Deteklab Privacy Policy

1. Introduction & Overview

Germonizer Pte Ltd trading as Deteklab (“Deteklab”, “Company”, “we”, “our”, or “us”), registered under UEN 201132487K in Singapore, operates a global multi-tenant precision diagnostics platform connecting laboratories, distributors, healthcare providers, and clients.

Your privacy and data security are fundamental to our mission. This Privacy Policy outlines how we collect, use, store, process, and protect your personal information and sensitive health data when you access our platform, mobile interfaces, websites, or associated services.

2. Legal Roles & Regulatory Framework (GDPR / PDPA / HIPAA)

• Data Controller / Organisation: When healthcare operators, partner laboratories, or distributors manage patient records or client accounts on Deteklab, they act as the Data Controller (under EU GDPR) or Organisation (under Singapore PDPA).
• Data Processor / Data Intermediary: Deteklab acts as a Data Processor or Data Intermediary, processing data solely on behalf of authorized operators in accordance with contractual terms and statutory requirements.
• Sensitive Health Data (PHI): Any sensitive health data or diagnostic test information uploaded to the platform is protected by end-to-end encryption, strict role-based access controls, and auditing.

3. Information We Collect

We collect several categories of information to provide secure and efficient diagnostic management services:

4. How We Use Your Information

We process your personal information strictly for legitimate medical and operational purposes:

• Processing diagnostic test orders, specimen dispatch, and result delivery.
• Managing sub-account access, user authentication, and multi-tenant portal permissions.
• Processing payments, invoicing, wallet credit allocation, and partner payouts.
• Maintaining platform security, audit trails, and anti-fraud safeguards.
• Fulfilling legal, statutory, and regulatory obligations.

5. Data Security & Encryption Standards

Deteklab enforces robust technical and organizational security measures to protect data against unauthorized access, loss, or alteration:

• AES-256 Encryption: Data stored at rest is encrypted using AES-256 standards.
• In-Transit Security: All API requests, user sessions, and database transfers are encrypted using TLS/SSL (HTTPS).
• Access Controls & Audit Logs: Access is restricted based on least-privilege principles, supported by immutable activity logging.

6. Information Sharing & Third Parties

We do not sell, rent, or trade your personal or medical data to third parties. We share information only in the following limited circumstances:

• Fulfillment Partners: Certified diagnostic laboratories and courier services (e.g. DHL) directly involved in processing your order.
• Payment Gateways: PCI-DSS compliant financial providers (Airwallex) for secure payment settlement.
• Legal Requirements: When compelled by law, court subpoena, or statutory healthcare authorities.

7. Your Data Rights & Choices

Depending on your jurisdiction (including EU GDPR and Singapore PDPA), you hold the following rights regarding your data:

• Access & Rectification: You may request access to or correction of your personal data.
• Erasure & Deletion: You may request the deletion of your account and personal data, subject to mandatory statutory medical record retention obligations.
• Cookie & Consent Preferences: You can modify your consent settings anytime via the "Cookie Preferences" link in the page footer.

8. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or data protection, please contact our team: