Privacy Notice

Effective date: June 1, 2023

This Privacy Notice describes the methods and purposes by which Eliyahu.AI, LTD and its wholly-owned subsidiaries (referred to as "Eliyahu.AI," "we," "us," and "our") collect, process, and store information pertaining to individuals and users of our website, Eliyahu.AI.com ("Website"). The information presented in this Privacy Policy includes the following topics:

    • Notice and Consent

    • Network Activity

    • Cookies

    • Research

    • Marketing

    • Recruitment

    • Children’s Online Privacy Protection

    • Right to Access

    • Right to Rectification

    • Right to Erasure

    • Right to Restrict Processing

    • Right to Object to Processing

    • Right to Data Portability

    • Right to Complain to a Supervisory Authority

    • Right to Withdraw Consent

    • Additional Rights

    • Exercising Your Rights

Data Privacy Regulations

Eliyahu.AI is a global company and works with Sponsor organizations to ensure compliance to all applicable global and local data privacy requirements. This includes, but is not limited to, the Regulation (EU) 2016/679 (“General Data Protection Regulation” or “GDPR”), and its adoption into UK law through the Data Protection Act 2018. Additionally, Eliyahu.AI recognizes the California Consumer Protection Act, as amended by the California Privacy Rights Act, (“CPPA“). Eliyahu.AI is not a “Covered Entity” under the Health Insurance Portability and Accountability Act (“HIPAA”). However, Eliyahu.AI may process protected health information (“PHI”) covered by HIPAA requirements through contractual agreements with partner organizations, including those where Eliyahu.AI acts as a “Business Associate,” as defined under HIPAA. Data privacy controls are in place throughout Eliyahu.AI to ensure the highest applicable standards of data privacy laws are met.

Collection of Personal Information

Eliyahu.AI collects personal information only when an individual provides it through registration, completion of forms or e-mails, applying for job vacancies, as part of an order for products or services, inquiries or requests about materials being ordered, volunteering for research, and similar situations in which an individual has chosen to provide the information to us. The database and its contents remain at Eliyahu.AI and stay with data processors or servers acting on our behalf and responsible to us. An individual’s personal information will not be passed on by us or by our service providers for use by third parties in any form whatsoever, unless we have obtained your consent or are legally required to do so.

Notice & Consent

The collection and retention of personal information at Eliyahu.AI will be done according to the relevant legal basis. Notice of the relevant legal basis will be available to individuals. If that legal basis is consent, individuals will receive an appropriate level of information about the use of their personal information and have their consent to collect and retain the data documented.

This consent may be withdrawn at any time, and if the legal basis for retention of data is consent, this data will no longer be retained by Eliyahu.AI, except under certain circumstances. Where consent is not the legal basis, Eliyahu.AI may decide that documented consent is best practice, or in the case of research subjects, a regulatory requirement, and therefore consent would also be sought from individuals. It will be explained to subjects, in this instance, that although consent is sought, data may still be used and retained by Eliyahu.AI if there is an additional legal basis for these activities.

Network Activity

You are not required to provide Personal Information as a condition of using our Website, except as may be necessary to provide you with a product or service at your request. When you use our Website, Personal Information may be stored for various security purposes. This Personal Information may include the name of your internet service provider, the website that you used to link to our Website, the websites that you visit from our Website and your IP address. This data could possibly lead to your identification, but we do not use it to do so. We do use the data from time to time for statistical purposes but maintain the anonymity of each individual user. In cases when Personal Information is provided to others to provide you products or services that you requested or for other purposes you authorized, we rely on technical and organizational means to assure that applicable data security regulations are followed. Your IP address is utilized for security and performance measurement with a 4-week retention of this information.

Cookies

Cookies are small text files that are stored in the website visitor’s local browser cache. Using such cookies, it is possible to recognize the visitor’s browser in order to optimize the website and simplify its use. Data collected via cookies will not be used to determine the personal identity of the website visitor. Most browsers are set-up to accept these cookies automatically. In addition, you can deactivate the storing of cookies or adjust your browser to inform you before the cookie is stored on your computer. 

Google Analytics

Eliyahu.AI uses Google Analytics to analyze user activity in order to improve our Website. For example, using cookies we can look at aggregate patterns and page performance trends. We can use such analysis to gain insights about how to improve the functionality and experience of the Website.

For information on how to opt-out of Google Analytics tracking, please visit this link.

Processing of Personal Information

Eliyahu.AI will retain control of and responsibility for the use of any Personal Information disclosed to us. Some of this data may be stored or processed at computers located in other jurisdictions, such as the United States, whose data protection laws may differ from the jurisdiction in which an individual lives. In such cases, Eliyahu.AI will ensure that appropriate safeguards are in place to require the data processor in that country to maintain protections on the data that are equivalent to those that apply in the country in which the individual lives.

Research

Individuals who wish to volunteer for research activities may be provided with the opportunity to register with Eliyahu.AI. With the individual’s consent, Eliyahu.AI may collect and maintain a database of personally identifiable information that is provided by that individual for the sole purpose of sending targets study information for volunteer recruitment. Individuals can choose to revoke their consent at any time as discussed above.

Eliyahu.AI uses personally identifiable information to conduct research to improve health and care. As a research company, Eliyahu.AI has a legitimate interest in using information relating to subject health and care for research studies, when subjects agree to take part in a research study. This means that Eliyahu.AI will use their data, collected in the course of a research study, in the ways needed to conduct and analyze the research study. Subject’s rights to access, change or move their information are limited, as Eliyahu.AI needs to manage such information in specific ways in order for the research to be reliable and accurate.

If a subject withdraws from the study, Eliyahu.AI will keep the information about them that has been already obtained. To safeguard the subject’s rights, Eliyahu.AI will use the minimum personally identifiable information possible. If subjects wish to raise a complaint regarding how Eliyahu.AI has handled their Personal Information, they can reach out to the Data Information officer who will investigate the matter. If subjects are not satisfied with our response or believe we are processing Personal Information in a way that is not lawful, they can complain to the appropriate state or national data protection agency, e.g., Information Commissioner’s Office (ICO) in the United Kingdom or the Federal Trade Commission (FTC) in the United States.

Marketing

If an individual’s contact details are provided to Eliyahu.AI for direct marketing purposes, and consent is provided for us to do so, we would like to use this information to keep in touch with you regarding the latest news and information from our organization. Minimal, non-sensitive information will be retained to fulfill the requirements of this legitimate interest, and data will not be shared with third parties without notification and appropriate consent of the data subject.

Recruitment

An individual’s Personal Information may be processed in relation to applying for job vacancies, processing any job applications, facilitating the recruitment process, and furthering Eliyahu.AI’s relationship with individuals. The legal basis for this processing is Eliyahu.AI’s legitimate interest in finding an appropriate person for a particular role. Eliyahu.AI utilizes a third-party recruitment management system called Trackstar, with applicant data stored on Trackstar servers for the relevant retention period. Trackstar’s privacy policy can be found here.

Where consent has been provided for us to do so, Eliyahu.AI may consider an individual for opportunities that the individual did not specifically apply for, but which Eliyahu.AI thinks might be a good fit for the individual’s skillset. Where consent to process an individual’s information has been provided for the purposes detailed above, Eliyahu.AI will enter the profile data into our central recruitment database.

Eliyahu.AI may also collect an individual’s details, which have been made available, from third-party sources, such as websites on which Eliyahu.AI’s job vacancies may be advertised or through recruitment agencies. This information may include an individual’s name, email address, telephone number, and curriculum vitae. Eliyahu.AI may do this where we identify that an individual is suitable for an available vacancy with us. Eliyahu.AI may use the contact data to contact an individual to ask whether they would like to be considered for an appropriate vacancy. Eliyahu.AI’s use of the contact data in these circumstances is limited to making contact with an individual to determine whether they are interested in working for us and applying for a role. The legal basis for this processing is Eliyahu.AI’s legitimate interest as a business in finding an appropriate person for a particular role.

Eliyahu.AI will only use and share Personal Information about individuals in a way that is consistent with the purposes for which the information was collected or subsequently authorized by those individuals. To the extent necessary for those purposes, Eliyahu.AI will take reasonable steps to ensure that the information is accurate, complete, and current.

Children’s Online Privacy Protection

In light of the importance of protecting children’s privacy, we do not collect, process or use on our website any information relating to an individual whom we know to be under 13 years old without the prior, verifiable consent of his or her legal representative. Such legal representative has the right, upon request, to view the information provided by the child and/or to request that it be deleted.

Transfer of Personal Information

Eliyahu.AI will only transfer Personal Information to a third party consistent with the notice and consent principles stated above. If Eliyahu.AI discloses Personal Information to a third party, Eliyahu.AI will either: (i) ensure that the third party is subject to the privacy principles or (ii) require the third party by contract to provide the same level of protection as required by the privacy principles.

Where your Personal Information is transferred outside of the EEA, Eliyahu.AI will ensure that either (a) the European Commission has made an “adequacy decision” with respect to the data protection laws of the country to which it is transferred or (b) Eliyahu.AI has entered into a suitable data processing agreement with the third party situated in that country to ensure the adequate protection of your data, including the use of standard contractual clauses or binding corporate rules.

For any onward transfer of your Personal Information, Eliyahu.AI will remain responsible for the processing of that Personal Information and any subsequent transfers to a third party on its behalf. Eliyahu.AI will also remain liable under the privacy principles if the third party processes your Personal Information in a manner inconsistent with the privacy principles, unless it proves that it not responsible for any damages arising from such an event.

Please acknowledge that Personal Information that you submit for publication through our Website or services may be publicly available, via the internet, around the world. We cannot prevent the use (or misuse) of such Personal Information by others.

Data Subject Rights

Individuals may instruct Eliyahu.AI to provide any Personal Information it holds belonging to the individual, provided that:

  • an individual’s request not being found to be unfounded or excessive, in which case a charge may apply; and

  • the supply of appropriate evidence of an individual’s identity (for this purpose, we will usually accept a photocopy of your passport certified by a solicitor or bank plus an original copy of a utility bill showing the individual’s current address).

Eliyahu.AI may withhold Personal Information that an individual requests to the extent permitted by law, or where it might involve another individual’s Personal Information.

The rights individuals have under data protection law are:

Right to Access. Individuals have the right to ask Eliyahu.AI to confirm whether or not Eliyahu.AI processes their Personal Information and to have access to the Personal Information and any additional information. That additional information includes the purposes for which Eliyahu.AI processes their data, the categories of Personal Information Eliyahu.AI holds and the recipients of that Personal Information. Individuals may request a copy of their Personal Information. The first copy will be provided free of charge, but Eliyahu.AI may charge a reasonable fee for additional copies.

Right to Rectification. If Eliyahu.AI holds any inaccurate Personal Information, individuals have the right to have these inaccuracies rectified. Where necessary for the purposes of the processing, individuals also have the right to have any of their incomplete Personal Information completed.

Right to Erasure. In certain circumstances, individuals have the right to have Personal Information that Eliyahu.AI holds about them erased. This will be done without undue delay. These circumstances include the following:

  • it is no longer necessary for Eliyahu.AI to hold the Personal Information in relation to the purposes for which it was originally collected or otherwise processed;

  • an individual withdraws consent to any processing which requires consent;

  • the processing is for direct marketing purposes; and

  • Personal Information has been unlawfully

However, there are certain general exclusions of the right to erasure, including where processing is necessary for exercising the right of freedom of expression and information, compliance with a legal obligation, or for establishing, exercising, or defending legal claims.

Right to Restrict Processing. In certain circumstances, individuals have the right to restrict the processing of their Personal Information. This is the case where:

  • individuals do not think that the Personal Information Eliyahu.AI holds about them is accurate;

  • Personal Information is being processed unlawfully, but the Individual does not want their data to be erased;

  • it is no longer necessary for Eliyahu.AI to hold the individual’s Personal Information for the purposes of processing, but an individual still requires that Personal Information in relation to a legal claim; and

  • an individual has objected to processing, and is waiting for that objection to be

Where processing has been restricted for one of these reasons, Eliyahu.AI may continue to store Personal Information. However, Eliyahu.AI will only process it for other reasons, such as, with consent, in relation to a legal claim, for the protection of the rights of another natural or legal person, or for reasons of important public interest.

Right to Object to Processing. Individuals can object to Eliyahu.AI processing their Personal Information on grounds relating to a particular situation, but only as far as our legal basis for the processing that it is necessary for the performance of a task carried out in the public interest, in the exercise of any official authority vested in Eliyahu.AI, or the purposes of our legitimate interests or those of a third party. If an individual makes an objection, Eliyahu.AI will stop processing their Personal Information, unless Eliyahu.AI is able to demonstrate compelling legitimate grounds for the processing and that these legitimate grounds override the individual’s interests, rights, and freedoms; or the processing is in relation to a legal claim.

Right to Data Portability. Individuals may obtain the Personal Information they provided to Eliyahu.AI. They will be provided their Personal Information in a structured, commonly used, and machine-readable format and allow it to be transmitted to another data controller without hinderance.

Right to Complain to a Supervisory Authority. If an individual thinks that Eliyahu.AI’s processing of their Personal Information infringes data protection laws, they can lodge a complaint with a supervisory authority responsible for data protection. Individuals may do this in the EU member state of their habitual residence, place of work or the place of the alleged infringement.

Right to Withdraw Consent. To the extent that the legal basis Eliyahu.AI is relying on for processing Personal Information is consent, individuals are entitled to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.

Additional Rights.

  • Direct marketing. An individual can object to us processing their Personal Information for direct marketing purposes. If an objection is set forth by the individual, Eliyahu.AI will stop processing their Personal Information for this purpose.

Statistical purposes. An individual can object to Eliyahu.AI processing their Personal Information for statistical purposes on grounds relating to their particular situation, unless the processing is necessary for performing a task carried out for reasons of public interest.

  • Automated data processing. To the extent that the legal basis Eliyahu.AI is relying on for processing Personal Information is consent, and where the processing is automated, individuals are entitled to receive their Personal Information from Eliyahu.AI in a structured, commonly used and machine- readable format. However, an individual may not have this right if it would adversely affect the rights and freedoms of others.

Exercising Your Rights.

Individuals may exercise any of their rights in relation to Personal Information by written notice to this address 

California Consumers’ Privacy Rights

CCPA does not apply to the research data collected by Eliyahu.AI for the purpose of clinical trials. Instead, it does apply to Personal Information collected for the purposes of filling job vacancies, facilitating employment, and allowing users access to Eliyahu.AI’s Website and services. California residents may exercise their rights under the CCPA by reaching out to the Data Protection Officer contact provided. Since Eliyahu.AI does not sell Personal Information, the consumer right to opt out of the “sale” of Personal Information is not applicable to our operations and, therefore, is not addressed in this Privacy Notice.

Right to Know – California residents have the right to request to know the following about our data collection and disclosure practices in the preceding 12 months:

  • The categories of Personal Information we have collected about you;

  • The categories of sources from which the Personal Information was collected;

  • The categories of third parties to whom the Personal Information was disclosed;

  • The business or commercial purpose for collecting; and

  • The “specific pieces” of Personal Information that we have collected about

Right to Delete – With some exceptions, California residents have the right to request us, and our service providers, contractors, and third parties, to delete personal information we have collected from them and retained.

Right to Correct – California residents have the right to request that we “commercially reasonable efforts” to correct inaccurate Personal Information about them.

Right to Non-Discrimination for Exercise of Your Consumer Rights – California residents have the right not to receive discriminatory treatment by exercising your privacy rights under CCPA.

Please note that we will need to verify your identity and state of residency, such as matching the Personal Information you give us to our records, whenever possible, or ask for a copy of your driver’s license or identification card, before processing your request. If you are acting on behalf of another individual, we will need proof that you are authorized to make a request on that individual’s behalf, such as a signed written authorization. Absent such proof, we reserve the right to refuse to comply with your request. We aim to respond within 45 days of receipt. If additional time is needed, we may take up to 45 more days (i.e., a maximum total of 90 days) to comply with your request, and we will inform you of the reason(s) why the extension is necessary within the initial 45 days of receiving your request. Any additional information collected during this verification process will be deleted after the request has been processed.

Security

Eliyahu.AI will take reasonable precautions to protect Personal Information from loss, misuse and unauthorized access, disclosure, alteration and destruction. The principle of security applies to how Eliyahu.AI stores, processes, maintains and protects Personal Information.

Privacy Shield

Eliyahu.AI is strongly committed to protecting the privacy of individuals. As such, Eliyahu.AI complies with the EU-U.S. and the Swiss-U.S. Privacy Shield Frameworks (collectively, “Privacy Shield”) as set forth by the

U.S. Department of Commerce regarding the collection, use, and retention of Personal Information transferred from the European Economic Area (“EEA”) and / or Switzerland to the United States. Eliyahu.AI has certified to the U.S. Department of Commerce that it adheres to the Privacy Shield principles. If there is any conflict between the terms in this Privacy Notice and the Privacy Shield principles, the Privacy Shield principles shall govern.

To learn more about the Privacy Shield program, and to view our certification, please visit https://www.privacyshield.gov/.

Even though the Privacy Shield was invalidated by the Court of Justice of the European Union since July 2020, Eliyahu.AI continues to maintain its Privacy Shield certification as a testament to the controls in place aligned with Privacy Shield requirements.

Data Retention

Eliyahu.AI only retains Personal Information for as long as is necessary to fulfill the specific commercial or business purposes, and to allow us to comply with our legal requirements.

Enforcement

Eliyahu.AI has put in place mechanisms to verify our ongoing adherence to these privacy principles. Eliyahu.AI encourages individuals covered by this Privacy Notice to raise any concerns that they have about the way Eliyahu.AI processes their Personal Information by contacting us and we will do our best to resolve them.

Eliyahu.AI has also agreed to participate in the independent dispute resolution program provided by the European Data Protection Authorities Panel, and the Swiss equivalent. In compliance with the Privacy Shield principles, Eliyahu.AI, and its affiliated companies, commit to resolve complaints about an individual’s privacy and Eliyahu.AI’s collection or use of Personal Information transferred to the United States pursuant to Privacy Shield.

EEA, United Kingdom, and Swiss individuals with Privacy Shield inquiries or complaints should first contact us at this address. Adherence by Eliyahu.AI to these privacy principles may be limited to the extent required to meet a legal, governmental, national security or public interest obligation.

Binding Arbitration

For individuals in the EU and Switzerland, under certain circumstances, you may invoke binding arbitration when other dispute resolution procedures, as described above, have been exhausted. This is more fully described on the Privacy Shield website found here.

How to Contact Us

Questions, comments or complaints regarding the collection and processing of your Personal Information should be directed to:

Elliot Greenblatt, Founder, Eliyahu.AI, LTD

222 Concord Ave, Unit 1, Cambridge MA, 02138

Email: Eliyahu@Eliyahu.AI Telephone: 347-274-4234

Changes to This Privacy Notice

This Privacy Notice may be amended from time to time. When we do, we will also revise the “Effective Date” at the top of this document. For material changes to this Privacy Notice, we will notify individuals by placing it on this page.