Lawful Basis for Data Processing
At FollowX Pharma, we prioritize the lawful, transparent, and fair processing of user data in compliance with applicable United States privacy laws, including the California Consumer Privacy Act and other relevant statutes. We collect and process data only when there is a legitimate foundation, including user consent, contractual necessity, or compliance with legal obligations. All activities associated with user data are performed for clear, specific, and lawful purposes such as providing access to pharmaceutical information, improving website functionality, and safeguarding the security of our services. Data processing that does not meet legal or regulatory requirements is strictly prohibited. We ensure transparency by notifying users regarding the nature and purpose of data collection, and we do not use user data for automated decision-making or profiling without explicit notification and consent. The data we gather may encompass personal identifiers, contact information, website usage details, and preferences, exclusively used for the outlined legitimate purposes. Our collection methods are designed to be non-intrusive and follow industry best practices. Any third-party service providers involved in data processing have been vetted to meet our thorough compliance standards. Regular internal reviews ensure our handling of data consistently aligns with ongoing legal developments in the United States. By setting these lawful foundations, we commit to upholding user trust and accountability at every step of the data lifecycle.
User Data Rights
Users of FollowX Pharma are vested with fundamental rights regarding their personal information in accordance with applicable U.S. data privacy laws. These rights include the ability to access, correct, update, or delete their personal data held by us. Users have the right to request details about the types of data collected, the means through which such data is processed, and the specific purposes it serves. They can at any time object to further processing of their data, restrict its use, or exercise their right to data portability, permitting them to obtain a copy of their personal data in a structured, commonly used, and machine-readable format. Where consent forms the basis of data processing, users may withdraw consent at any time without detriment. Requests to exercise these rights will be addressed in a reasonable timeframe and in accordance with applicable United States privacy regulations. No user will experience discrimination or adverse treatment for exercising their privacy rights. To initiate any rights-related request or to seek clarification, users may contact the data controller at [email protected]. Each request is processed following verification of the user's identity, to ensure data integrity and security. Our internal policies provide for the rectification, erasure, and restriction of personal data as mandated by U.S. law. We are dedicated to maintaining transparency regarding how and why personal information is handled and commit to informing users of significant changes in processing practices or in response to privacy law developments.
Data Collection and Use
FollowX Pharma collects personal data exclusively to facilitate user access to pharmaceutical information, enhance user experience, and comply with legal obligations. Our collection practices encompass data provided directly by the user—such as names, email addresses, and submitted feedback—as well as automated data captured through browser cookies, server logs, and analytics tools. Data collected is processed to personalize pharmaceutical recommendations, respond to user inquiries, provide critical updates, conduct website analytics, and strengthen platform security. We also may use collected data to curate and distribute periodical newsletters, and announcements, provided users have given prior consent. The data we obtain is not sold or distributed to third parties for commercial purposes. We use robust encryption and authentication methods to secure all personal information, whether in transit or at rest. Our data retention policy ensures that information is kept only as long as necessary for the purposes for which it was collected, or longer where required by law. Anonymization and aggregation techniques are frequently employed for statistical and research purposes, ensuring user identities remain protected. All data is processed within the United States and is subject to U.S. jurisdictional requirements. Careful logs are maintained of all data access and use, and audits are routinely conducted to verify compliance. We commit to continuous improvement of our data collection and management processes in line with advancements in privacy law and technology. If you have questions about our collection methods, contact us at [email protected].
International Data Transfers and Data Protection
Although FollowX Pharma is operated in the United States, we recognize the global nature of the internet and our potential to interact with users internationally. Data provided by users may be transferred to, processed, and stored in the United States and, in limited circumstances, to vetted and compliant service providers or affiliates located in other countries. When transferring personal information internationally, we implement rigorous safeguards to maintain privacy and ensure compliance with both U.S. and any relevant foreign data protection requirements. Standard contractual clauses, data processing agreements, and robust encryption protocols are employed to protect information during transfers. Only partners and service providers with proven data protection frameworks compatible with our high standards are engaged for such activities. All data transfers are logged and subject to regular audits to confirm adherence to policy. The physical infrastructure supporting our website is secured by multiple layers of security controls, including regular vulnerability assessments, access restrictions, and comprehensive monitoring. In the event of a cross-border data transfer where local jurisdiction involves heightened privacy requirements, we act promptly to ensure compliance. Users may request further detail on specific protective measures by contacting us at [email protected]. Our leadership team makes international data protection a strategic priority, revisiting protocols on a regular basis to respond to global privacy challenges.
Data Security and Breach Notification
Ensuring the security of personal data is at the core of our operational philosophy at FollowX Pharma. We have deployed advanced security measures, including industry-standard encryption, firewalls, regular system monitoring, access controls, and multi-factor authentication to guard against unauthorized access, loss, or dissemination of sensitive information. Our infrastructure is subject to periodic penetration testing and continuous monitoring for emerging vulnerabilities or threats. We maintain a dedicated incident response team trained to detect, assess, and address security incidents or data breaches promptly. In the unlikely event of a breach involving user data, we will notify affected users and relevant authorities in accordance with U.S. federal and state law within mandated timeframes. Notifications will contain actionable information regarding the nature of the breach, the types of information compromised, potential impacts, and steps taken or recommended to mitigate harm. We systematically review the effectiveness of our technical and organizational safeguards and update them as necessary. Risk assessments are performed regularly to identify and address evolving threats. Employees and partners receive ongoing training on data privacy and security protocols. Our breach notification procedures are detailed in internal documentation and supported by secure communication channels. Please reach out to [email protected] for additional details on our security posture. By embedding security into every aspect of our practice, we reassure users that their data is handled with the utmost care and diligence.
Children’s Privacy
FollowX Pharma is committed to protecting the privacy of minors and does not knowingly collect, process, or solicit personal information from children under the age of 13, or other age limitations as defined by U.S. federal and state laws. Our website and resources are not directed at individuals under the required age, and we take comprehensive steps to identify and restrict the access or submission of personal data by children. If it is discovered that a minor's information has been inadvertently collected, we act immediately to delete the data from our systems and prevent any future collection, except where retention is required by law. Parents and guardians are encouraged to monitor children’s online activity and can contact us at [email protected] to review or request deletion of their child’s data. Our staff undergo specialized training to recognize and appropriately manage content related to minors. We refrain from using collected data for the purposes of targeted advertising or profiling to minors. Awareness campaigns and continuous site monitoring are essential components of our children’s privacy protection strategy. Industry standards and legal obligations guide our approach, and we monitor evolving legislative requirements to ensure consistent adherence. The priority of children’s safety underpins our entire organizational culture. For specific concerns or reports related to children’s data, our dedicated privacy contact is available to provide prompt assistance and resolution.
Contact Information and Complaints
For all questions, data subject requests, or to register a complaint regarding our privacy and data protection practices, users are encouraged to contact our data controller, Veronica Ashford, at [email protected]. Written correspondence may be directed to: Veronica Ashford, Brunel’s SS Great Britain, Great Western Dockyard, Gas Ferry Road, Bristol, BS1 6TY, United Kingdom. Upon receipt of any inquiry or complaint, we will acknowledge and address the matter promptly, in accordance with U.S. privacy laws. We are committed to working collaboratively to resolve concerns in a fair and timely manner and provide clear guidance to facilitate users’ understanding of their privacy rights. If a satisfactory resolution cannot be reached, users retain the ability to escalate concerns to the applicable regulatory authorities. All communications are handled confidentially and securely, with access strictly limited to authorized personnel. Our complaint handling process is subject to continuous improvement, reflecting changes in privacy law and best industry practices. FollowX Pharma values user feedback as a vital driver in shaping our privacy program and enhancing transparency. The rights and trust of our users remain our highest priority in all privacy-related matters.
Write a comment