Privacy Policy

Introduction

In this Privacy Policy (“policy”) we explain what data we collect, why we collect it, and how we use it. Third Wave Analytics (“Third Wave”) takes data protection and data privacy extremely seriously and does everything possible to safeguard our website user’s data, and any customer or customer end-user data processed by our Lockbox LIMS application. The confidentiality and security of this data is our number one priority as a company.

If you have any questions or feedback on this policy, please contact us at [email protected].

Definitions

  • “Personal Data” means data that personally identifies or may be used to personally identify a person, whether directly or indirectly in combination with other data.
  • “Customer” means a prospective, current, or former client of Third Wave
  • “Controller” means the entity that makes decisions about purposes and means of processing Personal Data, regardless of whether that entity actually carries out any processing operations.
  • “Processor” means the entity which processes Personal Data on behalf of the Controller.
  • “Processing” refers to actions that can be performed in connection with data such as collection, use, storage and disclosure.

Third Wave will be the “Controller” of your Personal Data processed in connection with your use of the Third Wave Analytics website. We may also process the Personal Data of our Customer’s employees or our Customer’s end users in connection with the provision of Lockbox LIMS, in which case we are the “Processor” of that Personal Data. If we are the Processor of your Personal Data (i.e., not the Controller), please contact the Controller party to address your rights with respect to such data. We will work with the Controller to fulfill your request.

Acceptance of this Policy

By accessing our corporate website or using our Lockbox LIMS service in any manner, you acknowledge that you accept the practices and policies outlined herein, and you hereby consent to your information being collected, used, and shared as described below.

Changes & Questions

Third Wave may update this policy periodically. If you would like to know how this policy has changed, please contact us at [email protected].

GDPR

Third Wave complies with the European Union’s (“EU”) General Data Protection Regulation (“GDPR”). Visitors from the EU to our website, as well as EU end-users of our Lockbox LIMS system, are afforded the following rights, except as limited by applicable law:

  • Right to be Informed: You have the right to know what data Third Wave collects about you, how it is processed, stored, and for what purpose.
  • Right to Access: You have the right to access the personal information we gather about you, and understand how it has been collected, processed, shared, stored, and for what purposes.
  • Right to Correction: This is your right to request correction of the personal information we have about you if it is inaccurate or incomplete.
  • Right to Erasure: This is your right to request, subject to certain limitations under applicable law, that your personal information be erased from our possession (also known as the “Right to be forgotten”). However, if applicable law requires us to comply with your request to delete your information, fulfillment of your request may prevent you from using various Third Wave products or services.
  • Right to Restrict Processing: This is your right to request restriction of how and why your personal information is used or processed
  • Right to Data Portability: This is your right to receive the personal information we have about you and the right to transmit it to another party.
  • Right to Object to Processing: This is your right, in certain situations, to object to how or why your personal information is processed by companies or for direct marketing purposes
  • Right to not be subject to Automated Decision Making: You have the right to not have your data be processed via automated algorithms.

To exercise any of the GDPR rights listed above, please contact us at [email protected]

What Personal Data We Collect

When you sign up or subscribe to anything on our website, we ask for your personal information including but not limited to your first and last name, e-mail address, academic, non-profit, or government affiliation, telephone number, company or institution name, title / role. We may also collect information as you use our website and Lockbox LIMS service including but not limited to your IP address, device identifiers, web browser information, page view statistics, browsing history, usage information, geographic location information, log data, cookies and other tracking technologies (e.g. web beacons, pixel tags, etc.).

How Do We Process and Store Personal Data

Our use of Personal Data is in accordance with the General Data Protection Regulations 2016 (GDPR). The information we collect is stored in our CRM database and in our Lockbox LIMS application. When you contact Third Wave with a question, submit an RSVP, complete a web form, participate in a survey, or to ask for help, we’ll store that correspondence and your associated information for future reference in our CRM system as well.  When you browse our marketing pages, we will keep track of that for statistical purposes. We will never sell your personal info to third parties, and we won’t use your name or company in marketing statements without your permission.

What is our Purpose for Collecting Personal Data

We collect the information described above for the following reasons: 1) so that we can send you relevant sales and marketing information about our Lockbox LIMS product, about our company, or the laboratory field in general, 2) so that we can fulfill orders or support requests submitted by you, 3) to customize our service for you, 4) to carry out any administrative or technical matters, 5) to communicate with you about our service, recent updates or offers and 6) to comply with legal or contractual obligations.

You can access, change or delete your personal information at any time by contacting us at [email protected], or by mail at Third Wave Analytics, 7 Joost Ave Ste 201, San Francisco CA 94131. And, if you wish to further limit our use of your personal information, please contact us at [email protected].

Third Parties

Third Wave uses a limited number of third-party service providers to assist us in providing our services to customers. These third party providers provide additional capabilities to support our website and Lockbox LIMS service. These third parties may access, process, or store Personal Data in the course of providing their services. For identification of these sub-processors, and where they are located, please contact us at [email protected].

Cookies

In order to improve our services and the website, and provide more convenient, relevant experiences to you, we and our vendors may use “cookies”, “web beacons”, and similar devices to track your activities. By accessing our website you agree to our use of cookies in this manner.

EU-U.S. Data Privacy Framework (EU-U.S. DPF) and UK Extension

Third Wave complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, as set forth by the U.S. Department of Commerce.  Third Wave has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. Third Wave shall remain liable under the Principles if its agent processes such personal information in a manner inconsistent with the DPF Principles. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles, the Principles shall govern.  To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/

Purpose of Data Processing

Third Wave provides software applications for managing laboratories, including sample tracking, project management, storage, equipment, and supply management. In providing these tools, Third Wave processes the personal data that our customers submit to our services or instruct us to process on their behalf. While Third Wave’s customers decide what data to submit, it typically includes information about their customers, research subjects, and employees. To fulfill these purposes, Third Wave may access the data to provide the services, to correct and address technical or service problems, or to follow instructions of the Third Wave customer who submitted the data, or in response to contractual requirements.

Inquiries & Complaints

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, Third Wave commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU and UK individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, should first contact Third Wave at: [email protected], or by mail at Third Wave Analytics, 7 Joost Ave Ste 201, San Francisco CA 94131. Third Wave will respond within 45 days.

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, Third Wave commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com/dpf-dispute-resolution for more information or to file a complaint.  The services of JAMS are provided at no cost to you. Under certain circumstances, you may invoke binding arbitration for complaints regarding DPF compliance when other dispute resolution procedures have been exhausted.

U.S. Federal Trade Commission enforcement

Third Wave’s commitments under the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF are subject to the investigatory and enforcement powers of the United States Federal Trade Commission (FTC) to ensure compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF outlined in this notice.

Compelled disclosure

Third Wave may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.