Privacy Policy
Last Updated: 2025-29-09
Welcome to nexogeno.com (“NexoGENO“, “we“, “us“, “our“). We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy explains how we collect, use, process, and safeguard your information when you visit our website, nexogeno.com (the “Website”), and use our genetic analysis services (the “Services”).
Given our global user base, we adhere to the high standards of data protection set forth by the European Union’s General Data Protection Regulation (GDPR), affording its principles and rights to all our users, regardless of their location.
Please read this Privacy Policy carefully. By using our Services, you consent to the data practices described in this statement.
1. Data Controller
For the purposes of the GDPR, the data controller is Nexogeno. You can contact us with any privacy-related questions or requests at our dedicated email address: [email protected].
2. Information We Collect
We collect information that is essential for providing and improving our Services. This data is categorized as follows:
a) Personal Information You Provide to Us:
-
Account and Contact Information: When you order our Services, we collect your name, email address, and any other information needed for communication and service delivery.
-
Payment Information: Payment processing is handled by secure third-party payment processors. We do not store your credit card details on our servers.
b) Genetic Data (Sensitive Personal Information):
-
Genetic Information: From your existing DNA raw data file, we extract your DNA information and generate your genetic data. This data is used exclusively to provide you with the genetic analysis reports you have requested.
-
We treat your Genetic Data with the highest level of confidentiality and security. We will not use it for any purpose without your explicit consent.
c) Information Collected Automatically:
-
Usage Data: We may automatically collect information about how you access and use the Website, such as your IP address, browser type, operating system, and pages visited. This helps us to improve our Website’s performance and user experience.
3. How We Use Your Information (Legal Basis for Processing)
Our use of your personal data is always based on a lawful ground.
-
To Provide our Services: We process your personal and genetic data to fulfill our contract with you—that is, to perform the genetic analysis you requested and deliver your results. The legal basis for this is the performance of a contract, and for the processing of sensitive genetic data, your explicit consent, which you provide when you purchase our Service and submit your sample.
-
To Communicate with You: We use your contact information to send you updates about your order, deliver your results, and respond to your inquiries. The legal basis is the performance of a contract and our legitimate interest in providing excellent customer support.
-
To Improve Our Website: We analyze usage data to understand user behavior and improve our Website’s functionality. The legal basis is our legitimate interest in developing our business.
We will never sell, rent, or lease your personal or genetic data to any third party.
4. Data Retention and Deletion
We believe in data minimization and do not store your sensitive data indefinitely.
-
Data Retention Period: We retain your personal and genetic data for a maximum period of twelve (12) months from the date your report is delivered.
-
Automatic Deletion: After this 12-month period, your personal records and associated genetic data are automatically and permanently deleted from our systems.
-
On-Demand Deletion (Your Right to Erasure): You have the right to request the deletion of your personal and genetic data at any time. To do so, please send a request to [email protected]. We will process your request promptly and confirm the deletion once completed.
5. Your Data Protection Rights (Under GDPR)
We extend the following data protection rights to all our users:
-
The Right to Access: You have the right to request copies of your personal data.
-
The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
-
The Right to Erasure: You have the right to request that we erase your personal data, as detailed in the “Data Retention and Deletion” section above.
-
The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
-
The Right to Object to Processing: You have the right to object to our processing of your personal data under certain conditions.
-
The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
To exercise any of these rights, please contact us at [email protected].
6. Data Security
We take the security of your data very seriously, especially your genetic data. We use a variety of administrative, technical, and physical security measures to protect your information from unauthorized access, use, disclosure, alteration, or destruction. These measures include data encryption, access controls, and secure server infrastructure.
7. International Data Transfers
As a global service, your data may be processed in a country outside of your own. We ensure that any such transfers are compliant with GDPR and that your data remains protected to the same high standards, regardless of where it is processed, by using appropriate safeguards like Standard Contractual Clauses.
8. Children’s Privacy
Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without verification of parental consent, we will take steps to delete that information.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date at the top. We encourage you to review this Privacy Policy periodically for any changes.
10. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please do not hesitate to contact us at:
-
Email: [email protected]