This policy is part of the Odyssey Standards website terms and may be incorporated into accepted services where applicable. Read it together with any Accepted Scope or signed agreement.
1. Scope
This Privacy Notice applies to the Odyssey Standards website, project intake, communications, testing administration, report verification, and related business interactions. It does not apply to a third party’s independent practices or to information processed solely on another organization’s behalf under a separate written agreement.
Odyssey Standards provides research, quality, and analytical services. Do not submit patient records, diagnoses, treatment information, protected health information, Social Security numbers, government identification numbers, passwords, or full payment-card data through this website.
2. Information we collect
- Identifiers and business contact information, such as name, email, phone number, organization, and role.
- Client-account information, such as invitation status, a securely hashed password, assigned COA references, account status, and essential session records.
- Project and sample information, including sample type, compound, matrix, lot or batch, available amount, requested work, analytical objective, and related communications.
- Transaction and service records, such as quotations, approvals, invoices, payments, shipping details, submission numbers, reports, and support history.
- Website and device information reasonably necessary to operate, secure, diagnose, and improve the service, such as browser type, pages requested, timestamps, and security logs.
- Information you provide in privacy, accessibility, legal, security, report, or customer-support requests.
3. How we use information
- Review feasibility, prepare quotations, accept or reject submissions, coordinate testing, and issue reports.
- Provide invitation-based client accounts and make assigned COAs available to authenticated account holders.
- Communicate about projects, billing, shipping, sample status, customer support, policies, and service changes.
- Maintain sample traceability, quality records, report authenticity, public COA verification when authorized, and business records.
- Protect the website, clients, laboratories, service providers, and Odyssey Standards from fraud, misuse, security threats, unlawful activity, and disputes.
- Comply with contracts, professional obligations, lawful process, applicable law, and recordkeeping requirements.
- Analyze service performance using aggregated or de-identified information where reasonably practicable.
4. Legal and operational bases
Depending on the context and applicable law, Odyssey Standards processes information to provide requested services, perform or prepare a contract, pursue legitimate business interests, comply with legal obligations, protect safety and rights, and act with consent where consent is required. You may withdraw consent for future processing when consent is the applicable basis, but withdrawal does not affect prior lawful processing.
5. How information is disclosed
Odyssey Standards does not currently sell personal information or share it for cross-context behavioral advertising. If that practice changes, this Notice and any legally required choice mechanism will be updated before the change applies.
- Laboratories, consultants, couriers, payment processors, hosting providers, database providers, professional advisers, and other vendors that support the requested service.
- A client-authorized recipient, report verifier, or public registry when the client authorizes public COA verification or another disclosure.
- Government authorities, courts, regulators, law enforcement, or other parties when reasonably necessary to comply with law, protect rights or safety, investigate misconduct, or establish or defend legal claims.
- A buyer, investor, lender, insurer, or successor in connection with a proposed or completed financing, reorganization, merger, acquisition, or transfer, subject to appropriate safeguards where required.
6. Cookies and similar technologies
The website may use essential cookies or comparable technologies needed for security, session continuity, form operation, load balancing, and platform delivery. Odyssey Standards does not currently use optional advertising cookies. See the Cookie Notice for more information.
7. Retention
Odyssey Standards retains information only as reasonably necessary for the purposes described above, including service delivery, traceability, legal compliance, security, accounting, dispute resolution, and enforcement. As a general operating schedule, unconverted inquiries may be retained for up to 24 months; website security logs may be retained for up to 12 months; and accepted submission, testing, report, billing, and related quality records may be retained for up to seven years after project completion. Records may be kept for a shorter or longer period when required by law, contract, accreditation or quality requirements, legal hold, safety need, or documented business necessity.
8. Security
Odyssey Standards uses reasonable administrative, technical, and organizational measures appropriate to the nature of the information and service. No transmission, platform, or storage method is completely secure, and Odyssey Standards cannot guarantee absolute security. Do not send information that is not necessary for your request.
9. Your choices and privacy rights
You may correct project contact information, unsubscribe from non-essential marketing, and request information about Odyssey Standards’s handling of your personal information. Depending on your residence and whether an applicable law covers Odyssey Standards, you may also have rights to access, correct, delete, obtain a copy of, restrict, or object to certain processing, and to opt out of sale, sharing, or targeted advertising. Odyssey Standards does not discriminate for exercising an applicable privacy right.
- Submit a request through the Contact page and select “Privacy and data request.”
- Describe the request and the information or interaction involved.
- Odyssey Standards may ask for information reasonably necessary to verify identity, authority, and the records at issue.
- An authorized agent may be required to provide signed authority and the consumer may be asked to confirm the request where permitted.
10. Children
The website and services are intended for business and adult users and are not directed to children under 13. Odyssey Standards does not knowingly collect personal information from children through this website. Contact Odyssey Standards if you believe a child submitted information.
11. International processing
Odyssey Standards and its providers may process information in the United States or other jurisdictions where they operate. Privacy laws in those locations may differ from the law where you reside. Contractual or other safeguards will be used when required.
12. Changes and contact
Odyssey Standards may update this Notice to reflect operational, legal, or service changes. The effective date identifies the current version. Material changes will be communicated when required. For privacy questions or requests, use the Contact page and select “Privacy and data request.”