Privacy Policy

Bio-Robotix ("we", "us", or "our") operates the bio-robotix.com website and associated services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or interact with our platform. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

1.1 Information You Provide Directly

• Contact and enquiry data — name, email address, organisation, phone number, and message content submitted through our contact, demo-request, or pre-order forms.
• Pre-order and reservation data — deployment details, intended use-case, and any additional information you voluntarily provide when reserving a deployment slot.
• Correspondence — records of communications you send to us by email or through the Service.

1.2 Information Collected Automatically

• Usage data — pages visited, time spent, referring URL, browser type, device type, and operating system.
• Log data — IP address, access timestamps, and server-side request logs retained for security and operational purposes.
• Analytics — we use Google Analytics 4 (GA4) to understand aggregate site usage. GA4 data is subject to Google's own privacy policy. Analytics are only activated after you provide consent where required by applicable law.

1.3 Cookies and Tracking Technologies

We use strictly necessary cookies to operate the Service and, with your consent, analytics cookies via GA4. You may withdraw consent at any time through your browser settings or our cookie preference controls. We do not use advertising or cross-site tracking cookies.

• To respond to your enquiries, demo requests, and pre-order reservations.
• To communicate updates about our products, research, and deployment timelines where you have opted in.
• To improve the functionality, content, and security of the Service.
• To comply with applicable legal obligations and enforce our Terms of Use.
• To detect, prevent, and investigate fraud, abuse, or security incidents.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

Where the EU General Data Protection Regulation (GDPR) or the UAE Personal Data Protection Law (PDPL — Federal Decree-Law No. 45 of 2021) applies, we process your personal data on the following legal bases:

• Consent — for analytics cookies and optional marketing communications.
• Legitimate interests — for security monitoring, fraud prevention, and improving the Service, where these interests are not overridden by your rights.
• Contract performance — to process pre-order reservations and demo requests you initiate.
• Legal obligation — to comply with applicable laws and regulations.

We may share your information with:

• Service providers — third-party vendors who assist us in operating the Service (e.g., hosting, analytics, customer messaging), bound by confidentiality obligations.
• Legal and regulatory authorities — where required by law, court order, or to protect the rights, property, or safety of Bio-Robotix, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.

Bio-Robotix is headquartered in the United Arab Emirates. If you access the Service from outside the UAE, your information may be transferred to and processed in the UAE or other jurisdictions. Where required, we implement appropriate safeguards (such as standard contractual clauses) to protect transferred data.

We retain personal data only as long as necessary for the purposes described in this policy or as required by law. Contact and enquiry records are typically retained for up to three years. Analytics data is retained in accordance with Google's default GA4 retention settings (up to 14 months for user-level data). You may request deletion at any time (see Section 8).

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include TLS encryption in transit, access controls, and regular security reviews. No method of transmission over the internet is completely secure; we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request erasure of your data ("right to be forgotten").
• Object to or restrict certain processing activities.
• Withdraw consent at any time (without affecting the lawfulness of prior processing).
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately.

The Service may contain links to third-party websites, including our public simulation tools hosted on Heroku and Streamlit. These sites operate under their own privacy policies. We are not responsible for their content or data practices.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Service after changes are posted constitutes your acceptance of the revised policy. For material changes, we will make reasonable efforts to notify you.

If you have questions or concerns about this Privacy Policy or our data practices, please contact: