Privacy Terms

Who we are

CERA Medical is a biomedical research and development company registered with the Securities and Exchange Commission of Pakistan. Its office is at 2nd Floor, BIC, C2 Building, Pak-Austria Fachhochschule: Institute of Applied Sciences and Technology (PAF-IAST), Mang, Haripur, Pakistan. CERA Medical develops natural healthcare products and provides preclinical studies, molecular research, metagenomic data analysis, biomedical and omics data analysis, and evidence synthesis and technical reporting.

Scope

These draft terms describe information collected through ceramedical.org and while providing services, how it may be used and protected, proposed retention periods, and choices for visitors, enquirers and clients.

Information collected

When you contact CERA Medical or request a service, the proposed collection includes your name, email address, optional telephone number, institution, country and message. To provide a service, CERA Medical may receive files and materials you submit or ask it to retrieve, including sequencing data, sample metadata, health, survey and programme datasets, draft reports and manuscripts, figures and tables, test compounds and biological samples with related records.

The client copy also describes billing information, product-order details, server logs and cookies. Whether those categories apply to the production service must be confirmed before this notice is approved.

How information is used

The stated purposes are responding to enquiries and preparing quotations; carrying out requested services and delivering results; invoicing and keeping legally required accounting records; securing and operating the website; sending service messages and updates where requested; and complying with legal obligations or lawful requests.

The client copy identifies consent, performing a requested service, legitimate interests in operating and securing services, and legal obligations as the proposed bases for processing. The applicable legal basis for each activity requires review.

Research data, health data and samples

The client copy says files, datasets, samples, compounds and results remain the client’s property and are used only on the client’s instructions for the requested work. It says CERA Medical will not use client materials for its own research, publications, product development or marketing, or disclose them to other clients. Research collaborations are to have a separate written agreement covering ownership, publication and authorship.

Services are intended for de-identified data and coded samples. Clients are asked not to provide direct identifiers and remain responsible for the approvals and consent governing their underlying study or programme. Human genetic reads are described as being removed during quality control and not used for another purpose. Data-sharing or data-protection agreements may be signed before transfer where required by a client organisation.

The client copy states staff and contracted specialists with access are bound by confidentiality and that an NDA is available on request. These handling and security practices must be verified against the live production workflow.

Sharing information

The proposed sharing is limited to assigned staff and contracted specialists under confidentiality obligations; operational providers for hosting, email, secure file transfer/storage and payment processing; people the client instructs CERA Medical to involve; and disclosures required by law or a competent authority. The client copy says personal information is not sold.

Where information is stored

Storage locations and international transfers have not yet been confirmed for the production environment. The final notice must name the relevant hosting and service providers and explain any transfer outside Pakistan.

Security

The client’s draft describes restricted access, encrypted file transfer, password-protected systems and backups. Those specific controls and backup locations must be confirmed against the production configuration before publication as commitments. No method of transmission or storage is completely secure.

Retention

Proposed retention periods and deletion procedures are listed in the Data Retention Policy. Several periods and operational details in the source are still unconfirmed; the schedule is therefore a draft and is not yet an effective retention commitment.

Choices and requests

The client draft proposes that people may request access to, correction of or deletion of their information, withdraw consent, or stop updates by writing to theceramedica@gmail.com. Its proposed response time is 30 days, subject to identity checks and records that must be retained by law. Applicable rights and response periods require legal confirmation.

Cookies

The client draft describes necessary cookies and optional analytics cookies that would load only after permission is given. The live website’s actual cookies and analytics configuration must be checked; no analytics consent should be requested unless such non-essential technology is enabled.

Children

The client draft says the website and services are intended for researchers, professionals, organisations and adult consumers, and that programme datasets about children are handled only in de-identified form. This statement and the underlying safeguards require approval.

External links

The website may link to journals, databases and other external sites. CERA Medical is not responsible for the content or privacy practices of those sites.

Changes

The client draft proposes revising the terms when services or applicable law change and notifying clients by email where a change materially affects information already held.

Contact

Questions and information requests may be sent to CERA Medical, 2nd Floor, BIC, C2 Building, PAF-IAST, Mang, Haripur, Pakistan, at theceramedica@gmail.com.