Privacy Policy

Effective Date: 13 October 2026

1. About Pluvia Diagnostics

Pluvia Diagnostics is a distributor of in vitro diagnostic (IVD) devices and related laboratory products in Syria. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website, www.pluvia-diagnostics.com, or contact us through the website.

For the purposes of this Policy, “we”, “us”, and “our” refer to Pluvia Diagnostics.

2. Information We Collect

When you use the contact form on our website, we collect the information you choose to provide, which includes:

  • Your name.
  • Your email address.
  • The content of your message.

When you visit our website, certain technical information may also be collected automatically, including your IP address, browser type, operating system, requested page, referring page, language, and the date and time of your visit. This information may be recorded in server and security logs.

Please do not include sensitive personal information or patient-identifiable medical information in the contact form.

3. How We Use Your Information

We use the information collected through our website to:

  • Respond to your inquiries and messages.
  • Communicate with you regarding your request.
  • Maintain the security and proper operation of our website.
  • Monitor and understand website usage through analytics tools.
  • Comply with applicable legal obligations and respond to lawful requests.

We do not use contact-form information for marketing purposes unless the applicable legal requirements have been met.

4. How We Store and Share Information

Messages submitted through the contact form are delivered to our email system and are accessible to the website administrator. The information may be retained in email records for as long as reasonably necessary to respond to the inquiry, maintain relevant business records, or comply with legal obligations.

We may rely on third-party service providers for website hosting, security, backups, and website analytics. These providers may process technical information as necessary to provide their services.

We do not sell personal information.

5. International Data Transfers

Our website hosting server is located in France, and website backups are stored in Lithuania. As a result, certain technical information and website-related data may be processed or stored outside Syria.

Where personal information is transferred internationally, we will comply with applicable legal requirements, including obtaining the consent of the individual or their authorized representative where required by applicable Syrian law.

6. Cookies and Analytics

Our website uses Google Analytics and Google Tag Manager for website analytics and related technical functions. Cloudflare may also be used for website security and related services.

These technologies and services may process technical information, such as IP addresses, browser information, and website usage data. The information collected and the applicable retention periods depend on the service and its configuration.

Google Analytics data retention is configured for 14 months. Server logs are retained for 30 days. Other providers may apply their own retention periods.

You may be able to manage or delete cookies through your browser settings. Blocking cookies may affect certain website functions. Please note that browser settings do not necessarily prevent all forms of data collection by third-party services.

7. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy or as required by applicable law.

In particular:

  • Server logs are retained for 30 days.
  • Google Analytics data retention is configured for 14 months.
  • Contact-form messages are retained in email records as necessary for handling inquiries and maintaining relevant records.

Information may be retained for longer where required by law or reasonably necessary to address disputes or protect our legal rights.

8. Information Security

Our website operates over HTTPS. We use technical and organizational measures intended to protect information against unauthorized access, loss, misuse, or alteration. Security measures include protections against spam, brute-force attacks, SQL injection, and cross-site scripting (XSS).

Website backups are performed automatically each month and are stored in compressed form. No method of transmitting or storing information can be guaranteed to be completely secure.

If a personal data breach occurs, we will take appropriate steps to investigate, contain, and address the incident and comply with applicable notification requirements.

9. Your Rights

Subject to applicable law and any relevant legal conditions or exceptions, you may have the right to request access to your personal information or request its correction or deletion.

Requests may be subject to verification of your identity and the legal basis for the request. Under the applicable Syrian requirements identified for this Policy, requests for access to personal data are to be decided within five business days of registration, and a refusal must be reasoned.

Certain information may need to be retained where required by law or necessary for legitimate recordkeeping or legal purposes.

To submit a privacy-related request, please contact us using the email address provided in Section 10.

10. Personal Data Breaches

In the event of a personal data breach, the applicable Syrian requirements identified for this Policy include notifying the competent authority without delay and providing the required breach information within 72 hours of becoming aware of the breach.

The required information may include the nature and cause of the breach, the approximate number of affected records and individuals, potential consequences, measures taken or proposed, and relevant supporting documentation.

The applicable requirements also provide for informing the affected individual within three business days of the notification, as specified by law. The exact steps and notifications will be handled in accordance with the applicable legal requirements.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our website, services, or applicable legal requirements. The effective date at the beginning of this Policy indicates when it was last updated.

12. Contact Us

For questions about this Privacy Policy or to submit a privacy-related request, please contact:

Pluvia Diagnostics
Email: [email protected]
Website: www.pluvia-diagnostics.com
Telephone  +963 11 216 7722
Fax: +963 11 216 7744