Cryoport Privacy Policy
Last Updated: February 20, 2023
Welcome to Cryoport Systems, LLC (“Cryoport” “we” or “us”) and our Privacy Policy (“Privacy Policy”). This Privacy Policy is important and affects your legal rights, so please read carefully.
By accessing or using https://cryoport.com, and various related Cryoport products, websites and services (collectively, the “Cryoport Services”), you agree to be bound by this Privacy Policy and all of the terms incorporated herein by reference. By using the Cryoport Services and/or submitting or collecting any personal data via the Cryoport Services, you accept and expressly consent and agree to our practices surrounding the collection, use, and sharing of your personal information in accordance with this Privacy Policy. If you do not consent and agree with the terms of this Privacy Policy, you cannot, and we do not authorize you to, access, browse, or use the Cryoport Services.
Our processing of personal information, such as your name, address, e-mail address, or telephone number, will be undertaken consistent with the requirements of applicable privacy laws, including, but not limited to, the California Consumer Privacy Act (“CCPA”), the California Privacy Rights Act (“CPRA”), the EU General Data Protection Regulation (“GDPR”), the UK General Data Protection Regulation (“UK GDPR”), and the Canadian Personal Information Protection and Electronic Documents Act (“PIPEDA”).
2. Information We Collect
2.1 Personal Information We Collect Directly from You
We receive personal information as described to you at the point of collection, pursuant to your consent, and/or when you voluntarily provide us with personal information, including:
(1) individual information (such as your e-mail address and phone number);
(2) company information (such as your company’s address); and
(3) other identifying information that you voluntarily choose to provide to us, including without limitation unique identifiers such as passwords, and personal information in messages you send to us.
We may also collect additional information, which may be personal information, as otherwise described to you at the point of collection or pursuant to your consent.
2.2 Information We Automatically Collect When You Use Our Site
In order to access and use certain areas or features of the Cryoport Services, you consent to our collection and use of certain information about your use of the Cryoport Services through the use of tracking technologies or by other passive means. Your consent to our access and use of this “passively collected” information includes, but is not limited to, the domain name of the website that allowed you to navigate to the Cryoport Services, search engines used, the internet protocol (IP) address used, the length of time spent on the Cryoport Services, the pages you looked at on the Cryoport Services, other webpages you visited before and after visiting the Cryoport Services, the type of device and/or internet browser you have, the frequency of your visits to the Cryoport Services, and other relevant statistics (collectively “Traffic Data”):
3. How We Collect InformationWe collect information (including personal information and Traffic Data) when you use and interact with the Cryoport Services, and in some cases from third party sources. Such means of collection include:
4.1. Tracking Tools
We may use tools outlined below in order to provide the Cryoport Services, advertise to, and better understand users.
4.2. Behavioral Advertising
We may use a type of advertising commonly known as interest-based or online behavioral advertising. This means that some of our partners use Tracking Tools to collect information about a user’s online activities to display Cryoport ads to the user based on the user’s interests (“Behavioral Advertising”). Our partners may include third-party advertisers and other third-party service providers, and such partners may collect information when you use the Cryoport Services, such as IP address, mobile device ID, operating system, and demographic information. These Tracking Tools help Cryoport learn more about our users’ demographics and Internet behaviors.
4.3. Options for Opting out of Cookies and Mobile Device Identifiers
If we process Cookies based on your consent (as indicated at the time of collection of such data), you have the right to withdraw your consent at any point in time by contacting us at OptOut@Cryoport.com. Please note, if you exercise this right, you may have to provide your consent on a case-by-case basis to enable you to utilize some or all of the Cryoport Services.
You may be able to reject Cookies and/or mobile device identifiers by activating the appropriate setting on your browser or device. Although you are not required to accept Cryoport’s Cookies or mobile device identifiers, if you block or reject them, you may not have access to all features available through the Cryoport Services.
This Privacy Policy does not cover the use of Cookies and other Tracking Tools by any third parties, and we are not responsible for the privacy practices of any third party. Please be aware that some third-party Cookies can continue to track your activities online even after you have left the Cryoport Services.
4.4. “Do Not Track” (DNT) and Universal Opt-Out Preference Signals
Some web browsers (including Safari, Internet Explorer, Firefox, and Chrome) incorporate a “Do Not Track” (DNT) or similar feature that signals to web services that a visitor does not want to have their online activity and behavior tracked. If a web service operator elects to respond to a particular DNT signal, the web service operator may refrain from collecting certain personal information about the browser’s user. Not all browsers offer a DNT option and there is currently no industry consensus as to what constitutes a DNT signal. For these reasons, many web service operators, including Cryoport, do not proactively respond to DNT signals. For more information about DNT signals, visit http://allaboutdnt.com.
New standards are being developed for a Universal Opt-Out Mechanism, such as the Global Privacy Control (GPC), which allow users with GPC-enabled browsers and devices to send a signal that will communicate the user’s request to opt-out of sales of their personal information and to opt-out of certain sharing of their personal information. The CPRA and other laws allow for the acceptance of Opt-Out Preference Signals such as the GPC, as an option for users to transmit an Opt-Out of selling/sharing personal information. If we detect and recognize such a signal from your device or browser, we will honor it.
5. How We Use Your InformationWe do not engage in automated decision making. We may use information (including information that has been de-identified and/or aggregated) to better understand who uses the Cryoport Services and how we can deliver a better user experience. We use information, including personal information, to provide the Cryoport Services and to help improve the Cryoport Services, to develop new services, and to advertise our services. Specifically, such use may include:
In certain circumstances, and in order to perform the Cryoport Services, we may share certain information about you as described in this section:
We have collected the following categories of sensitive personal information from consumers within the last twelve months:
We do not use or disclose sensitive personal information for purposes other than those specified in the CCPA/CPRA.
8. Storage and Security of Information
Any information you send to us electronically, while using the Cryoport Services or otherwise interacting with us, may not be secure when it is transmitted to us. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us. Please be aware, despite our best efforts, no security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” Any information you send us through any means is transmitted at your own risk.
9. Your Choices9.1 Information You Provide
You can choose whether or not to provide personal information through the Cryoport Services. We will not discriminate against you for exercising any of your rights relating to your personal information and will not (i) deny you goods or services, (ii) provide you with a different level or quality of services, or (iii) charge you different prices for services for doing so.
9.2 California Privacy Rights
In the preceding 12 months, we collected and disclosed for a business purpose the following categories of personal information about California consumers:
Category |
Examples |
Collected? |
Categories of Recipients |
Identifiers |
Name, address, e-mail address, IP address |
Yes |
Our customers |
Personal information categories listed in the California Customer Records statute |
Name, professional-related information; and employment-related information |
Yes |
Our customers |
Protected classification characteristics under California or federal law |
Name, age, citizenship, nationality, ancestry, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, proof of eligibility to work |
Yes |
Our customers |
Commercial information |
Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
Yes |
Our customers |
Internet or other similar network activity |
Browsing history, search history, information on a consumer’s interaction with the Cryoport Services |
Yes |
Organizations providing services to Cryoport |
Geolocation data |
Location and movement data |
Yes |
Organizations providing services to Cryoport |
Professional or employment-related information |
Proof of eligibility to work, resumé, other professional-related information and employment-related information |
Yes |
Organizations providing services to Cryoport |
Biometric information |
Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. |
Yes |
Organizations providing services to Cryoport |
Non-Public Education Information |
Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records |
Yes |
Organizations providing services to Cryoport |
Inferences from the foregoing |
Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. |
No |
n/a |
Purposes for Collection, Use, and Sharing. We use and disclose the personal information we collect for our commercial purposes, as further described in this Privacy Policy, including for our business purposes with our partners and service providers as follows:
Your Rights. If you are a California resident you may have the following rights under the CCPA/CPRA in relation to personal information we have collected about you, to the extent required by the CCPA/CPRA and subject to verification:
Right to Know/Access: The right to request certain information about our collection and use of personal information about you as described below:
Right to Delete: The right to request that we delete certain personal information we have about you.
Freedom from Discrimination: You have the right to be free from unlawful discrimination for exercising any of your privacy rights.
Right to Correct: You have the right to request that we correct inaccurate personal information regarding the information you provide us.
Right to Restrict the Use of Sensitive Personal Information: You have the right to restrict the use of your sensitive personal information.
Right to Access Information on Automated Decision-Making: You have the right to access information collected through automated decision-making. Additionally, you can opt-out of our use of automated decision-making related to your personal information.
To make a request in relation to the above rights, please contact us using the information in Section 14 below. To fulfil your request, we will need to verify your identity. Only you or someone legally authorized to act on your behalf may make a request related to your personal information. To designate an authorized agent, the authorized agent must provide sufficient information that allows us to reasonably verify that you authorize them to act on your behalf.
9.3 Canada, European Union and United Kingdom Privacy Rights
If our processing of your personal information is subject to GDPR, UKGDPR, and/or PIPEDA, and unless subject to an exemption, you may have the following rights with respect to your personal information:
We will need to verify your identity to process any requests described in this Section and may deny your request if we are unable to verify your identity. Government or other identification may be required.
If you are a resident of the European Economic Area (“EEA”), when we process your personal information, we will only do so in the following situations:
If your personal data is subject to GDPR or UK GDPR, we will transfer personal data from the EEA to a location outside the EEA only when there has been a documented adequacy determination, or where we have confirmed adequate privacy protections. If your personal data is subject to PIPEDA, we will transfer personal data from Canada to locations outside Canada only where we have confirmed adequate privacy protections. If we transfer personal data to a third party acting as our agent, we will also obligate the third party to have adequate privacy protections in place.
10. How Long We Retain Your InformationWe retain personal information about you for as long as necessary to provide you the Cryoport Services. In some cases, we retain personal information for longer, if doing so is necessary to comply with our legal obligations, or as otherwise permitted by applicable law. Afterwards, we retain some information in a de-identified and/or aggregated form but not in a way that would identify you personally.
11. Information Provided on Behalf of Children and OthersThe Cryoport Services are not intended for use by children. Individuals under the age of 18 may not use the Cryoport Services. Cryoport does not knowingly collect any information from children. If you are under 18, do not attempt to register for the Cryoport Services or send us any personal information. By accessing, using and/or submitting information through the Cryoport Services, you represent that you are not younger than 18 and that you have authority to do so. If you are a parent or legal guardian of a minor child, you may, in compliance with this Privacy Policy, use the Cryoport Services on behalf of such minor child. Information you provide through the Cryoport Services on behalf of a minor child will be treated as personal information as provided herein. If you use the Cryoport Services on behalf of another person, regardless of age, you represent and warrant that you have authority to do so. If you believe that a child under 18 may have provided us personal information, please contact us at marketing@cryoport.com.
12. Third Party Web ServicesThe Cryoport Services may contain links or content from third party websites. A link or content from a third-party website does not mean we endorse that website, the accuracy of information presented, or the persons or entities associated with that website. If you visit a third-party website, you are subject to the privacy policy of the applicable third party and we are not responsible for the policies and/or practices of any third party. We encourage you to ask questions before you disclose your information to others.
13. Updates and Changes to Privacy PolicyThe effective date of this Privacy Policy is set forth at the top of this webpage. We will notify you of any material change by posting notice on this webpage. Your continued use of the Cryoport Services after the effective date of any amendment to this Privacy Policy constitutes your acceptance of the amended Privacy Policy. We encourage you to periodically review this page for the latest information on our privacy practices. Any amended Privacy Policy supersedes all previous versions. IF YOU DO NOT AGREE TO FUTURE CHANGES TO THIS PRIVACY POLICY, YOU MUST STOP USING THE CRYOPORT SERVICES AFTER THE EFFECTIVE DATE OF SUCH CHANGES.
14. Contact UsThe data controller for the purposes of GDPR, UK GDPR, PIPEDA or other data protection laws is Cryoport.
Andre Lapeira
Attn: dpo@cryopdp.com
If you have any questions about this Privacy Policy, please contact us at legal@cryoport.com or at:
Cryoport Systems, LLC
Attn: Legal Department
|112 Westwood Place, Suite 350
Brentwood, TN 37027
“Working with Cryoport was a truly remarkable difference compared to my experience with other shippers. With the previous shipping company I was working with, it took almost three months to establish a ‘deep frozen account’ and required numerous hoop-jumping shenanigans only to ultimately be informed that the company could not arrange a shipment to or from Israel, which they were informed from the start was our desired shipping source.
Our sales rep at this organization was as dumbfounded by our experience as we were. To his credit, after his company declined our business, he suggested I contact Cryoport. I have written thanking him for his suggestion and to let his ‘powers-that-be’ know how different my experiences were.”
"I want to thank everyone at Cryoport who was involved in the rapid recovery of the missing Cryoport shipper containing a patient’s tumor tissue. By promptly locating the shipper and recharging it while in transit, the patient was able to receive the vaccine manufactured from this tissue on time. We are so very appreciative of Cryoport’s customer service. Without the services that Cryoport provides, our clinical trials would not be available to patients."
©2023 Cryoport Systems, LLC. All rights reserved.
A Leap Forward in Standardizing the Regenerative Medicine Supply Chain – What the New ISO 21973 Guidance Means for Cell and Gene Therapy Developers
Cryoport® is a trademark of Cryoport, Inc. and used with permission by Cryoport Systems, LLC