Last Updated: March 6th, 2026
SYMBIO NEXUS (“we,” “us,” “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at www.symbionexuslabs.com (the “Site”) or engage our professional services (“Services”).
Information We Collect
We collect several types of information:
- Personal Information You Provide: This includes your name, email address, institutional affiliation, project inquiries, and any other details you submit via contact forms, email, or within a statement of work, project agreement, or other written services agreement (each, a ‘Project Agreement’ or ‘PA’).
- Client Project Data: In performing our Services, we analyze biological datasets and related information you provide under a specific PA. This “Client Project Data” is treated as highly confidential and is governed primarily by the confidentiality and data security terms of that Project Agreement.
- Automatically Collected Technical Data: When you visit our Site, we may automatically collect information such as your IP address, browser type, operating system, referring URLs, pages viewed, and the dates/times of your visits. This data is collected through cookies and similar tracking technologies.
- Cookies: We use necessary cookies for site functionality. We may also use analytics cookies (like those from Google Analytics) to understand how visitors use our Site. You can control cookie settings through your browser.
How We Use Your Information
We use the information we collect for the following purposes:
- To provide, operate, maintain, and improve our Site and Services.
- To communicate with you about your inquiries, projects, and service updates.
- To fulfill our contractual obligations under a PA.
- To comply with applicable laws, regulations, and legal requests.
- We do not sell, rent, or trade your personal information or Client Project Data to third parties.
Legal Basis for Processing (For Individuals in the EEA/UK)
If you are from the European Economic Area (EEA) or the United Kingdom (UK), our legal basis for processing your personal data is:
- Contractual Necessity: To perform the Services under a PA with you.
- Legitimate Interests: For our administrative, security, and website improvement activities, where our interests are not overridden by your data protection rights.
- Consent: In specific cases where we have clearly asked for, and you have provided explicit consent (e.g., subscribing to a marketing newsletter). You may withdraw consent at any time.
Data Sharing and Disclosure
We may share information in the following situations:
- With Service Providers: We share data with trusted third-party vendors who assist us in operations (e.g., secure cloud storage providers like AWS or Google Cloud, email communication platforms, analytics providers). These partners are bound by strict data processing agreements.
- For Legal Reasons: If required to do so by law or in response to valid legal requests (e.g., a court order).
- With Your Consent: As directed by you or as specified in a PA (e.g., sharing results with a designated collaborator).
Data Security
We implement administrative, technical, and physical security measures designed to protect your information, including encryption, access controls, and secure protocols. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.
Data Retention
We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.
- Client Project Data is retained for a period necessary to ensure scientific reproducibility and as stipulated in the applicable PA. In the absence of a specific term, project data will be securely retained for a period of one (1) year from project completion, after which it will be securely archived or deleted.
- Inquiry Data from non-clients is typically retained for 6 months.
- While we take all reasonable measures to protect data, no digital or online storage system is completely secure. There is always a small risk that data could be lost, corrupted, or deleted due to technical issues or unforeseen events.
Your Data Protection Rights
Depending on your location (e.g., EEA, UK, California), you may have the following rights regarding your personal information:
- The right to access and receive a copy of your data.
- The right to rectify (correct) inaccurate data.
- The right to erasure (to be forgotten).
- The right to restrict processing.
- The right to data portability.
- The right to object to processing.
- The right to withdraw consent.
To exercise any of these rights, please contact us at privacy@symbionexuslabs.com. We will respond within a reasonable time frame as required by applicable law.
International Data Transfers
We are based in Pakistan and may use service providers located in other countries. Therefore, your information may be transferred to, and maintained on, computers located outside your state, province, country, or other governmental jurisdiction. Where such transfers occur, we implement appropriate safeguards, such as Standard Contractual Clauses approved by relevant authorities, to ensure your data is protected.
Third-Party Links
Our Site may contain links to other websites not operated by us. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content or practices of any third-party sites or services.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date. You are advised to review this Privacy Policy periodically for any changes.
Contact Us
If you have any questions about this Privacy Policy, our data practices, or wish to exercise your rights, please contact our data privacy contact at: privacy@symbionexuslabs.com.