This Privacy Notice applies to the processing of personal data by Zebricks of:

• Website Visitors: Visitors to Zebricks' website.
  
  
• Individuals in our Professional's Database: Zebricks helps its customers to identify potential prospects. This includes a database managed by Zebricks, which lists individuals in the global biotech and pharma industry. You can read more on our Product page
  
  
• Business Contacts: Representatives of our customers, visitors to our offices, attendees at Zebricks events, and representatives of our suppliers and business partners.

This Privacy Notice does not apply to:

• Customer Prospects stored by Zebricks Customers: Once a Zebricks Customer has identified potential prospects in Zebricks' Professional's Database they may store this information in their own database. Zebricks also helps Customers to integrate with third party databases such as Salesforce. Please contact the relevant Zebricks customer if you have questions about how they use your personal data.
  
  
• Zebricks Job Applicants: Please see our separate privacy notice which will have been emailed to you as part of our application process.
  
  
•  Employees of Zebricks: Please see our separate privacy notice available on our intranet.

Zebricks, a division of BatchBank Corporation, is responsible for processing the personal data within the scope of this Privacy Notice. 

If you are a potential prospect of one of Zebricks' customers, we are responsible only for the data stored within our Professionals Database. Please contact the relevant Zebricks customer if you have questions about how they use your personal data in their own databases.

How to contact Zebricks

If you have any questions about this Privacy Notice or how Zebricks processes your personal data, please contact our Privacy Team:

By telephone: +1 844-996-3321 X 1. or +44(0)208 133 9963. X 1

By submitting a request through our ticketing system:  http://welcome.zymewire.com/privacy/privacyrequest

By post: Zebricks, BatchBank Corp., PO Box 70662, Toronto, Ontario, M6P 1Y8, Canada

Your right to complain

We're regulated by the Canadian Office of the Privacy Commissioner and the United Kingdom Information Commissioner's Office. You can contact them or your local data protection regulator for advice and support.

We may process the following:

• Usage data: Your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use.
  
  
• Publication data: Data you post for publication on our website or through our services.
  
  
• Enquiry data: Any enquiry you submit to us regarding our website.
  
  
• Transaction data: Your contact details, your card details and the transaction details.
  
  
• Correspondence data: Communication content and metadata associated with the communication sent through our website.

We may process the following:

• Contact data: Name, business email address and city 
  
  
• Business information: The company you work for, your job title and speaker engagements
  
  
• Email verification data: Deliverability of a specific business email address.

We may process the following:

• Account data: Name, email address, IP address and integrated CRM information you have authorized.
  
  
• Service data: Data supplied through integrations with and files from your Customer Relationship Management (CRM) software such as Salesforce, Microsoft Dynamics, Copper, Hubspot, and Pipedrive.
   
• Publication data: Data you post for publication on our website or through our services.
  
  
• Enquiry data: Any enquiry you submit to us regarding goods and/or services.

We collect your personal data:

• When you provide it to us through our contact forms; and
  
  
• When you use our website, for example through cookies and other tracking technologies – please see our Cookie Notice  for more information.

We collect:

• Contact data and business information from web researcher providers, who collect it from publicly accessible sources such as business biographies, business event websites and public social media pages.
  
  
• Email verification data from  third-party email checking services. Please email privacy@zymewire.com for a comprehensive list.  

We collect your personal data from:

• From you when you contact us.
  
  
• Your employer when we contemplate doing business with each other.
  
  
• Third party sources such as LinkedIn or a website that mentions you.

• Usage data may be processed for the purposes of analysing the use of the website and services.
  
  
• Publication data may be processed for the purposes of enabling such publication and administering our website and services.
  
  
• Enquiry data may be processed for the purposes of offering, marketing and selling relevant goods and/or services to you.
  
  
• Transaction data may be processed for supplying the purchased goods and services and keeping proper records of those transactions.
  
  
• Correspondence data may be processed for the purposes of communicating with you and record-keeping.

Contact data and business information for the purpose of providing our Professionals Database to Zebricks Customers to help them identify potential prospects.

• Account data may be processed for the purposes of operating our website, providing our services, ensuring the security of our website and services, maintaining back-ups of our databases and communicating with you.
  
  
• Service data may be processed for the purposes of operating our website, providing our services, ensuring the security of our website and services, maintaining back-ups of our databases and communicating with you.
  
  
• Publication data may be processed for the purposes of enabling such publication and administering our website and services.
  
  
• Enquiry data may be processed for the purposes of offering, marketing and selling relevant goods and/or services to you.
  
  
• Customer relationship data may be processed for the purposes of managing our relationships with customers, communicating with customers, keeping records of those communications and promoting our products and services to customers.
  
  
• Notification data may be processed for the purposes of sending you the relevant notifications and/or newsletters.

We may also process any of your personal data identified in this policy where necessary for:

• the establishment, exercise or defense of legal claims, whether in court proceedings or in an administrative or out-of-court procedure;
•  The purposes of obtaining or maintaining insurance coverage, managing risks, or obtaining professional advice; and
• Compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.

Our legal basis for collecting and using your personal data will depend on the personal data concerned and the specific context in which we collect it.  

However, we will normally collect personal data from you only where we have your consent to do so, where we need the personal data to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect personal data from you or may otherwise need the personal data to protect your vital interests or those of another person.

If we ask you to provide personal data to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal data is mandatory or not (as well as of the possible consequences if you do not provide your personal data).  

Similarly, if we collect and use your personal data in reliance on our legitimate interests (or those of any third party), we will make clear to you at the relevant time what those legitimate interests are.

If you have questions about or need further information concerning the legal basis on which we collect and use your personal data, please contact us using the contact details provided under the "Who can you contact if you have questions, comments or complaints?" section

We may disclose your personal data to:

• Third party services providers and partners who provide data processing services to us. For example, we may share certain information with our analytics provider Mixpanel, our user messaging system Intercom, our centralized security logging provider Loggly, our usability improvement partner Fullstory, our digital advertising providers Google Adwords/Analytics  and LinkedIn, our cloud storage provider Digital Ocean, and our marketing automation services Mailchimp and Hubspot.
  
  
• Any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person.
  
  
• An actual or potential buyer (and its agents and advisers) in connection with any actual or proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your personal information only for the purposes disclosed in this Privacy Notice.
  
  
• Any other person with your consent

We may disclose your personal data to:

• Our Customers and their service providers. For example, when instructed by our Customers we send a copy of the contacts in which they are interested to the Customer or their Salesforce database.
  
  
• Third-party services providers and partners who provide data processing services to us. For example, we store a copy of our Professionals Database on our cloud servers hosted by Digital Ocean.
  
  
• Any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person.
  
  
• An actual or potential buyer (and its agents and advisers) in connection with any actual or proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your personal information only for the purposes disclosed in this Privacy Notice.
  
  
• Any other person with your consent.

We may disclose your personal data to:

• Third party services providers and partners who provide data processing services to us, for example our cloud storage provider is Digital Ocean, and our marketing automation services providers are Mailchimp and Hubspot. Our sales teams use Apollo, Dooly, and Salesforce which may contain information about Business Contacts.  Financial transactions relating to services are handled by our payment services providers, Stripe, Freshbooks, Quickbooks, and The Royal Bank of Canada.
  
  
• Any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person.
  
  
• An actual or potential buyer (and its agents and advisers) in connection with any actual or proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your personal information only for the purposes disclosed in this Privacy Notice.
  
  
• Any other person with your consent.

Where do we store your data?

Zebricks is located in Canada. We also host data in cloud servers located in the USA. Some of our third party service providers may process your data in other countries. This means that when we collect your personal data we may process it in any of these countries.

How do we protect your personal data?

Zebricks has taken appropriate safeguards to require that your personal information will remain protected in accordance with this Privacy Notice. For example, for data transferred from our Business Contacts in the European Economic Area, we rely on the standard contractual clauses approved by the European Commission. We use a similar arrangement for data transferred from the UK. Further details can be provided upon request.

Zebricks also protects your personal data by adhering to the data protection laws to which it is directly subject, such as the United Kingdom's General Data Protection Regulation. This includes implementing appropriate technical and organisational security measures to protect your personal data.  You can obtain more information about our successful SOC II audit (2021) by making a request to compliance@zymewire.com.  

How long do we store your data?

We retain your personal data where we have an ongoing legitimate business need to do so. We will then either delete or anonymise it or, if this is not possible (for example, because your personal data has been stored in backup archives), then we will securely store your personal data and isolate it from any further processing until deletion is possible.

For example:

We may update this Privacy Notice from time to time in response to changing legal, technical or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make, for example by posting updates on our website, or sending you an email.  We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable data protection laws. 

This Privacy Notice was last updated on February 14, 2022. Our previous notices can be found here: https://welcome.zymewire.com/privacy/archived/