Privacy Policy

Last updated: 7 September 2026

Contents

• 1. Who we are
• 2. Our approach
• 3. Information we collect
• 4. Payment information
• 5. Why we use your information
• 6. Report verification and your privacy
• 7. Who we share information with
• 8. International transfers
• 9. How long we keep information
• 10. Security
• 11. Your rights
• 12. Cookies
• 13. Children
• 14. Changes to this policy
• 15. Contact

1. Who we are

Puralytix is an independent laboratory analysis service located at 71 Vazha-Pshavela Avenue, Block 2, Saburtalo District, 0186 Tbilisi, Georgia. For the purposes of data protection law, Puralytix is the controller of the personal information described in this policy.

This policy explains what personal information we collect, why we collect it, what we do with it, how long we keep it and what rights you have. It applies to the Puralytix website at puralytix.com and to our analysis services.

2. Our approach

Confidentiality is central to what we do. We collect the minimum information we need to accept an order, receive and identify a sample, carry out an analysis and deliver a report. We do not sell personal information, we do not share it for advertising, and our public report verification function is built specifically so that a report can be checked by anyone without revealing anything about the client behind it.

3. Information we collect

Information you give us

• Account information — the name or username, email address and password you register with.
• Order information — the analyses you select, add-ons, order reference, and any notes you add to an order.
• Billing information — billing name and address where required to complete an order.
• Shipment information — the tracking number and carrier you submit, and any sample details you provide.
• Correspondence — messages you send through our contact forms, custom analysis requests or by email, and our replies.

Information we generate

• Analytical records — laboratory data, instrument output, method records and the report we issue, together with its report ID and verification key.
• Order history — order status changes and internal notes relating to your order.

Information collected automatically

• Technical information — IP address, browser and device type, pages viewed and similar information collected by our server logs, security plugin and, where you consent, analytics cookies. See our Cookie Policy.

We do not ask for, and ask that you do not send us, information about your health, medical history or any other special category of personal data. We do not need it in order to analyse a sample.

4. Payment information

We do not store full payment card numbers on our systems. Where a payment is processed by a third-party provider, your payment details are handled by that provider under its own terms and privacy policy. Where payment is made by bank transfer or another manual method, we will see the information your bank or payment method discloses to us, such as the account name and reference.

5. Why we use your information, and our lawful basis

• To perform our contract with you — creating and administering your account, accepting and processing orders, receiving and identifying samples, carrying out analyses, issuing and delivering reports, and providing support.
• For our legitimate interests — keeping the Site and our systems secure, preventing fraud and misuse, maintaining the integrity of the report verification system, keeping proper business records, and improving our services. We balance these interests against your rights.
• With your consent — non-essential cookies, and any optional communications you opt in to. You may withdraw consent at any time.
• To comply with legal obligations — including accounting, tax and record-keeping requirements, and responding to lawful requests from competent authorities.

6. Report verification and your privacy

Our public Report Verification page allows anyone holding a report ID and verification key to confirm that a report is genuine. It is deliberately designed to disclose only analytical information about the sample — report ID, status, test category, sample reference, date issued and result summary.

It never discloses your name, username, email address, postal address, billing details, payment data, order reference, order history or any other information that identifies you. A third party who verifies your report learns nothing about who commissioned it.

7. Who we share information with

We do not sell your personal information and we do not share it for advertising. We share it only with:

• Service providers acting on our behalf — our web hosting provider, email delivery provider, security and backup services, and, where applicable, payment providers. They may process personal information only on our instructions and for the purpose we engage them for.
• Carriers — where a shipment needs to be traced or a delivery problem resolved.
• Professional advisers — such as accountants, where necessary.
• Authorities — where we are required to disclose information by law, or where disclosure is necessary to establish, exercise or defend legal claims. We will not disclose more than is required.

If our business is transferred to another party, personal information may transfer with it, subject to this policy.

8. International transfers

Puralytix is located in Georgia. Some of our service providers may process information in other countries. Where information is transferred outside your own country, we take reasonable steps to ensure it remains protected to a standard consistent with this policy and with applicable law.

9. How long we keep information

• Account information — for as long as your account remains open, and for a reasonable period afterwards.
• Order and analytical records, including reports — retained for as long as we need to support report verification and to meet accounting and legal record-keeping obligations. Report records must be retained for verification to keep working: if we deleted a report record, any report issued from it could no longer be confirmed as genuine.
• Correspondence — for as long as needed to deal with the matter and for a reasonable period afterwards.
• Technical logs — for a short period, for security and diagnostic purposes.

When information is no longer needed, we delete it or anonymise it.

10. Security

We take reasonable technical and organisational measures to protect personal information, including encryption of traffic to the Site over HTTPS, access controls, security monitoring and regular backups. No system can be guaranteed completely secure, and you are responsible for keeping your account password confidential and choosing a strong one.

11. Your rights

Subject to applicable law, you may ask us to:

• confirm what personal information we hold about you, and give you a copy;
• correct information that is inaccurate or incomplete;
• delete information we no longer have a lawful reason to keep;
• restrict or object to certain processing;
• provide certain information in a portable format;
• withdraw consent where our processing relies on it.

Some rights are qualified. In particular, we may need to retain records associated with an issued report so that the report can continue to be verified, and to meet legal record-keeping obligations. Where we cannot fully meet a request, we will explain why.

To exercise a right, contact us using the details below. We may ask you to confirm your identity. You also have the right to complain to the data protection authority in your country.

12. Cookies

We use cookies and similar technologies as described in our Cookie Policy. You can manage non-essential cookies through the consent banner at any time.

13. Children

Our services are not directed at anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time. The “last updated” date above shows when it last changed. Where a change is significant, we will take reasonable steps to bring it to your attention.

15. Contact

For any privacy question or to exercise a right, email info@puralytix.com or use our contact form. Postal address: Puralytix, 71 Vazha-Pshavela Avenue, Block 2, Saburtalo District, 0186 Tbilisi, Georgia.