Accounts Payable Privacy Statement


Information We Collect and How We Use It

Your personal information, including your name, contact information, business address, business bank account, business tax identification number, and other business information as required in the course of its normal business, will be used by Eli Lilly and Company, or third parties acting on our behalf, for the purpose of providing you with the payment for the services you have provided to Lilly, to set up the required supplier services, scheduling of those services, and to monitor the quality of and make improvements to the program. We value your input about the quality of the services you receive and may also contact you to ask for your opinion. We may also use the information to meet legal or regulatory obligations, inclusive of company record retention that are in the legitimate interest of Lilly.

Your information may be combined with information from other supplier information repositories that are necessary for the relationship we have with you.

You do not have to share your information with us, but if you choose not to share your information, we will not be able to onboard you as a supplier, and you will not be able to provide services to Lilly.

Reasons We Share Your Information

We may share your personal information with third parties such as our agents, contractors or partners in the connection with services that these individuals or entities perform for, or with, Lilly for purposes consistent with those identified in this notice. All third parties that have access to your information have agreed to protect the information and to use it only as directed by us.

We may also be required to disclose your information in response to lawful requests by public authorities, including to comply with national security or law enforcement requests.

Where We Store and Process Your Information

We may transmit personal information about you to other Lilly affiliates worldwide. These affiliates may in turn transmit personal information about you to other Lilly affiliates. Some of Lilly’s affiliates may be located in countries that do not ensure an adequate level of data protection. Nevertheless, all of Lilly’s affiliates are required to treat personal information in a manner consistent with this notice. To obtain additional information regarding the basis for transfers and safeguards that Lilly has in place for cross-border transfers of personal information, please contact us at privacy@Lilly.com or visit https://www.lilly.com/privacy

How Long We Keep Your Information

Your Information will be saved for a period of time needed to fulfill legitimate and lawful business purposes in accordance with Lilly’s records retention policies and applicable laws and regulations.

How We Secure Your Information

We provide reasonable physical, electronic, and procedural safeguards to protect information we process and maintain. We limit access to your information to authorized employees, agents, contractors, vendors, subsidiaries, and business partners, or others who need such access to information to carry out their assigned roles and responsibilities on behalf of Lilly. Please be aware, although we try to protect the information we process and maintain, no security system can prevent all potential security breaches.

Your Rights and Choices

You have the right to request information from us on how your personal information is being used and with whom that information is being shared. You also have the right to see and get a copy of the personal information that we have about you. If you believe any of this information to be inaccurate or incomplete, you have the right to request its correction or erasure.

There may be limitations on our ability to comply with your request.

How to Contact Us

You may make any of the above requests by contacting us at: GDPR_Request@Lilly.com


How to Submit a Complaint

If you wish to raise a complaint on how we have handled your personal information, you can contact our Data Protection Officer at privacy@Lilly.com who will investigate the matter.

If you are not satisfied with our response or believe we are processing your personal information not in accordance with the law you can register a complaint with a Data Protection Authority (DPA).

Last Updated: May 24, 2018