Privacy Policy

This Privacy Policy explains how HDLIMS (“HDLIMS”, “we”, “us” or “our”) collects, uses, shares and protects personal information when you visit our website at hdlims.com (the “Site”) or contact us through it. It also explains the choices and rights you have.

Scope of this policy

This policy covers the public marketing website only. It does not cover the HDLIMS software service. Personal data that customers process in the service is governed by the customer’s agreement with us and the related data processing agreement (DPA). If you use the service and have questions about your data, please contact your organization first.

Who is responsible for your information

HDLIMS is responsible for the personal information described in this policy and acts as the “controller” of that information for the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR. You can contact us about privacy matters at privacy@hdlims.com.

Information we collect

Information you give us

Contact and demo request forms. When you fill in a form on the Site, we collect your name, work email address, company, job title, country, industry and your message. A phone number is optional.
Emails you send us. If you email us, we receive your email address, the content of your message and any attachments.

Please do not send us sensitive personal information or confidential laboratory data through the Site.

Information collected automatically

Server and security logs. Our hosting provider automatically records basic technical information, such as your IP address, browser user agent, pages requested and timestamps. These logs are used to operate and secure the Site.
Analytics. If we use analytics on the Site, we use a privacy-friendly, cookieless service (such as Plausible Analytics) that does not use cookies and does not collect personal data. It gives us aggregate statistics, such as page views and referring websites, that cannot be used to identify you.

We do not use advertising cookies or cross-site tracking technologies, and the Site sets no non-essential cookies by default. Our Cookie Policy has more detail.

How we use your information and our legal bases

If you are in the European Economic Area (EEA) or the United Kingdom, the table below explains the legal basis we rely on for each use of your personal data.

Purpose	Information used	Legal basis (GDPR and UK GDPR)
Responding to your inquiry or demo request	Form data and emails	Steps taken at your request before entering into a contract; otherwise our legitimate interest in responding to business inquiries
Following up with relevant information about HDLIMS after you contact us	Form data and emails	Our legitimate interest in developing business relationships, or your consent where the law requires it
Sending marketing communications, if you sign up for them	Name and email address	Your consent, which you can withdraw at any time
Operating and securing the Site, and preventing abuse	Server and security logs	Our legitimate interest in keeping the Site available and secure
Complying with legal obligations and establishing or defending legal claims	Any relevant information	Compliance with a legal obligation, or our legitimate interest in protecting our legal rights

Where we rely on legitimate interests, we have balanced them against your rights, and you can object at any time. Every marketing email we send includes a way to unsubscribe. We do not use your information for automated decision-making that produces legal or similarly significant effects for you.

We share personal information only as described here:

Service providers. We use third-party providers to host the Site, process form submissions, handle email and, where used, provide cookieless analytics. They act as our processors or service providers, may use personal information only on our instructions and must protect it under contract.
Professional advisers, such as lawyers and accountants, under duties of confidentiality.
Legal requirements. We may disclose information if required by law or legal process, or where necessary to protect the rights, property or safety of HDLIMS or others.
Business transfers. If HDLIMS is involved in a merger, acquisition or sale of assets, personal information may be transferred as part of that transaction, subject to equivalent protections.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

International transfers

We and our service providers may process personal information in countries other than the one in which you live, including countries outside the EEA and the UK. When we transfer personal data from the EEA or the UK to a country that has not been recognized as providing an adequate level of protection, we use appropriate safeguards, such as the Standard Contractual Clauses approved by the European Commission and, for UK data, the UK International Data Transfer Addendum or an equivalent mechanism. You can ask for more information about these safeguards by contacting us.

How long we keep information

We keep personal information only for as long as we need it for the purposes described in this policy:

Inquiries, demo requests and emails are kept for as long as needed to respond to you and to manage any resulting business relationship. We then delete or anonymize them, unless we need to keep them longer to comply with law or to resolve disputes.
Server and security logs are kept for a limited period for security and operational purposes and are then deleted in line with our hosting configuration.
Marketing preferences, including a record that you unsubscribed, are kept so that we can respect your choices.

Your rights

If you are in the EEA or the UK

Subject to conditions and exceptions in the law, you have the right to:

Access the personal data we hold about you and receive a copy
Ask us to correct inaccurate or incomplete data
Ask us to delete your data
Ask us to restrict how we use your data
Receive your data in a portable format, where applicable
Object to our use of your data based on legitimate interests, and object at any time to direct marketing
Withdraw your consent at any time, where we rely on consent, without affecting processing that took place before withdrawal

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live, work or where you believe an infringement occurred. In the UK, this is the Information Commissioner’s Office (ICO). We would welcome the chance to address your concerns first.

If you are in California or another U.S. state with a privacy law

Depending on where you live and whether the law applies to us, U.S. state privacy laws such as the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), may give you additional rights.

In the past 12 months, we have collected the following categories of personal information through the Site:

Identifiers, such as name, email address, phone number (if provided) and IP address
Professional or employment-related information, such as company, job title and industry
Internet or other electronic network activity information, such as browser user agent and timestamps in server logs
General location information, limited to the country you tell us

We collect this information directly from you and automatically from your device, use it for the business purposes described in this policy, and disclose it to service providers for those purposes. We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not use or disclose sensitive personal information for purposes that would give rise to a right to limit its use.

Subject to applicable law, you may have the right to:

Know what personal information we have collected about you, and access it
Ask us to delete personal information we collected from you
Ask us to correct inaccurate personal information
Opt out of the sale or sharing of personal information, or its use for targeted advertising (we do not engage in these activities)
Not be discriminated against for exercising your rights

We do not sell or share personal information, but where the law requires it we will treat an opt-out preference signal, such as Global Privacy Control, as a valid opt-out request. You may use an authorized agent to make a request on your behalf, and we may ask for proof of that authorization.

How to exercise your rights

To make a request, email privacy@hdlims.com. We may need to verify your identity first, usually by confirming information we already hold, such as your email address. We will respond within the time required by applicable law and will not charge a fee unless the law allows it.

Security

We use reasonable technical and organizational measures to protect personal information, including encrypted connections (HTTPS) for the Site. No website or method of transmission is completely secure, so we cannot guarantee absolute security.

Children

The Site is intended for business audiences and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

Links to other websites

The Site may link to websites we do not operate. This policy does not apply to them, and we are not responsible for their privacy practices.

Changes to this policy

We may update this policy from time to time. When we do, we will change the “updated” date shown on this page, and we will take reasonable steps to tell you about material changes, for example by placing a notice on the Site.

Contact us

For questions about this policy or to exercise your rights, contact us at privacy@hdlims.com. For general questions, email info@hdlims.com.