Privacy Policy

This policy describes how RED BioMed handles information submitted through this website, including the public pages, professional-access workflow, organization qualification application, project-inquiry intake, contact form, laboratory-report lookup, batch-record verification, controlled-document access, and related business communications.

It applies only to the RED BioMed website and services currently deployed. It does not describe systems that are not offered or that may be introduced in the future, and it does not apply to third-party sites reached from links on this site.

RED BioMed collects only categories of information that are used by the workflows currently available on the site. Depending on how a user interacts with the site, the following categories may be collected:

• Account and authentication information, including email address and authenticated session data.
• Organization identity and business information provided during qualification.
• Representative name, business email, role, and business contact information.
• Professional credentials, licenses, registrations, or accreditation records where applicable.
• Intended-use, destination-market, product-interest, and service-interest information.
• Project-inquiry details, including scope, timelines, quantities, and organization context.
• Uploaded qualification and supporting documents attached to applications or projects.
• Declarations and application records associated with a submission.
• Contact-inquiry submissions, including inquiry type, reference (when supplied), and message content.
• Laboratory-report and batch-record lookup identifiers when a lookup is submitted.
• Application-event, submission, and access-log information used for security and audit purposes.
• Basic technical information necessary for site security, delivery, and operation.

Some information is supplied directly by the user (for example, contact-form or application fields). Other information is generated through platform activity (for example, application status changes and access logs). Transient processing may occur when a submitted identifier is compared to available records. Persistent information is stored in the database and, where applicable, in private storage.

Public contact and project forms must not be used to submit:

• Patient medical records or protected health information.
• Passwords, one-time codes, or other authentication credentials.
• Payment-card numbers or full financial-account credentials.
• Government-issued identification documents, unless specifically requested through an authorized qualification workflow.
• Sensitive personal information that is not necessary for the inquiry.

RED BioMed is a business-to-business platform. Users should limit submissions to the business and professional information required for their inquiry.

• Creating, securing, and administering accounts.
• Reviewing organization-qualification applications and access requests.
• Evaluating access eligibility, intended use, and destination markets.
• Reviewing and coordinating project inquiries with appropriate partners.
• Responding to contact inquiries and related follow-up.
• Providing authorized documentation to eligible organizations and users.
• Performing laboratory-report and batch-record lookups on request.
• Maintaining security, integrity, auditability, and legal compliance of the platform.
• Preventing fraud, abuse, and unauthorized access.
• Communicating about submitted applications, inquiries, and projects.

Information may be processed to provide requested services, administer business relationships, protect the platform, comply with applicable obligations, evaluate applications, and pursue legitimate business purposes consistent with the user’s interaction with RED BioMed. Specific legal bases applicable in a particular jurisdiction depend on the nature of the interaction and applicable law.

Information may be shared with the following categories of parties as appropriate:

• Cloud hosting, authentication, database, storage, and security service providers used to operate the platform.
• Notification and transactional-email providers when such services are configured.
• Manufacturers, laboratories, development organizations, packaging or logistics providers, and other project partners when necessary to review or coordinate an authorized project or inquiry.
• Professional advisers such as legal, accounting, or compliance advisers.
• Government authorities or other parties when reasonably necessary to comply with applicable law, legal process, or enforceable requests.
• Parties involved in an authorized corporate transaction, subject to appropriate confidentiality safeguards.

Access to information is intended to be limited according to purpose, authorization, confidentiality expectations, and applicable agreements.

Information submitted through this site and business projects coordinated through RED BioMed may involve organizations, service providers, manufacturers, or partners located in multiple jurisdictions. Users and transaction parties should consider applicable cross-border requirements and project-specific safeguards when submitting information or engaging in international business activity.

Information is retained for as long as reasonably necessary for the business and application purpose for which it was collected, the applicable qualification or project status, contractual requirements, security and audit needs, applicable legal obligations, and reasonable protection against disputes. Retention periods differ by record type and are not published as a single fixed schedule.

RED BioMed uses reasonable administrative, technical, and organizational safeguards designed to protect information submitted through the site. Current safeguards include authenticated access to controlled areas, server-side authorization for sensitive actions, row-level authorization on database records, private storage for uploaded documents, and access logging for controlled downloads.

No system, network, or transmission can be guaranteed to be completely secure. Users should protect their credentials and avoid submitting unnecessary sensitive information through public workflows.

Users and organizations may:

• Review or update account information available in their account area.
• Request correction of information submitted through an application or inquiry.
• Submit a request regarding access, deletion, or restriction for review.
• Ask questions about how information is handled.

Some records may need to be retained for security, audit, contractual, regulatory, or legal reasons and may not be deleted immediately upon request.

The site uses browser storage that is strictly necessary to support authenticated sessions and to remember a completed professional-access acknowledgment for a limited period. These technologies are required for core site functionality.

The site does not, at this time, deploy behavioural advertising trackers or third-party marketing cookies. If optional analytics or non-essential technologies are introduced in the future, this section and any related notice will be updated accordingly.

RED BioMed is a business and professional platform and is not directed to children. Users must not submit information about children through public workflows on this site.

This policy may be updated from time to time. When material changes are published, the “Last updated” date at the top of this page will be revised.

Privacy or legal requests, including questions about how information is handled or requests regarding access, correction, or deletion, may be submitted through the Contact page using the “Privacy or legal request” inquiry type, or by email to info@redbiomed.com.