NavOnko Privacy Policy

Effective Date: August 26, 2024

1. Introduction

NavOnko, a product of Vigyanix (“we,” “our,” or “us”), is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our NavOnko platform and related services (collectively, the “Service”).

2. Information We Collect

2.1 Personal Information

We may collect personally identifiable information, such as:

• Names
• Email addresses
• Phone numbers
• Job titles
• Institution affiliations

2.2 Usage Data

We automatically collect information on how the Service is accessed and used, including:

• Log data (e.g., IP address, browser type, pages visited)
• Device information
• Location information
• Cookies and similar technologies (see our Cookie Policy for more details)

2.3 Community Outreach and Engagement Data

We collect data related to community outreach and engagement activities, which may include:

• Event participation records
• Survey responses
• Health screening data (collected in compliance with HIPAA)

3. How We Use Your Information

We use the collected information for various purposes, including to:

• Provide and maintain our Service
• Notify you about changes to our Service
• Provide customer support
• Gather analysis or valuable information to improve our Service
• Monitor the usage of our Service
• Detect, prevent and address technical issues
• Conduct community outreach and engagement activities
• Comply with legal obligations
• Respond to user inquiries and fulfill user requests

4. Legal Basis for Processing Personal Information

We process your personal information based on one or more of the following legal grounds:

• Your consent
• Performance of a contract
• Compliance with a legal obligation
• Protection of vital interests
• Public interest
• Legitimate interests pursued by us or a third party

5. Data Sharing and Disclosure

We may share your information with:

• Service providers who assist us in operating our business and providing the Service (e.g., cloud storage providers, analytics tools)
• Affiliated institutions and community outreach partners, as necessary for the operation of the Service
• Law enforcement or other governmental agencies, if required by law or to protect our legal rights

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect the security of your personal information, including:

• Encryption of data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication measures
• Employee training on data protection and security

However, please note that no method of transmission over the Internet or electronic storage is 100% secure.

7. HIPAA Compliance

NavOnko is designed to be HIPAA-compliant. We maintain physical, electronic, and procedural safeguards that comply with applicable federal and state regulations to guard patient health information. This includes:

• Encryption of protected health information (PHI)
• Access controls and audit trails
• Business Associate Agreements with relevant partners
• Regular HIPAA compliance training for our staff

8. International Data Transfers

If we transfer your personal information outside of your jurisdiction, we will ensure that it is protected by appropriate safeguards, such as:

• Standard contractual clauses
• Binding corporate rules
• Other mechanisms approved by relevant data protection authorities

9. Your Data Protection Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• The right to access
• The right to rectification
• The right to erasure (right to be forgotten)
• The right to restrict processing
• The right to data portability
• The right to object
• Rights related to automated decision-making and profiling

To exercise these rights, please contact us using the information provided in the “Contact Us” section below.

10. Data Retention

We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our retention periods are determined based on:

• The length of time we have an ongoing relationship with you
• Whether there is a legal obligation to which we are subject
• Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations)

11. Children’s Privacy

Our Service is not intended for use by children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from children without verification of parental consent, we take steps to remove that information from our servers.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the “Effective Date” at the top of this policy
• Sending an email to users where appropriate

13. Consent

By using NavOnko, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use our Service.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@navonko.com

15. CCPA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information. These rights include:

• The right to know what personal information we collect, use, disclose, and sell
• The right to request deletion of your personal information
• The right to opt-out of the sale of your personal information
• The right to non-discrimination for exercising your CCPA rights

To exercise your CCPA rights, please contact us using the information provided in the “Contact Us” section above.

16. Cookie Policy

Please review our Cookie Policy for more information on how we use cookies and similar technologies. The Cookie Policy includes:

• Types of cookies we use
• How we use cookies
• Your choices regarding cookies
• How to manage your cookie preferences

17. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable laws. Our notification will include:

• The nature of the breach
• The types of information affected
• Steps we are taking to address the breach
• Recommended actions for you to protect yourself

18. Third-Party Links and Services

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to read the privacy policies of any third-party sites you visit.

19. Automated Decision-Making

We do not use automated decision-making or profiling that would produce legal effects concerning you or similarly significantly affect you without your explicit consent.

20. Privacy Policy Updates and Archiving

We keep prior versions of this Privacy Policy in an archive for your review. If you would like to see how our policy has changed over time, please contact us.

By using NavOnko, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.