Legal
Privacy policy
What personal data we collect, why we collect it, how long we keep it, and what you can ask us to do about it.
Who we are
This policy describes how Foster Rx Systems Inc., a Delaware corporation with its principal place of business in Annapolis, Maryland (“Foster Rx”, “we”, “us”) handles personal data. Questions, requests and complaints go to info@fosterrx.com.
What we collect
Information you give us. Name, business email address, organisation and role when you contact us, request access, or enter an engagement; and the content of your correspondence.
Engagement material. Documents and records you supply for a certified assessment. This is client material rather than personal data in most cases, and its handling is governed by the services agreement.
Technical information. When you use this website we receive standard server-log information: IP address, browser type, pages requested and timestamps. Our hosting provider retains these logs for a limited period for security and diagnostic purposes.
What we do not collect. We do not operate advertising or cross-site tracking, we do not sell personal data, and the certificate verification page requires no account and sets no identifying cookie.
Why we use it
To respond to you; to deliver an engagement you have asked for; to operate, secure and improve the website and platform; and to meet legal and record-keeping obligations. Where we rely on legitimate interests, those interests are running our business and securing our systems, balanced against your rights.
How long we keep it
Correspondence for as long as needed for the relationship plus a reasonable period thereafter. Engagement material for the period set in the applicable services agreement. Server logs for the retention period set by our hosting provider. Records of issued certificates are retained permanently, because a certificate that cannot be verified later is not a certificate; those records contain the reviewer identity and assessment content rather than reader personal data.
Who we share it with
Service providers who process data on our behalf under contract, principally our cloud infrastructure provider. Professional advisers where necessary. Authorities where we are legally required. We do not share personal data with advertisers or data brokers.
Data may be processed in the United States. Where personal data originates in the European Economic Area or the United Kingdom, transfers are made under appropriate safeguards.
Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing of your personal data, to portability, and to withdraw consent where consent is the basis for processing. Requests go to info@fosterrx.com and we will respond within the period the applicable law requires. You may also complain to your supervisory authority.
California residents may request disclosure of the categories of personal information collected and the purposes of collection, request deletion, and are entitled not to receive discriminatory treatment for exercising those rights. We do not sell or share personal information as those terms are defined under California law.
Security
We maintain administrative, technical and physical safeguards appropriate to the data we hold, described further on our trust and security page. No system is perfectly secure; we maintain an incident response plan and will notify affected parties and regulators where required.
Children
The website and platform are intended for business use and are not directed to anyone under 18.
Changes
We may update this policy. Material changes will be reflected in the effective date above, and where required we will provide additional notice.
This policy is provided in good faith and is not legal advice. Where it conflicts with a signed agreement between you and Foster Rx, the signed agreement controls.