Privacy Policy

Last Updated: April 27, 2025
Supar.Health is committed to protecting your privacy and handling your personal and health information with the utmost care and transparency. In this Privacy Policy, we describe how we collect, use, disclose, and protect your personal data when you use the Supar.Health Platform, and explain your rights in relation to that data. This policy reflects our compliance with the **EU General Data Protection Regulation (GDPR)**, the **Danish Data Protection Regulation (Databeskyttelsesforordningen)**, the **Danish Health Act (Sundhedsloven)**, and the **Danish Journalføringsbekendtgørelse (Medical Record Keeping Order)**, among other applicable laws.
1. Who We Are

Supar.Health ApS (CVR: 41298758) is a private diagnostics software company and personal digital biobank provider. We focus on precision medicine, preventive care, and health optimization through minimally-invasive testing and advanced data analysis. We perform accredited clinical laboratory analyses and provide research-oriented wellness insights for individuals, companies, and healthcare organizations. Our registered address is Strandvejen 64, 2900 Hellerup, Denmark. For any questions regarding this Privacy Policy or your data, you can contact us via the contact information on our website or through the contact details provided in this Agreement.

2. Scope of this Privacy Policy

This Privacy Policy applies to the processing of personal data that occurs when you interact with Supar.Health's Platform, including but not limited to: visiting our website (and related online services), creating a Supar.Health account, undergoing any health tests or diagnostics through Supar.Health, using any mobile or web applications we provide, and contacting us with inquiries. It covers data collected in connection with Supar.Health's diagnostic services, research-use services, and any related clinical or scientific activities.

Please note that in some cases we may provide additional privacy notices or consents for specific services or research projects. Those additional notices supplement this general Privacy Policy. By using the Platform or by providing us your personal data in relation to our services, you acknowledge that your data will be processed as described in this Privacy Policy.

3. What Data We Collect and How We Use It

Personal and Health Data for Services: Supar.Health collects and processes a range of personal and health information about you as part of offering our diagnostics and biobank services. When you contact us or become a customer, we will collect identifying and contact information such as your name, email address, phone number, postal address, date of birth, and biological sex/gender. If you reside in Denmark, we may also collect your CPR number (personal identification number) where necessary for healthcare record-keeping or integration with national health systems. We collect this information to identify you accurately and to comply with legal requirements in providing medical services.

When you purchase a test, treatment, or analysis from Supar.Health, we collect information related to that service, which may include details of the specific tests or inquiries, underlying health information you provide, relevant medical history, current medications or diagnoses, and any other information needed to perform the requested analysis or consultation. For example, if you complete health questionnaires or provide lifestyle information within the Platform, this data will be recorded in your profile to inform our analysis.

Electronic Health Records and Biobank Data: When you become a client of Supar.Health, we will create an encrypted electronic health record in our system for you. We use this record to store your personal data and results from any diagnostics or analyses. Our clinical staff and authorized specialists will record information about any samples collected (e.g., blood, saliva) and the results of laboratory analyses performed on those samples. We also document any consultations or communications we have with you regarding your results or health. This information is used to provide you with the best possible clinical health advice and personalized recommendations. It also allows us to track your health data over time to observe changes and trends.

Health Optimization and Recommendations: Supar.Health operates a personal digital biobank, meaning that we aggregate and analyze data from you, other consenting clients, and relevant population health databases to generate evidence-based personal health recommendations. Your data, combined with large-scale clinical research and population data, enables us to leverage the latest scientific findings in real-time and translate them into insights about your health. For example, we might compare your biomarker results with established ranges or research studies to give you guidance on improving specific health metrics. By using our services, you agree that we may use your anonymized or aggregated data for these real-time research and analytics purposes to benefit you and all users of the Platform. This is a key part of our service: using cutting-edge research to inform your health optimization plan.

Website Usage Data and Cookies: When you visit our website or use our app, we may automatically collect certain technical information, such as your IP address, device type, browser type, and browsing behavior (e.g., pages viewed). We use cookies and similar tracking technologies to gather usage statistics (for example, counting visitors and understanding which parts of our website are of most interest). This helps us improve our website and Platform interface. Cookies may also be used to remember your preferences. You can find more details in our Cookie Policy. You have the option to manage cookie preferences in your browser settings.

Communication Data: If you communicate with us via email, contact form, phone, or in-platform chat, we will collect the information you provide during those communications. This may include inquiries about our services, customer support requests, or feedback. We will use this information to respond to you, to keep records of our communications (which may be necessary for medical documentation in some cases), and to improve our customer service.

Newsletter and Marketing: If you subscribe to our newsletter or opt in to receive promotional communications, we will collect your name and email for the purpose of sending you health tips, updates, or offers. We only send such communications with your consent, and you can opt out at any time by clicking "unsubscribe" in any email or contacting us. The legal basis for processing your data for newsletter purposes is your consent (GDPR Art. 6(1)(a)).

We process and store all personal and health data securely and in compliance with GDPR, the Danish Health Act, and the Medical Record Keeping Order. All uses of your data are limited to what is necessary to fulfill the purposes stated at the time of collection or as outlined in this Privacy Policy.

4. Legal Basis for Processing

We only process your personal data when we have a legal basis under the GDPR and applicable law to do so. Depending on the context, one or more of the following legal bases may apply:

  • Consent (GDPR Article 6(1)(a)): We rely on your consent for certain processing activities. For example, sending you newsletters or performing a genetic analysis requires your consent. Where we process special categories of data (such as health or genetic data), we may also rely on your explicit consent (GDPR Art. 9(2)(a)), unless another legal basis applies. You have the right to withdraw your consent at any time (see Section 11 on Your Rights), which will not affect the lawfulness of processing based on consent before its withdrawal.
  • Contractual Necessity (GDPR Article 6(1)(b)): When you purchase services from us, we process your personal data as necessary to perform our contract with you. For instance, using your information to schedule a test, perform an analysis, and deliver results is based on the agreement for services.
  • Legal Obligation (GDPR Article 6(1)(c)): Some data processing is required to comply with our legal obligations as a healthcare provider. For example, maintaining a patient medical record is mandated by law, and reporting certain results to public health authorities is obligatory. The Danish Health Act and Journalføringsbekendtgørelse require that we document and retain certain health information. When we transfer mandatory data to entities like the Danish Patient Safety Authority or Statens Serum Institut, this is under a legal obligation. Similarly, the Health Act §15(1) provides that we must obtain consent for treatments, and we comply with that requirement.
  • Legitimate Interests (GDPR Article 6(1)(f)): We process some data under the legitimate interest basis. This applies, for example, to the necessary collection of data for conducting biological analyses and providing health advice, which is in our legitimate interest as a healthcare service provider. Our legitimate interests include conducting our business in providing you with health testing and advisory services, ensuring the quality and accuracy of our processes, improving our services through scientific research, and communicating with you as a customer. When using this basis, we always consider your rights and interests and ensure they do not override our interests. We have conducted a legitimate interest assessment to weigh these factors:
    • (a) We cannot provide our services without processing your data (e.g., we must analyze your sample to give a result).
    • (b) We have an interest in securely documenting your data to comply with healthcare regulations and to provide continuity of care. In contexts where special category data (health data) is processed under legitimate interests, we ensure an additional condition under GDPR Art. 9(2) is met (such as Art. 9(2)(h) for medical diagnosis and treatment, or 9(2)(i) for public health, or 9(2)(j) for research, as applicable).
  • Public Interest in Healthcare (GDPR Article 9(2)(i)): In certain cases, processing of health data is necessary for reasons of public interest in the area of public health. For example, if there is a requirement to report notifiable diseases or adverse events to health authorities, we would process relevant data under this basis.

For genetic data or other highly sensitive data, we typically use explicit consent or the medical diagnosis and treatment basis (GDPR Art. 9(2)(h) in conjunction with national law) to process such data, unless another exception applies.

We will always identify the applicable legal basis for our processing and will inform you of this through this Privacy Policy or at the point of data collection. Where processing is based on your consent, you will be presented with a clear consent form or option, and you can decline if you wish. If you have any questions about the legal basis of specific processing, you can contact us for more information.

1. Special Categories of Data and Consent (Health, Genetic, Biometric Data)

Supar.Health deals with sensitive personal data, including health information, laboratory results, and genetic data. Under GDPR, these are considered "special category" data that require additional protection. We handle these data types as follows:

Health Data: This includes information such as your medical history, symptoms, diagnoses, treatment plans, biomarker levels, imaging results, etc., that you or your healthcare providers provide to us, as well as data we generate through tests (blood test results, etc.). We process health data to deliver our diagnostics services and health recommendations. The legal bases include medical diagnosis and treatment (GDPR Art. 9(2)(h) together with Danish Health Act consent provisions) and/or your explicit consent where required. Under the Danish Health Act, by engaging our services, you provide an informed consent to our processing of your health information for diagnostic and treatment purposes (Sundhedsloven §15(1)).

Genetic Data: For any genetic analysis or DNA test that we offer, a separate explicit consent will always be obtained from you before proceeding. Genetic information can reveal sensitive insights not just about you but also about your biological relatives. We take this seriously. Before you undergo a genetic test with Supar.Health, we will provide you with detailed information about the nature and implications of the test. You will be asked to sign a specific genetic consent form (either electronically or on paper) that outlines:

  • The purpose of the genetic test and what kind of information it can reveal.
  • Potential consequences or implications of the results for you and possibly your family members.
  • Ethical considerations, including whether you wish to receive information on incidental or secondary findings (genetic findings unrelated to the primary purpose of the test, which could be significant for your health).
  • Your right to opt out or change your mind. Even after giving consent, you may withdraw from a genetic test before it is conducted, or decline to be informed about certain categories of results, to the extent possible.

We want you to carefully consider these points before proceeding with genetic analyses. If you have any uncertainties, we encourage you to speak with one of our clinicians or a genetic counselor. If you do not consent to a genetic test, you can still use other aspects of our Platform; genetic testing is entirely voluntary. If you do consent and later change your mind, let us know promptly. Once a genetic analysis is performed and results are delivered, they become part of your health record, but you remain in control of how they are used beyond your care (such as for research – which would require separate consent).

Biometric Data: If we collect any biometric identifiers or use biometric technology (for example, if we collected a fingerprint, or used facial recognition for identity verification, or analyzed biometric patterns in health data), we would do so only with your knowledge and, if required by law, your explicit consent. As of the latest update of this policy, Supar.Health does not utilize any fingerprinting or facial recognition features. We will update you if this changes and ensure compliance with any biometric data laws.

5. Categories of Personal Data Processed

We summarize here the categories of personal data Supar.Health processes:

  • Identification Data: Name, date of birth, gender, address, phone number, email, national identification number (e.g., CPR in Denmark), passport or ID details (if needed for verification).
  • Contact Data: Contact details such as email, phone, physical address, and emergency contact (if you provide one).
  • Health Data: Medical history, symptoms, diagnoses, medications, allergies, lifestyle information (e.g., smoking status, exercise habits, diet), family medical history (if you provide it), and any other health information you or your doctor provide to us.
  • Laboratory Data: Results of blood tests, urine tests, saliva tests, imaging, or any other diagnostic tests we perform or coordinate for you. This includes numerical results, interpretations, and any diagnostic conclusions.
  • Genetic Data: Raw genetic data (such as DNA sequences or genotyping results) and interpreted genetic information, when you have consented to genetic testing.
  • Biological Samples: While physical samples (blood, saliva, etc.) are not "data" per se, we assign identifiers to your samples and track information such as sample type, collection date, and processing status. This is linked to your personal data in our system.
  • Usage Data: As mentioned, technical data about how you access our Platform, IP address, login timestamps, activity logs within the application (e.g., which sections you viewed), and cookie data.
  • Communication Data: Contents of inquiries, communications, or feedback you send us, and notes about our responses.
  • Transactional Data: Records of services you have purchased, dates of tests or consultations, payment method (but note: we do not store full payment card numbers—payments are handled by secure payment processors), invoice amounts, and relevant transaction IDs.
  • Consents and Preferences: Records of any consents you have given (e.g., consent for genetic testing, consent for research use of data, marketing preferences) and records of any withdrawals of consent.

We ensure that access to special categories of data (health, genetic) is restricted to personnel with a need-to-know (such as healthcare professionals and lab analysts involved in your care, or data analysts working under strict confidentiality and data protection conditions).

6. How We Handle Biological Samples

As part of providing diagnostics, Supar.Health (often in partnership with accredited laboratories) may collect biological samples from you, such as blood, urine, saliva, or other specimen types. This section explains how we handle those samples:

  • Sample Analysis: Your samples will be used only for the specific tests and analyses that you have ordered or consented to. For example, if you have ordered a blood panel and a DNA test, your blood sample will be split or allocated as needed to perform those tests, either in our facilities or sent to specialized partner laboratories.
  • Accredited Processing: Any clinical diagnostic tests on your samples are performed in accredited labs under strict quality control standards. For RUO analyses, samples may be processed in research labs or using experimental protocols, but with due scientific care.
  • Sample Retention: In general, once the necessary analyses are completed, samples are disposed of safely(biohazard destruction) according to medical guidelines. However, in some cases we may retain portions of your sample for a short period in case re-testing is required or for quality assurance. For example, if a result is borderline or an instrument calibration issue is suspected, we may re-run the test on the stored sample. These retained samples are stored securely and are labeled with a code (not your name directly) to protect your identity.
  • Re-testing and Errors: If there is an issue with your sample or test (such as a technical error or an inconclusive result), we may use a retained portion of your sample to re-run the test without additional charge to you. If the sample quantity is insufficient or has degraded, we may ask you to provide a new sample (see Section 10 of the Terms of Use on Resampling). We will inform you if re-collection is needed and explain the issue.
  • Research Use of Samples: Supar.Health may conduct internal research to improve our services or contribute to scientific knowledge. We will not use your identifiable biological samples for research without your explicit consent. In certain cases, we might ask you, separately from this Agreement, whether you are willing to allow your leftover sample to be kept in our biobank for ongoing or future scientific studies. You have a free choice in this matter. If you do not provide a separate research consent, your samples will not be used for any purpose other than your own diagnostics and will be destroyed as described. If you do consent, the samples may be stored in our research biobank under coded identifiers, and you may be asked to sign a specific Biobank Consent Form detailing the scope of the research, any potential risks, and your rights. You can decline or withdraw such consent at any time without affecting your core diagnostic services.
  • Sample Transfers: Sometimes, to perform certain specialized tests, we might need to send a part of your sample to partner laboratories or hospitals (for example, a specific genetic test or a histopathology analysis at a specialized facility). We ensure that any transfer of samples is done securely, with the sample de-identified as much as possible and accompanied by only the information necessary for analysis (typically a sample ID and relevant clinical information, not your full personal details). All partner labs are bound by confidentiality and data protection agreements.

By using our services, you understand that your biological samples will be handled as described, and you agree to these practices. We maintain documentation of the chain-of-custody for all samples and comply with any applicable laws regarding human biological material.

7. Disclosure of Your Data to Third Parties

Supar.Health treats your personal and health data as confidential. We do not sell your personal data to third parties. We only share your data in the following circumstances, and always with appropriate safeguards:

  • Healthcare Providers: If a licensed physician or healthcare professional is involved in your testing process (for instance, a doctor who reviews and validates your test results, or your own general practitioner if we refer results to them), we will share the necessary portions of your data with that provider. For example, if a doctor affiliated with Supar.Health oversees your blood test, they will have access to your identity and lab results to fulfill their medical duties. We may also, with your consent or as required by law, send a copy of your results to your personal doctor or include it in the national electronic health record system (e.g., "sundhedsjournalen" in Denmark).
  • Laboratories and Technical Partners: We work with accredited laboratories and technical service providers to perform analyses. This includes external labs for specialized tests, sequencing facilities for genetic data, and platform hosting providers. These parties are bound by data processing agreements to ensure they only use your data for the purposes we specify and provide adequate protection. For example, if we send your blood sample to a partner lab for analysis, we provide only the data required for the test (often just a patient ID, gender, age, and relevant clinical info). The lab returns results to us, and they are obligated not to use your sample or data for any other purpose.
  • Service Providers: We use third-party service providers for certain business operations, which might include IT hosting and maintenance, cloud storage, email and communication tools, analytics services, payment processors, etc. These providers may process personal data on our behalf as data processors. We only use reputable providers that have committed to compliance with GDPR or equivalent standards. For example, our cloud database is hosted in a secure environment with encryption, and the provider cannot access your data except for maintaining the service under strict controls.
  • Research Collaborators: If you have given explicit consent to participate in research studies, we might share some of your data (often in an anonymized or pseudonymized form) with research institutions or collaborators. For instance, we might collaborate with a university on studying a new health marker. In such cases, we would strip direct identifiers from your data before sharing, and ensure the research partner agrees not to attempt to re-identify you. Any external research publication would only contain aggregated results. We will inform you about the specifics of any research project and obtain your consent, as noted earlier.
  • Regulatory and Public Health Authorities: We may be required by law to report certain information to health authorities. For example, under Danish law, certain communicable diseases or test results (like notifiable disease findings) must be reported to Statens Serum Institut or other public health bodies. Additionally, we may need to provide data to the Danish Patient Safety Authority (Styrelsen for Patientsikkerhed) as part of mandatory reporting or if they are auditing our clinic. Such disclosures will only be done under proper legal authority. We will document these transfers as required by law.
  • Legal Compliance and Protection: If required by law, court order, or governmental regulation, we may disclose your information to law enforcement, courts, or regulatory authorities. We will only do so to the extent we are compelled, and when possible, we will inform you of such disclosure. Additionally, if it's necessary to disclose data to protect our rights or the rights, property, or safety of our employees, clients, or others (for example, to prevent fraud or cybercrime), we may do so after careful consideration of your privacy rights.
  • Third Country Transfers: Some of our partners and service providers may be located outside of the European Union (EU) or European Economic Area (EEA). In particular, we might utilize laboratories or cloud services in countries such as England, the United States, or Switzerland. When transferring personal data internationally, we take steps to ensure an adequate level of protection:
    • For countries like the UK (England) and Switzerland, the European Commission has determined that these countries offer data protection standards essentially equivalent to the EU, so your data is protected under those countries' laws.
    • For the United States, we will only transfer data to organizations that are certified under the EU-U.S. Data Privacy Framework or which have signed standard contractual clauses (SCCs) or otherwise provided adequate safeguards in line with GDPR. We verify that any U.S. partner processes health data in compliance with GDPR standards or HIPAA (for medical data) as applicable.
    • In all cases, we maintain agreements with recipients to enforce confidentiality and data security. You can request a copy of the relevant data transfer safeguards (such as SCCs or certification details) by contacting us.
  • Data Processors: Note that when we use data processors (e.g., cloud hosting, IT support), they may technically have access to data for maintenance, but they are not allowed to view or use it except as needed for the task and are under strict contractual confidentiality. We ensure all personnel and contractors at Supar.Health and our partners who handle personal data are trained in privacy and bound to secrecy.

Aside from the above, Supar.Health will not disclose your identity or personal health information to any third party without your consent. Any sharing for marketing purposes would never include sensitive health data and would require your opt-in consent.

8. Data Security Measures

Security is paramount at Supar.Health. We employ a comprehensive set of technical and organizational measures to protect your personal and health data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption: All personal and health data is stored and transferred in encrypted form. We use strong encryption protocols (such as SSL/TLS for data in transit and AES-256 or equivalent for data at rest). This means that when your data is in our databases or being transmitted between our app/website and our servers (or to our partners), it is encrypted and unreadable to any unauthorized party. For example, our databases are encrypted such that even if someone were to get physical access to the storage, they could not read the data without the encryption keys.
  • Access Controls: Access to systems containing personal health data is strictly limited. Only authorized personnel (for example, the physician overseeing your results, the laboratory technicians, or the IT administrators for the system) have access to identifiable information, and even then only what they need for their role. We implement role-based access control (RBAC), ensuring each user of our internal system can only access data relevant to their job duties. All access to health records is logged and audited.
  • Confidentiality Training: All Supar.Health employees and contractors who handle personal data are required to sign confidentiality agreements. We provide training on data protection and HIPAA/GDPR compliance. They are educated on the importance of privacy and the legal and ethical duty to protect patient information.
  • Secure Infrastructure: Our Platform is hosted in GDPR-compliant data centers and/or HIPAA-compliant cloud services (for health data). These facilities employ advanced security measures including firewalls, intrusion detection systems, anti-malware scanning, and physical security controls. We regularly update and patch our software and servers to address security vulnerabilities.
  • Data Minimization and Pseudonymization: Where feasible, we pseudonymize data – meaning we replace identifying fields (like name or CPR) with coded identifiers in analytical processes, so that staff working on research or quality control do not see personal identifiers. We also strive to collect only the data that is necessary for the purposes described, and not maintain data longer than needed (see Data Retention below).
  • Email and Communication Security: We remind you that standard email is not always secure. While we have secure portals for sharing sensitive results, if you choose to communicate with us via regular email with personal health information, be aware of the risk. We encourage the use of encrypted email or our secure messaging features for any sensitive information. We utilize secure email protocols internally and for any transfer of particularly sensitive data.
  • Monitoring and Testing: We monitor our systems for possible vulnerabilities and attacks. Regular security assessments, penetration testing, and audits are conducted to evaluate the effectiveness of our security measures. Any identified risks are promptly addressed.
  • Data Breach Procedures: In the unlikely event of a data breach involving your personal data, we have an incident response plan. We will contain and mitigate the breach, assess the risk to your rights and freedoms, and, if required by law, notify you and relevant authorities (such as the Danish Data Protection Agency, Datatilsynet) within the regulatory timeframes.

Your data is never shared with third parties without your consent, except as explained in this Policy, and it is never sold or rented out. We treat your data as we would want our own data to be treated.

By using Supar.Health, you acknowledge that while we work hard to protect your information, no system can be 100% secure. However, we commit to you that we will take all reasonably necessary steps to ensure the safety of your data. If you have any concerns about data security or wish to report a potential security issue, please contact us immediately.

9. Data Retention

We store your personal and health data only for as long as necessary to fulfill the purposes for which it was collected, or to comply with legal or regulatory requirements. How long we keep specific data can vary based on context:

  • Health Records: Under Danish law (Journalføringsbekendtgørelsen and related health regulations), medical records must be retained for a minimum period (often at least 10 years from the last patient encounter, but this can vary). Therefore, information related to your diagnostics and treatment will typically be stored for at least the legally required retention period. We adhere to such laws, meaning we will not delete medical records earlier than permitted even if you request erasure, in order to comply with legal obligations (GDPR Art. 17(3)(b) – exception to erasure for compliance with legal obligation).
  • Account Information: If you have an online account, your basic registration information is kept for as long as you maintain that account. If you decide to delete your account (and if no overriding legal requirement to retain data exists), we will remove or anonymize personal identifying information, but we may keep non-identifiable aggregate data.
  • Genetic Data: Genetic data, once generated, becomes part of your health record. We will store it securely similarly to other health data. If you withdraw consent for use of genetic data in research, we will cease any research use and, if feasible, remove it from research databases (or completely anonymize it such that it is no longer personal data).
  • Communication Records: Communications with you (emails, chat logs, support tickets) are generally retained as long as your account exists or as needed for customer service follow-up. If they form part of the medical record (e.g., you provided medical info via email), they may be kept under the medical record retention policy.
  • Backup and Archives: We maintain secure backups of our data to ensure service continuity. Backups are encrypted and rotated. There may be residual copies of your data in backups which are beyond immediate use. These are kept only for disaster recovery for limited time and are securely destroyed on schedule. Also, if data is archived (moved offline or to long-term storage) due to legal requirements or historical purposes, it will be protected and isolated.
  • Anonymized Data: In some cases, after the end of the retention period or upon your request, instead of outright deletion, we may anonymize your data (strip it of any identifiers such that it can no longer be linked to you). Anonymized data is no longer considered personal data and may be kept for statistical, research, or service improvement purposes indefinitely, without further notice.

Once the retention period expires or the purpose for processing is fulfilled, we will either securely delete your data, anonymize it, or, if required, transfer it to an official archive (for example, in Denmark, certain health records might be transferred to a national archive under the Archive Act). For example, after many years, old patient records might be archived in compliance with archival laws.

If you wish to know how long specific types of data are retained, or to request deletion, you can contact us (see Your Rights below). We will respond in accordance with Section 11 and applicable laws.

10. Your Rights as a Data Subject

Under GDPR and applicable Danish law, you have several important rights regarding the personal data we hold about you. Supar.Health is committed to upholding these rights. They include:

  • Right of Access: You have the right to request confirmation as to whether we are processing your personal data, and if so, to request a copy of the data, as well as information about how we use it. This is often called a "Subject Access Request." We will provide you with a copy of your personal data undergoing processing, typically free of charge (except where requests are manifestly unfounded or excessive, especially if repetitive, in which case a reasonable fee may be charged or we may refuse).
  • Right to Rectification: If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request correction or completion. For example, if your name is misspelled in our system or an address is outdated, we will update it.
  • Right to Erasure: You have the right to request that we delete your personal data in certain circumstances. This is sometimes known as the "right to be forgotten." It is not absolute – for instance, we cannot delete data that we are legally required to keep (such as medical records within the mandatory retention period). But if you withdraw consent or if you object to processing and we have no overriding legitimate grounds, or if we unlawfully processed data, you can request deletion. We will inform you of the outcome and delete data where we can. Note that due to legal obligations, we might refuse deletion of certain health data, but we can anonymize or lock the data to only be used for the required purpose.
  • Right to Restrict Processing: You can ask us to restrict (i.e., pause) the processing of your data under certain conditions. For example, if you contest the accuracy of data, or if you object to processing and we are evaluating that objection, or if processing is unlawful but you prefer restriction over deletion, we will mark the data so it is only stored and not further processed until resolved. If processing is restricted, we will inform you before lifting the restriction.
  • Right to Data Portability: For data you have provided to us, which we process by automated means based on your consent or a contract, you have the right to request that we provide it to you in a structured, commonly used, machine-readable format. You also have the right to request that we transmit that data directly to another data controller, where technically feasible. In practical terms, this means you can ask for a digital file of your results and personal information that you gave us, which you could then, for instance, upload to another health service. We will facilitate this as much as possible (for example, providing CSV or JSON exports of your data).
  • Right to Object: You have the right to object to our processing of your personal data when that processing is based on legitimate interests (or public interest) and you have particular grounds for your objection. You also have an absolute right to object if your data is processed for direct marketing purposes (we will always honor opt-out of marketing). If you raise an objection, we will evaluate it. For processing based on legitimate interests, we will stop processing unless we have compelling legitimate grounds that override your interests, rights, and freedoms, or if we need to continue processing for the establishment, exercise, or defense of legal claims. In the context of research use of your data, note that GDPR provides an exemption such that the right to object might not apply if the processing is necessary for scientific research purposes and would seriously impair the research objectives – however, in our practice, your consent is primary for research use, and you can withdraw it.
  • Right not to be subject to Automated Decision-Making: Supar.Health does not make any decisions about you that have legal or similarly significant effects solely by automated means (without human involvement). In the event we use algorithms or AI to evaluate health data, any significant health-related decisions (like a diagnosis or treatment recommendation) involve a qualified professional's review. If in future we implement automated decision systems, you would have the right to request human intervention, to express your point of view, and to contest the decision.
  • Right to Withdraw Consent: If we are processing your personal data based on your consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing that was carried out before withdrawal. For example, you can withdraw consent for receiving newsletters, and we will stop sending them. If you withdraw consent for a genetic test before it's done, we will cancel the test (note: if the test is already complete and results delivered, see right to erasure regarding handling of those results). To withdraw consent, you can contact us via email or through the account settings where available.
  • Right to Lodge a Complaint: If you have concerns about how we are handling your data, you have the right to lodge a complaint with a supervisory authority. Supar.Health is based in Denmark, so our lead supervisory authority is the Danish Data Protection Agency (Datatilsynet). Their contact information can be found on their official website. We encourage you to contact us first, so we can try to resolve your issue directly, but you are free to contact the authority at any time. If your complaint relates to healthcare services, you may also have the right to complain to the Danish Patient Safety Authority or other relevant health oversight body.

To exercise any of your rights, please contact us (you can reach out via email or telephone as provided on our website, or via secure message). We may need to verify your identity to process certain requests (for example, ask you to confirm some identifying information). We will respond to your request as soon as possible, and within one month at most, as mandated by GDPR (this can be extended by two further months if necessary due to complexity, but we would inform you of the need for extension).

Please note that these rights may be subject to certain legal exceptions. We will explain if any exception applies when responding to your request. For instance, as mentioned, if you request deletion, but we have to keep data to comply with a legal obligation, we will inform you of that fact and, if possible, offer to restrict its use instead.

Your trust is extremely important to us. We will do our utmost to honor your rights and handle any requests or complaints fairly and transparently.

11. Complaints and Contact Information

Supar.Health aims to address any concerns you have regarding your privacy or the handling of your personal data. If you have a complaint, question, or feedback about our data practices, please contact us so we can assist you. You can reach us by:

  • Email: [Insert contact email, e.g., privacy@supar.health]
  • Phone: [Insert contact phone number, if available]
  • Mail: Supar.Health ApS, Strandvejen 64, 2900 Hellerup, Denmark.

When you contact us with a privacy-related complaint, please provide as much detail as possible about your issue. We will take your complaint seriously, investigate, and respond to you. We may ask you for additional information to clarify the matter or to verify your identity, especially if it involves a request to exercise your data subject rights.

If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law, you have the right to file a complaint with the Datatilsynet (Danish Data Protection Authority). You can find their contact details on their official website (typically: Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark, email: dt@datatilsynet.dk, phone: +45 33 19 32 00). Similarly, if your concern relates to how we handled your care as a medical service, you may contact the Danish Patient Safety Authority (Styrelsen for Patientsikkerhed) or other relevant body. However, we sincerely hope to resolve any issue in direct communication with you.

12. Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make significant changes, we will notify you through the Platform (for example, via a notice on our website or a notification through the app) and/or via email, if appropriate. The "Last Updated" date at the top of this Policy indicates when the latest changes were made.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data. If we make changes that materially affect your rights or how we use your data, we will seek re-confirmation of your consent if required. Continued use of the Platform after a Policy update constitutes your acknowledgment of the update. If you do not agree with any changes, you should stop using the Platform and can request us to deactivate your account and/or delete your data (subject to the restrictions noted above).

Terms of Use
13. Acceptance of Terms

These Terms of Use govern your access to and use of Supar.Health's services, including any content, functionality, and services offered through the Platform or related websites (collectively, the "Services"). By creating an account, purchasing a product or service, or otherwise using the Services, you agree to be bound by these Terms of Use, together with the EULA and Privacy Policy above, which are incorporated herein by reference. If you do not agree, you must not use the Services.

These Terms apply to all users of Supar.Health, including without limitation individuals seeking health diagnostics and insights, and any representatives of companies if company services are provided. You acknowledge that you are entering into a binding agreement with Supar.Health ApS.

14. User Eligibility and Accounts
  • Minimum Age: You must be at least 18 years old to create a Supar.Health account or to purchase Services for yourself. If you are under 18, you may only use Supar.Health with the involvement and consent of a parent or legal guardian. Certain Services (such as specific medical tests) may not be available to minors except with explicit guardian consent and in compliance with Danish law. In Denmark, if you are under 15 years old, a parent or guardian must provide written consent (power of attorney) for you to receive our Services. Users aged 15 to 17 should have parental consent or at least parental notification, consistent with applicable healthcare laws and guidelines. By using the Services, you affirm that you meet the applicable age requirements.
  • Account Registration: To access certain Services, you will need to create an account by providing truthful and accurate information. Required information may include your name, contact details, date of birth, and other verification details. You agree to keep your account information up to date. You are responsible for maintaining the confidentiality of your login credentials and for all activities that occur under your account. You should use a strong password and not share it. If you suspect any unauthorized use of your account or a security breach, you must notify Supar.Health immediately. We are not liable for any loss or damage arising from your failure to secure your account.
  • Account Use: You agree that you will use your account solely for yourself or for a person you are legally authorized to represent (for example, your minor child or a person for whom you are a legal guardian or have power of attorney). You may not create accounts for the purpose of abusing our Services or other users, or to impersonate any person. We reserve the right to refuse registration, or cancel or suspend accounts, at our reasonable discretion (for example, if we find that someone has provided false information or is misusing the platform).
15. Services Description

Supar.Health provides a range of health-related services including: laboratory diagnostic testing, personal health data analysis, digital biobank storage of health records, and research-based health insights. Some of our Services are accredited medical diagnostics – these are performed under clinical standards and can be used as part of your medical care. Other Services are for research and educational use – providing additional information and interpretations for your personal interest and wellness, which are not intended as medical diagnoses (as explained in the EULA's RUO section and the disclaimers below).

We may offer different packages or programs (for example, a basic health check package, a comprehensive "Health Intelligence" program, genetic analysis services, etc.). The contents and features of each service package are described on our website or app. For instance, a package may include a set of biomarker tests, a consultation with a healthcare professional, access to the Supar.Health platform for results, and personalized recommendations. We strive to keep service descriptions up to date and accurate. However, specific components (like the exact list of biomarkers tested) may change as we update our offerings or in response to your particular needs (we will inform you of any changes relevant to services you have purchased).

When you purchase or use a Service, you agree that: (a) you will follow any preparatory instructions given (for example, fasting before a blood test, or how to collect a sample properly), and (b) you will promptly provide any information or samples required for the Service. Failure to do so may result in delays or inability to complete the Service, for which we are not responsible.

16. Medical Disclaimer and User Responsibilities

No Substitute for Medical Advice: The Supar.Health Services focus on health optimization and preventive care, which may include providing you with information about biomarkers, lifestyle factors, and risk indicators. However, these Services do not replace professional medical diagnosis, treatment, or advice from your physician. Always consult your doctor or other qualified healthcare provider for any medical condition or before making any significant changes to your health regimen. Supar.Health does not practice medicine or provide medical treatments; we provide data and analysis that you may find useful in collaboration with your healthcare providers.

Health Optimization Limitations: Many of our recommendations are based on peer-reviewed research and clinical evidence linking certain biomarker levels to health outcomes. We may suggest lifestyle changes, supplements, or further testing as ways to optimize your health. Keep in mind that evidence for improving the health of already healthy individuals can be limited, and some advice may be extrapolated from research on populations with specific illnesses or high risk factors. While we aim to provide sound guidance, there is inherently some uncertainty and speculative aspect in predictive or preventive health advice. We will strive to communicate the strength of evidence behind any recommendation, and whether it's based on established science or emerging research.

Do Not Ignore Medical Advice: If you have an existing medical condition, are undergoing treatment, or have concerning symptoms, do not ignore or delay seeking advice from your personal physician because of information from Supar.Health. Likewise, do not start or stop any medication or treatment prescribed by your doctor without consulting them, even if Supar.Health's data suggests something about your biomarkers. Our Services should be one input among many, with your physician's judgment being paramount.

User Health Information: You are responsible for providing accurate and complete health information when prompted. This includes your medical history, medications, allergies, and any symptoms or conditions relevant to the Services. Failure to disclose important information could affect the quality or safety of the service (for example, certain supplements or tests might be contraindicated in pregnancy or for individuals on certain medications). Supar.Health is not responsible for any harm resulting from omissions or inaccuracies in the information you provide.

Follow-up and Emergency: Supar.Health will deliver results and insights to you through the Platform. In some cases, our healthcare staff might directly reach out (via the Platform or phone/email) if a critical result is detected (for example, a lab value that is significantly outside normal range and might warrant immediate medical attention). However, it remains your responsibility to check your results and seek appropriate follow-up care. If you receive a result indicating a potential medical issue, you should contact a doctor for interpretation and next steps. If a result or your condition seems immediately dangerous, do not wait for our communication – seek emergency medical care.

No Doctor-Patient Relationship: Except for interactions with our licensed clinicians (e.g., if you have a consultation as part of a service), your use of Supar.Health does not by itself create a doctor-patient relationship between you and Supar.Health or its personnel. The Platform provides information, but it is not a clinical encounter. Any general health information on our website or provided through automated analysis is for educational purposes and not personalized medical advice.

17. Booking Appointments and Sample Collection

Some of Supar.Health's Services require you to attend an appointment (for example, to draw blood, or for a consultation) or to collect a sample yourself (for example, a saliva sample for DNA testing). The following terms apply:

  • Booking: Appointments for sample collection or in-clinic consultations can be booked via our Platform or by contacting us. When booking, you must provide required information (full name, date of birth, contact info, and if in Denmark, CPR number or equivalent ID). You will receive a confirmation of your appointment details via email or through your account.
  • Preparation: We will inform you of any preparation needed (e.g., fasting for 8 hours, avoiding certain foods or medications). It is your responsibility to follow these instructions. If you do not, the results may be invalid or the appointment may need to be rescheduled.
  • Timeliness: Please arrive on time for physical appointments or be available at the scheduled time for any telehealth consultations. If you are late, we will attempt to accommodate you, but it may not always be possible and could be treated as a missed appointment (see Cancellation/No-show policy below).
  • Self-collection Kits: If we provide you a kit to collect a sample (such as a home blood spot test, saliva tube, etc.), follow the provided instructions carefully. You may need to mail the sample back to our lab or bring it to a collection point. Make sure to send it within the specified time window, as delays can lead to sample degradation.
  • Identification: For in-person services, bring a valid ID as we may need to verify identity (especially for services involving regulated procedures or prescriptions). For minors, the guardian should accompany and provide ID and proof of guardianship if needed.
  • Health and Safety: If you have any condition that makes a procedure risky (e.g., you tend to faint during blood draws, or you have a bleeding disorder), inform our staff ahead of time. We can make special accommodations. Our staff are trained to handle common issues (like using appropriate equipment for difficult veins, etc.) and our facilities maintain high standards of hygiene and safety.
18. Prices and Payment Terms
  • Pricing: Prices for Services are provided on our website or communicated to you through Supar.Health's ordering interface or customer service. All prices are listed in Danish Kroner (DKK) unless otherwise stated, and include all applicable taxes or indicate if any tax (like VAT) is applicable. Health services such as diagnostic tests or medical consultations are typically exempt from VAT in Denmark when related to diagnosis or treatment of health. If a service does not qualify for this exemption (e.g., a purely wellness or non-medical service), VAT will be added as required. We reserve the right to change our prices at any time, but any such changes will not affect orders that have already been confirmed.
  • Payment Timing: Unless otherwise agreed, payment is due at the time of ordering a Service. For online bookings, you will generally be required to pay to confirm the appointment or purchase. For services that involve an ongoing process (like a subscription or a program with multiple stages), we may charge in advance for the entire package or in installments as clearly communicated. In certain cases, if additional services are requested or required (for example, an extra consultation or add-on test not originally ordered), we will invoice those separately, typically after they are provided.
  • Payment Methods: We accept various payment methods including major credit/debit cards (e.g., Visa/VISA-Dankort, Mastercard) and potentially other methods like bank transfer, MobilePay, or gift cards, as indicated during checkout. By providing payment information, you represent that you are authorized to use the payment method and you authorize us (or our third-party payment processor) to charge the full amount due for the selected services.
  • Late Payment: For any invoice or amount that is not paid when due (for example, if we agreed on an invoice to be paid later, or a subscription installment, and it's not paid on time), we reserve the right to charge interest and/or late fees as permitted by law. As a guideline, interest of 1.5% per month (18% per annum) may be added on overdue amounts. Additionally, you will be responsible for any reasonable costs of collection (such as legal fees or debt collection agency fees) incurred by us in obtaining payment. If payment is significantly overdue, we may suspend or terminate the provision of Services, including disabling your access to the Platform until the account is brought current.
  • Refundable Taxes or Fees: If any customs duties or shipping fees apply (in case of shipped kits or products), these will be communicated. Typically, our service prices include standard handling and delivery of test results electronically. If you request any special services like physical shipment of results or extra copies, there may be additional charges.
  • Billing Errors: In the event of any mistake in billing (e.g., you were charged the wrong amount), please contact us and we will correct it promptly and issue refunds or additional charges as necessary to ensure you pay only the correct price.
19. Cancellation, Rescheduling, and Refund Policy

We understand that sometimes plans change. The following terms apply to cancellations or rescheduling of appointments and refunds for Services:

  • Cancellation by You: If you need to cancel an appointment or service, you must notify us as soon as possible, ideally in writing (email is acceptable) or through the Platform's cancellation feature.
    • For most diagnostic sampling appointments or consultations, cancellation at least 96 hours (4 days) in advance of the scheduled time will qualify for a full refund of any prepaid amount. We calculate the notice period from the time we receive your cancellation request during our normal business hours.
    • Cancellations made less than 96 hours but more than 24 hours before the appointment may not be eligible for a cash refund, but we may offer you a credit or voucher to reschedule the service at a later date. This is a goodwill gesture to help you get the service later, but not guaranteed as a refund.
    • Cancellations made within 24 hours of the appointment, or failure to show up (no-show) without any notice, will generally not be refunded. Late cancellations and no-shows result in wasted resources (like reserved lab time or clinician time), so we adhere to this policy strictly. In some cases of no-show, we may charge a no-show fee (for example, 1000 DKK for a missed examination), especially if the service involved significant preparation. This fee covers the costs incurred by us for allocating those resources to you.
    • Note: The above policy may have an exception for certain types of consultations (e.g., medical consultations or specialized services) which might require 72 hours notice for cancellation instead of 24. If a specific service has a different cancellation policy, it will be communicated at booking.
  • Rescheduling: You may request to reschedule an appointment instead of outright cancelling. We permit one free rescheduling if you give sufficient notice (generally at least 24 hours before the original appointment). Rescheduling requests under 24 hours notice might be treated similar to a late cancellation, but if feasible we will try to accommodate a new time (possibly with a fee). Some services (like medical consultations or certain therapies) might require more notice (96 hours) to reschedule without penalty. When rescheduling, the new appointment should typically be within a reasonable time frame of the original (e.g., within the next few weeks).
  • Cancellation or Rescheduling by Us: If Supar.Health needs to cancel or change your appointment (due to, for example, staff illness, equipment failure, or other unforeseen circumstances), we will notify you as soon as possible and offer to reschedule at a mutually convenient time. If we cannot reschedule or you prefer to cancel rather than reschedule, we will issue a full refund for that appointment. We are not liable for any other costs you incur (like travel arrangements) due to our cancellation, but we will do our best to avoid such situations.
  • Refund Process: Approved refunds (whether for cancellations or other reasons) will be processed in a timely manner. We batch process refunds at least twice a month. Once approved, you can expect the refund amount to be returned to your original payment method within 14 days or according to your bank/credit card's processing time. If you paid by bank transfer, we will ask for your account details to send the refund.
  • Partial Services: If you purchased a package of multiple services and you wish to cancel part of it, we will evaluate how to pro-rate the refund. For example, if you bought a bundle of 3 test sessions and want to cancel after using 1, we may deduct the full list price of the used session and refund the remainder if within allowable cancellation period for the unused sessions.
  • Subscription Services: If you are on a subscription (see Section 9 below), the cancellation and commitment terms of the subscription will apply. Generally, you cannot cancel in the middle of a committed period except for the statutory 14-day cooling-off right for new subscriptions (detailed below). After the commitment period, you may cancel with notice, as described in the subscription terms.
  • Right of Withdrawal (EU consumers): If you qualify as a consumer in the EU and you purchased our Services online or off-premises, you typically have a 14-day right of withdrawal (cooling-off period) where you can cancel for any reason and get a refund. However, if the service has already been delivered in full within that period (for example, you had a test done and results delivered within 14 days of order) and you acknowledged that right is waived by receiving the service promptly, then the cooling-off may not apply. For subscriptions, the 14 days start from the day of agreement, and if you use subscription benefits in that time, we may charge for the value of services used if you then withdraw.

We aim to treat our users fairly, so if you have extenuating circumstances for a late cancellation or no-show (e.g., a medical emergency), please inform us – we may, at our discretion, waive fees or provide a partial refund or credit.

20. Subscription Terms (if applicable)

Supar.Health may offer subscription-based services or membership programs that provide ongoing benefits, such as periodic health tests, continuous access to the Platform's premium features, or discounts on services. If you enroll in a subscription plan, the following terms apply (in addition to any specific terms presented at sign-up):

  • Service Scope: A subscription entitles you to receive certain services on a recurring basis. The exact inclusions will be described in the subscription description. For instance, a plan might include an annual comprehensive health examination, quarterly specific biomarker tests (like a suPAR level test every 3 months), periodic check-ins, and possibly other wellness services. As a subscriber, you are eligible to receive those services during your subscription term.
  • Discounts and Perks: Subscribers may get additional perks such as discounts on other one-time services or consultations outside the subscription scope. For example, baseline members might get 10% off additional services, while premium members get 15% off. Such discounts apply only to Supar.Health's own services and cannot usually be combined with other promotions or offers. These benefits are described in your plan details.
  • Commitment Period: Many subscription plans have a minimum commitment period (e.g., 3 months or 12 months). By subscribing, you agree to continue the subscription for at least that period. During the minimum term, you cannot cancel the subscription early without penalty (unless explicitly allowed or required by law). This commitment is necessary because we allocate resources and plan services in advance for our members.
  • Automatic Renewal: After the minimum commitment period, subscriptions may automatically renew (e.g., on a monthly or yearly basis) unless you actively cancel before the renewal date. We will notify you in advance (at least 30 days prior to renewal for annual plans) about the upcoming renewal and any changes in terms or pricing. If you do not want to renew, you must give us notice of termination as outlined below.
  • Termination Notice: Once the minimum period is over, you can terminate your subscription by giving written notice to Supar.Health with the required notice period (for example, 1 month notice). The notice must clearly state your name and the date you want the subscription to end. We will confirm the termination and process it. If notice is not given in time, the subscription may renew and the termination will take effect at the end of the next period.
  • Mid-term Cancellation: If you attempt to cancel before fulfilling the minimum commitment (e.g., 2 months into a 3-month minimum), we reserve the right to charge you for the remaining period or refuse the early termination, unless otherwise agreed in writing. Only extraordinary circumstances (like a serious illness that prevents you from using the service) might be considered for early release, at our discretion or according to consumer protection laws.
  • Right of Withdrawal: As per Section 7, you have a 14-day cooling-off period from the start of a new subscription where you can cancel without penalty. However, if you have already used services (for example, did the initial examination) within those 14 days, we may deduct the value of those used services from any refund, as you have received part of what you paid for.
  • Refund upon Termination: If you paid in advance for a subscription period and then properly terminate the subscription, any portion of the period after the termination effective date will be refunded to you. For example, if you paid for a year and you cancel (after minimum period) effective 3 months before the year ends, we will refund the 3 months' worth of fees. The refund will be processed within a reasonable time (typically within 30 days) after the termination takes effect.
  • Changes to Subscription Terms: We may update the terms or features of subscriptions with appropriate notice to subscribers. If a change is material (like a price increase or significant change in included services), we will notify you at least with one full billing cycle in advance. If you do not agree to the change, you can choose to cancel at the end of the current period. Continued use of the subscription after changes take effect constitutes acceptance.

Subscriptions are intended to provide continuous support for your health journey. We ask that you use the services (schedule your periodic tests, etc.) – unutilized services generally do not carry over beyond the period unless specified (for instance, if you miss one quarterly test, it might not accumulate to give you four tests next year; however, we might accommodate some flexibility case-by-case).

21. Intellectual Property (Content on the Platform)

Beyond the software itself (covered in the EULA), any content provided by Supar.Health via the Services – including text, reports, charts, graphics, logos, images, and compilations of data – is protected by intellectual property laws. Supar.Health either owns this content or has obtained permission to use it.

  • Use of Results and Reports: We grant you a personal, non-commercial license to use, download, and print your individual health reports and results that we provide to you. These may include lab reports, health assessment documents, or similar. You are free to share your own health report with your healthcare providers or family members. However, these reports often include Supar.Health's branding and methodology, which remain our IP. You agree not to remove any trademarks or disclaimers when sharing our reports.
  • Educational Content: The Platform or associated blog/articles may contain educational content (like articles on health, descriptions of biomarkers, etc.). This content is for your personal use. You may not copy or distribute significant portions of our content without permission. If you quote or reference our educational materials publicly (like in a blog of your own), please attribute it to Supar.Health appropriately.
  • Trademarks: "Supar.Health", our logo, and any other trademarks or service marks that we use to brand our Services are our property. You are not granted any right or license to use them (for example, you cannot use our name in advertisements or as your own service name) without prior written consent, except as needed to identify our services (like in a review or commentary which is allowed fair use).
  • User Feedback: If you provide suggestions, feedback, or ideas about our Services (for example, ideas to improve features or new analysis we could do), you agree that Supar.Health can use, implement, and share those ideas without any compensation to you. You transfer any intellectual property rights of such feedback to us, or at least give us an irrevocable free license to use it. This helps us improve the product.
  • Third-Party Content: The Platform might include or link to content provided by third parties (for example, a licensed questionnaire, or external health articles). Third-party content is the property of its respective owners and may be subject to their terms. Supar.Health is not responsible for content on external sites we link to; such links are for convenience and do not imply endorsement.
22. User Obligations and Prohibited Conduct

We strive to create a secure and effective platform. By using Supar.Health, you agree to the following obligations and limitations:

  • Lawful Use: You will use the Services only for lawful purposes. You will comply with all applicable laws and regulations (including health regulations and export controls if applicable for any data transfer).
  • No Misuse of Services: You will not misuse the Services or help anyone else to do so. Misuse includes:
    • Attempting to breach or breaching the security or authentication measures of the Platform.
    • Attempting to probe, scan, or test the vulnerability of any Supar.Health system or network, or impersonating any API calls, without proper authorization.
    • Injecting false data or interfering with data of other users.
    • Transmitting any worms, viruses, or malicious code.
    • Using any scraping, data mining, bots, or similar data gathering tools to extract data from the Platform (except as permitted under Section 11 for your own data portability).
  • Accuracy of Information: You must provide accurate information in your interactions with us (registration, health questionnaires, etc.). Do not misrepresent your identity or health status.
  • Respect for Others' Privacy: If you inadvertently gain access to another user's information (for example, through a system glitch or error), you must not save, share, or misuse that information. You should report the incident to us immediately. You should also avoid posting or sharing any personally identifying information of other individuals without their consent on any interactive features (if any exist, like forums or community boards).
  • No Commercial Use: Our Services are intended for personal use. You should not use them to provide services to third parties, for example, running a business analyzing data for others using our platform without a separate enterprise agreement. If you are a healthcare provider or organization wanting to use Supar.Health for patients, please contact us for appropriate terms.
  • Third-Party Integration: If you use any third-party applications or devices in conjunction with Supar.Health (for example, importing data from a smartwatch, or connecting to Apple Health, etc.), you must comply with their terms too. We are not responsible for any issues arising from third-party integrations.
  • Data Use: You will not use data from our Services except as intended (for personal insight and improving your health in consultation with professionals). Especially, you will not use any RUO outputs to make independent medical decisions for others or to develop any product or algorithm for commercial use without our explicit permission.
  • Community Guidelines: If our Platform includes community features (like ability to post comments, reviews, or engage with other users), you agree to be respectful and not post any content that is illegal, offensive, defamatory, infringing, or that violates the rights of others. We may moderate and remove content that violates community standards or these Terms.
  • No Exploitation: You shall not exploit the Platform to try to derive source code, create derivative works, or build a competing product. Also, you shall not use the Services in a manner that excessively burdens our infrastructure (e.g., automated heavy requests) without permission.

Violating these obligations may result in suspension or termination of your access, and we reserve the right to take legal action if warranted.

1. Service Limitations and Modifications

Supar.Health continually improves its Services and may expand or modify offerings:

  • Not a Guaranteed Service: We strive for 24/7 availability of our digital Platform. However, we do not guarantee uninterrupted access. There may be downtime for maintenance, updates, or due to technical issues. We will attempt to schedule maintenance during low-usage times and inform users if significant downtime is expected.
  • Technical Requirements: Use of the Platform may require compatible devices, internet access, and certain software (updated browser, etc.). Your ability to use the Platform can be affected by the performance of these factors, which are your responsibility.
  • Beta Features: We may introduce experimental or beta features to gather feedback. Such features will be marked as beta or trial. They may not be as reliable as core services, and we may modify or remove them without notice.
  • Modifications to Services: We reserve the right to change our Services. This could include discontinuing certain tests (if, for example, a test becomes obsolete or regulatory changes occur), changing lab partners, or altering methodologies (improving algorithms, etc.). If a change affects results interpretation or comparability (for example, switching to a new measurement standard for a biomarker), we will inform you and annotate results accordingly.
  • Out of Stock/Availability: Certain test kits or reagents could be subject to supply constraints. If a service you ordered is temporarily unavailable, we will inform you and provide options (delay until available, substitute an equivalent test, or refund). We can only sell or provide a test while our supplies last or labs are able to process.
  • Unclear or Inconclusive Results: On occasion, a test may produce an unclear or indeterminate result. As per our policy, such an outcome is still considered a delivered service (we did perform the analysis, even if the result is "inconclusive"). We will explain possible reasons (e.g., sample issues or borderline values) and may recommend a re-test. In special cases, if the fault is on our side (lab error or equipment failure), we will re-run the test at no additional cost to you. If results remain inconclusive, that might simply reflect a limitation of current science or technology.
  • Delays: Turnaround times for results are estimates. Delays can occur due to unforeseen factors like instrument maintenance, additional quality checks needed, or external factors (backlog at a partner lab, shipping delays for samples). We will communicate with you if a delay is expected beyond the normal window. We aim to deliver results as timely as possible but cannot guarantee that a result will never be delayed.
  • External Factors: Our Services may rely on third-party data (reference ranges, research studies, etc.). If any third-party service or data feed becomes unavailable or changes, it might affect parts of our Platform. For instance, if we integrated a DNA analysis pipeline from a partner and that partner ceases operation, we may need to suspend genetic services until we have an alternative.
  • Clinical Judgment: Our affiliated doctors and scientists have the discretion to decide not to perform or to stop a service if they judge it to be medically inappropriate or unsafe. For example, if you sign up for a strenuous exercise test but during pre-screening the doctor finds it unsafe for you, they can cancel that part of the service (with refund for that portion). Similarly, if a lab finds an anomaly in a sample that could render further tests inaccurate, they might pause and request a new sample.

We appreciate your understanding that healthcare and technology services can be complex. Our goal is to deliver high quality, reliable service, and any changes or limitations are managed with transparency and your best interest in mind.

24. Limitation of Liability and Indemnification (User Responsibilities)

These Terms incorporate the Limitation of Liability and Indemnification clauses from the EULA above (Section 11 and 12 of the EULA). In short, Supar.Health's liability to you is limited to the maximum extent permitted by law, and you agree not to hold us responsible for certain types of damages as described in the EULA. You also agree to indemnify Supar.Health for certain improper actions on your part. Please refer to those sections for full details, as they apply equally to your use of the Services under these Terms of Use.

To reiterate key points in simpler terms:

  • Supar.Health is not liable for indirect damages or losses (like lost opportunity, lost profits, or pain and suffering) resulting from your use of our Platform.
  • Our total liability for any claims is capped at what you paid us in the last 6 months, if anything.
  • If you use our Platform in violation of these terms or unlawfully and that causes us harm (like a lawsuit from a third party or a fine), you may be responsible for covering those losses.

Medical Liability: Supar.Health is not liable for decisions you make based on the information provided. We present data and analysis, but how you use that information is your responsibility. We strongly advise involving healthcare professionals in interpreting and acting on any result. If you choose not to, you assume full responsibility for any outcomes. For example, if our RUO analysis suggests you might have a risk for a condition and you self-medicate or panic without proper medical consultation, Supar.Health is not responsible for consequences of those actions.

No Warranty of Results: We do not guarantee that using our Services will improve your health or achieve any particular outcome. Many factors affect health that are outside our control. Our recommendations are intended to help, but results will vary by individual.

1. Governing Law and Dispute Resolution

These Terms of Use (and any non-contractual disputes or claims arising from or related to them) are governed by the laws of Denmark, as stated in the EULA's Governing Law section. You agree that any disputes will be subject to the exclusive jurisdiction of the Danish courts.

If you are a consumer residing in another EU country, you may also have the right to bring claims in your home country under certain consumer protection laws. These terms do not limit any consumer protection rights that are mandatory under the law of your country of residence.

Before resorting to legal action, we encourage you to contact us to resolve the issue amicably. We are open to discussing any grievances. If a dispute arises that cannot be resolved informally, you and Supar.Health might consider alternative dispute resolution (ADR) methods, such as mediation, before litigation. However, this is not mandatory unless required by law.

For EU consumers, the European Commission provides an Online Dispute Resolution (ODR) platform (accessible at http://ec.europa.eu/odr) that you can use to find out about resolving disputes. Note that Supar.Health's email for any such correspondence is provided in the Privacy Policy contact info.

1. Changes to Terms

Supar.Health may update these Terms of Use from time to time. If we make material changes, we will notify users via the Platform or email, as appropriate, prior to the change becoming effective. The notification will summarize the changes and the date they take effect. Your continued use of the Services after the effective date constitutes acceptance of the new Terms. If you do not agree to the revised Terms, you should stop using our Services and, if needed, terminate your account.

We will not retroactively change terms in a way that materially affects your rights without your consent. For example, if you purchased a service under certain terms, those terms will apply to that purchase. Changes will typically apply going forward to new purchases or renewals.

1. Miscellaneous
  • Severability: If any provision of these Terms of Use is found to be unlawful or unenforceable, that provision will be deemed removed or limited to the minimum extent necessary, and the remainder of the Terms will remain in full effect.
  • No Waiver: If Supar.Health does not enforce a provision of these Terms on any occasion, it does not mean we waive our right to enforce it in the future. Every provision remains enforceable.
  • Assignment: You may not assign or transfer your rights or obligations under these Terms to any other person or entity without our prior written consent. Supar.Health may assign its rights and obligations to an affiliate or in connection with a merger, acquisition, or sale of assets, or by operation of law.
  • Entire Agreement: These Terms, together with the EULA and Privacy Policy, and any consent forms or additional agreements that apply to specific services (all of which are incorporated by reference), constitute the entire agreement between you and Supar.Health regarding the use of our Services. They supersede any prior agreements or understandings on the same subject matter.
  • Language: These Terms are provided in English. If we provide translations in other languages, those are for convenience. In the event of any inconsistency between the English version and a translated version, the English version will control.
  • Contact for Terms: For any questions about these Terms of Use or the Supar.Health Platform Agreement as a whole, please contact us using the contact information provided in the Privacy Policy section above.

By agreeing to this Supar.Health Platform Agreement, including the End User License Agreement, Privacy Policy, and Terms of Use, you confirm that you have read and understood all the provisions and agree to abide by them. We thank you for trusting Supar.Health with your health journey and look forward to providing you with valuable insights and service.