Privacy Practice

Our Notice of Privacy Practices details the way in which medical information about customers may be used and disclosed and how customers can get access to this information.

Online Privacy

This Privacy Policy governs the manner in which Rules-Based Medicine (RBM) collects, uses, maintains and discloses information collected from users (each, a “User”) of its www.rulesbasedmedicine.com web site and any derivative or affiliated web sites on which this Privacy Policy is posted (collectively, the “Web Site”). RBM reserves the right, at its discretion, to change, modify, add or remove portions of this Privacy Policy at any time by posting such changes to this page.

RBM is committed to safeguarding the information Users entrust to RBM and believes that every User should know how it utilizes the information collected from Users. Please note that the Web Site may contain links to other web sites. These linked sites may not be operated or controlled by RBM. RBM is not responsible for the privacy practices of these or any other web sites, and Users access these web sites entirely at their own risk and RBM recommends that Users review the privacy practices of any other web sites that they choose to visit.

RBM is based, and the Web Site is hosted, in the United States of America. If User is from the European Union or other regions of the world with laws governing data collection and use that may differ from U.S. law and User is registering an account on the Web Site, visiting the Web Site, purchasing products or services from RBM or the Web Site, or otherwise using the Web Site, please note that any personally identifiable information that User provides to RBM will be transferred to the United States. Any such personally identifiable information provided will be processed and stored in the United States by RBM or a service provider acting on its behalf. By providing his or her personally identifiable information, User hereby specifically and expressly consents to such transfer and processing and the uses and disclosures set forth herein.

Information that RBM Collects

Users browsing the Web Site without registering an account or affirmatively providing personally identifiable information to RBM do so anonymously. Otherwise, RBM may collect personally identifiable information from Users in a variety of ways. Personally identifiable information may include, without limitation, (i) contact data (such as a User’s name, mailing and e-mail addresses); (ii) demographic data (such as a User’s zip code, age and income); (iii) financial information collected to process purchases made from RBM via the Web Site or otherwise (such as credit card, debit card or other payment information); and (iv) other information requested during the account registration process.

If a User communicates with RBM by e-mail or otherwise, posts messages to any forums, completes online forms, surveys or entries or otherwise interacts with or uses the features on the Web Site, any information provided in such communications may be collected by RBM. RBM may also collect information about how Users use the Web Site, for example, by tracking the number of unique views received by the pages of the Web Site, or the domains and IP addresses from which Users originate. While not all of the information that RBM collects from Users is personally identifiable, it may be associated with personally identifiable information that Users provide RBM through the Web Site or otherwise.

RBM may use “cookies” or “web beacons” to track how Users use the Web Site. A cookie is a piece of software that a web server can store on Users’ computers and is used to identify Users should they visit the Web Site again. Users may adjust their web browser software if they do not wish to accept cookies.

How Information Collected by RBM is Used

RBM may use personally identifiable information collected through the Web Site for the specific purposes for which the information was collected, to process purchases and sales of products or services offered via the Web Site, to contact Users regarding products and services offered by RBM or its affiliates and otherwise to enhance Users’ experience with RBM and such affiliates. RBM may also use information collected through the Web Site for research regarding the effectiveness of the Web Site and the business planning, marketing, advertising and sales efforts of RBM.

The preceding usage restrictions shall not apply to data or information which has been made publicly available through no fault of RBM, which is obtained by RBM from a third party and not known by RBM to be confidential.

Notice, Choice, Data Integrity

Personally identifying information collected directly by RBM will be used only in connection with RBM, or for such purposes described at the point of collection with User consent. Users may decide or be asked to withdraw their sample at any time. Any data collected prior to withdrawal may still be processed along with other data collected as described upon sample collection.

Data may be used in future medical and pharmaceutical research activities that are unanticipated. If the use is not consistent with the general purposes for which the data was originally collected, or to which User has consented subsequently, new consent must be obtained. Options are given to opt-out of 3rd party disclosures or purposes other than those for which the data was originally collected, and to opt-in for other personally sensitive information.

Users are notified as soon as reasonably practical of any accidental, unlawful or unauthorized uses or disclosures of, and/or of any security incident involving samples or personally identifiable information received.

Onward Transfer

RBM may disclose personally identifiable information collected from Users to its affiliates who will use the information for the purposes outlined above, as necessary to provide the services offered by RBM and to provide the Web Site itself, and for the specific purposes for which the information was collected.

RBM may disclose personally identifiable information at the request of law enforcement or governmental agencies or in response to subpoenas, court orders or other legal process, to establish, protect or exercise RBM’s legal or other rights or to defend against a legal claim or as otherwise required or allowed by law. RBM may disclose personally identifiable information in order to protect the rights, property or safety of a User or any other person. RBM may disclose personally identifiable information to investigate or prevent a violation by User of any contractual or other relationship with RBM or the perpetration of any illegal or harmful activity.

RBM may also disclose aggregate, anonymous data based on information collected from Users to investors and potential partners. Finally, RBM may disclose or transfer personally identifiable information collected from Users in connection with or in contemplation of a sale of its assets or business or a merger, consolidation or other reorganization of its business.

Access

In order to prevent unauthorized access or disclosure RBM implements and enforces managerial, electronic and physical security policies and procedures, including training of staff responsible for receiving and processing samples and associated data. Access to electronic or physical data is restricted to authorized users performing specific job duties.

Security

RBM uses reasonable precautions to protect any personal information and to store it securely. Information about Users that is maintained on RBM’s systems is protected using industry standard security measures. However, no security measures are perfect or impenetrable, and RBM cannot guarantee that the information submitted to, maintained on or transmitted from its systems will be completely secure. RBM is not responsible for the circumvention of any privacy settings or security measures relating to the Web Site by any Users or third parties.

Correcting, Updating, Accessing or Removing Personal Information

If a User’s personally identifiable information changes (such as a User’s zip code), or if a User no longer desires to receive non-account specific information from RBM, RBM will endeavor to provide a way to correct, update and/or remove that User’s previously-provided personal data. This can be done by emailing a request to RBM at info@rulesbasedmedicine.com. Additionally, Users may request access to the personally identifiable information as collected by RBM by sending a request to RBM as set forth above. Please note that in certain circumstances, RBM may not be able to completely remove a User’s information from its systems. For example, RBM may retain a User’s personal information for legitimate business purposes, if it may be necessary to prevent fraud or future abuse, for account recovery purposes, if required by law or as retained in RBM’s data backup systems or cached or archived pages. All retained personally identifiable information will continue to be subject to the terms of the Privacy Policy to which the User has previously agreed.

Contacting RBM

RBM will conduct compliance audits of its relevant privacy practices to verify adherence to this Policy.

Users may contact RBM with questions or comments about this Privacy Policy via any of the following methods:

Rules-Based Medicine, Inc.

3300 Duval Road, Suite 110

Austin, TX 78759

privacy@rulesbasedmedicine.com

512-835-8026

RBM will investigate and attempt to resolve complaints and disputes regarding use and disclosure of personal information in accordance with the principles contained in this Policy. For complaints that cannot be resolved, RBM will participate in third-party dispute resolution mechanisms.