do not collect or use sensitive Personal Information for purposes that would trigger this right.
- Right to non-discrimination — we will not discriminate against you for exercising any of your CCPA rights.
You may also designate an authorized agent to make a request on your behalf. We will require verification of identity and authority before responding.
How to exercise your rights
To exercise any of the rights described above — or to ask a question, raise a concern, or lodge a complaint — please write to us:
- Email: info.policy@cinrg.com
- Postal mail: CINRG Systems Inc., Privacy Office, C8–1175 Appleby Line, Burlington, ON L7L 5H9, Canada
To protect your information, we may need to verify your identity before fulfilling certain requests. We will respond to verifiable requests within the timeframes required by applicable law (typically 30 days under GDPR; 45 days under CCPA, with the option to extend).
Changes in our Policy
CINRG reserves the right to change this Privacy Policy at any time. Whenever we make a material alteration, we will update the “Last updated” date at the top of this page and, where required by law, provide notice through the web site or by email. We encourage you to visit this page periodically to stay informed.