This policy explains what GenoStock collects, why, and what we deliberately do not collect.
GenoStock tracks stock: items, batches, expiry dates, quantities, storerooms and movements. It is not a clinical system. We do not ask for, and you should never enter, patient names, identifiers, diagnoses or any other patient-identifiable information.
We collect only what the platform needs to work.
To run your workspace, keep an audit trail of stock movements, match buyers with verified suppliers, bill your subscription, answer your support requests and protect the platform against misuse.
Your stock data is visible to your own organisation. Suppliers see only what you deliberately share: the content of a request or an order, not your wider inventory. Access rules are enforced on our servers, not merely hidden in the interface.
We use infrastructure providers for hosting, database, authentication and email delivery. They process data on our instructions only and are bound by confidentiality obligations.
Operational and commercial records are kept while your account is active and for as long as needed for accounting, audit and legal purposes. Support tickets are kept for two years. You can request deletion of data we are not required to retain.
You can ask for a copy of your personal data, ask us to correct it, or ask us to delete it where no legal duty requires us to keep it. Write to us and we will respond within thirty days.
Traffic is encrypted, access is scoped by role and organisation, and sensitive supplier details such as licence and tax numbers are restricted to the supplier and our platform administrators.
To exercise any of these rights, contact us and a ticket will be opened for your request.
