Privacy Policy

GoPath Diagnostics, Privacy Policy

Effective Date: August 10, 2012 | Revised: December 4, 2024

Below is information about how GoPath Diagnostics Corporation collects, uses, and discloses personal information.
This Privacy Policy outlines how GoPath Diagnostics Corporation and its subsidiaries and affiliates (“GoPath,” “we,” “our,” or “us”) collect, use, and disclose personal information obtained through our websites and services, as described in Section 2 below. It also excludes any personal information collected and processed on behalf of our clients in the role of a processor or service provider, as such information is subject to our clients’ privacy policies. Additional information for California residents regarding how we may use and disclose their personal information can be found in our Notice at Collection and in Section 17.B below.

1. Personal Health Information
GoPath may collect, share, and process personal health information in specific contexts, particularly concerning research, such as human subject research or scientific studies. If you participate in GoPath-sponsored or GoPath-supported research, you will receive an informed consent form that details how your personal health information will be collected, used, and shared for research purposes.

2. Who does this Privacy Policy apply to?
Unless specified otherwise, this Privacy Policy applies to the personal information we collect about:

Individuals who access or use our websites and online services (collectively, the “Services”) or whose personal information we otherwise receive in providing the Services;
Individuals who register for our Services, such as by creating an account;
Our current, former, and prospective clients and business partners;
Attendees and participants at events or conferences we host or sponsor;
Individuals who subscribe to receive news, information, or marketing communications from us; and
Other individuals who use our Services or communicate or interact with us.

Not Covered by this Privacy Policy
This Privacy Policy does not apply to:

Samples and associated personal information we receive from institutional clients, acting as a data processor, or any information generated from such samples;
Samples and associated personal information from U.S. participants in clinical or research studies sponsored by GoPath, or any information generated from such samples;
Samples and information related to specific laboratory and testing services, or any other information subject to alternative privacy regulations; and
Job applicants, candidates for employment, employees, and non-employee workers, whose personal information is subject to different privacy notices provided in the context of their employment or working relationship with GoPath.

3. What personal information do we collect about you?
Generally, we collect personal information voluntarily. However, if you choose not to provide certain mandatory information, you may be unable to access some Services, or we may be unable to fully respond to your inquiries.

Information We Collect Directly
We collect information directly from individuals who use our Services, register for events, or otherwise interact with us. For example, we may collect the following types of information:

Registration and Account Information: When you create or update a user account, we may collect your name, job title, employer or affiliation, contact details, and, if applicable, certain health-related information.
Communications: If you complete a “contact us” form or otherwise reach out, we collect your contact details and maintain a record of communications, including emails and calls. We may also retain reviews, comments, and other submissions, including the date, time, and location of submission.
Marketing, Contests, and Promotions: If you sign up for news, updates, or promotions, we may collect your name, email address, and other business contact details. We may also collect information when you participate in events, promotions, surveys, or feedback activities.

Information Related to Your Usage and Activities
We collect or derive information about your activities through automated means (e.g., cookies, pixel tags) when you use our websites, Services, or interact with us. This may include:

Device and Browsing Information: Depending on which websites you visit, we and our third-party providers may use cookies, pixels, tags, log files, and other technologies to collect information about your device and browser, such as IP address (and associated location), MAC address, login credentials, browser type and version, time zone, screen resolution, operating system, device model, and the URL from which you navigated to our website.
Activity and Usage Data: We collect data on pages you visit, links you click, searches you perform, and other activities on our website, along with date and time stamps. We may also collect technical information to help us identify your device for fraud prevention, diagnostics, and similar purposes. (See Section 6 for details on tracking related to website interactions.)
Location Information: We may collect or derive general location information, such as from your IP address.
Other: For security purposes, we may use tools to monitor our premises, which may lead to the collection of recordings of visitors. Additionally, if you contact customer support or participate in public events or webinars, these interactions may be recorded.

Information We Collect from Third Parties
We may receive personal information about you from third parties we work with, such as service providers (e.g., for fraud detection, identity verification, or security), social networks, advertising networks, analytics providers, event sponsors, joint marketing partners, public records, and affiliated companies. Examples include:

Social Media Platforms: Information related to your posts or interactions with us on social media. For details on how these platforms use and disclose your information, consult their privacy policies.
Advertising and Analytics Providers: Information on your interactions with our ads, marketing, or other content.
Data Brokers and Public Records: Demographic data, updated professional or contact details, and lead or prospect information from public records, data brokers, or affiliated companies.

4. For which purposes and on what legal basis do we use and process your personal information?
We collect, use, disclose, and otherwise process personal information for the following commercial and business purposes. Where applicable, we have included the legal basis for processing under the General Data Protection Regulation (GDPR) and similar laws.

Providing Support and Services: We process your personal information to provide and manage our Services, respond to your inquiries, fulfill orders, process payments, and deliver customer support. This processing is necessary for the performance of our contract with you and for our legitimate interests in maintaining effective customer service.
Analyzing and Improving Our Business: To understand how users access and use our Services, we may conduct surveys, evaluate our Services, and engage in research and analysis. These activities help us improve our offerings and are conducted based on our legitimate business interests and, where required, with your consent.
Personalizing Content and Experiences: To enhance your experience on our websites, we may tailor the content we display, provide location-based customization, and offer personalized help. This processing is based on our legitimate interests in improving user experience, and where necessary, on your consent.
Advertising, Marketing, and Promotions: We use personal information to send relevant ads, evaluate the effectiveness of our ad campaigns, and provide newsletters or offers. This also includes managing promotions and contests. These activities are based on our legitimate interests and, where required by law, on your consent.
Event Planning and Management: For events we host or sponsor, we may use personal information to facilitate registration, attendance, and follow-up communication. This processing is necessary for the performance of our contract with you and supports our legitimate business interests.
Market Research and Surveys: To conduct surveys and gather feedback on customer preferences, we process personal information to better understand and respond to customer needs. These activities are undertaken based on our legitimate interests, and where necessary, with your consent.
Securing and Protecting Our Business: We may process personal information to secure our business operations, prevent fraud, monitor unauthorized access, and ensure network security. These activities are based on our legitimate interests in safeguarding our operations and, where required, on legal compliance.
Defending Our Legal Rights: To manage and respond to actual or potential disputes or legal claims, we may process personal information to establish, defend, or protect our rights or interests. This is based on our legitimate interests and compliance with applicable legal requirements.
Auditing, Reporting, and Internal Operations: For audits, compliance assessments, and core business operations (such as recordkeeping and legal functions), we process personal information to meet our legitimate business interests and comply with regulatory requirements. This may also include activities related to mergers, acquisitions, or restructuring.
Complying with Legal Obligations: We may process personal information to fulfill legal requirements, respond to subpoenas, court orders, and regulatory requests, based on our legitimate interests and compliance with applicable laws.

5. Will we share your personal information with third parties?
We may disclose the personal information we collect as outlined below:

Vendors and Service Providers: We may share information with third-party service providers who assist us with services such as website hosting, payment processing, and postal services.
Business Partners: We may share information with business partners to fulfill services you request or authorize, in line with this policy and our business practices.
GoPath Affiliates and Subsidiaries: We may disclose information to our affiliates or subsidiaries, who will use and disclose it per the principles of this Privacy Policy.
Corporate Transactions and Restructuring: In the event of a corporate reorganization, merger, sale, joint venture, transfer, investment, or similar transaction involving our business, or as part of bankruptcy or similar proceedings, we may disclose personal information as part of the due diligence, negotiation, or implementation process.
Legal Obligations: We may disclose information as required or permitted by law, including to respond to legal requests from public and government authorities (including those outside your country of residence), comply with court orders or legal processes, protect the rights, property, or safety of GoPath, our users, or others, and enforce our Website Terms of Use or other agreements.
Protection Against Harm: We may share information when we believe it is necessary to investigate, prevent, or act regarding suspected illegal activities, fraud, potential threats to the safety of any person, or violations of our Website Terms of Use, or as evidence in litigation in which we are involved.
Advertising and Analytics Partners: With your consent where required, we may share information with third parties providing advertising, campaign measurement, analytics, and related services. They may use this information to deliver relevant ads, measure campaign effectiveness, or better understand user interactions with our Services. These third parties may also combine information collected from us with data gathered from other websites, apps, and services to make inferences about your interests, helping tailor advertising and content across multiple platforms.
With Your Consent: We may disclose personal information to third parties for other purposes with your consent or upon your request.

Aggregate and De-identified Information
We may collect, use, disclose, and otherwise process aggregated and de-identified information to assess, improve, and develop our business, products, and Services; create industry benchmarking reports; and for research, marketing, and analytics purposes. Where we handle de-identified information, we maintain its de-identified status and do not attempt to reidentify it, except as allowed by applicable privacy laws.

6. How do we use cookies (and other tracking technologies)?
Our websites may use first-party and third-party cookies, pixel tags, plugins, and other tools to operate securely, ensure functionality, and support necessary website operations (“necessary cookies”). In some cases, we also use these tools to collect device, usage, and browsing information to personalize and enhance your experience, measure the effectiveness of our advertising campaigns, and deliver relevant ads on both our websites and third-party sites.

Cookies: A cookie is a small file placed on your device’s hard drive via your browser, primarily for record-keeping. Some cookies help with website navigation, speed up logins or track your activity for enhanced website functionality. While most browsers automatically accept cookies, you can modify your browser settings to block cookies. The Help section of your browser toolbar typically provides instructions on how to prevent new cookies, receive alerts for new cookies, or disable cookies altogether. Note that certain features may not work properly if cookies are disabled.
Pixel Tags: Pixel tags (also known as web beacons or clear GIFs) are used to track user interactions on our websites (including email activity), assess marketing campaign effectiveness, and compile usage statistics. We and our service providers may also use pixel tags in HTML emails to track response rates, identify when emails are viewed, and determine if emails are forwarded.
Log Files: Most browsers automatically collect certain information, including IP address, device type, screen resolution, operating system version, and browser type and version, which is stored in log files.
Third-Party Analytics: Our websites may use automated devices and third-party applications (e.g., Google Analytics) that use cookies and similar technologies to collect, analyze, and report information about site usage, activities, and trends.

Managing Your Cookie Preferences
You can manage cookie preferences for our websites and opt out of specific cookies through several methods:

Cookie Settings: On many of our websites, you can review or modify cookie preferences using the site’s cookie settings.
Browser Controls: You can block or disable cookies through your browser settings on the device you’re using. However, please note that some website features may not be available or function correctly if you block or disable cookies.
Do-Not-Track Signals: Our websites do not respond to Do Not Track signals from browsers. If you wish to disable cookies on our websites, please adjust your browser settings instead of relying on the Do Not Track feature.

Please be aware that cookie preferences are browser- and device-specific, so you will need to set preferences for each device and browser you use. If you delete cookies, your settings may be cleared and need to be reconfigured. Websites using only necessary cookies do not include a cookie settings manager.

7. How do we use third-party cookies from third-party companies or third-party ad networks?
We may collaborate with third-party ad networks, channel partners, measurement services, and similar entities (“third-party ad companies”) to support our advertising and marketing efforts. These third parties may collect information, such as browsing data, device ID, and other online identifiers, through cookies, pixel tags, and other tracking technologies (“targeting cookies”) on certain pages of our websites as well as on third-party websites and online services. The information collected helps deliver relevant ads and content for GoPath and other companies and allows us to assess and improve the effectiveness of these campaigns.

Additionally, we may share certain hashed customer list information, like email addresses (“Custom Lists”), with third parties (e.g., Facebook, LinkedIn, Google) to enhance ad targeting within their platforms, reaching individuals with similar interests. These third parties use the data solely to help us target ads and enforce their terms but are not permitted to use or share our data with other third-party advertisers.

Your Preferences
For websites using targeting cookies, you may review, adjust, or opt out of third-party advertising tags and cookies via our Cookie Settings manager, as explained in Section 6.
To learn more about third-party ad companies’ data collection practices and “opt-out” options, visit the following resources based on your location:

8. Will we transfer your personal information internationally?
GoPath is based in the United States. If you are located outside the U.S.—for example, in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland—and submit personal information to GoPath, that information will be transferred to the U.S. and other jurisdictions where we or our vendors operate. The data protection laws in these jurisdictions may differ from those in your country of residence. GoPath takes steps to ensure that your personal information is protected with appropriate safeguards.

For additional details about the mechanisms used to transfer your personal data outside the EEA/UK, please contact us as described in Section 16, Contact Us.

9. Which rights do you have for the processing of your personal information?
Subject to applicable law, GoPath provides several options for individuals to access, amend, and manage their personal information and preferences, as described below:

Marketing Preferences: You can opt out of receiving marketing emails by using the unsubscribe link included in each marketing email we send. If you opt out of marketing communications, we may still send non-promotional emails, such as those related to your account or ongoing business relationship, as allowed by law.
Cookie Settings: On websites with targeting cookies, you can review, update, or opt out of third-party advertising cookies using our Cookie Settings manager, as described in Section 7.
Access, Amendment, and Deletion: You may request to review, amend, delete, or otherwise exercise your rights under applicable privacy laws regarding the personal information we hold, subject to certain legal limitations. To submit a request, please use our Contact page or email us at pr@gopathdx.com. Please note that we may retain copies of information that you have updated, modified, or deleted in our business records, as permitted or required by law. Access to or correction of your personal information is subject to legal restrictions and the availability of such information. Additionally, we may take reasonable steps to verify your identity before granting access or making corrections.

We may not always be able to fulfill your request, for instance, if doing so would violate confidentiality obligations, if legal requirements allow us to address the request differently, or if relevant exemptions apply to some or all the personal information in question.

Additional Information for Specific Jurisdictions
GoPath respects individual privacy rights under all applicable privacy laws. Additional information for individuals in specific jurisdictions is available at the end of this Privacy Policy, including:

EEA/UK: If you are in the EEA or UK, please see Section 17.A for details on data subject rights under the GDPR and UK Data Protection Act.
Other U.S. States: If your personal information is subject to privacy laws in U.S. states (e.g., California, Connecticut, Colorado, Delaware, Iowa, Montana, Tennessee, Texas, Utah, Virginia), please see Section 17.B.

10. Do we include links to other websites and third-party programs?
Our websites may contain links to other websites for your convenience. However, we do not have control over these third-party websites and cannot be responsible for the protection and privacy of any information you provide while visiting them. These websites are not governed by this Privacy Policy. We encourage you to review the privacy policies applicable to any third-party website you visit to understand their practices and safeguards.

11. What data security measures do we apply to protect your personal information?
We have implemented technical and organizational security measures to protect the personal information we collect from unauthorized access or disclosure. While we strive to safeguard your data, complete data security cannot always be guaranteed. If you believe that the security of your interactions with us has been compromised (e.g., if you suspect unauthorized access to your account), please notify us immediately at pr@gopathdx.com.

Please avoid sending any health information or other sensitive personal information via email or through our external website. For information related to our services, such information should be submitted through our contact page.

12. How long do we retain your personal information?
We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. For instance, we may retain personal information for extended periods to meet regulatory obligations, comply with professional indemnity requirements, or if we believe it is necessary to establish, defend, or protect our legal rights and interests or those of others.

13. What is the minimum age for individuals whose personal information we process?
Our websites are intended for use by adults. We do not knowingly collect or process personal information from children under the age of sixteen (16). If we become aware that we have inadvertently collected such information, we will take prompt steps to delete it.

14. How can you access our Terms of Use?
By visiting our websites, you agree that your visit and any privacy-related disputes are governed by this Privacy Policy and our Terms of Use. This includes limitations on damages, dispute resolution, and the application of Illinois state law, United States. Our Terms of Use can be accessed at: https://gopathdx.com/terms-of-use.

15. Revisions
This Privacy Policy is current as of the Effective Date listed above. We may update this Privacy Policy periodically, with all revisions posted on this web page. If we make material changes that impact our handling of previously collected personal information, we will strive to provide notice in advance of such changes, either by highlighting the update on our website or by notifying you at the email address we have on record. We encourage you to check our website periodically for the latest version of our Privacy Policy.

16. Contact Us
If you have any questions or concerns related to this Privacy Policy or our information practices, please email us pr@gopathdx.com.
You may also contact us via postal mail at:
GoPath Diagnostics
Attn: Marketing Department
1000 Corporate Grove Drive
Buffalo Grove, Illinois 60089, USA

17. Additional information for individuals in certain jurisdictions
A. GDPR Rights – EEA/UK
If the GDPR or the UK Data Protection Act applies to GoPath’s processing of your personal information, you may have the following rights, subject to applicable law:

Access: To confirm whether we process your personal information and, if so, to request access to it. This includes details such as the purposes of processing, categories of personal information, and recipients or categories of recipients who have received or will receive the information. You may request a copy of the personal information we process. For additional copies, we may charge a reasonable fee based on administrative costs.
Correction: To request correction of any inaccurate personal information we hold about you.
Deletion: To request deletion of your personal information under certain circumstances, unless continued processing is required by law.
Restriction: To request restricted processing of your personal information if you dispute its accuracy, believe the processing is unlawful, otherwise object to its processing, or if GoPath no longer needs the information but requires it for a legal claim.
Data Portability: To receive copies of your personal information in a structured, commonly used, and machine-readable format for reuse elsewhere, or to request that we transfer it to a third party of your choice, under certain conditions.
Objection to Processing: To object at any time to processing your personal information based on our legitimate interests. We will cease processing unless we can demonstrate compelling, legitimate grounds that override your rights and freedoms or if processing is necessary for contractual obligations.
Direct Marketing Preferences: To change how we contact you for direct marketing, including requesting that we do not transfer your personal information to unaffiliated third parties for direct marketing or other purposes.
Safeguards for International Transfers: To obtain a copy of, or reference to, the safeguards under which your personal information is transferred outside the EU/EEA/UK. We may redact data transfer agreements to protect commercial terms.
Right to Complain: To file a complaint with your national data protection regulator if you believe your personal information is not being processed in compliance with the GDPR or UK law.
Withdraw Consent: To withdraw your consent for processing (where processing is based on consent). Upon withdrawal, GoPath will stop processing your personal information unless there is another lawful basis to do so. Withdrawal does not affect the lawfulness of processing conducted before consent was withdrawn.

You may submit requests related to your data through our contact page.

Please note that we may rely on applicable exemptions under EU, Member State, or UK law to deny part or all of your request. If we do so, we will inform you of this in our response.

B. Residents of Certain US States
This section provides additional information on how we process personal information for U.S. residents in states with specific data privacy laws, such as California, Connecticut, Colorado, Delaware, Iowa, Montana, Tennessee, Texas, Utah, and Virginia. This section does not apply to publicly available information provided by state or federal governments or to other personal information exempt under applicable data privacy law.
i. What Information Do We Collect About You?
Section 4 of this Privacy Policy details the types of personal information we collect, the purposes for which we collect and use it, and the sources of such information. Section 5 provides further information about the types of third parties with whom we may share personal information.
The categories of personal information we collect about U.S. residents, and the types of third parties to whom we may disclose this information, may vary depending on the nature of our interactions or relationship with you. Generally, the categories of personal information we collect, and share include:

Identifiers: This may include direct identifiers such as your name, alias, postal address, unique personal identifier, IP address, email address, account name, government identifiers, and other similar information. This information may be shared with service providers, advisors, agents, government entities, law enforcement, affiliates, event organizers, business partners, advertising networks, analytics providers, social networks, internet service providers, operating systems, and others as required by law or directed by you.
Customer Records: This may include information contained in paper or electronic customer records (such as name and contact information) provided for our products and services, including account registrations or service agreements. We may disclose this information to service providers, advisors, agents, government entities, law enforcement, affiliates, and business partners, as well as others as required by law.
Protected Classifications: This may include characteristics such as race, sex, age, and disability (e.g., for providing accommodations for events). This information may be disclosed to service providers, advisors, agents, government entities, law enforcement, affiliates, event organizers, and others as required by law.
Commercial Information: This may include records of personal property, products or services purchased or considered, and other usage history. We may share this information with service providers, advisors, agents, government entities, law enforcement, affiliates, and business partners, among others as required by law.
Internet or Network Activity: This may include browsing history, clickstream data, search history, and usage information regarding interactions with our websites, apps, or ads. This information may be shared with service providers, advisors, agents, government entities, affiliates, advertising networks, analytics providers, social networks, operating systems, and others as required by law.
Geolocation Data: This may include precise location information used to provide certain website features. We may disclose this information to service providers, advisors, agents, government entities, affiliates, and business partners, among others as required by law.
Professional and Employment Information: This may include professional or employment-related information, such as employer(s), position(s), business contact information, and memberships. This information may be shared with service providers, advisors, agents, government entities, affiliates, and others as required by law.
Education Information: This may include information on your education history and may be disclosed to service providers, advisors, agents, government entities, affiliates, and others as required by law.
Audio, Video, and Other Electronic Data: This may include information such as video footage and other similar data, which may be disclosed to service providers, advisors, agents, government entities, affiliates, and others as required by law.
Profiles and Inferences: This may include inferences drawn from personal information to create a profile of your preferences, characteristics, or behaviors, which may be shared with service providers, advisors, agents, government entities, affiliates, and analytics providers, among others as required by law.
Sensitive Personal Information: As an employer or contractor, we may collect certain sensitive information, such as assigned work location or contract details, in the employment context. Additionally, we may process sensitive personal information in the context of HIPAA or scientific research, as described in Section 1. This information may be disclosed to service providers, advisors, agents, government entities, affiliates, and others as required by law.

ii. What categories of personal information may be sold or shared with third parties?
Certain U.S. privacy laws define a "sale" of personal information as disclosing it to a third party in exchange for monetary or other valuable consideration. Additionally, the California Privacy Rights Act (CPRA) defines "sharing" broadly to include making personal information available to third parties for cross-context behavioral advertising. While we do not exchange personal information for monetary compensation, we may disclose certain identifiers and internet activity information (e.g., through third-party cookies and pixel tags on our websites) to third-party advertising companies to help improve and measure ad campaigns and deliver relevant ads to our audience. You can opt out of third-party cookies and tags, except for necessary cookies, by adjusting your settings through our Cookie Preference Manager.

iii. What Privacy Rights Apply to You?
Residents of certain U.S. states may have additional privacy rights, subject to limitations, which can include:

Correction: The right to request correction of any inaccurate personal information, considering the purposes of its processing.
Deletion: The right to request deletion of personal information collected about you, with certain exemptions.
Access: The right to confirm whether we are processing your personal information and to request a copy in a portable, readily usable format.
Limit Uses: For sensitive personal information subject to applicable law, certain residents may have the right to limit its use or disclosure.
Opt-Out: The right to opt out of certain types of processing, such as:
The “sale” of personal information.
Targeted advertising by us.
Any processing for decisions with legal or significant effects.
Appeal: In states like Virginia, you may appeal our decision by contacting pr@gopathdx.com.

Additional Rights for California Residents
California residents have the following additional rights:

Opt Out of Sales and Sharing: The right to opt out of the sale and sharing of personal information. We do not sell or share information about individuals under 16 without consent.
Request to Know/Access: The right to request details about the personal information collected over the prior 12 months, including:
Categories of personal information collected,
Sources of personal information,
Business and/or commercial purposes for collecting or selling,
Categories of third parties to whom we disclosed or shared information,
Categories of personal information disclosed or shared for business or commercial purposes, and
Categories of third parties to whom personal information was sold and the specific types of information sold. California residents can make these requests up to twice every 12 months.
Right to Non-discrimination: California residents have the right not to be discriminated against for exercising their rights under the CCPA.

We will respond to all requests in compliance with applicable privacy laws.

iv. How to Submit a Request Related to Your Personal Information
U.S. residents, or their authorized agents, may submit verifiable requests to GoPath through:

Phone at (855) 467-2849;
Email to the GoPath Privacy Office at pr@gopathdx.com; or
By mail to GoPath Diagnostics, 1000 Corporate Grove Dr., Buffalo Grove, IL 60089.

Authorized agents may also submit requests on behalf of others but must provide proof of authorization, and we may require direct verification of identity and authority from the individual involved.

For more information about our privacy practices, please refer to Section 16, Contact Us.