This Privacy Statement applies to the Information Website (hereafter referred to as “the Site”) for the Natural Fibre Exchange (NFX).
Collection and Use of Personal Information
Acting as the Trading Manager, CRA International, Inc. d/b/a Charles River Associates and each of its affiliates and subsidiaries (collectively, "CRA") is committed to meeting all of its obligations to bidders, sellers, and others who visit the Site to protect their data and to collect, use, and disclose such data only in connection with the NFX trading events. CRA and Natural Fibre Exchange Limited are equally committed to abiding by all applicable domestic, national, and international privacy laws. In connection with the NFX trading events, CRA may acquire personally identifiable information (also known as personal data) regarding the employees of businesses who are using the Site or who are considering using the Site. In general, data collected, used, or disclosed to CRA are processed by CRA for the purposes of facilitating the NFX trading events on behalf of and as directed by Natural Fibre Exchange Limited. When CRA does process personally identifiable information on its own behalf, CRA conforms to recognized privacy principles and practices, including notice, choice, consent and control, fairness, and integrity, as provided by applicable industry and international legal standards.
For the purposes of applicable data protection law, CRA is the controller of any personal data collected from you on this Site.
Information we collect
Every computer connected to the Internet has a domain name and a set of numbers that serve as that computer's "Internet protocol" (IP) address. When a visitor requests a page from this Site, our Web servers automatically recognize that visitor's domain name and IP address. The domain name and IP address reveal nothing personal about you other than the IP address from which you have accessed the Site.
From time to time, we examine Site traffic in aggregate to help us improve the Site, to maintain quality of the service, and to provide general statistics regarding use of the Site. Under no circumstances do we sell, rent, or give your email address to a third party for the purpose of that party sending you "spam mail" or otherwise using your email address in any way not directly associated with the NFX trading events.
If you submit a registration form to become a qualified bidder or seller, this Site collects and stores your registration information. This information may include names, company names, addresses, telephone numbers, facsimile numbers, and email addresses.
The Site may use "cookies" to help users of the Site personalize their online experience. A cookie is a text file that is placed on your computer by a Web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Unique cookies are assigned to you and can be read only by a Web server in the CRA domain that issued the cookie to you. One of the primary purposes of cookies is to provide a convenience feature to save you time by informing the Web server that you have returned to a specific page. You can delete cookies from your system at any time. You also have the ability to accept or decline cookies. Most Web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you may not be able to fully experience the interactive features of the Site.
For more information about cookies including how to set your Web browser to reject cookies please go to www.allaboutcookies.org.
Disclosure of personal information
If personal information is transferred outside your local jurisdiction (e.g., the European Economic Area, “EEA”), we will take steps, where required by applicable law, to ensure that the information receives the same level of protection as if it remained within your local jurisdiction, including by entering into data transfer agreements, using the EU Commission approved Standard Contractual Clauses, or by relying on certification schemes such as the EU US Privacy Shield. For internal transfers, we have put in place an Intra Group Data Transfer Agreement which protects personal data transferred between global CRA entities. For EU residents, you may have a right to details of the mechanisms under which your data are transferred outside of the EEA.
In addition, CRA recognizes standard domestic and international legal and public policy exceptions to non-disclosure. As provided by applicable US federal law (or applicable local laws), CRA may disclose personal information without the consent of the individual to protect the confidentiality or security of the firm's records pertaining to the customer, the service or product, or the transaction to protect against or prevent actual or potential fraud, for institutional risk control, for the enforcement of contractual obligations, to resolve client disputes or injuries, and for various other purposes provided by law.
Where lawful to do so, we may communicate with you to tell you about NFX trading events. If you do not wish us to use personal information about you in order to inform you about trading events, please contact us using the information in the "Contact information and enforcement" section at the bottom of this page. You can also use the link provided in our emails.
Retention of your information
We apply a general rule of keeping personal information only for as long as required to fulfil the purposes for which it was collected. However, in some circumstances we may retain personal information for longer periods of time, for instance where we are required to do so in accordance with legal, tax, or accounting requirements. In specific circumstances we also may retain your personal information for longer periods of time so that we have an accurate record of your dealings with us in the event of any complaints or challenges.
- the accuracy of the personal information is contested
Subject to applicable law, you may have some or all of the following rights in respect of your personal information:
• to obtain a copy of your personal information together with information about how and on what basis that personal information is processed;
• to rectify inaccurate personal information (including the right to have incomplete personal information completed);
• to erase your personal information (in limited circumstances, where it is no longer necessary in relation to the purposes for which it was collected or processed);
• to restrict processing of your personal information where:
- we no longer require the personal information but it is still required for the establishment, exercise, or defense of a legal claim;
• to challenge processing which we have justified on the basis of a legitimate interest (as opposed to your consent, or to perform a contract with you);
• to prevent us from sending you direct marketing;
• to withdraw your consent to our processing of your personal information (where that processing is based on your consent);
• to object to decisions that are based solely on automated processing or profiling; and
• to obtain or see a copy of the appropriate safeguards under which your personal information is transferred to a third country or international organization.
In relation to all of these rights, please contact us using the details given below. Please note that we may request proof of identity, and we reserve the right to charge a fee where permitted by law, for instance if your request is manifestly unfounded or excessive. We will endeavor to respond to your requests within all applicable timeframes.
Changes to this statement
CRA will occasionally update this Privacy Notice to reflect company and user feedback. CRA encourages you to review this Privacy Notice periodically to be informed of how CRA is protecting your information.
Contact Information and enforcement
CRA welcomes your comments regarding this privacy statement. If you have any questions relating to this privacy statement, you believe that CRA has not adhered to this privacy statement, or if you have any suggestions or problems, please contact:
Privacy and Compliance
CRA International, Inc.
200 Clarendon Street, T-9
Boston, MA 02116-5092
We will use all reasonable efforts to assess and remedy promptly any problems reported to us.