Shenzhen Health SwifTech Co., Ltd. and its affiliated companies (hereinafter referred to as “HST” or “we”) is committed to protecting and respecting your privacy.
This Privacy Policy outlines how we process your personal data. We collect, use, disclose, transfer, and store your Personal Data when you use our websites, and/or our genetic testing and sequencing services (collectively the “Services”). Please read this Privacy Policy carefully to understand how we treat your Personal Data and/or Genetic Data that we may obtain in the course of providing our Services.
This Privacy Policy will help you understand the following:
"Personal Data" refers to any information relating to an identified or identifiable natural person (“Data Subject”), including Genetic Data. An identifiable natural person is one who can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location information, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
The Personal Data can be collected by HST directly from the Data Subject, or from a Third Party with the consent of the Data Subject or where permitted by law.
HST is responsible for the processing and treatment of your Personal Data regarding the Services entrusted to HST.
The Personal Data HST processes include but is not limited to: full name, address and contact details, date of birth, nationality, etc.
HST might collect the Personal Data in the following circumstances:
(1) When you use this website (http://healthswiftech.com/en/index.html)
(2) When you use our genetic testing and sequencing services
(3) When you use our customer services
(4) When you cooperate with us
We process your Personal Data so that we can:
(1) Perform our Services
(2) Improve our Services
(3) Keep you updated about our Services
(4) Contact you with other relevant Services we think you might be interested in Genetic data, data concerning health, or other special categories of Personal Data under article 9 of the GDPR or other applicable laws and regulations will only be processed based on the explicit consent you provide to us.
HST will retain the Personal Data for no longer than it is necessary for the purposes as long as needed to provide the Services requested from HST or requested by applicable laws and regulations. Beyond the above retention period, we will delete or anonymize your Personal Data.
Within HST, the Personal Data collected are only accessible to the members of HST who, within the scope of their specific tasks, are responsible for it and whose access to these data is expressly required for the performance of their tasks.
After receiving your consent, HST may also share the Personal Data collected with its affiliated companies, trusted third parties, suppliers and sub-contractors through which you have ordered one of our services and consented to receive your Personal Data.
We will never share or disclose your Personal Data without obtaining your consent unless when:
(1) It is directly relevant to public health or significant public interest;
(2) It is directly relevant to investigation, prosecution, trial and execution of judgment of crimes;
(3) It is for the purpose of protecting life, property or other significant legal rights and interests of Personal Data subjects or others, and it is difficult to obtain consents from such person;
(4) The Personal Data collected has been disclosed by the Personal Data Subject to the public actively;
(5) It is otherwise provided by applicable laws and regulations.
Subject to applicable local legal requirements, your Personal Data may be transferred, stored and processed outside of the country where you live or have ordered our Services from, including to our subsidiaries, affiliated companies and service providers located in other jurisdictions, and may become subject to the laws of such jurisdictions.
We only provide your Personal Data to our subsidiaries, affiliated companies and services providers where it is necessary to meet the purpose for which you have submitted your Personal Data and in particular if necessary, for the provision of services and support. We take steps to ensure that HST companies follow our data protection policy, this privacy notice and applicable local law when handling Personal Data and that service providers put in place adequate safeguards to protect the Personal Data entrusted to them, as outlined below.
For Personal Data of the EU Data Subjects: HST will implement appropriate measures to ensure that Personal Data remain protected and secure when transferred outside EU, in accordance with applicable data protection and privacy laws, such as:
(1) The country to which the Personal Data are transferred has benefited from an adequacy decision by the European Commission under Article 45 of the GDPR;
(2) Standard data protection contractual clauses as approved by the European Commission pursuant to Article 47 of the GDPR have been established.
(3) In the absence of the above appropriate safeguards, we will ask you for your explicit consent for cross-border transmission of your Personal Data. In the meantime, security measures such as encryption or de-identification will be adopted for the safety of your Personal Data.
HST uses a variety of security measures and technologies to help protect Personal Data from unauthorized access, use, disclosure, alteration or destruction with applicable data protection and privacy laws. The following measures are taken:
(1) We take practical measures to ensure that the Personal Data is minimally collected and relevant to the purposes. Your Personal Data is retained for no longer than the necessary for the purposes as long as needed to provide the Services requested from HST or requested by applicable laws and regulations.
(2) We utilize access control mechanisms to permit only authorized access to your Personal Data. The access to Personal Data will be logged and reviewed by authorized personnel at a regular interval. In addition, personnel who have the authorized access will be required to sign confidential agreement.
(3) We carefully select external suppliers/ subcontractors or services providers of Personal Data processing, and will put in place a written agreement which contain the requirements of Personal Data protection.
(4) We organize security and privacy protection training courses and publicity activities at a regular interval to raise employees’ awareness.
(5) In case of Personal Data breach, we will without undue delay inform you about the basic conditions and possible influence of the data breach, response measures that are already taken or to be taken by us, suggestions for you regarding precautions and risk control, corrective measures for you, etc. To the extent permitted by law, we will inform you about relevant situations of the Personal Data Breach in a timely manner via email, fax, telephone or push notification, or any other means of communication we deem appropriate. When it is difficult to notify every Data Subject individually, we will properly and effectively issue a public announcement.
We respect your legal rights with regards to your Personal Data. Below are the rights you may exercise before us by sending an email to contact@healthswiftech.com. Please note that for the sake of security, we may ask you to verify your identity before further processing your request.
(1) To access the Personal Data HST holds about you: You are entitled to access and request copies of Personal Data that you provided to us, unless applicable laws provide otherwise.
(2) To be informed about how HST uses your Personal Data: We strive to be transparent about how we use your data. We keep you informed as to what we do with your Personal Data through this Privacy Policy.
(3) To have these data rectified promptly in case of inaccuracy/incompleteness: If you find that your Personal Data processed by us is inaccurate or incomplete, you are entitled to ask us to make rectifications.
(4) To have your Personal Data erased in specific circumstances: You can request us to delete your Personal Data. Depending on the circumstances, HST will have to implement the right to data deletion.
(5) To restrict the processing of your Personal Data: You have the right to ask us to restrict how we process your Personal Data. If you restrict our processing, we will not further process but are still permitted to store the data.
(6) o object to the processing of your Personal Data: You have the right to object to our processing your data when the processing is based on our legitimate interests, the exercise of official authority, direct marketing (including data aggregation), and processing for the purpose of statistics.
(7) Possibility of withdrawal of the consent/ subsequent refusal to transmit Personal Data: If you wish to withdraw your previous consent or withdraw the consent to transfer of your Personal Data, you can send a written statement to HST. HST will respect that choice in accordance with its own legal obligations. This could mean that HST may not be able to perform the actions necessary to achieve the purposes as set out in this Privacy Policy and affect the way in which HST deals with you and/or for any related entities. Moreover, this withdrawal will not affect the lawfulness of processing based on consent before its withdrawal. In this case, HST will not be responsible for any direct or indirect damage of any kind that might occur as result of the withdrawal of the consent.
However, please note that HST is contractually obliged to retain certain information as necessary for our legitimate business interests, to comply with our legal interest, or in accordance with legislation.
HST reserves the right to modify this Privacy Policy at any time in accordance with this provision. The circumstances where we may change our Privacy Policy include but not limited to: there is major change of our service mode; major change in terms of our ownership structure, organization structure; change of main object to which the Personal Data is publicly disclosed, shared, or transferred; change of your rights involved in Personal Data processing and their exercises; change of our responsible department, contacts and complaint channels for security of Personal Data; when there is high risk according to the Personal Data impact assessment report, etc.
For any privacy concern, you may, at any time, contact HST through contact@healthswiftech.com and generally you will get our reply in thirty (30) working days or such shorter period as provided by law.