The Scenario Lab LLC (“we”/”us”/“our”) is committed to protecting and respecting your privacy. We endeavor to tell you what information about you that we collect, why we collect it and what we do with it. You can always contact us via our contact page with questions about our use of your personal information.

This statement sets out the basis on which we collect any personal data from you, why we collect it, who we share it with, how we use it and how we protect it. We want you to clearly understand our views and practices regarding your personal data and how we will treat it, so please read the following carefully.

​

What Information We Collect

​

We may collect directly from you the following information about you:

​

• If you contact us (through our website contact us page or otherwise), we may keep a record of that correspondence

​

We also receive personal data from other sources which include:

​

• Service providers that help determine your location based on your IP address in order to customize certain products to your location

• Publicly available sources

• Information generated by the use of cookies on our website. You can read our Cookies Statement in the website Terms and Conditions. This information may include information about your computer, including where available your IP address, operating system and browser type and for system administration. This is statistical data about our users’ browsing actions and patterns and does not identify any individual.

​

How we collect, use and store personal data

​

We collect, use and store this personal data for the following purposes:

​

• For our own legitimate interests in monitoring usage of the site and improving it and promoting the work of The Scenario Lab LLC.

• To ensure that content from our site is presented in the most effective manner for you and for your computer

• To provide you with information that you request from us or which we feel may interest you

• Otherwise to comply with data protection laws

​

If you do not want us to use your data in this way, please contact us.

​

Data Subject Access Request

​

You have the right to request access to the personal data we hold about you. If you wish to make a Data Subject Access Request (DSAR), please contact us. We will respond to your request as required by applicable data protection laws. Please note that we may require further information from you to verify your identity and ensure the security of your personal data. We strive to address all DSARs in a timely and efficient manner, but in certain circumstances, we may be legally permitted to refuse your request. If this is the case, we will inform you of the reasons for the refusal.

​

Who do we share your data with?

​

We do not sell or trade in your personal data. We may need to share your data with companies that support the work that we do as our service providers (e.g., Google, or other IT services supplier) but when we do that, they are acting as our “data processor” only and they do not have any right to use your personal data for their own purposes.

​

Security

​

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

​

Data retention

​

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for. 

If you no longer wish to subscribe to our newsletter, you can ask us to stop sending you our newsletter and you can ask us to delete your data.

​

Your Rights

​

You have a number of rights under data protection laws in relation to your personal data.

​

You have the right to:

​

• Request access to your personal data (see above).

• Request correction of the personal data that we hold about you.

• Request erasure of your personal data in certain circumstances.

• Request the transfer of your personal data to you or to a third party.

• Request restriction of processing of your personal data.

​

If you wish to exercise any of the rights set out above, please contact us.

We aim to handle all data related matters directly with our website users and aim to address any concerns you may have with you directly. If you do not think that we have acted within the law, you have the right to complain to Office of the Attorney General of Massachusetts.

​

Transferring personal data outside the United States

​

Countries outside the United States may have a different standard of protection for personal information than that required by United States privacy and data protection laws. The personal data we collect may be transferred to, and stored, outside the United States and may also be processed by people or companies operating outside the United States who work for us or one of our partners or suppliers. In the event that we need to transfer personal data to a company based outside the United States, we do our best to ensure that the data is handled in line with United States law (and any laws that are more stringent) by checking that the data is protected by appropriate contractual terms.