Privacy Policy (GDPR & CCPA Aligned)
1. Introduction:
Packgene is a biotechnology CRO/CDMO providing services including AAV, lentivirus, plasmid, mRNA-LNP design, manufacturing, and QC testing. We are committed to protecting personal data and complying with applicable laws including the GDPR and CCPA.
2. Scope:
This policy applies to:
• Clients and their representatives
• Partners and vendors
• Website visitors and platform users
• Clients and their representatives
• Partners and vendors
• Website visitors and platform users
3. Categories of Data Collected:
3.1 Personal Information
• Name, title, company
• Contact details (email, phone, address)
• Contact details (email, phone, address)
3.2 Business & Project Information
• Project requirements and technical data
• Contracts, orders, and communications
• Contracts, orders, and communications
3.3 Technical Data
• IP address, device and browser information
3.4 Sample & Research Data
• Sequence data, experimental and QC data
We do not intentionally collect sensitive health or biometric data.
4. Purpose of Processing:
We process data for:
• Contract performance
• Service delivery
• Customer support
• Quality improvement
• Legal compliance
• Legitimate business interests
• Service delivery
• Customer support
• Quality improvement
• Legal compliance
• Legitimate business interests
5. Legal Basis (GDPR):
• Contractual necessity
• Legitimate interests
• Legal obligations
• Consent (where applicable)
• Legitimate interests
• Legal obligations
• Consent (where applicable)
6. Data Sharing:
We do not sell personal data. Data may be shared with:
• Internal teams
• Service providers (logistics, IT)
• Regulatory authorities
• Authorized parties
• Service providers (logistics, IT)
• Regulatory authorities
• Authorized parties
7. International Transfers:
Data may be transferred internationally with safeguards such as Standard Contractual Clauses (SCCs).
8. Data Security:
We implement:
• Encryption
• Access controls
• Staff training
• Secure IT infrastructure
• Access controls
• Staff training
• Secure IT infrastructure
9. Data Retention:
Data is retained only as long as necessary and then deleted or anonymized.
10. Your Rights:
10.1 GDPR Rights
• Access
• Rectification
• Erasure
• Restriction
• Portability
• Objection
• Rectification
• Erasure
• Restriction
• Portability
• Objection
10.2 SCCPA Rightsh Data
• Right to Know
• Right to Delete
• Right to Opt-Out of Sale
• Non-Discrimination
• Right to Delete
• Right to Opt-Out of Sale
• Non-Discrimination
We do not intentionally collect sensitive health or biometric data.
11. Confidentiality & IP:
All client materials are treated as confidential and used only for agreed purposes. IP ownership is governed by contract.
12. Updates:
This policy may be updated periodically and published on our website.
13. Contact:
Email: info@packgene.com
Address: 9310 Kirby Dr, STE 900 Houston Texas 77054
Address: 9310 Kirby Dr, STE 900 Houston Texas 77054
14. Updates:
This policy forms part of our broader data protection framework alongside NDAs and MSAs.
Effective Date: 2026-01-01
Version: V2.0
Version: V2.0