1. Information We Collect

We may collect the following types of personal data:

• Name, email address, phone number
• Company name and job title
• Project and inquiry details you submit through our contact form
• Technical data including browser type, device info, and IP address
• Usage data such as pages visited and time spent on our website
• Marketing and communication preferences

2. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: When processing is necessary for the performance of a contract
• Legal Obligation: When processing is necessary to comply with legal requirements
• Legitimate Interests: When processing is necessary for our legitimate business interests
• Consent: When you have given explicit consent for specific processing activities
• Vital Interests: When processing is necessary to protect someone's life
• Public Task: When processing is necessary for the performance of a task carried out in the public interest

3. How We Use Your Information

We use your information to:

• Respond to inquiries or requests
• Provide our services and support
• Improve our website and customer experience
• Send updates or marketing communications (with your consent)
• Analyze website usage and performance
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell or rent your personal information. We may share data with:

• Trusted service providers who assist in our operations
• Government authorities, when required by law or regulation
• Professional advisors and consultants
• Business partners in case of mergers or acquisitions

5. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to:

• Enhance user experience and website functionality
• Analyze website performance and usage patterns
• Deliver relevant content and advertisements
• Remember your preferences and settings

You can control cookies through your browser settings. For more information about our cookie usage, please refer to our Cookie Policy.

6. Data Retention

We retain your personal information only as long as necessary for the purposes described in this policy or as required by law. The retention period may vary depending on the type of data and legal requirements.

7. Your Rights

Under applicable data protection laws, you have the following rights:

• Right to access your personal data
• Right to correct inaccurate data
• Right to request deletion of your data
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

8. Data Security

We implement appropriate technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Employee training on data protection

9. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify you without undue delay
• Notify the relevant supervisory authority within 72 hours
• Provide details about the nature of the breach
• Describe the likely consequences
• Outline the measures taken or proposed to address the breach
• Provide contact details for further information

10. Automated Decision Making

We do not use automated decision-making processes that produce legal effects or similarly significantly affect you. If this changes in the future, we will:

• Inform you about the logic involved
• Explain the significance and envisaged consequences
• Provide you with the right to request human intervention
• Allow you to express your point of view
• Give you the right to contest the decision

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including:

• Standard contractual clauses
• Binding corporate rules
• Other approved transfer mechanisms

12. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices or content of such sites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

14. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data infringes data protection laws. The relevant supervisory authority depends on your location:

• European Union: The data protection authority in your country of residence
• United Kingdom: Information Commissioner's Office (ICO)
• United States: Federal Trade Commission (FTC)
• Pakistan: Pakistan Telecommunication Authority (PTA)

For more information about your rights and how to contact these authorities, please visit their respective websites.

15. Changes to This Policy

We may update this policy from time to time. The latest version will be posted on this page with the updated date. We encourage you to review this policy periodically for any changes.

16. Contact Us

If you have any questions or concerns about this Privacy Policy, you can contact us at:

For data protection inquiries, please contact our Data Protection Officer at:
Email: dpo@nuvexbiotech.com