Privacy Policy

Service Delivery:

• Provide and maintain our genetic analysis, clinical decision support, and wellness platforms
• Process and analyze genetic testing samples and results
• Generate personalized health, nutrition, fitness, and mental wellness recommendations
• Facilitate communication between you and healthcare professionals or experts

Business Operations:

• Respond to your inquiries and provide customer support
• Process transactions and manage your account
• Send service-related announcements and updates
• Improve and optimize our services and website

Legal and Compliance:

• Comply with legal obligations and regulatory requirements
• Protect our rights and prevent fraud or abuse
• Enforce our terms and conditions

Marketing (with your consent):

• Send you information about our products, services, and promotions
• You can opt-out of marketing communications at any time

Consent:

You have given explicit consent for processing your genetic and health data for specific purposes.

Contract Performance:

Processing is necessary to provide services you have requested or contracted for.

Legal Obligation:

Processing is required to comply with legal or regulatory requirements.

Legitimate Interests:

Processing is necessary for our legitimate business interests (e.g., improving services, fraud prevention), provided your rights and interests do not override these interests.

Service Providers:

We work with trusted third-party service providers who assist us in operating our platform:

• Genetic testing laboratories (for sample analysis)
• Cloud hosting and data storage providers
• Healthcare professionals and domain experts (for validation and consultation)
• IT and security service providers

All service providers are contractually obligated to protect your data and use it only for specified purposes.

Healthcare Professionals:

If you use our services through a healthcare provider, wellness organization, or employer, we may share relevant information with authorized professionals overseeing your care or wellness program.

Legal Requirements:

We may disclose your information if required by law, regulation, legal process, or governmental request, or to:

• Protect the rights, property, or safety of PurePath, our users, or the public
• Enforce our terms and conditions
• Respond to claims of violation of third-party rights

Business Transfers:

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

With Your Consent:

We may share information for other purposes with your explicit consent.

Technical Measures:

• Encryption of data in transit (TLS/SSL) and at rest (AES-256)
• Secure, access-controlled data centers
• Regular security audits and vulnerability assessments
• Multi-factor authentication for account access
• Secure backup and disaster recovery procedures

Organizational Measures:

• Employee training on data protection and privacy
• Strict access controls (need-to-know basis)
• Confidentiality agreements with employees and contractors
• Incident response and breach notification procedures

Healthcare Compliance:

• HIPAA-ready architecture for health data protection
• CAP/CLIA compliance for genetic testing operations
• ISO 27001 security standards (in progress)

Account and Contact Information:

Retained for the duration of your account plus 7 years after account closure (for legal and regulatory compliance).

Genetic and Health Data:

Retained for as long as you maintain an active account or as required by healthcare regulations. You may request deletion at any time (see Section 9: Your Rights).

Usage and Analytics Data:

Typically retained for 2 years, then aggregated or anonymized.

Marketing Communications:

Retained until you opt-out or request deletion.

Legal and Compliance Records:

Retained as required by applicable laws and regulations (typically 7-10 years).

What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us recognize you and remember your preferences.

Types of Cookies We Use:

Managing Cookies:

You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality.

To opt-out of Google Analytics: https://tools.google.com/dlpage/gaoptout

Third-Party Services:

We may use third-party analytics and marketing tools that set their own cookies. Please refer to their privacy policies for more information.

Right to Access:

You can request a copy of the personal data we hold about you.

Right to Rectification:

You can request correction of inaccurate or incomplete personal data.

Right to Erasure (“Right to be Forgotten”):

You can request deletion of your personal data in certain circumstances (e.g., when data is no longer necessary, you withdraw consent).

Right to Restrict Processing:

You can request that we limit how we use your data in certain situations.

Right to Data Portability:

You can request your data in a structured, machine-readable format to transfer to another service provider.

Right to Object:

You can object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent:

If processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

Right to Lodge a Complaint:

You can file a complaint with your local data protection authority if you believe your rights have been violated.

Primary Data Storage:

• Oman and other GCC countries
• Data centers that comply with local data residency requirements

International Transfers:

In some cases, we may transfer data outside the GCC region (e.g., to cloud service providers). When we do, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions recognizing equivalent data protection standards
• Your explicit consent for specific transfers

Data Protection Officer:

Email: privacy@purepath.club

Address: Muscat, Oman

General Inquiries:

Email: info@purepath.club

Phone: +971 (Contact for details)

You can also contact us through our Contact page.