Pentasent Privacy Policy

2. Information We Collect

We collect information solely to deliver a connected, high-integrity healthcare discovery and wellness experience. We categorize the collected information as follows:

3. How We Process and Use Your Information

We process personal and health-related data solely for legitimate, authorized, and transparent purposes:

• To power the Pentasent ecosystem: Enabling discovery of healthcare professionals, clinics, health communities, and medical research.
• To run health and wellness tools: Calculating educational metrics (BMI, BMR, calorie needs) based on your self-directed inputs.
• To safeguard platform integrity: Verifying medical licenses of clinicians, validating organization listings, and detecting imposter or fraudulent accounts.
• To facilitate communication: Delivering security notifications, account recovery workflows, and important legal updates.
• To comply with statutory legal and regulatory obligations applicable to digital health platforms.

4. Strict Health Data Principles & Consent

Pentasent recognizes that personal health information is inherently sensitive. We adhere strictly to the following foundational rules:

• Never Sell Health Data: We do not sell, rent, monetize, or disclose your personal health metrics or medical tracking records to advertisers, data brokers, or pharmaceutical marketers.
• Data Minimization: We only request the minimum information required to deliver the specific tool or discovery feature you choose to use.
• Granular Consent: You decide what information is public on your profile and what remains strictly private. You can modify your consent settings at any time.
• No Automated Diagnosis: We do not use automated algorithms to render clinical diagnoses or prescriptive medical determinations.

5. Information Sharing and Disclosures

We disclose your information only under clear, restricted circumstances outlined below:

• User-Directed Sharing: When you choose to share your professional profile, organization listing, or community post publicly within the Pentasent ecosystem.
• Trusted Infrastructure Providers: Cloud hosting, database encryption, customer support infrastructure, and transactional email services operating under strict Data Processing Agreements (DPAs).
• Legal Requirements & Emergency Protection: In rare cases where disclosure is mandated by valid subpoena, court order, or applicable law, or to protect the vital life safety of an individual in a medical emergency.

6. Data Security & Encryption Architecture

Pentasent implements enterprise-grade technical, physical, and administrative safeguards designed to protect personal and clinical data from unauthorized access, alteration, or disclosure:

• All data in transit is encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS).
• Sensitive health attributes and database records are encrypted at rest using AES-256 bit encryption.
• Strict role-based access control (RBAC) and mandatory multi-factor authentication (MFA) govern administrative systems.
• Continuous automated monitoring for suspicious access patterns, unauthorized penetration attempts, and anomalous behavior.

7. Your Privacy Rights & Controls

Regardless of your location, Pentasent respects comprehensive data subject rights aligned with global standards (including the EU GDPR, UK GDPR, and India Digital Personal Data Protection Act 2023):

• Right to Access: You can request a complete copy of all personal and health data Pentasent holds regarding your account.
• Right to Rectification: You can update, correct, or amend inaccurate or outdated profile and credential details at any time.
• Right to Erasure (Right to be Forgotten): You can permanently delete your account and all associated health tracking records.
• Right to Data Portability: You can export your self-tracked health data and profile entries in a structured, machine-readable format (JSON/CSV).
• Right to Withdraw Consent: You may revoke consent for any optional processing activity without affecting prior lawful processing.

8. Data Retention & Account Deletion

We retain personal information only for as long as your account remains active or as necessary to fulfill the purposes set forth in this policy. When you delete your Pentasent account through your account settings or by contacting privacy@pentasent.com, all personal identification and sensitive health tracking records are permanently purged or rendered completely anonymous within 30 days, except where statutory legal preservation is mandated.

9. Children's Privacy Protection

Pentasent is intended for individuals aged 18 and older. We do not knowingly solicit or collect personal health data from children under 18 without verifiable parental or guardian authorization and oversight. If we discover that a minor under 18 has provided personal data without parental consent, we will promptly delete that data.

10. Data Protection Officer & Contact Inquiries

If you have questions, feedback, or wish to exercise any of your data protection rights under this Privacy Policy, please contact our Data Protection Office directly:

• Email: privacy@pentasent.com
• Data Protection Officer: dpo@pentasent.com
• Security Team: security@pentasent.com
• Mailing Address: Pentasent Inc., Data Protection Office, London Hub, United Kingdom.