Contact us

NavOnko Privacy Policy

Effective Date: August 26, 2024

NavOnko, a product of Vigyanix (“we,” “our,” or “us”), is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our NavOnko platform and related services (collectively, the “Service”).

2. Information We Collect

2.1 Personal Information

We may collect personally identifiable information, such as:

  • Names
  • Email addresses
  • Phone numbers
  • Job titles
  • Institution affiliations

2.2 Usage Data

We automatically collect information on how the Service is accessed and used, including:

  • Log data (e.g., IP address, browser type, pages visited)
  • Device information
  • Location information
  • Cookies and similar technologies

2.3 Community Outreach and Engagement Data

We collect data related to community outreach and engagement activities, including:

  • Event participation records
  • Survey responses
  • Health screening data (collected in compliance with HIPAA)

2.4 User Account Information

We collect the following information when you create and maintain an account:

  • Usernames and user IDs
  • Passwords (stored in encrypted form)
  • Account preferences and settings
  • Account recovery information
  • Login history and authentication records

2.5 Profile Information

When you create or update your profile on NavOnko, we collect:

  • Profile photos and avatars
  • Professional qualifications and credentials
  • Biographical information
  • Preferences and interests related to healthcare and oncology
  • Content you choose to share or post
  • Connections made with other users

2.6 Event and Engagement Data

During events and interactions on NavOnko, we may collect:

  • Registration information
  • Attendance and participation records
  • Communications and contributions during events
  • Health screening data and medical information voluntarily provided
  • Survey responses which may contain sensitive health information
  • Feedback and ratings

7. HIPAA Compliance

We recognize that user-provided information may include Protected Health Information (PHI). For such data:

  • We implement role-based access controls
  • We maintain detailed audit trails of PHI access
  • We conduct regular risk assessments specific to sensitive data
  • We have established data minimization procedures
  • We have incident response protocols specific to PHI breaches

3. How We Use Your Information

We use the collected information for various purposes, including to:

  • Provide and maintain our Service
  • Notify you about changes to our Service
  • Provide customer support
  • Gather analysis or valuable information to improve our Service
  • Monitor the usage of our Service
  • Detect, prevent and address technical issues
  • Conduct community outreach and engagement activities
  • Comply with legal obligations
  • Respond to user inquiries and fulfill user requests

4. Legal Basis for Processing Personal Information

We process your personal information based on one or more of the following legal grounds:

  • Your consent
  • Performance of a contract
  • Compliance with a legal obligation
  • Protection of vital interests
  • Public interest
  • Legitimate interests pursued by us or a third party

5. Data Sharing and Disclosure

We may share your information with:

  • Service providers who assist us in operating our business and providing the Service
  • Affiliated institutions and community outreach partners
  • Law enforcement or other governmental agencies, if required by law

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect the security of your personal information, including:

  • Encryption of data in transit and at rest
  • Regular security assessments and penetration testing
  • Access controls and authentication measures
  • Employee training on data protection and security

However, please note that no method of transmission over the Internet or electronic storage is 100% secure.

8. International Data Transfers

If we transfer your personal information outside of your jurisdiction, we ensure protection through:

  • Standard contractual clauses
  • Binding corporate rules
  • Other mechanisms approved by relevant data protection authorities

9. Your Data Protection Rights

Depending on your location, you may have certain rights regarding your personal information:

  • The right to access
  • The right to rectification
  • The right to erasure (right to be forgotten)
  • The right to restrict processing
  • The right to data portability
  • The right to object
  • Rights related to automated decision-making and profiling

To exercise these rights, please contact us using the information provided in the “Contact Us” section below.

10. Data Retention

We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless:

  • You request deletion of your data
  • A longer retention period is required or permitted by law
  • Retention is necessary for compliance with our legal obligations

10.1 Data Retention Guidelines

Our retention periods are determined based on:

  • The length of time we have an ongoing relationship with you
  • Whether there is a legal obligation to which we are subject
  • Whether retention is advisable in light of our legal position

10.2 Data Deletion Requests

You may request deletion of your data by contacting us at privacy@navonko.com. Upon receiving a deletion request, we will take reasonable steps to verify your identity before processing the request.

Note: Certain information may be retained if required by law, legitimate business purposes, or to complete transactions you have requested.

11. Children’s Privacy

Our Service is not intended for use by children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from children without verification of parental consent, we take steps to remove that information from our servers.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

  • Posting the new Privacy Policy on this page
  • Updating the “Effective Date” at the top of this policy
  • Sending an email to users where appropriate

13. Consent

By using NavOnko, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use our Service.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

privacy@navonko.com

15. CCPA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information. These rights include:

  • The right to know what personal information we collect, use, disclose, and sell
  • The right to request deletion of your personal information
  • The right to opt-out of the sale of your personal information
  • The right to non-discrimination for exercising your CCPA rights

To exercise your CCPA rights, please contact us using the information provided in the “Contact Us” section above.

17. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable laws. Our notification will include:

  • The nature of the breach
  • The types of information affected
  • Steps we are taking to address the breach
  • Recommended actions for you to protect yourself

18. Third-Party Links and Services

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to read the privacy policies of any third-party sites you visit.

19. Automated Decision-Making

We do not use automated decision-making or profiling that would produce legal effects concerning you or similarly significantly affect you without your explicit consent.

20. Privacy Policy Updates and Archiving

We keep prior versions of this Privacy Policy in an archive for your review. If you would like to see how our policy has changed over time, please contact us.

By using NavOnko, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.