Privacy Policy | Chemizon

Introduction

This Privacy Policy describes how Chemizon ("we," "us," or "our") collects, uses, and discloses personal information from users of our website and related services (collectively, the "Service"). It also describes your rights as a data subject and how to exercise them.

This Privacy Policy is incorporated by reference into our Terms of Service and should be read alongside it. If you are located in the European Economic Area, the United Kingdom, or Switzerland, please see the "European Privacy Notice" section below for additional information applicable to you.

Please read this Privacy Policy carefully. By using the Service, you acknowledge that you have read and understood our practices regarding your personal information.

Contacting Us

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal information, please contact us and we will respond within one business day.

What Information Do We Collect?

Information You Provide Directly

When you register, complete a form, submit a request, or otherwise interact with the Service, we may collect:

Account and profile data — name, email address, company name, professional title, postal address, telephone number, and any preferences you set.
Contact and communications — messages you send via contact forms, support requests, email, or other correspondence.
User-generated content — any content, comments, or materials you submit through interactive features of the Service.
Newsletter and marketing preferences — email address and communication preferences if you subscribe to updates.

Automatically Collected Information

When you use the Service, we may automatically collect:

Device and browser data — IP address, browser type, device type, operating system, and unique device identifiers.
Usage and activity data — pages visited, features used, links clicked, search queries, access times, and referring URLs.
Location data — approximate location derived from IP address. You may disable precise location collection through your device settings.
Third-party interaction data — information about your interactions with third-party integrations or advertisements connected to the Service.

Cookies and Similar Technologies

We use cookies, web beacons, and similar technologies to operate and improve the Service, remember your preferences, keep you signed in, and understand how the Service is used. Some cookies are essential and cannot be disabled; others are optional and used for analytics or personalisation. For full details, see our Cookie Policy.

Third parties (such as analytics providers or advertisers) may also set cookies through our Service. We do not control those technologies and encourage you to review the privacy policies of those third parties.

Sensitive Information

We do not intentionally collect sensitive categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, biometric data, or government-issued identifiers). Please do not submit such information through the Service. If you interact with a third-party payment processor, we do not directly process your financial account details.

How Do We Use Personal Information?

Service delivery and operations — to provide, maintain, and support the Service, including managing your account and processing your requests.
Personalisation — to tailor content, search results, and features to your preferences and usage patterns.
Communications — to send transactional emails (account activity, sample request updates, quote notifications) and, where you have consented, marketing and product updates.
Analytics and improvement — to understand how the Service is used, identify issues, conduct research, and improve performance and features.
Safety, security, and compliance — to detect, investigate, and prevent fraud, abuse, and unlawful activity; to enforce our Terms of Service; and to comply with legal obligations.
Business transactions — to facilitate or evaluate mergers, acquisitions, or other corporate transactions in which your information may be transferred as a business asset.
Aggregated and anonymised purposes — to create de-identified or anonymised datasets for lawful business and research purposes that cannot be used to identify you.

When Do We Share Personal Information?

We do not sell your personal information. We may share it in the following circumstances:

Service providers — third-party vendors who perform services on our behalf (e.g., hosting, analytics, email delivery, payment processing), under strict confidentiality obligations and limited to information necessary for their function.
Suppliers and partners — when you browse a supplier storefront, request a quote, or request product information, your contact details may be shared with the relevant supplier to facilitate that interaction. We will seek your consent where required by applicable law.
Legal and safety reasons — when we believe disclosure is required by law, to respond to lawful requests from public authorities, or to protect the rights, property, or safety of Chemizon, our users, or others.
Business transfers — in connection with a merger, acquisition, financing, or sale of all or part of our business assets, your information may be transferred to the successor entity.
With your consent — for any other purpose disclosed to you at the time of collection, with your consent.
Aggregated or de-identified data — we may share anonymised data that cannot reasonably identify you for any lawful business purpose.

Communication Choices

If you receive marketing or promotional communications from us, you may opt out at any time by following the unsubscribe link in the email or by contacting us. Please allow up to ten business days to process your request. Even after opting out of marketing emails, you will continue to receive transactional and administrative messages related to your account and use of the Service.

How Long Do We Keep Your Information?

We retain personal information for as long as your account is active and for as long as necessary to fulfil the purposes described in this Privacy Policy, including legal, regulatory, and compliance obligations. If you request account deletion, we will remove your personal information from our systems within 30 days of receiving your request, except where retention is required by law or for legitimate business purposes. Aggregated and anonymised data may be retained indefinitely.

Your Rights and Access

You may access and update much of your personal information directly through your account settings. To request access to, correction of, or deletion of other personal information we hold, please contact us. We will respond to all requests within 30 days.

Additional rights for European residents are described in the "European Privacy Notice" section below.

Children's Privacy

The Service is intended for business users and is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have inadvertently collected such information, we will delete it promptly. If you believe a minor has provided us with personal information, please contact us.

How We Secure Your Information

We implement commercially reasonable technical and organisational measures to protect your personal information against accidental loss, unauthorised access, disclosure, alteration, and destruction. These measures include TLS encryption for data in transit, access controls, strong authentication requirements, and regular security reviews. We require our third-party service providers to maintain appropriate security standards as a condition of our contracts with them.

No method of transmission over the internet or electronic storage is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security. You transmit information to us at your own risk.

Links to Third-Party Sites

The Service may contain links to third-party websites and services that we do not own or control. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party site before providing personal information. We are not responsible for the privacy practices of third parties.

European Privacy Notice

This section applies to individuals located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland (collectively "Europe").

Legal Basis for Processing

We process your personal data on the following legal bases:

Contractual necessity — to perform our contract with you and deliver the Service.
Legitimate interests — for purposes such as improving the Service, preventing fraud, and communicating with users, where our interests are not overridden by your rights.
Consent — where we rely on your consent (e.g., optional cookies, sharing data with suppliers), you may withdraw it at any time without affecting prior processing.
Legal obligation — where processing is required to comply with applicable law or regulation.

Your European Data Subject Rights

If you are located in Europe, you have the right to:

Access — request a copy of the personal data we hold about you.
Rectification — request correction of inaccurate or incomplete data.
Erasure — request deletion of your personal data where it is no longer necessary or where you withdraw consent.
Restriction — request that we limit how we process your data in certain circumstances.
Portability — receive your data in a structured, machine-readable format and transfer it to another controller.
Object — object to processing based on legitimate interests and to direct marketing at any time.
Withdraw consent — where processing is consent-based, withdraw consent at any time.
Automated decision-making — not be subject to solely automated decisions with significant legal or similar effects. We do not engage in such automated decision-making.

To exercise any of these rights, please contact us. We will respond within 30 days.

International Data Transfers

Our servers are located outside Europe. When we transfer your personal data internationally, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions, or other lawful transfer mechanisms under applicable data protection law to ensure your data receives an equivalent level of protection.

Supervisory Authority Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with your local data protection supervisory authority:

EU residents — contact your national data protection authority. A list is available at the European Commission website.
UK residents — contact the Information Commissioner's Office (ICO).
Swiss residents — contact the Swiss Federal Data Protection and Information Commissioner (FDPIC).

We ask that you please contact us first so we have the opportunity to address your concerns directly.

California Privacy Disclosures

Do Not Sell My Personal Data (CCPA)

Chemizon does not sell personal information to third parties. California residents have the right to know what personal data we collect, to request its deletion, and to opt out of any sale. To submit a CCPA request, please contact us and include "CCPA Request" in your message.

Do Not Track

California law requires us to disclose how we respond to browser Do Not Track (DNT) signals. There is currently no industry-wide standard for recognising DNT signals, and we do not respond to them at this time. We will revisit this position as standards evolve.

Shine the Light

California residents who have an established business relationship with us may request information about whether we have shared personal information with third parties for their direct marketing purposes during the preceding calendar year (California Civil Code § 1798.83). To make such a request, please contact us.

Updates to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "last updated" date at the top of this page. For material changes, we will make reasonable efforts to notify you via email or an in-platform notice before the change takes effect. Your continued use of the Service after any update constitutes acceptance of the revised Privacy Policy. We encourage you to review this page periodically.