CHROMACARE LABS INC.

Privacy Policy
July, 2024

INTRODUCTION

Welcome to Chromacare Labs Inc. (herein together with its subsidiaries or affiliates referred to as Chromacare); sometimes also referred to as “we”, “our”, “us”.

Chromacare is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Chromacare’s at home wellness testing devices and test assays (collectively, “Device”), associated software and services (collectively “Services").

By using our Device and Services (collectively, “Platform”) you consent to the data practices described in this policy. If you have any questions or concerns, please contact us at

hello@chromacarelabs.com.


Information That We Collect

1. Personal Information

● When you use our Platform, we may collect the following types of personal information

provided by you

2. Identification Data:

● First and Last Name

● Email Address

● User ID or Account Information

● Birth Year

● Biological Sex

● Health Data

3. Usage Data:

● Information about how you use the Platform

● Device logs and analytics

● Interaction data

● Session duration and frequency

● Preferences and settings

● Location Data: But not your physical address

4. T echnical Data:● Device information (e.g., model, operating system)

● IP address

● Browser type and version

5. Non-Personal Information:

Non-personal information, which cannot be used to identify you. This includes:

● Aggregated usage data

● Demographic information

● Anonymized metrics


How We Use Your Information

1. We use your information for various purposes, including but not limited to the provision of

enhancements to:

● Deliver, maintain, and improve our Platform

● Personalize your experience and tailor our Platform to your specific needs

● Communicate with you about updates, changes, and promotional offers

● Respond to your inquiries and provide customer support

● Ensure compliance with regulatory requirements

● Safeguard your health data and maintain data security

● Detect, prevent, and address fraud, security, or technical issues

● Conduct research and analysis to improve our Device’s efficacy and user satisfaction

● Develop new products and services

2. Legal Basis for Processing:

We process your personal information based on the following legal grounds:

● You have given us consent to process your personal information for the specific purpose of performing the contract to provide you with our Platform

● Processing is necessary for compliance with a legal obligation to which we are subject

3. Sharing Your Information

We do not sell, trade, or otherwise transfer any of your personal information to outside parties, except that we may share your information with third-party service providers who assist us in delivering our Platform, subject to appropriate confidentiality agreements and data protection standards.

4. Legal Requirements

We may disclose your information when required by law, legal process, or governmental request, or to protect our rights, safety, and property, or that of others.

5. Business Transfers

In the event of a merger, acquisition, or asset sale, your personal information may be transferred to the new entity.6. International Data Transfers

Our Platform is provided internationally, and your information may be transferred to, and processed in countries other than your own. We ensure that any international transfers of

personal data comply with applicable data protection laws and safeguard mechanisms, such as Standard Contractual Clauses (SCCs) or other legal frameworks.

7. Data Security

We implement reasonable security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encryption, secure storage, access controls, and regular security audits. However, no method of data storage or transmission can provide complete security, and cannot guarantee absolute security against all threats.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Once the retention period expires, we will securely delete or anonymize your personal information.


Your Rights

Depending on your location, you may have the following rights concerning your personal information to:

● Request access to your personal information and obtain a copy of the data we hold about you

● Request correction of inaccurate or incomplete information

● Request deletion of your personal information, subject to certain legal obligations

● Request restriction of processing of your personal information under certain circumstances

● Request transfer of your personal information to another service provider in a structured, commonly used, and machine-readable format

● Object to processing your personal information for certain purposes, such as direct marketing or profiling

To exercise any of these rights, please contact us at: hello@chromacarelabs.com.

We will respond to your request within a reasonable timeframe and in accordance with applicable laws.


Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on our website and updating the effective date. Youruse of our Platform following the posting of changes constitutes your acceptance of such changes.


Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Chromacare Labs Inc.

Suite 4000 Enterprise Square
10230 Jasper Avenue
Edmonton, Alberta T5J 4P6
CANADA

Email Address: christiaan@chromacarelabs.com

Phone Number: +1(587)590-5453