Privacy Policy
Effective date: August 19, 2026
This Privacy Policy explains how Wortham Laboratories, Inc. ("we", "our", "us") collects, uses, stores, and protects personal data when you visit worthamlabs.com (the "Site"). We are committed to protecting your privacy and to processing your personal data lawfully and transparently, including in accordance with the EU General Data Protection Regulation (GDPR) and the UK GDPR where they apply to you.
1. Controller
The controller for personal data processed through the Site is:
Wortham Laboratories, Inc.6105 Preservation Drive, Suite D
Chattanooga, Tennessee 37416 USA
423-296-0090
Email: jcampbell@worthamlabs.com
2. Data we collect
Information you provide through the contact form. When you submit an inquiry, we collect your name, organization, country, professional role, and the content of your message. We also record the IP address used to submit the form, the date and time of submission, and the date and time you granted consent, for security, abuse prevention, and consent verification. Inquiries are stored on our servers in the European Union; only a content-free notification of a new inquiry is sent by email, and no inquiry content is transmitted by email.
Technical data. Our web servers record standard technical logs, including IP address, browser type, pages visited, and timestamps. We use this data to operate, secure, and improve the Site.
Cookies. The Site sets a small number of essential cookies required for security and session functionality. No advertising or analytics cookies are used. See our Cookie Policy for details.
3. Purposes and legal bases
- Responding to your inquiries (Article 6(1)(a) GDPR, consent, and Article 6(1)(f), legitimate interest).
- Preventing abuse and securing the Site (Article 6(1)(f), legitimate interest).
- Complying with legal obligations (Article 6(1)(c)).
You may withdraw consent at any time by contacting us using the details above.
4. Recipients and processors
We share personal data only with service providers that process it on our behalf under data processing agreements:
- InMotion Hosting (server hosting; data centers in the European Union and United States).
- DeepL SE (machine translation; processing within the EU/EEA).
- Microsoft Corporation (Microsoft 365 email services used to deliver content-free notifications that a new inquiry has been received; no inquiry content is transmitted, processing in the United States and EU).
5. International data transfers
The Site is hosted on servers in the European Union. Where personal data is transferred to processors located outside the EU/EEA (including the United States), we rely on appropriate safeguards, including the European Commission Standard Contractual Clauses (SCCs) and the data protection guarantees provided by those processors. A copy of the relevant safeguards is available on request.
6. Retention
We retain contact inquiries only as long as necessary for the purposes described above, including responding to your inquiry and maintaining records of our business correspondence. Technical logs are retained for a limited period for security purposes. When data is no longer needed, it is securely deleted or anonymized.
7. Your rights
Under the GDPR, and where it applies to you, you have the right to:
- Access the personal data we hold about you;
- Rectify inaccurate or incomplete data;
- Request erasure of your data;
- Restrict or object to processing in certain circumstances;
- Receive your data in a portable format; and
- Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, contact us at jcampbell@worthamlabs.com. We will respond within one month as required by applicable law.
8. Complaints
If you believe your personal data has been processed unlawfully, you may lodge a complaint with your local data protection supervisory authority, or with the authority in the EU/EEA country where you reside, work, or where the alleged infringement occurred.
9. Security
We use appropriate technical and organizational measures to protect personal data, including encryption in transit (HTTPS/TLS), access controls, and secure hosting.
10. Children
The Site is not directed to children under the age of 16, and we do not knowingly collect personal data from children.
11. Changes to this policy
We may update this Privacy Policy from time to time. The effective date at the top of this page indicates when the current version was published. Material changes will be highlighted on the Site.
12. Contact
Questions about this Privacy Policy or our data practices can be sent to jcampbell@worthamlabs.com or by mail to the address in Section 1.
