Privacy Policy

This page explains what data BIOMED collects, how we use it, and how you stay in control — with a focus on blood-test data.

What data we collect

Account data: your name and email when you register.
Questionnaire answers: the areas and answers you choose during the test.
Blood-test data (optional): if you upload a lab PDF, we process the marker values from it. These values are "data concerning health" — a special category of personal data under Article 9 of the GDPR. We process them only with your explicit consent (Art. 9(2)(a) GDPR), which you give with a separate tick box before the health questions and the results upload.
Order and delivery data: when you place an order (address, phone, order contents).

To build personalised supplement recommendations from your test and goals.
To save your tests in your profile (latest and history) so you can access them later.
To process your orders, deliveries and subscriptions.

If you have an account, your test results (including blood-test values and recommendations) are stored in your profile so you can see them as history.
You can delete any test at any time from the "My account" page. Deletion is permanent and removes the data from your profile.
The data is kept until you delete it from your profile or close your account.

The “Explain my results” feature is optional and runs only after your explicit consent. The explanation is generated by an established AI model (e.g. Google Gemini), configured by our team with instructions built on recognised scientific and regulatory sources — EFSA, PubMed, Cochrane Library, the World Health Organization and Examine.com. The explanation is for educational purposes only and is not medical advice. If you don’t enable the feature, nothing is sent to the AI service.

The manufacturer — Novogenia GmbH, Austria: your name, delivery address and the formula of your protocol, to produce and deliver your order. Blood-test values are not shared.
Courier services (Econt, Speedy, Pigeon, DHL) — your name, phone and address, to deliver your order.
A payment provider (Revolut) — for card payments.
A technical service provider for automated processing (Anthropic) — the photos of your results, only to read the values automatically; they are not stored outside our system.
An AI provider (e.g. Google Gemini) — only if you use the AI explanation.
We do not sell your personal data.

You have the right to access, correct and delete your data, and to withdraw your consent at any time.
You can delete tests yourself from your profile, and your whole account from "My account" or biomed.bg/delete-account.
For GDPR requests (access, rectification, portability, objection) and for complaints, contact us at office@biomed.bg. You also have the right to complain to the Bulgarian Data Protection Commission (cpdp.bg).

This is a plain-language summary for information only and is not legal advice.