BIOSO4 Privacy Policy

Your Privacy Rights and Choices

Depending on your location and applicable law, you may have certain rights regarding the personal information we collect, use, store, and share. These rights are provided under data protection and privacy laws including, but not limited to, the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and other applicable privacy regulations.

This section describes your rights and how you may exercise them.

1. Right to Access

You have the right to request confirmation as to whether we process your personal information. If we do, you may request access to the personal data we hold about you, including:

• The categories of personal data collected

• The purposes of processing

• The categories of recipients with whom the data has been shared

• The retention period for the data where possible

Where required by law, we will provide a copy of your personal information in a commonly used format.

2. Right to Rectification

You have the right to request that we correct or update inaccurate or incomplete personal information that we hold about you.

3. Right to Erasure (Right to be Forgotten)

You may request that we delete your personal information under certain circumstances, including when:

• The personal information is no longer necessary for the purposes for which it was collected

• You withdraw consent where processing is based on consent

• You object to the processing and no overriding legitimate grounds exist

Please note that we may retain certain information where required to comply with legal obligations, resolve disputes, enforce agreements, or for other lawful purposes.

4. Right to Restrict Processing

You may request that we restrict the processing of your personal information under certain conditions, including:

• When you contest the accuracy of the data

• When processing is unlawful but you request restriction instead of deletion

• When the information is no longer required by us but required by you for legal claims

5. Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you may request to receive your personal data in a structured, commonly used, and machine-readable format and request that we transfer the data to another controller where technically feasible.

6. Right to Object to Processing

You may object to the processing of your personal information where the processing is based on legitimate interests or used for direct marketing purposes.

Where an objection is raised, we will cease processing unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms.

7. Right to Withdraw Consent

Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing performed before the withdrawal.

8. Rights for California Residents

If you are a resident of California, you may have additional rights under applicable California privacy laws, including the right to:

Right to Know
Request disclosure of:

• The categories of personal information collected

• The categories of sources from which personal information is collected

• The business or commercial purposes for collecting personal information

• The categories of third parties with whom personal information is shared

• The specific pieces of personal information collected about you

Right to Delete
Request deletion of personal information we have collected from you, subject to certain legal exceptions.

Right to Correct
Request correction of inaccurate personal information.

Right to Opt-Out of Sale or Sharing
You may request that we do not sell or share your personal information with third parties for cross-context behavioral advertising where applicable.

Right to Limit Use of Sensitive Personal Information
Where sensitive personal information is collected, California residents may request that its use be limited to certain permitted purposes.

Right to Non-Discrimination
We will not discriminate against you for exercising your privacy rights.

9. Verification of Requests

To protect your privacy and security, we may take reasonable steps to verify your identity before responding to requests. This may include verifying information associated with your account or requesting additional information necessary to confirm your identity.

Authorized agents may submit requests on behalf of individuals where permitted by law, provided appropriate authorization documentation is supplied.

10. How to Exercise Your Rights

You may exercise your privacy rights by contacting us using the contact details provided below. When submitting a request, please include sufficient information to allow us to verify your identity and understand the scope of your request.

We will respond to verified requests within the timeframe required by applicable law.

11. Right to Lodge a Complaint

If you believe that your personal information has been processed in violation of applicable law, you may have the right to lodge a complaint with a competent data protection authority or supervisory authority in your jurisdiction.

12. Updates to This Section

We may update this Privacy Rights section from time to time to reflect changes in our practices, applicable laws, or regulatory requirements. When we do so, we will update the “Last Updated” date of this Privacy Policy.

💡 If you’d like, I can also help you add the other sections most privacy policies require, such as:

• Data we collect (with cookie + analytics wording)

• Legal bases for processing under GDPR

• International data transfers (EU → US)

• Data retention policies

• Cookies & tracking technologies

• Children’s privacy

• A DSAR request email template + request form text

These make the policy much closer to what lawyers and compliance tools (like OneTrust or Termly) generate.