1. Introduction

Synapse Laboratory ("Synapse", "We", "Our", "Us") is a diagnostic and genetic testing laboratory operating under GeneJunction Healthcare Services Pvt Ltd, a company incorporated under the Companies Act, 2013, having its Registered Office in Mumbai, Maharashtra, and Corporate Office in Bangalore, Karnataka, India.

We are committed to safeguarding the privacy, confidentiality, and security of personal and genetic information entrusted to us.

This Privacy Policy describes how we collect, use, process, store, disclose, and protect personal data in accordance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable healthcare regulations.

By accessing our website or availing our services, you consent to the practices described in this Privacy Policy.

2. Information We Collect

We may collect the following categories of data:

3. Purpose of Processing

We collect and process personal data for the following purposes:

• To conduct diagnostic and genetic testing services

• To generate and deliver laboratory reports

• To communicate with patients, clinicians, and hospitals

• For billing and financial processing

• For regulatory compliance and audits

• For internal quality control and accreditation processes

• For research and scientific purposes in anonymized or de-identified form (where consent is provided)

• To improve website performance and service delivery

We do not sell personal or genetic data.

4. Legal Basis for Processing

We process personal data based on:

• Explicit consent of the patient or legal guardian

• Performance of diagnostic service obligations

• Compliance with applicable laws and regulatory requirements

• Legitimate business interests such as quality assurance and fraud prevention

For genetic testing, explicit informed consent is mandatory prior to processing samples.

5. Data Storage & Security

Personal and genetic data are stored securely using industry-standard safeguards. We utilize Google Cloud infrastructure for secure data hosting and storage. Appropriate technical and organizational safeguards are implemented, including:

• Role-based access controls

• Encryption where applicable

• Secure servers and firewalls

• Confidentiality obligations for authorized personnel

• Restricted access to sensitive genetic information

While we take reasonable steps to protect data, no digital system guarantees absolute security.

6. Data Sharing & Disclosure

We may share personal data only under the following circumstances:

• With referring clinicians or hospitals

• With authorized laboratory personnel

• With payment processors and banking institutions

• With regulatory or government authorities when legally required

• With IT service providers under strict confidentiality agreements

For international samples, data may be processed in India in compliance with applicable cross-border data regulations. We do not disclose identifiable genetic data for marketing purposes.

7. Research & Anonymized Data

Subject to patient consent provided in the Test Requisition Form (TRF), de-identified or anonymized data may be used for scientific research, publications, validation studies, or internal quality improvement. Such use will not reveal patient identity.

8. Data Retention

We retain personal and genetic data:

• For the duration required to provide services

• As mandated under applicable healthcare, taxation, and regulatory laws

• For accreditation, audit, and quality assurance purposes

Genetic test data may be retained for extended periods due to medical relevance unless deletion is requested and legally permissible.

9. Cookies & Website Analytics

Our website may use cookies to enhance user experience. Cookies help:

• Improve functionality

• Store user preferences

• Analyze site traffic

We may use third-party analytics services such as Google Analytics to collect anonymized website usage data. Users may disable cookies via browser settings; however, certain features may not function properly.

10. Patient Rights

Subject to applicable law, individuals may have the right to:

• Access their personal data

• Request correction of inaccurate data

• Withdraw consent (where applicable)

• Request deletion of personal data (subject to legal retention obligations)

• Raise grievances regarding data handling

Requests may be submitted using the contact details below.

11. International Data Transfers

If services involve international clients or samples:

• Personal data may be processed and stored in India.

• By submitting samples or engaging services, you consent to cross-border data processing in accordance with applicable laws.

12. Future Digital Services

If Synapse Laboratory introduces an online patient portal in the future:

• Additional security measures will be implemented.

• Access credentials will be protected.

• Users will be responsible for maintaining confidentiality of login information.

13. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for their privacy practices and recommend reviewing their policies separately.

14. Changes to This Policy

We reserve the right to update this Privacy Policy from time to time. The updated version will be posted on our website with a revised effective date.

15. Contact & Grievance Officer

For questions, data access requests, or privacy complaints, please contact: