Privacy Policy

Privacy Notice

We encourage you to review our Privacy Notice carefully, as it outlines how Codix Bio handles your personal data, your rights, and our responsibilities. This notice applies to your interactions with Codix Bio, including our website and any digital or offline services we provide.

Website Policy

This Privacy Policy explains how Codix Bio ("Codix", "we", or "us"), located at Sagamu/Benin Expressway, Ilisan/Ikenne Remo, Ogun State, Nigeria, collects and processes your personally identifiable information ("Personal Information"). This may include data that directly or indirectly identifies you, either on its own or combined with other data, through your engagement with our website (www.codixbio.com), mobile applications, or any of our services (both online and offline).

As the Data Controller, Codix Bio determines the reasons and methods for processing your personal information and is responsible for ensuring your privacy rights are respected in line with this policy.

Where needed, we will provide you with additional, specific privacy notices for purposes not covered here—such as recruitment, employment, vendor management, or patient support services.

Please note: if you navigate to any third-party websites via links on our site, their own privacy policies will apply. Codix Bio does not endorse or take responsibility for the privacy practices or content on external sites.

By using our services, you acknowledge and accept the terms of this Privacy Policy. Protecting your personal information is a priority for us, and we encourage you to read this notice in full.

For questions about how we handle your personal data or anything in this policy, please visit our Contact Us section.

This Privacy Policy may be updated occasionally. Please check back periodically to stay informed of any changes.

What Personal Information do we collect and Why?

You can access most of our products without registering. However, depending on how you interact with us, we may collect the following types of personal information: Information You Provide Directly

• Contact or Support Inquiries

  When contacting us via forms, email, or social media, we may collect your name, email, phone number, message content, and potentially your social media profile information. This data is used strictly to respond to your inquiries or provide support. The legal basis for this processing is fulfilling our contractual obligation to you.

• Newsletter Subscription

  To receive our newsletters, we collect your name, email, and optionally postal address. If you consent, we may also analyze how you interact with newsletters to personalize future communication. The legal basis for this is your consent.

• Tracking and monitoring adverse events:

  Codix Bio is legally obliged to inform the appropriate regulatory authorities about undesirable side effects and interactions, the lack of effectiveness of its RDTs, quality complaints and / or other aspects related to the safety or quality of our products. If you provide us with information about Codix Bio products (e.g. via our website), we will evaluate and review your information (which may include information about your state of health, side effects and, if applicable, your name). For this purpose, we may also contact you if you have any questions. Codix Bio is also legally obliged to report significant side effects to the responsible health authorities, whereby we only pass on your information in pseudonymous form so that no information that directly identifies you is passed on. We can also share this information with other Codix Group companies, if they are themselves obliged to report to the health authorities responsible for them.

The legal basis for the processing of your Personal Information is the fulfillment of our legal obligations or the safeguarding of our legitimate interests; which consist in particular of ensuring high safety and quality standards for Codix Bio products; or your consent.

Information that is collected automatically

1. Social Media Listening:

   We may also collect Personal Information that you made publicly available on public social media platforms (including blogs, forums etc.), related to Codix Bio, our products, and more in general about RDTs and diseases. This activity, called "social media listening", is based on our legitimate business interests, for example to (i) have a better understanding of how certain key audiences like healthcare professionals or patients experience certain diseases or react to the use of Codix Bio products, (ii) have a better understanding of Codix Bio's reputation as well as other market trends, (iii) identify key-stakeholders, in particular bloggers and social media influencers, and to initiate contact with them. This may include your Personal Information in the form of comments, messages, blogs, photos and videos, although we will take steps to limit this Personal Information to the minimum necessary and keep it for no longer than necessary for the social media listening activity. If you want to limit further who can see your information, we recommend that you use the privacy settings available to you on such platforms.

   When you share your personal information on a public social media platform, we suggest you also familiarize yourself with the privacy policy of that specific platform as these platforms are not owned and managed by Codix Bio.

2. Website usage analytics

   We may also collect and Process Information about your visit to this website, such as the pages you visit, the website you came from and the searches you perform. We may use such information to help improve the contents of the site and to compile aggregate statistics about people using our site for our internal usage statistics and market research purposes. In doing this, we may install "cookies" or similar technologies that collect the domain name of the user, your internet service provider, your operating system, and the date and time of access. Cookies are created and stored on the user's computer, phone or other devices when the user's browser loads a particular website. Every time the user goes back to the same website, the browser retrieves and sends this "cookie" file to the website. Cookies are useful because they serve the purposes of: helping a website remember your preferences and settings, performing analytics to improve services, serving you relevant content or advertisements and authenticating you on the websites. Cookies do not damage your computer. You can set your browser to notify you when you receive a cookie, this will enable you to decide if you want to accept it or not. You can also refuse cookies altogether. However, if you do not accept our cookies, you may not be able to use all functionalities of our website. When you visit our website, you may be presented with a cookie acceptance banner that allows you to manage the settings and accept or deny the cookies. It is legally permitted to store cookies on your machine if they are essential to the operation of the website, but for all other types of cookies we need your permission to do so. On Codix websites, you have the option to consent to the use of cookies while visiting the website for the first time when a cookie banner will be shown or manage these settings anytime later by clicking the Cookie Settings link in the footer of the website. These cookie settings give you the option of accepting or denying your consent to every category of cookies (except for the necessary cookies which are always active). Please refer to our Cookie Settings to learn more about what types of cookies we use (the purpose they serve, their lifespan, and their provenance) and how you can manage your preferences.

   Certain of our Services, including websites, may use the web analysis service "Google Analytics" from Google LLC, located at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). To optimize them. However, users in Nigeria should be aware that the use of such services may be subject to applicable data protection regulations, including Nigeria's Data Protection Regulation (NDPR) and Nigeria Data Protection Act (NDA). Google uses this information obtained by the cookie to save a profile of which pages you have visited within a session. The information generated by the cookie about the use of the Services is transmitted to Google servers and stored there. In order to increase the security of your Personal Information, we use the "anonymize IP" function or other features provided by Google to keep you anonymous.

   For more information on how IP anonymization works, click here.

   Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide us with other services relating to website activity and internet usage. Codix Bio uses the data received from Google Analytics for business planning, for its own business activities and for marketing measures to better understand how the content of our web services and the associated experience can be improved.

   The legal basis for the processing of your Personal Information when we do website analytics is your consent or our legitimate business interests.

3. Website preferences and security

   We may collect certain information about you like your IP address, unique device identifiers like Media Access Control (MAC) address, computer type (Windows or Mac), browser type and version, screen resolution, operating system name and version. We may also derive your location information from your IP address. We use this information to secure our websites and network systems and to improve our services by recording your preferences, maintaining service levels, diagnosing and troubleshooting technical issues.

   The legal basis for the processing of your Personal Information is our legitimate business interests.

   We may combine, aggregate, or anonymize Personal Information with data we may collect from or about you from other sources, such as public databases, providers of demographic information, joint marketing partners, public social media platforms (data made public by you), and other third parties.

   We may use your data for our business purposes, including audits, monitoring and prevention of fraud, infringement, and other potential misuse of our products , and for modifying our products.

   Also, we may use your Personal Information:

   • If we are required to do so by applicable law, requests from public and government authorities (including court orders, subpoenas, or governmental regulations), even outside your country of residence, in accordance with Nigeria's Data Protection Regulation (NDPR) and Nigerian Data Protection Act.
   • If we need to enforce our terms and conditions.
   • When we believe in good faith that the use of Personal Information is necessary to protect legal rights, the security, or integrity of this website.
   • To protect your safety or the safety of others.
   • As part of any criminal or other legal investigation or proceeding in Nigeria or other countries.
   • To the extent it is reasonably necessary for the development of or to proceed with the negotiation or completion of a corporate or commercial transaction.

   We do not usually collect Sensitive Personal Information for the purposes other than monitoring and management of adverse events where we have a regulatory obligation. You are requested to not disclose your Sensitive Personal Information to us unless we specifically ask for it (e.g., national identification card numbers, information related to racial or ethnic origin, political opinions, religion or philosophical beliefs, health, criminal background, or trade union membership, or biometric or genetic data for the purpose of uniquely identifying an individual).

When and to whom do we disclose your Personal Information?

This Privacy Policy describes the circumstances in which we may share your Personal Information. We may share your Personal Information with other Codix subsidiaries and affiliates worldwide to exchange information and maintain databases in different countries. We also may transfer Personal Information to third parties who act on our behalf, for further processing in accordance with the purpose(s) for which the data were originally collected or may otherwise be lawfully processed, such as provision of products evaluating the effectiveness of our products , marketing, advertising, data management, or technical support.

We will not sell, share, or otherwise transfer your Personal Information to third parties other than those indicated in this Privacy Policy.

During our activities and for the same purposes as those listed in this Privacy Policy, your Personal Information can be accessed by, or transferred to the following categories of recipients on a need-to-know basis to achieve such purposes:

• our personnel (including personnel, departments or other companies of the Codix group).
• our independent agents or brokers, service providers (if any).
• our other suppliers and services providers that provide services and products to us.
• our IT systems providers, cloud service providers, database providers and consultants.
• any third party to whom we assign or novate any of our rights or obligations; and
• our advisors and external lawyers in the context of the sale or transfer of any part of our business or its assets.

We ensure that all these third parties contract with us to only use Personal Information for the agreed upon purpose, and not to sell Personal Information to third parties, and not to disclose it to third parties except as, as required by law, or as stated in this Privacy Policy.

We may disclose your Personal Information to a third party in the event that the business or a part of it and the customer data connected with it is sold, assigned or transferred, in which case we will require the buyer, assignee or transferee to treat Personal Information in accordance with this Privacy Policy.

Also, we may disclose your Personal Information to a third party if we are required to do so because of an applicable law, requests from public and government authorities, health agencies (including court order, subpoena, or governmental regulation), even outside your country of residence; if we need to enforce our terms and conditions; when we believe in good faith that the disclosure is necessary to protect legal rights, the security or integrity of this website; to protect your safety or the safety of others; as part of any criminal or other legal investigation or proceeding in your country or in other countries; or to third parties, advisors, and other entities to the extent reasonably necessary for development of or to proceed with the negotiation or completion of a corporate or commercial transaction.

Your Personal Information may also be processed, accessed, or stored in countries outside Nigeria. Such countries may offer a different level of protection for Personal Information. If we transfer your Personal Information to external companies in other jurisdictions, we will ensure to protect your Personal Information by applying the level of protection required under applicable data privacy laws, including Nigeria's Data Protection Regulation (NDPR) and Nigeria Data Protection Act, by implementing adequate technical and organizational measures.

In the event that your Personal Information is transferred to a service provider based in a third country (countries outside Nigeria that do not have a level of data protection comparable to Nigeria's data protection laws, as determined by a competent data protection authority), Codix Bio ensures the protection of your Personal Information by means of appropriate safeguards, including Standard Contractual Clauses, or other methods in accordance with applicable law. Should these safeguards in the future be revised or found insufficient, we will adopt other applicable instruments to ensure appropriate protections for the transfer of Personal Information and enter into legally binding agreements as required under Nigerian law.

How do we protect your Personal Information?

We have implemented appropriate technical and organizational measures designed to provide an adequate level of security and confidentiality to your Personal Information.

The purpose of these measures is to protect Personal Information against accidental or unlawful destruction or alteration, accidental loss, unauthorized disclosure or access and against other unlawful forms of processing.

How long do we store Personal Information?

We will only retain your Personal Information for as long as necessary to fulfil the purpose for which it was collected or to comply with legal or regulatory requirements.

What are your rights and how can you exercise them?

Whenever we process Personal Information, we take reasonable steps to keep it accurate and up to date for the purposes for which it was collected. We provide you with the ability to exercise the following rights under the conditions and within the limits set forth by applicable laws, including the Nigeria Data Protection Regulation (NDPR) and Nigeria Data Protection Act.

• The right to be informed about what Personal Information we collect about you and how we process it.
• The right to access your Personal Information as processed by us and, if you believe any information is incorrect, outdated, or incomplete, to request its rectification or update.
• The right to request erasure of your Personal Information or restriction of its processing to specific categories where applicable.
• The right to withdraw your consent at any time, without affecting the lawfulness of processing before such withdrawal.
• The right to object to the processing of your Personal Information, in whole or in part. This includes the right to object to direct marketing or the use of your Personal Information for research purposes, subject to legal exceptions.
• The right to data portability, meaning you can request that the Personal Information you provided to us be returned to you or transferred to another entity in a structured, commonly used, and machine-readable format, subject to applicable confidentiality obligations.
• The right to object to automated decision-making, including profiling, if it results in a significant or legal effect. You may request human intervention in such automated processes where they are not based on your consent, authorized by law, or necessary for contractual performance. However, we do not currently engage in fully automated decision-making that results in significant legal effects on individuals.

How frequently do we update this policy?

We keep our Privacy Policy under regular review and update it as and when required. The last version of the policy was last updated on May 9th, 2025.

Contact us

If you wish to contact us regarding how we use your Personal Information or wish to exercise your data privacy rights, please email us at info@codixbio.com or write us to the following address:

Codix Bio Ltd.
Sagamu/Benin Expressway,
Ilisan/Ikenne Remo,
Ogun State,
Nigeria.

In order to facilitate the most efficient answer, please provide the following information:

• Your name;
• Your relationship and interaction with us; and
• Your detailed inquiry or request