Privacy Policy

1. Introduction

Bioteknika (“Bioteknika”, “we”, “our”, “us”) is a dedicated healthcare technology division operating under Inginit Pte. Ltd. While Bioteknika functions as a specialized brand for healthcare solutions, Inginit Pte. Ltd. (“Inginit”) remains the legal entity responsible for data collection, processing, and compliance.

This Privacy Policy explains how Inginit Pte. Ltd., through Bioteknika, collects, uses, discloses, and safeguards your personal data when you visit Bioteknika.com or engage with our services.

For any privacy-related inquiries, you may contact us at privacy@bioteknika.com

‍

a) Information You Provide

When you interact with Bioteknika’s services, you may provide personal data such as:

• Personal Identification: Name, email address, phone number, and other contact details.
• Healthcare-Related Service Requests: Information provided when requesting healthcare insights, analytics, or solutions.
• Job Application Data: Resume, cover letter, and details provided by job seekers.

b) Data We Collect Automatically

• Technical Data: IP address, browser type, operating system, and logs collected via analytics tools.
• Usage Data: How you interact with our website and services, collected through cookies and tracking technologies.

‍

3. How We Use Your Information

 We use the information we collect in the following ways:

• Service Delivery: To provide, operate, and maintain our services.
• Personalization: To personalize your experience on our website and tailor our services to your preferences.
• Communication: To communicate with you, including responding to inquiries and sending service-related updates.
• Marketing: To send you promotional materials, newsletters, and other marketing communications.
• Research and Development: To conduct research and analysis to improve our services.
• Compliance: To comply with legal obligations and protect our legal rights.

4. Legal Basis for Processing (GDPR)

 We process your personal data based on the following legal grounds:

• Consent: When you have given your explicit consent for us to process your data.
• Contract: When processing is necessary for the performance of a contract to which you are a party.
• Legal Obligation: When processing is necessary to comply with a legal obligation.
• Legitimate Interests: When processing is necessary for our legitimate interests and those interests are not overridden by your rights.

5. Data Sharing and Disclosure

 We may share your personal data with:

• Service Providers: Third parties who provide services on our behalf, such as data analysis (Google Analytics), website hosting (Wix), email delivery, and customer support.
• Business Partners: Partners with whom we collaborate on projects or research initiatives.
• Legal Authorities: Law enforcement or regulatory bodies as required by law or to protect our legal rights.

Information Shared with Others

We make it a priority to share your information only in limited circumstances and with necessary safeguards in place to protect your personal information. Examples of when and for what purpose your data is shared include data center/hosting services, email marketing services, and more.

 Recipients of Your Data:

1. Employees: We may share your data with our employees who need to know this information to help us provide our services or process the information on our behalf.
2. Legal Requirements: We may disclose your personal information if required by law, regulation, or legal process, such as a court order.‍
3. To Prevent Fraud and Protect Rights: We may disclose your information when we believe it is necessary to prevent or respond to fraud, defend our websites or applications against attacks, or protect the property and safety of Inginit, our users, or the public.‍
4. With Your Consent: We may share and disclose information with your consent or at your direction.‍
5. Information Disclosed Publicly: There are areas on our website and applications where you can post comments and submit user content for others to see. Information you make public in these areas may be viewed by other users.‍
6. Third-Party Vendors: We share your personal information with third-party vendors who are obligated to use the information solely to provide services to us.‍
7. Customer Testimonials: We may display personal testimonials of satisfied customers on our site along with other endorsements. With your consent, we may post your testimonial along with your name.‍
8. To Comply with Laws: If we receive a request for information, we may disclose it if we reasonably believe that disclosure is required by any applicable law, regulation, or legal process. Additionally, we may share your data with an acquirer in the event of a sale of substantially all of our assets or other change of control transaction.

Our data will be shared with other recipients to provide you with our services efficiently and effectively.

6. International Data Transfers

If we transfer your personal data outside of the European Economic Area (EEA), we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or other legal mechanisms to protect your data.

7. Your Rights (GDPR)

The (EU) and the European Economic Area (EEA):

Under GDPR, you have the following rights:

•  Access: The right to request access to your personal data.
• Rectification: The right to request correction of inaccurate or incomplete data.
• Erasure: The right to request deletion of your personal data.
• Restriction: The right to request restriction of processing of your personal data.
• Data Portability: The right to request transfer of your personal data to another party.
• Objection: The right to object to processing of your personal data.

To exercise these rights, please contact us at privacy@bioteknika.com.

8. Your Rights (CCPA)

For California Residents:

Under CCPA, California residents have the following rights:

•  Right to Know: The right to request details about the personal information we collect and how we use it.
• Right to Delete: The right to request deletion of personal information we have collected about you.
• Right to Opt-Out: The right to opt-out of the sale of your personal information.
• Right to Non-Discrimination: The right to not be discriminated against for exercising any of these rights.

To exercise these rights, please contact us at privacy@bioteknika.com or use our [Do Not Sell My Personal Information] link provided in the footer of every page of our website.

9. HIPAA Compliance

Bioteknika complies with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its associated rules, including the Privacy Rule, Security Rule, and Breach Notification Rule, as applicable to our services.

‍

Business Associate Agreements (BAAs)

As a technology provider supporting healthcare organizations, we may act as a Business Associate under HIPAA. We enter into Business Associate Agreements (BAAs) with all covered entities we serve and ensure that any subcontractors who may access Protected Health Information (PHI) are also bound by HIPAA-compliant BAAs.

‍

Administrative, Physical, and Technical Safeguards

Bioteknika implements administrative, physical, and technical safeguards in accordance with the HIPAA Security Rule (45 CFR §164.306 and §164.312). These include but are not limited to:

• Administrative controls such as security policies, risk assessments, and workforce training
• Physical safeguards such as access-controlled facilities and secure hardware
• Technical safeguards including encryption of data at rest and in transit, access controls, multi-factor authentication, and audit logging

‍

Access and Data Integrity

We enforce strict role-based access control (RBAC), ensuring that access to PHI is limited to authorized personnel only. Audit logs track all access to systems handling PHI, supporting data integrity and accountability.

‍

Breach Notification

In the event of a security breach involving unsecured PHI, Bioteknika will notify affected covered entities without unreasonable delay and no later than 60 calendar days after discovery, in accordance with the HIPAA Breach Notification Rule. If PHI is encrypted using methods consistent with HHS guidance, breach notification may not be required under the encrypted data safe harbor.

‍

Ongoing Compliance and Risk Management

We conduct regular risk assessments, internal audits, and third-party security reviews to ensure ongoing compliance with HIPAA requirements. Our development practices follow secure coding standards, and our infrastructure includes monitoring, vulnerability scanning, and regular patching.

If you are a covered entity or business associate and would like more information about our HIPAA compliance practices or to request a BAA, please contact us at: privacy@bioteknika.com

‍

10. Cookies and Tracking Technologies

 We use cookies and similar tracking technologies to collect information about your browsing activities on our website. This includes Google Analytics and cookies/analytics to help us understand website usage and improve our services. You can manage your cookie preferences through your browser settings.

​

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.

12. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations.

13. Children’s Privacy

We do not knowingly collect personal data from children under the age of 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete that information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

15. Contact Us

 If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Via email at: privacy@bioteknika.com

Or via postal mail at:

Inginit Pte. Ltd.

Attn: Data Protection Officer (DPO)

14, Robinson Road, #08-01A, Far East Finance building,

Singapore 048545

Effective Date: 4 Feb 2022

Last Revised: 28 May 2024

‍