Privacy Policy

Last updated: 6 June 2026

Template for the MVP — not legal advice. Have a privacy professional review before production, especially for EU/UK GDPR obligations.

Who we are

SterileAtlas is operated by Zentrum24 LLC (“we”), which runs a discovery and marketplace platform for sterile and advanced-therapy manufacturing. For EU/UK users, Zentrum24 LLC is the data controller for account and content data. Registered address: 1621 Central Ave, Suite 9103, Cheyenne, WY 82001.

Data we collect

  • Account data: name, email, hashed password, role.
  • Profile & content you submit: profiles, posts, media, projects, bids, messages, reviews.
  • Operational logs: an audit trail of security-relevant actions and basic request metadata (e.g., IP) for security and abuse prevention.

Cookies

We use a single essential, http-only cookie to keep you signed in. We do not use advertising or third-party tracking cookies.

How we use data

To provide and secure the Platform, enable marketplace connections, send transactional emails (verification, password reset, notifications), and comply with legal obligations. Legal bases include contract performance and legitimate interests (security).

Sharing

Profile content you publish is visible to other users by design. We share data with processors that help run the Platform (e.g., hosting, database, object storage, email delivery) under appropriate agreements. We do not sell personal data.

Retention

We keep account and content data while your account is active and as needed for legal and security purposes, then delete or anonymize it.

Your rights (GDPR / UK GDPR)

Subject to law, you may request access, rectification, erasure, restriction, portability, and objection, and may lodge a complaint with your supervisory authority. To exercise rights, contact us below.

International transfers

Where data is processed outside your region, we rely on appropriate safeguards (e.g., Standard Contractual Clauses).

Contact

Privacy requests: privacy@zentrum24.com. [TODO: add your DPO / EU representative (GDPR Art. 27) if required.]