Legal

Privacy Policy

Last updated: February 11, 2026

This policy describes how BloodReq handles personal information for users, organizations, and administrators using the platform.

1. Scope and Overview

This Privacy Policy explains how BloodReq collects, uses, stores, and protects personal information when you use our website, admin panel, and related services (collectively, the "Service").

By accessing or using the Service, you acknowledge the practices described in this policy.

2. Information We Collect

Account details: name, email address, phone number, password hash, profile details, and role-based account data.

Verification and operational data: identity verification records, hospital or organization details, blood group, availability status, and request metadata required to operate the platform.

Technical data: device/browser type, IP address, operating system, application logs, and basic analytics events for stability and abuse prevention.

Support and communications: messages and attachments you share with support or moderation teams.

3. Sensitive Information

Because the Service relates to healthcare coordination, some data may be sensitive (for example, health-adjacent eligibility or emergency request details).

We process sensitive information only as needed to provide the Service, protect users, and comply with legal obligations.

4. How We Use Information

Create and manage user accounts, authenticate sign-ins, and deliver core features.

Match donors, patients, and verified organizations, and support emergency blood requests.

Maintain security, detect fraud or misuse, and enforce platform rules.

Respond to support requests, notify users about critical updates, and improve Service performance and reliability.

Comply with legal obligations, audits, and law-enforcement requests where required.

5. Cookies and Similar Technologies

We may use cookies and similar technologies for session management, security, preferences, and analytics.

You can control cookies through browser settings, but disabling them may affect some features.

6. How We Share Information

With authorized entities and users: hospitals, blood banks, moderators, and verified participants involved in request fulfillment.

With service providers: infrastructure, security, analytics, and communication vendors under confidentiality and processing obligations.

For legal reasons: when required by law, court order, regulation, or to protect rights, safety, and platform integrity.

In business transitions: if BloodReq is involved in a merger, acquisition, financing, or asset transfer, subject to appropriate safeguards.

7. Data Retention

We retain information only for as long as needed for operational, legal, safety, and dispute-resolution purposes.

Retention periods depend on account type, activity history, legal obligations, and security requirements.

8. Data Security

We use administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, loss, misuse, or alteration.

No method of transmission or storage is completely secure; users should also protect credentials and devices.

9. Your Rights and Choices

Depending on your location, you may have rights to access, correct, update, delete, or restrict processing of your personal data.

You may also have rights to data portability, objection, and withdrawal of consent where consent is the legal basis.

To exercise rights, contact us using the details in the Contact section.

10. International Data Transfers

Your data may be processed in locations where BloodReq or its service providers operate.

When transferring data across borders, we apply reasonable contractual and operational safeguards consistent with applicable law.

11. Children's Privacy

The Service is not intended for children below the minimum digital-consent age in their jurisdiction without legally valid authorization.

If you believe a child has provided personal information without proper authorization, contact us so we can take appropriate action.

12. Third-Party Services

The Service may include links or integrations with third-party websites and tools. Their privacy practices are governed by their own policies.

We are not responsible for third-party practices outside BloodReq-controlled systems.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or business changes.

Material updates may be highlighted in-app or by other reasonable notice methods.

14. Contact Us

For privacy questions or requests, contact us at support@bloodreq.com.