![MD-logo-circle-alt-colour.png]](https://help.massdynamics.com/hs-fs/hubfs/MD-logo-circle-alt-colour.png?width=40&height=40&name=MD-logo-circle-alt-colour.png){kind=logo}
PRIVACY POLICY
Last updated: 16 October 2026
This policy replaces our previous version of 21 June 2019.
UPDATES TO THIS POLICY
This Privacy Policy will be reviewed from time to time to take account of new laws and technology, changes to our operations and practices and the changing business environment. We will publish each updated version of this Privacy Policy on our website, showing the date it was updated. If we make a material change, we will also notify registered users by email or through our software before the change takes effect.
Introduction
This policy explains the types of personal information that we may collect and hold, how that information is used and with whom the information is shared. It also sets out how you can contact us if you have any queries or concerns about this information.
Mass Dynamics Pty Ltd ABN 58 630 705 716 (MD) is dedicated to protecting your personal information and will make every reasonable effort to handle collected information appropriately. All information collected will be handled with care in accordance with MDs’ standards for integrity and objectivity and respect for your privacy. MD endeavours to comply with all laws and regulations that apply to the gathering and use of personal information.
As used in this policy, “we”, “us” and “our” includes MD and our staff, employees, officers, directors and independent contractors under contract with us. Our privacy policy includes the following “sites”: the web pages and content on the MD website; our software platform, including the MD QC modules; our application programming interface and Model Context Protocol server; the MD QC agent software, when it communicates with our platform; web forms; our registration system; and any other means through which we interact with you.
Your use of and interaction with MD constitutes your acceptance of the practices described in this Privacy Policy, as they may be modified from time to time. If you do not agree with and accept all of the practices described in this Privacy Policy, do not use the MD sites and do not provide or submit any personally-identifying information by means of or while using the MD sites. By providing personal information to us, you consent to our collection, use and and disclosure of your personal information in accordance with this Privacy Policy.
INFORMATION WE MAY COLLECT
Personal Information
While interacting with the MD sites, we may request personal information from you, which may include items such as your name, email address, company name and job title. Your provision of such information is strictly voluntary. You can generally visit MD sites without disclosing such information. If you register to use the MD research assistant service, we will gather and store your user name and password.
Experiment details, mass spectrometry data files and other data that you or your organisation upload to our software (Customer Data) are generally not personal information about you. Customer Data is governed by our Terms of Use. To the extent that Customer Data includes personal information, we handle it on behalf of the organisation that uploaded it, in accordance with our Terms of Use.
We may also receive your name, your organisation’s name and site, and the serial numbers of instruments held by your organisation from technology partners who supply instruments or consumables used with our software, so that we can make our software available to you and help you set it up and use it, and tell you about our other products that work with it. You can opt out of those messages at any time.
Personal information may be collected by way of MD site usage, forms filled out by individuals, surveys, emails, telephone conversations, online user-generated content and market research, face-to-face meetings and interviews.
Technical Information
Additionally, by means of your interactions with the MD sites, we may collect, have access to, store and use your computer’s IP address, the URL/domain name of any referring website, the time and date of your visit to the MD sites, and certain information known as “clickstream data” to enable us to understand how people interact with the MD sites, to analyse data for trends and statistics, to help diagnose and solve issues with the MD sites and our technologies, products, and services, and to optimise the performance of the MD sites.
Service Data
When you use our software, our application programming interface, our Model Context Protocol server or the MD QC agent, we collect operational, diagnostic, performance and usage data about our software and the instruments it monitors, such as software performance information, workflow execution information, instrument, consumable and kit identifiers (including instrument serial numbers), system configuration information, usage statistics, error logs and technical metadata (Service Data). Service Data is defined in, and governed by, our Terms of Use. We take reasonable steps to keep personal information out of Service Data, but some Service Data (for example, usage statistics linked to a user account) may be personal information, and we handle that part of it in accordance with this policy.
Use of Google Analytics
GA is a free web analytics service provided by Google that monitors traffic that passes through your a website or application. MD sites use it to collect information about our website visitors, application users and their online activity while using the MD sites. We use GA so that we can learn more about how we can improve our service to better support our users’ work. If you choose to, you can opt out - https://tools.google.com/dlpage/gaoptout/ and you can find out more information on how Google uses data when you use MD sites at www.google.com/policies/privacy/partners/.
Our service providers
We use third party service providers to host and operate the MD sites. They include providers of cloud hosting (Amazon Web Services), product analytics, including analytics on the use of our Model Context Protocol server (Amplitude), in-app guidance (Userflow), error reporting (Honeybadger) and web analytics (Google Analytics). These providers handle personal information on our behalf, and only for the purpose of providing their services to us. A current list of our service providers is available at https://help.massdynamics.com/home/service-providers
Use of cookies
MD sites use session-based cookies (small data files stored in your browser) and, through the analytics providers described above, analytics cookies and similar technologies. This helps us remember whether you are logged into the site and whether you want your login to be remembered. We do not use cookies for any advertising or promotional activity. If you do not want cookies stored on your computer, you may be able to adjust your browser settings to prevent this, but note that by not accepting cookies, some pages may not fully function and you may not be able to access certain information on the MD sites.
HOW WE MAY USE AND DISCLOSE YOUR INFORMATION
Use by MD
MD uses your personal information as described above, and to customise your experience on the MD sites and to facilitate our interactions with you. If you have opted into digests such as our newsletter, we may use your personal information to update you on news and developments at MD. If you simply come to MD sites to read content, we will use information such as your URL and cookies to provide a good experience, as described above.
We use Service Data to provide, support, secure and improve our software and our other products and services.
Except as where necessary to provide services to you, MD staff do not take note of your personal information; the information is mainly stored on, or by our computers, computer networks, servers, tools, and systems, as described above.
No Sale or Leasing of Your Information
Except as described in this privacy policy, we will not disclose your personal information to third parties without your consent. We will not sell or lease your personal information to any third party. We may disclose aggregate demographic and statistical information; this information is not specific to the identification of you as an individual.
Disclosure to technology partners
We disclose Service Data to technology partners whose instruments, consumables or software you use with our software, for the support, maintenance, security and improvement of their products and of their use with our software. Our current technology partner is Evosep ApS, of Denmark. Before disclosing Service Data to a technology partner, we pseudonymise it so that it is identified by instrument serial number rather than by name, and we take reasonable steps to exclude personal information from it. Each technology partner uses Service Data as an independent controller, under its own privacy policy, and we require it not to attempt to identify any individual from Service Data.
Other disclosures
We may also disclose personal information to our service providers described above, to our professional advisers, and where we are required or authorised by law to do so.
THIRD PARTY WEBSITES
If, in your interactions with the MD Sites, you are linked or directed to, or click on, a third party website, we cannot control what information you may provide to that party or on/at that website, or how that party may use or disclose any information you may provide to them. As such, we urge that you exercise caution before providing them with your personal information.
SECURITY AND MANAGEMENT OF INFORMATION
MD will take reasonable steps to protect the information we hold from misuse and loss and from unauthorised access, modification or disclosure. The ways we do this include: limiting physical access to our premises; limiting access to the information we collect; requiring third party providers to have acceptable security measures to keep personal information secure; and putting in place physical, electronic, and procedural safeguards in line with industry standards.
If we no longer require your information and are not legally required to retain it, MD will take reasonable steps to destroy information.
HOW LONG WE RETAIN YOUR INFORMATION
We keep information for as long as is necessary to provide services to you, and for as long as your account and/or registration with MD is active. We will retain and use your information as necessary to comply with our legal obligations, to resolve disputes, and to enforce our agreements. Where your account is closed, we delete or de-identify the personal information associated with it within 90 days, unless we are required by law to keep it or need it to resolve a dispute or enforce our agreements. The retention and deletion of Customer Data (including QC history) and Service Data are governed by clause 6.10 of our Terms of Use.
OVERSEAS DISCLOSURE
We are based in Australia. Personal information we collect may be stored and processed in Australia and in other countries in which we or our service providers operate. Service Data is also disclosed to our technology partners, currently in Denmark. Where we disclose personal information overseas, we take reasonable steps to ensure that the recipient handles it in accordance with the Australian Privacy Principles.
CONSENT TO RECEIVE EMAIL COMMUNICATIONS
Except in countries or jurisdictions where it is not be permitted by law, we may from time to time send you email communications regarding our business, products or services in response to your use of the MD Sites, and by providing your email address, you consent to receive such communications. Where required by law, we will request that you opt-in (consent) to receive such communications from us before sending you such information.
You may opt out of receiving such communications by contacting us at privacy@massdynamics.com or by using the unsubscribe link in emails we send you.
ACCESS, CORRECTION AND COMPLAINTS
You may ask us for access to the personal information we hold about you, or ask us to correct it, by contacting us at privacy@massdynamics.com. We will respond within a reasonable period, generally within 30 days. If we refuse your request, we will tell you why.
If you have a complaint about how we have handled your personal information, please contact us at privacy@massdynamics.com. We will acknowledge your complaint promptly and aim to respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (www.oaic.gov.au) or, if the GDPR applies, to a supervisory authority as described below.
INDIVIDUALS IN THE EUROPEAN ECONOMIC AREA AND THE UNITED KINGDOM
If you are in the European Economic Area or the United Kingdom, the General Data Protection Regulation (EU 2016/679) or the UK General Data Protection Regulation (GDPR) may apply to our handling of your personal information. This section applies in addition to the rest of this policy. Where the GDPR applies, we rely on the legal bases described below, and not on your acceptance of this policy.
Controller. Mass Dynamics Pty Ltd is the controller of the personal information we collect about you through the MD sites. Where we handle personal information included in Customer Data, we do so as a processor on behalf of the organisation that uploaded it, and that organisation’s privacy policy applies. We are appointing representatives in the European Union and the United Kingdom under Article 27 of the GDPR and UK GDPR, and will publish their details here once appointed. In the meantime, please contact us at privacy@massdynamics.com.
Legal bases. We handle your personal information: to perform our contract with you or your organisation (for example, to provide your account and our software); for our legitimate interests in operating, securing and improving our software, understanding how it is used, supporting our technology partners’ products used with it, and communicating with our business customers, where those interests are not overridden by your rights; to comply with our legal obligations; and with your consent, where the law requires it (for example, for certain marketing emails and analytics cookies). Where we rely on your consent, you may withdraw it at any time.
Your rights. Subject to the GDPR, you have the right to access, correct or erase your personal information, to restrict or object to our handling of it, and to receive it in a portable format. To exercise these rights, contact us at privacy@massdynamics.com. You also have the right to complain to the data protection supervisory authority in the country where you live or work.
Transfers. Where we transfer your personal information outside the European Economic Area or the United Kingdom to a country that does not have an adequacy decision, we use a transfer mechanism permitted by the GDPR, such as standard contractual clauses.
HOW TO CONTACT US REGARDING YOUR PERSONAL INFORMATION
If you wish to discuss what personal information we may have pertaining to you, or the handling or potential disclosure of the same, or you wish to withdraw consent regarding these matters or to ask us to delete your personal information, you may contact us at privacy@massdynamics.com. You may also write to us at Mass Dynamics Pty Ltd, Level 3, 31 Queen Street, Melbourne, Victoria 3000, Australia.