1. Who we are
United Plasma LLC, based in Michigan, USA, is the controller of the personal information described in this notice. Contact: [email protected].
2. What we collect
- Contact and identity: name, email, phone, country, city, LinkedIn profile.
- Professional: titles, employer, experience, expertise, regulatory and regional experience, languages, availability, and indicative rates.
- Compliance: answers to screening questions, disclosed restrictions and conflicts, and results of verification against public exclusion, debarment, and sanctions lists.
- Engagement records: agreements, attestations, time records, and payments.
- Inquiries: information you send through our contact forms.
Please do not send us sensitive personal data, such as health information, and never send patient or donor information.
3. How we use it
- To review, verify, and maintain your profile and match you with suitable projects.
- To manage conflicts of interest and meet our compliance obligations.
- To contract with you, manage engagements, and pay you.
- To respond to inquiries and, if you opt in, send occasional news.
4. Legal bases
Where data protection laws such as the EU or UK GDPR apply, we rely on your consent (registration and optional news), steps taken at your request before entering a contract and performance of that contract (onboarding and engagements), our legitimate interests in running a compliant expert network (verification and conflict checks), and legal obligations (tax, sanctions, and anti-corruption).
5. Who we share it with
- Clients: only the parts of your profile needed for a specific project, and only with your agreement for that project.
- Service providers: who process data for us under contract, such as our form provider (Formspree), email, and storage services.
- Authorities and advisers: where required by law, or to establish or defend legal claims.
We do not sell your personal information.
6. International transfers
Your information is stored and processed in the United States and may be accessed from the countries where we and our clients operate. Where required, we use appropriate safeguards such as standard contractual clauses.
7. How long we keep it
We keep registered profiles for as long as you remain in the Network and for up to 24 months after your last update or engagement, unless you ask us to delete them sooner. Engagement and financial records are kept as long as required by law, typically seven years.
8. Your rights
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your information, to object to or restrict processing, and to withdraw consent at any time. Email [email protected] to exercise them. You may also complain to your local data protection authority.
9. Security
We use reasonable technical and organizational measures to protect your information. No system is completely secure, so please do not send information you are not permitted to share.
10. Changes
We may update this notice and will post the new version here with its effective date.