Privacy Policy

Last updated: January 22, 2026

Femme Bio ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our diagnostic services. As a company based in Estonia, we adhere to the General Data Protection Regulation (GDPR) and other applicable European Union data protection laws.

1. Information We Collect

We collect information that you provide directly to us, particularly when you order test kits, register for a client portal account, or communicate with us. This may include:

• Professional Contact Information: Name, clinic/hospital name, email address, phone number, and business address.
• Patient Data (Pseudonymized): When submitting samples, we process biological samples and associated health data. We require all partners to pseudonymize patient data before submission. We do not collect direct patient identifiers (like names or personal IDs) unless strictly necessary for legal compliance.
• Usage Data: Information about how you access and use our website, including IP address, browser type, and access times.

2. How We Use Your Information

We use the collected information for the following professional purposes:

• To provide, maintain, and improve our diagnostic services.
• To process transactions and send related information, including confirmations and invoices.
• To communicate with you about technical updates, security alerts, and support messages.
• To comply with legal obligations and healthcare regulations.

3. Data Security and Retention

We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

Genetic Data Security: All genetic and microbiome data is stored on secure, encrypted servers compliant with ISO 27001 standards. We retain sample data only for as long as necessary to fulfill the diagnostic purpose or as required by law.

4. Sharing of Information

We do not sell your personal data. We may share information with:

• Service Providers: Third-party vendors who perform services on our behalf (e.g., cloud hosting, logistics), bound by strict confidentiality agreements.
• Legal Requirements: If required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

5. Your Data Protection Rights (GDPR)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights, including:

• The right to access, update, or delete the information we have on you.
• The right of rectification.
• The right to object.
• The right of restriction.
• The right to data portability.
• The right to withdraw consent.

6. Contact Us

If you have any questions about this Privacy Policy, please contact us at: