Privacy Policy
Last Updated: 28th September 2026
US and Canada
INTRODUCTION
Please read this Privacy Policy carefully to understand our policies and practices regarding your Personal Data and how we will treat it. If you do not agree with this Privacy Policy, your option is to not use the Services. By accessing or using the Services, you agree to this Privacy Policy. This Privacy Policy may change from time to time. Your continued use of the Services after we make changes is deemed to be acceptance of those changes, so please check this Privacy Policy periodically for updates.
PURPOSE
Protected Health Information
To understand how we protect, use and disclose your protected personal identifiable and health information as defined under the Health Insurance Portability and Accountability Act of 1996 and related laws and regulations (“HIPAA”). If your Personal Data is protected health information, we treat the protected health information in accordance with HIPAA and other regulatory requirements. To the extent this Privacy Policy conflicts with our HIPAA obligations or the Notice of Privacy Practices, we comply with HIPAA obligations or the Notice of Privacy Practices.
SCOPE
This Policy is available to all directors, employees, officers, interns, contractors within Deciphex group of companies and affiliates including:
- Deciphex Inc d/b/a Diagnexia US
- Diagnexia Canada Limited
- Patholytix Ltd
(collectively the “Deciphex Group” and individually a “Company” for purposes of this Policy) and any other location where the company carries our services or operations.
This policy applies to all US and Canadian visitors to the Company websites, all staff within the Company (meaning permanent, fixed term, and temporary staff, employment candidates, any third-party representatives or sub-contractors, agency workers, volunteers, interns, agents, engaged with the Company in the United States, Canada and relevant overseas jurisdictions).
This policy applies to visitors to the company websites and is made available via those websites:
USES AND DISCLOSURES OF PROTECTED HEALTH INFORMATION
Your PHI may be used and disclosed by our health care providers, our staff, and others outside of our office that are involved in your care and treatment for the purpose of providing health care services to you, to support our business operations, to obtain payment for your care, and any other use authorized or required by law.
Treatment
We will use and disclose your PHI to provide, coordinate, or manage your health care and any related services. This includes the coordination or management of your health care with a third party. For example, your PHI may be provided to any other health care provider with whom you have an existing treatment relationship to ensure the necessary information is accessible to diagnose or treat you.
Payment
Your PHI may be used to bill or obtain payment for your health care services. For example, we may use your PHI in connection with processing payments for services provided to you.
Health Care Operations
We may use or disclose, as needed, your PHI in order to support the business activities of this office. These activities include, but are not limited to, improving quality of care, providing information about treatment alternatives or other health-related benefits and services, developing or maintaining and supporting computer systems, legal services, and conducting audits and compliance programs, including fraud, waste and abuse investigations. We may de-identify and anonymize your information such that it is no longer considered PHI or personally identifiable information and as such, will not contain any reference to you. In that instance, we may modify or create derivative works which contain this de-identified and anonymized information and may use that information as may be necessary to enhance the services we are providing. In addition, we may use this de-identified information for non-commercial purposes including but not limited to analytics, research, preparation of case studies and other educational and research related publication and usage. Under no circumstances will we sell or commercially market your information.
USES AND DISCLOSURES THAT DO NOT REQUIRE YOUR AUTHORIZATION
We may use or disclose your PHI in the following situations without your authorization. These situations include the following uses and disclosures: as required by law; for public health purposes; for health care oversight purposes; for abuse or neglect reporting; pursuant to Food and Drug Administration requirements; in connection with legal proceedings; for law enforcement purposes; to coroners, funeral directors and organ donation agencies; for certain research purposes; for certain criminal activities; for certain military activity and national security purposes; for workers’ compensation reporting; relating to certain inmate reporting; and other required uses and disclosures. Under the law, we must make certain disclosures to you upon your request, and when required by the Secretary of the Department of Health and Human Services to investigate or determine our compliance with the requirements of the Health Insurance Portability and Accountability Act (“HIPAA”). State laws may further restrict these disclosures.
USES AND DISCLOSURES THAT REQUIRE YOUR AUTHORIZATION
Other permitted and required uses and disclosures will be made only with your consent, authorization or opportunity to object unless permitted or required by law. In such cases, without your authorization, we will not use or disclose your PHI.
You have the right to receive an accounting of certain disclosures of your PHI that we have made, paper or electronic, except for certain disclosures which were pursuant to an authorization, for purposes of treatment, payment, healthcare operations (unless the information is maintained in an electronic health record), or for certain other purposes.
You have the right to obtain a paper copy of this Notice, upon request, even if you have previously requested its receipt electronically by e-mail.
REVISIONS TO THIS NOTICE
We reserve the right to revise this Notice and to make the revised Notice effective for PHI we already have about you as well as any information we receive in the future. You are entitled to a copy of the Notice currently in effect. Any significant changes to this Notice will be posted on the Services. You then have the right to object or withdraw as provided in this Notice.
BREACH OF HEALTH INFORMATION
We will notify you if a reportable breach of your unsecured PHI is discovered.
Notification will be made to you no later than 60 days from the breach discovery and will include a brief description of how the breach occurred, the PHI involved and contact information for you to ask questions.
COMPLAINTS
Complaints about this Notice or how we handle your PHI will be directed to our HIPAA Privacy Officer. If you are not satisfied with the manner in which a complaint is handled you may submit a formal complaint to the Department of Health and Human Services, Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/. We will not retaliate against you for filing a complaint.
We must follow the duties and privacy practices described in this Notice. If you have any questions about this Notice, please contact us at dataprotectionofficer@deciphex.com.
CHILDREN UNDER THE AGE OF 18 AND MAJORITY
The Services are not available for use by children (under 18 years of age) and children are not authorized to become Members nor use the Services without the supervision and verifiable consent of a parent or legal guardian. If you register as the parent or legal guardian on behalf of a minor, you understand that as part of the services, we will collect the Personal Data of the child. Your consent is required for the collection, use, and disclosure of the child’s information. We will not knowingly collect your child’s Personal Data without your consent to the Clinical Services and Practice Policies Agreement and by agreeing to this Privacy Policy. However, if you do not give your consent, your child will not use our services. We collect information about the child’s use of the services (as supervised and authorized by a parent or legal guardian), including information sent by the mobile device or computer used by the child (e.g., IP address, unique device identifiers, website usage information, etc.) and information sent by the mobile device(s), and location information. Any health information relating to children will be handled in accordance with the Uses and Disclosures of Protected Health Information section above. If we learn that we have collected the Personal Data of a child under 18 outside of the above circumstances, we will take steps to delete the information as soon as possible to the extent permitted by law. If you believe we have any Personal Data from a child under the age of 18, please contact us at dataprotectionofficer@deciphex.com.
If you access or use the Services, you represent and warrant that you are either at least 18 years old or otherwise have adequate authority and capacity to consent to use the Services under applicable state laws, federal laws or the authorization of a parent or legal guardian who agrees to be bound by the Terms and this Privacy Policy. If you are under 18 and lack sufficient authority to access or use the Services, do not use or provide any information on the Services.
PERSONAL DATA WE COLLECT ABOUT YOU
We collect the following types of Personal Data from and about Users of the Services:
- Information you provide to us, or grant us access to, when you access or use the Services, name, postal address, billing address, shipping address, e-mail address, mobile telephone number, insurance information, including number, photo, and other associated information, date of birth, credit or debit card number (for payment purposes only), photos of you, your medical history, and health information; traffic data, location data, logs, referring/exit pages, date and time of your visit to the Services, error information, clickstream data, and other communication data and the resources that you access and use on the Services; and
- your Internet connection, the equipment you use to access the Services, and usage details.
- information that you provide by filling in forms on the Services (this includes information provided at the time of registering to use the Services, using Medical Groups Provider consultation services, purchasing products, reporting a problem with the Services, or requesting further services), and your User Contributions (as described in the Disclosure of Your Personal Data section below);
- records and copies of your correspondence (including email addresses), if you contact us; and
- details of transactions you carry out through the Services and of the fulfillment of your requests (you may be required to provide financial information before placing a request through the Services).
- automatically as you navigate through the Services (information collected automatically may include usage details, IP addresses, and information collected through cookies, web beacons, and other tracking technologies) — see additional detail in the Websites and Cookies section below; and
- from third parties, for example, our business partners.
HOW WE USE YOUR PERSONAL DATA
We use your Personal Data for the business purposes described below:
- provide the Services to you;
- provide products and Services to you;
- provide you with information you request from us;
- enforce our rights arising from contracts;
- to carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection;
- notify you about changes;
- provide you with newsletters, advertisements, and other promotional communications (in accordance with applicable legal requirements);
- to conduct internal research, reporting, and data analytics
- to contact you in response to a request;
- to fulfill any other purpose for which you provide it;
- for any other purpose with your consent;
- as required or permitted by law; and
- provide you with notices about your Account.
DISCLOSURE OF YOUR PERSONAL DATA
We do not share, sell, or otherwise disclose your Personal Data for purposes other than those outlined in this Privacy Policy.
We may disclose Personal Data that we collect or you provide as described in this Privacy Policy:
- to service providers and other third parties we use to support our business (the services provided by these organizations include providing IT and infrastructure support services, and ordering, marketing, and payment processing services);
- to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by Company about the Service Users are among the assets transferred;
- to fulfill the purpose for which you provide it (for example, we may disclose your personal information to a health care provider);
- for any other purpose disclosed by us when you provide the information; and
- with your consent.
We may also disclose your Personal Data:
- to comply with any court order, law, or legal process, including to respond to any government or regulatory request;
- to enforce or apply our Terms and other agreements, including for billing and collection purposes; and
- if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of a Company, our customers, or others (this includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction).
In addition, we may disclose aggregated information about our Users, and information that does not identify any individual, without restriction.
You also may provide information (hereinafter, “posted”) to other users of the Services or third parties (collectively, “User Contributions”). Your User Contributions are posted on and transmitted to others at your own risk. Although we limit access to certain pages, please be aware that no security measures are perfect or impenetrable.
CALIFORNIA INDIVIDUALS
If you are a California resident, you have rights under the California Consumer Privacy Act of 2018 (“CCPA”). Please see additional information below that is intended to satisfy our obligations under the CCPA to disclose certain information to you:
(1) the purpose for which we use each category of “personal information” (as defined in the CCPA) we collect; and
(2) the categories of third parties to which we
(a) disclose such personal information for a business purpose,
(b) “share” personal information for “cross-context behavioral advertising,” and/or
(c) “sell” such personal information. Under the CCPA, “sharing” is defined as the targeting of advertising to a consumer based on that consumer’s personal information obtained from the consumer’s activity across websites, and “selling” is defined as the disclosure of personal information to third parties in exchange for monetary or other valuable consideration. Our use of third-party analytics services and online advertising services may result in the sharing of online identifiers (e.g., cookie data, IP addresses, device identifiers, and usage information) in a way that may be considered a “sale” under the CCPA.
More information is available from the California Privacy Protection Agency: https://cppa.ca.gov/regulations/
OTHER US STATES
- Colorado Residents’ privacy rights
- Connecticut Residents’ privacy rights
- Delaware Residents’ privacy rights
- Iowa Residents’ privacy rights
- Maryland Residents’ privacy rights
- Minnesota Residents’ privacy rights
- Montana Residents’ privacy rights
- Nebraska Residents’ privacy rights
- New Hampshire Residents’ privacy rights
- New Jersey Residents’ privacy rights
- Oregon Residents’ privacy rights
- Tennessee Residents’ privacy rights
- Texas Residents’ privacy rights
- Utah Residents’ privacy rights
- Virginia Residents’ privacy rights
YOUR RIGHTS REGARDING YOUR PERSONAL DATA
You may contact us at dataprotectionofficer@deciphex.com regarding any of your rights under applicable state laws; any changes or errors in any Personal Data we have about you to ensure that it is complete, accurate, and as current as possible; or to delete your personal data held with us. We may not be able to accommodate your request if we believe it would violate any law or legal requirement or cause the information to be incorrect. See state-specific sections below on your rights under specific state laws.
WEBSITES AND COOKIES
Website Usage Information
When you use and navigate our Website, we may automatically collect other information that may not by itself reasonably identify you (collectively, “Usage Information”). Usage Information may include, but is not limited to, information regarding your computer, your IP address, the type of Internet browser you are using, the location from which you are visiting the Website, the type of computer operating system you are using to access the Website, the domain name of the website from which you linked to the Website, or the areas of the Website you visited and the actions you performed on the Website.
We collect Usage Information through automated collection technologies, which may include:
- Cookies, which are small data files that are transferred to a web browser, which enables our Website to remember and customize your subsequent visit. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may not be able to access certain parts of our Website. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you visit our Website. We also employ a number of third-party cookies to help us operate and improve our website.
- Web beacons, which are single-pixel, electronic images embedded in the Website that allow us to gather information about your browsing activities on the Website. We may also use certain third-party applications, which may use cookies, to gather and analyze information about your browsing activities on the Website.
GLOSSARY
Diagnexia gives you on-demand access to trusted subspecialty pathologists so you can stop patching gaps and start delivering consistent diagnostic coverage.
Compare Locum vs Diagnexia Cost Impact“Never scramble for weekend pathology coverage again.”
Prof Runjan Chetty, Diagnexia CMO