Biotech United LLC
Biotech United LLC - Privacy Policy

Biotech United LLC

Privacy Policy

We take your privacy very seriously at Biotech United. This Privacy Policy provides important information regarding our data practices, including how and why we collect, use, disclose, share, store, and retain your personal information. It also outlines your rights in relation to your personal information, and how you can contact us or relevant supervisory authorities if you have any concerns or requests.

As a company dedicated to connecting top talent with biotech and biopharma employers, we collect and manage personal information for the purpose of offering tailored hiring services. This privacy policy applies to all individuals who interact with Biotech United, whether as job seekers (talent), employers (clients), or other users.

We are subject to data protection laws that apply in regions where we operate:

  • For users in the European Economic Area (EEA), we are governed by the EU General Data Protection Regulation (GDPR), which regulates how personal data is processed and provides individuals with specific rights.
  • For users based in California, we adhere to the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), which ensures enhanced privacy protections for residents of California.
  • In both cases, we act as a “controller” of personal information under the GDPR, and as a “business” under the CCPA/CPRA.

1. Key Terms

It would be helpful to start by explaining some key terms used in this policy:

Term Definition
We, us, our Biotech United, Inc., including any of our group companies, subsidiaries, or affiliated entities involved in providing our platform services.
Our representative John Gibson, jlgibson@gtlg.net, +1 770-851-8497
Our Data Protection Officer John Gibson, jlgibson@gtlg.net, +1 770-851-8497
Personal information Any information relating to an identified or identifiable individual.
Special category personal information This refers to sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, philosophical beliefs, or trade union membership; genetic and biometric data; and data concerning health, sex life, or sexual orientation. Please note that Biotech United does not actively collect or process special category data unless explicitly provided for specific roles within the biotech industry that require such information for hiring or employment purposes.
Sensitive Personal Information Personal data that includes social security numbers, driver’s license and passport numbers, financial account information, geolocation data, racial or ethnic origin, religious beliefs, or union membership. Biotech United does not process sensitive personal information unless necessary for compliance with applicable laws or to provide specific services within the hiring process.
Biometric Information Biometric data includes physiological or behavioral characteristics, such as fingerprints, facial recognition, voiceprints, and other personal biological or behavioral data. Biotech United does not collect or process biometric data.

2. Personal Information We Collect About You

We may collect and use the following personal information, including sensitive personal information, that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household:

Categories of Personal Information Specific Types of Personal Information Collected
Identifiers (e.g., name, alias, postal address, online identifier, IP address, email address, social security number, etc.) Name, email address, phone number, account name, user ID, etc.
Information related to an individual (e.g., physical characteristics, social security number, financial information) Resumes, work experience, bank account or payment info (processed by Stripe), etc.
Account log-in, financial account information Bank account number, payment card details (processed by third parties like Stripe)
Characteristics of protected classifications None collected or relevant for Biotech United.
Commercial Information Records of job applications, roles applied for, hiring history, and skills assessments
Biometric Information Not applicable for Biotech United.
Internet or electronic network activity Browsing history, usage patterns on the platform, job views, etc.
Geolocation Data IP-based location for job match optimization (if relevant).
Audio, electronic, visual, thermal, olfactory, or similar information Not applicable unless video interviews are conducted.
Professional or employment-related information Resumes, portfolios, employment history, skills, job preferences (e.g., full-time, freelance), and other professional documents uploaded by Users.
Education Information Degrees, certifications, and educational background shared by Users.
Inferences drawn from the above User profile based on preferences, job searches, and application history to personalize matches and recommendations.
Sensitive Personal Information (e.g., racial/ethnic origin, religious beliefs) Voluntary diversity data (e.g., disability/veteran status) for hiring insights, but this is optional.
Health Information Not collected unless directly relevant to job requirements or legal compliance (e.g., disability status for accommodations).
Sex Life or Sexual Orientation Not collected unless required for specific job or legal purposes.

If you do not provide personal information required to provide our services to you, it may delay or prevent us from fulfilling your job placement, recruitment, or other platform-related services.

3. How Your Personal Information is Collected

We collect personal information from the following categories of sources:

  • Directly from You: Personal information is collected directly from you when you interact with our platform, including through the website, mobile apps, emails, phone calls, or text messages.
  • Third Parties with Your Consent: We may collect data from third parties such as your bank or EOR providers (e.g., for tax or employment-related data) with your explicit consent.
  • Advertising Networks: We may use third-party advertising networks that collect personal data for purposes such as advertising, user profiling, and tracking. These networks may use cookies and similar technologies to track interactions with our ads.
  • Internet Service Providers: Data may be collected from internet service providers (ISPs) to monitor and optimize the user experience and performance of our platform.
  • Data Analytics Providers: We may work with third-party analytics providers who gather insights on user behavior and help us improve the platform’s functionality, design, and performance.
  • Government Entities: In certain cases, we may be required to collect or share data with government authorities to comply with legal or regulatory requirements.
  • Operating Systems and Platforms: We may collect information from operating systems and platforms when you access our platform through mobile apps or other devices.
  • Social Networks: If you choose to connect your profile to a social network account (e.g., LinkedIn), we may collect information from that network in accordance with their privacy policies.
  • Publicly Accessible Sources: Information may be collected from publicly accessible sources, such as public records, job boards, or other databases, when required for compliance or to enhance job matching.
  • Cookies on Our Website: Our website uses cookies to collect data on user interactions, improve the functionality and performance of the platform, and personalize the user experience.
  • IT and Security Systems:
    • Monitoring of our website and platform to ensure security and performance.
    • Logging and monitoring of system activities, including communications systems and email servers, to ensure the integrity and security of our platform.
    • Any other relevant monitoring systems in place to ensure secure access to the platform, including user activity tracking for troubleshooting and platform optimization.

4. How and Why We Use Your Personal Information

Under data protection laws, we can only use your personal information if we have a valid reason for doing so. These reasons include:

  • To comply with our legal and regulatory obligations
  • For the performance of our contract with you, or to take steps at your request before entering into a contract
  • For our legitimate interests or those of a third party
  • Where you have given consent

A legitimate interest refers to when we have a business or commercial reason to use your information, as long as it does not override your own rights and interests.

What we use your personal information for Our reasons
To provide our platform and services to you (e.g., matching talent with biotech companies, creating profiles) For the performance of our contract with you or to take steps at your request before entering into a contract
To prevent and detect fraud against you or Biotech United For our legitimate interests or those of a third party, i.e., to minimize fraud that could harm both parties
Conducting identity verification and background checks To comply with our legal and regulatory obligations (e.g., for compliance with hiring regulations in the biotech industry)
Gathering and providing information required for audits, regulatory inquiries, or investigations To comply with our legal and regulatory obligations
Ensuring adherence to business policies (e.g., security and privacy protocols) For our legitimate interests or those of a third party, i.e., to maintain effective operations and service delivery
Operational improvements (e.g., system performance, training, and quality control) For our legitimate interests or those of a third party, i.e., to enhance the quality of service we provide
Ensuring the confidentiality of commercially sensitive information For our legitimate interests or those of a third party, i.e., to protect proprietary information, trade secrets, and client data
Statistical analysis to improve business performance (e.g., customer satisfaction, financial performance) For our legitimate interests or those of a third party, i.e., to optimize operations and provide better services at competitive prices
Preventing unauthorized access and modifications to our systems For our legitimate interests or those of a third party, i.e., to protect against cyber threats and ensure platform security
Updating customer records (e.g., ensuring accurate contact details) For the performance of our contract with you or to take steps at your request before entering into a contract
Marketing our services to customers, prospective clients, and those who have shown interest in biotech talent services For our legitimate interests or those of a third party, i.e., to grow our business and foster relationships with potential clients and talent
Conducting credit checks via external credit reference agencies (if applicable for certain services) For our legitimate interests or those of a third party, i.e., to ensure financial reliability of clients using premium services
External audits for compliance, e.g., quality checks or financial audits For our legitimate interests or those of a third party, i.e., to demonstrate high operational standards
To ensure safe working practices and staff assessments To comply with our legal and regulatory obligations and for legitimate business interests, e.g., to ensure a safe environment for employees and contractors
To provide our platform and services to you (e.g., matching talent with biotech companies, creating profiles) For the performance of our contract with you or to take steps at your request before entering into a contract

For EEA Data Subjects: The above table does not apply to special category personal information, which we will only process with your explicit consent.

5. EEA Data Subjects: Promotional Communications

We may use your personal information to send you updates (by email, text message, telephone, or post) about our products and services, including exclusive offers, promotions, or new developments related to talent acquisition and biotech industry services.

We have a legitimate interest in processing your personal information for promotional purposes (see above “How and why we use your personal information”). This means we do not usually need your consent to send you promotional communications. However, where consent is required (e.g., for certain marketing activities or channels), we will request it separately and clearly.

We will always treat your personal information with the utmost respect and will never sell or share it with other organizations outside the Biotech United group for marketing purposes.

You have the right to opt-out of receiving promotional communications at any time by:

  • Contacting us at [contact details for marketing opt-out]
  • Using the “unsubscribe” link in our emails or the “STOP” option in text messages

We may ask you to confirm or update your marketing preferences if you request further products and services from us in the future or if there are changes in law, regulation, or the structure of our business.

6. Who We Share Your Personal Information With

We routinely share personal information with:

  • Our affiliates, including companies within the Biotech United group
  • Service providers we use to help deliver our services to you, such as talent acquisition tools, payment service providers, and communication platforms
  • Other third parties that assist us in running our business, such as marketing agencies, website hosts, and data storage providers
  • Third parties approved by you, including social media sites you choose to link your account to or third-party payment providers
  • Credit reporting agencies (if applicable)
  • Our insurers and brokers
  • Our banks and financial institutions
  • Employer of Record Services

We only allow our service providers to handle your personal information if we are satisfied they take appropriate measures to protect it. We also impose contractual obligations on service providers to ensure they can only use your personal information to provide services to us and to you.

We may also share personal information with external auditors, for example, in relation to ISO or other accreditation audits, or the audit of our accounts.

We may disclose and exchange information with law enforcement agencies and regulatory bodies to comply with our legal and regulatory obligations.

In the event of a business transaction, such as a merger, acquisition, or restructuring, we may need to share personal information with potential buyers or other relevant parties. While we typically anonymize information, this may not always be possible, and the recipient of your information will be bound by confidentiality obligations.

We will not share your personal information with any other third party unless required for the purposes outlined above.

7. Personal Information We Sold or Shared

In the preceding 12 months, we have sold or shared the following categories of personal information:

  • Identifiers (e.g., a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers)
  • Information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including, but not limited to, their name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information
  • Characteristics of protected classifications under California or federal law
  • Commercial information (e.g., records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies)
  • Biometric information
  • Internet or other electronic network activity information (e.g., browsing history, search history, and information regarding a consumer’s interaction with an internet website, application, or advertisement)
  • Geolocation data
  • Audio, electronic, visual, thermal, olfactory, or similar information
  • Professional or employment-related information
  • Education information, defined as information that is not publicly available personally identifiable information as defined in the FERPA –and–
  • Inferences drawn from any of the information identified above to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes

8. Categories of Personal Information We Disclosed for a Business Purpose

In the preceding 12 months, we have not sold or shared any personal information for purposes other than those described in this Privacy Policy, including to third parties for marketing purposes. If we do engage in such activities in the future, we will clearly communicate this and allow you to control your preferences:

  • Identifiers (e.g., a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, driver’s license number, passport number, or other similar identifiers)
  • Information that identifies, relates to, describes, or is capable of being associated with a particular individual, including, but not limited to, name, signature, address, telephone number, education, employment history, bank account number, credit card number, or any other financial, medical, or health insurance information
  • Commercial information (e.g., records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies)
  • Internet or other electronic network activity information (e.g., browsing history, search history, and information regarding a consumer’s interaction with a website, application, or advertisement)
  • Geolocation data
  • Professional or employment-related information
  • Education information (defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (FERPA))
  • Inferences drawn from any of the information identified above to create a profile about a consumer reflecting their preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

We do not sell personal information to third parties for direct marketing purposes. Any sharing of your personal information is strictly governed by this Privacy Policy, and we ensure that all third parties with whom we share information are bound by appropriate confidentiality and data protection agreements.

9. California Consumers: Your Rights Under the CCPA/CPRA.

Under the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), and other applicable privacy and data protection laws, you have the following rights, exercisable free of charge:

Disclosure of Personal Information We Collect About You

You have the right to know, and request disclosure of:

  • The categories of personal information we have collected about you, including sensitive personal information
  • The categories of sources from which the personal information is collected
  • The categories of third parties to whom we disclose personal information, if any
  • The specific pieces of personal information we have collected about you

Please note that we are not required to:

  • Retain personal information about you that was collected for a single, one-time transaction if that information is not retained in the ordinary course of business
  • Re-identify or link data that is not maintained in a manner that would be considered personal information
  • Provide the personal information to you more than twice in a 12-month period

Disclosure of Personal Information Sold, Shared, or Disclosed for a Business Purpose

In connection with any personal information we may sell, share, or disclose to a third party for a business purpose, you have the right to know:

  • The categories of personal information about you that we sold or shared and the categories of third parties to whom the personal information was sold or shared
  • The categories of personal information we disclosed about you for a business purpose and the categories of persons to whom the personal information was disclosed

You have the right to opt-out of the sale or sharing of your personal information or its sharing for the purpose of targeted behavioral advertising. If you exercise your right to opt-out, we will refrain from selling or sharing your personal information, unless you provide express authorization for the sale or sharing.

To opt-out of the sale or sharing of your personal information, visit our homepage and click on the “Do Not Sell or Share My Personal Information” link here: www.biotechunited.com.

Right to Limit Use of Sensitive Personal Information

You have the right to limit the use and disclosure of your sensitive personal information to the necessary purposes, including:

  • Performing services or providing goods reasonably expected by an average consumer
  • Ensuring security and integrity of the service, including non-personalized advertising shown during a current interaction with us
  • Performing services on our behalf, such as maintaining accounts, customer service, processing payments, and similar tasks
  • Undertaking activities to maintain or improve the safety, quality, or functionality of our services

To limit the use of your sensitive personal information, visit our homepage and click on the "Limit the Use of My Sensitive Personal Information" link here: [URL].

Right to Deletion

Upon receipt of a verifiable request from you, we will:

  • Delete your personal information from our records
  • Direct third parties to whom we have sold or shared your information to delete it, unless doing so is impossible or requires disproportionate effort

We may not delete your personal information if it is necessary to:

  • Complete a transaction for which the personal information was collected, fulfill a contract, or provide goods/services you requested
  • Ensure security and integrity
  • Debug to repair errors impairing functionality
  • Exercise free speech or comply with legal obligations
  • Undertake public or scientific research adhering to applicable ethics and privacy laws

Right of Correction

If we maintain inaccurate personal information, you have the right to request correction. Upon receipt of a verifiable request, we will use commercially reasonable efforts to correct inaccurate information.

Protection Against Retaliation

You have the right to not be retaliated against for exercising your rights under the CCPA/CPRA. This means we cannot:

  • Deny goods or services
  • Charge different prices or rates for goods or services, including discounts or other benefits
  • Provide a different level or quality of goods or services

Please note, we may charge different prices or provide different services if reasonably related to the value of your personal information to our business. We may also offer loyalty programs, rewards, or discounts consistent with these rights.

10. EEA Data Subjects: Your Rights Under the EU GDPR.

  • Right to Be Informed: The right to know or be notified about the collection and use of your personal information
  • Right to Access: The right to be provided with a copy of your personal information (the right of access)
  • Right to Rectification: The right to require us to correct any mistakes in your personal information
  • Right to be Forgotten: The right to require us to delete your personal information—in certain situations
  • Right to Restriction of Processing: The right to require us to restrict processing of your personal information—in certain circumstances, e.g., if you contest the accuracy of the data
  • Right to Data Portability: The right to receive the personal information you provided to us, in a structured, commonly used, and machine-readable format and/or transmit that data to a third party—in certain situations
  • Right to Object: The right to object:
    • At any time to your personal information being processed for direct marketing (including profiling)
    • In certain other situations to our continued processing of your personal information, e.g., processing carried out for our legitimate interests
  • Right Not to be Subject to Automated Individual Decision-Making: The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you

For further information on each of those rights, including the circumstances in which they apply, see the guidance from the UK Information Commissioner's Office (ICO) on individual rights under the EU General Data Protection Regulation.

11. How to Exercise Your Rights.

If you would like to exercise any of your rights as described in this Privacy Policy, you can do so here: [https://www.biotechunited.com/contact].

  • Please note that you may only make a CCPA/CPRA-related data access or data portability disclosure request twice within a 12-month period.
  • If you choose to contact us directly by [website/email/phone/in writing], you will need to provide us with:
    • Enough information to identify you [(e.g., your full name, address, and customer or matter reference number)]
    • Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill) –and–
    • A description of what right you want to exercise and the information to which your request relates
  • We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person's behalf.
  • Any personal information we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

12. EEA Data Subjects: Where Your Personal Information is Held.

Information may be held at our offices and those of our [group companies], third-party agencies, service providers, representatives, and agents as described above (see above: “Who We Share Your Personal Information with”).

Some of these third parties may be based outside the EEA. For more information, including on how we safeguard your personal information when this occurs, see below: “Transferring Your Personal Information Out of the EEA.”

13. EEA Data Subjects: Transferring Your Personal Information Out of the EEA.

To deliver services to you, it is sometimes necessary for us to share your personal information outside the EEA, e.g.:

  • [With our offices outside the EEA]
  • With your and our service providers located outside the EEA
  • If you are based outside the EEA –or–
  • [Where there is an international dimension to the services we are providing to you]

These transfers are subject to special rules under European and UK data protection law.

[The following countries to which we may transfer personal information have been assessed by the European Commission as providing an adequate level of protection for personal information: [list of countries].]

[Except for the countries listed above, these OR These] non-EEA countries do not have the same data protection laws as the United Kingdom and EEA. We will, however, ensure the transfer complies with data protection law and all personal information will be secure. Our standard practice is to use standard data protection contract clauses that have been approved by the European Commission. To obtain a copy of those clauses [details of where they have been made available where possible providing a link to the mechanism or information].

If you would like further information, please contact [us OR] our Data Protection Officer (see “How To Contact Us” below).

14. Keeping Your Personal Information Secure.

We have appropriate security measures in place to prevent your personal information from being accidentally lost, accessed, or used in an unauthorized way. We limit access to your personal information to those with a genuine business need, and those processing your information will do so in an authorized manner and are subject to a duty of confidentiality.

We continually test our systems and are ISO 27001 certified, meaning we follow industry-leading standards for information security. We also have procedures in place to deal with any suspected data security breach. If a breach occurs, we will notify you and any applicable regulator as required by law.

For additional advice on protecting your information and devices against fraud, identity theft, and viruses, we recommend visiting www.getsafeonline.org, which is supported by HM Government and leading businesses.

15. EEA Data Subjects: How to File a GDPR Complaint.

We hope that [we OR our Data Protection Officer] can resolve any query or concern you raise about our use of your information.

The GDPR also gives you the right to lodge a complaint with a supervisory authority, in the European Union (or EEA) state where you work, normally live, or where any alleged infringement of data protection laws occurred.

16. Changes to This Privacy Notice.

This privacy notice was published on [date] and last updated on [date].

We may change this privacy notice from time to time–when we do, we will inform you via email.

17. How to Contact Us.

Please contact us and/or our Data Protection Officer by email, or telephone if you have any questions about this privacy policy or the information we hold about you.

Our contact details are shown below:

Our contact details Our Data Protection Officer's contact details
support@biotechunited.com jlgibson@gtlg.net
+1 888 284 9674 +1 770 851 8497

18. Do You Need Extra Help?

If you would like this notice in another format (for example: audio, large print, braille) please contact us (see “How to contact us” above).