Last Updated: February 19, 2025

MicroBiome Bank Ltd. is committed to protecting and respecting your privacy. This Privacy Policy outlines how we collect, use, store, and disclose your personal data when you interact with our services, including our website and your rights concerning your personal data.

1. Information We Collect

We may collect and process the following categories of personal data:

- **Personal Identification Information**: Name, address, email address, phone number, and other contact details.
- **Health and Medical Information**: Data related to your health status, medical history, and any other information necessary for providing our services.
- **Financial Information**: Payment details necessary for processing transactions.
- **Technical Data**: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access the Site.
- **Usage Data**: Information about how you use our Site and services.

**2. How We Collect Your Information**

We collect personal data through various methods:

- **Direct Interactions**: When you provide information by filling in forms on our Site, corresponding with us by phone, email, or otherwise.
- **Automated Technologies**: As you interact with our Site, we may automatically collect technical data about your equipment, browsing actions, and patterns. We collect this data using cookies and other similar technologies.
- **Third Parties**: We may receive personal data about you from third parties, including healthcare providers, laboratories, and public health authorities, in accordance with applicable laws and regulations.

**3. Use of Your Information**

We use your personal data for the following purposes:

- **Provision of Services**: To deliver our services, including microbiota transfer therapies, and to communicate with you about your treatment.
- **Compliance**: To comply with legal and regulatory obligations, including reporting to health authorities as required.
- **Improvement of Services**: To analyze and improve our services and the Site.
- **Marketing**: To provide you with information about services we offer that are similar to those you have already enquired about or received, where you have consented to receive such information.

**4. Legal Basis for Processing**

Our processing of your personal data is based on the following legal grounds:

- **Consent**: Where you have provided explicit consent for processing your personal data for specific purposes.
- **Performance of a Contract**: Where processing is necessary for the performance of a contract to which you are a party.
- **Legal Obligation**: Where processing is necessary for compliance with a legal obligation to which we are subject.
- **Legitimate Interests**: Where processing is necessary for our legitimate interests, provided that your interests and fundamental rights do not override those interests.

**5. Data Sharing and Disclosure**

We may share your personal data with:

- **Healthcare Providers**: To coordinate and provide you with healthcare services.
- **Service Providers**: Third-party vendors who provide services on our behalf, such as IT support, payment processing, and analytics.
- **Regulatory Authorities**: When required by law or regulation, we may disclose your personal data to regulatory bodies or law enforcement agencies.
- **Business Transfers**: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity.

**6. International Data Transfers**

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

**7. Data Security**

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and secure storage systems.

**8. Data Retention**

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

**9. Your Rights**

You have the following rights concerning your personal data:

- **Access**: To request access to your personal data and obtain information about how we process it.
- **Rectification**: To request correction of inaccurate or incomplete personal data.
- **Erasure**: To request deletion of your personal data, subject to certain conditions.
- **Restriction**: To request restriction of processing of your personal data.
- **Data Portability**: To receive your personal data in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller.
- **Objection**: To object to the processing of your personal data where we are relying on legitimate interests as the legal basis.
- **Withdraw Consent**: To withdraw consent at any time where we are relying on consent to process your personal data.

To exercise these rights, please contact us using the contact details provided below.

**10. Cookies and Tracking Technologies**

Our Site uses cookies and similar technologies to enhance user experience, analyze site usage, and assist in our marketing efforts. You can manage your cookie preferences through your browser settings.

**11. Changes to This Privacy Policy**

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

**12. Contact Us**

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

MicroBiome Bank Ltd.
2 Brendon Road
Braintree, Essex, CM7 2NL
England
Email: privacy@microbiomebank.com

By using our services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your personal data as described herein.