Day1Labs Privacy Policy

Effective Date: January 5, 2026

1. Scope of This Policy

ITS Limited (“Day1Labs,” “we,” “us,” “our”) respects your privacy and values your trust. The purpose of this Privacy Policy is to inform you of the treatment and handling of personal information that we may learn about you from using our websites at Day1labs.org (the “Sites”), from using our mobile application (the “App”), from engaging with our content, or by use of any of our services (collectively, the “Service”). If you have any questions regarding this information or our privacy practices, please contact us via the methods set out in the How to Contact Us section at the end of this Privacy Policy.

2. Agreement to Terms

By using or accessing our Service in any manner, you acknowledge that you accept the practices and policies outlined below and the policies outlined in our Terms of Use, and you hereby consent that we may collect, use, and disclose your personal information as described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy and our Terms of Use, then you should immediately discontinue use of the Service without providing us with any personal information.

3. Information We Collect

We may collect the following categories of personal information (a) directly from you (such as when you interact with the Service or fill out our registration forms), (b) from the device and browser that you use to access the Service, and (c) from cookies and similar technologies.

Identifiers

We may collect your first name, last name, mailing address, zip code, and email address.

User-generated Content

We collect the information and content of communications that you share through the Service. This may include the information you choose to provide when you fill out a registration form or contact us.

Demographics and Characteristics

We may collect your date of birth, gender or gender identity, and any information you provide in a registration form concerning your health information. This information is used to provide the Service and identify clinical studies for which you may be eligible.

Device Information

We may collect device information when you interact with the Service. Device information may include your device type, browser type, online and/or unique identifiers, IP address, and geolocation information.

Internet Activity

We may collect information concerning your interaction with the Service, including when you access the Sites or App and your browsing activity on the Sites or App, such as which pages you visit, in what order, and for how long. This may also include traffic data or tracking information provided by the Sites’ host or similar providers, such as Google Analytics, that may be helpful for marketing purposes or for improving the Service.

Participation in Studies Sponsored by Day1Labs’s Clients

In some instances, Day1Labs acts as a Patient Recruitment Organization that provides services to support clinical trials and medical research studies. Day1Labs may process your personal information as a service provider to our clinical research partners and in accordance with contracts with and instructions from these partners. Day1Labs may also, to the extent necessary, process personal data relating to study participants’ spouses, partners, care givers, and relatives if they are involved in the participants’ participation in a study. In relation to Day1Labs’s delivery of Patient Recruitment services to partners, the partner is in control of how and why your personal data is processed.

Health Data

Day1Labs is not a covered entity under the Health Insurance Portability and Accountability Act of 1966 (“HIPAA”) and does not provide medical treatment or healthcare services. Any health-related information submitted by you or collected through your use of the Service is voluntarily provided and not protected under HIPAA. Day1Labs does not verify the privacy practices, security measures, or HIPAA compliance of any sponsor or other third-party organization conducting clinical trials listed on its Service.

To the extent Day1Labs collects protected health information on behalf of a Patient Recruitment Organization that is a HIPAA covered entity, Day1Labs will enter into appropriate business associate agreements with such covered entity, and any data shared in that context will be managed in accordance with the terms of the business associate agreement and applicable HIPAA requirements.

You are not required to provide all personal information identified in this Privacy Policy to use our Service or to interact with us, but certain functionality will not be available if you do not provide certain personal information.

4. Cookies

We store certain information that gets collected automatically through cookies and other similar technologies. Cookies can be used to follow your activity while using a website or across websites, helping companies understand your preferences and improve your website experience.

Information about Interest-Based Advertisements

We may serve advertisements and allow third-party ad networks, ad servers, agencies, technology vendors, and research firms to serve advertisements through the Service. These advertisements may be targeted to users who fit certain general profile categories or display certain preferences or behaviors.

You may opt out or change your preferences for each of these services as detailed below:

You can also prevent the use of certain cookies by modifying your Internet browser settings.

Do-Not-Track Signals

We follow the Global Privacy Control to honor Do Not Track browser settings.

5. Children’s Privacy

The Service is not intended for users under the age of 13 and Day1Labs does not knowingly collect personal information from individuals under the age of 13.

6. Our Use of Personal Information

We collect and use your personal information for the following purposes:

7. Our Disclosure of Personal Information

We may share your personal information with the following third parties:

8. Your Privacy Choices

If you no longer want to receive our emails or other marketing communications, you may unsubscribe at any time by following the unsubscribe options in the communication itself or by emailing us.

To opt out of text messages, you may text “STOP” in reply to any Day1Labs marketing text message.

9. Security

We maintain reasonable technical and organizational measures to protect personal information from loss, misuse, alteration, or unintentional destruction. However, no method of transmission or storage is completely secure.

10. Additional Disclosures Required by State Privacy Laws

This section applies only to residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Nevada, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia.

For residents of these states, this section describes how we collect, use, disclose, and/or sell personal information, and the rights you may have under your state’s privacy law.

Disclosure of Information for a Business or Commercial Purpose

In the past 12 months, we may have disclosed the following categories of personal information for business or commercial purposes:

Category of Personal Information Categories of Recipients
Identifiers Service providers; Advertising partners; Business reorganization; Mandatory disclosures and legal rights
User-generated Content Service providers; Business reorganization; Mandatory disclosures and legal rights
Device Information Service providers; Advertising partners; Business reorganization; Mandatory disclosures and legal rights
Internet Activity Service providers; Advertising partners; Business reorganization; Mandatory disclosures and legal rights

Sales of Personal Information

With your consent, which you may revoke at any time, we may sell your personal information to certain trusted third-party data analytics and data licensing partners in exchange for monetary consideration.

Category of Personal Information Categories of Third Parties
Identifiers Data Analytics and Data Licensing Partners
Demographics and Characteristics Data Analytics and Data Licensing Partners
Health Data Data Analytics and Data Licensing Partners
Device Information Advertising Networks
Internet Activity Advertising Networks

We do not sell, or have actual knowledge of any sale of, the personal information of minors under 16 years of age.

Your Rights

Additional Rights

Additional rights may apply to residents of California, Iowa, Utah, Maryland, Rhode Island, Nevada, and other states listed above.

Exercising Your Rights

You or your authorized agent may exercise your rights by emailing us at hello@day1labs.org with the subject line “U.S. Privacy Rights.”

You can exercise your right to opt out of sales or sharing of your personal information for targeted advertising by clicking the “Opt-out Preferences” link at the bottom of the Sites. We also recognize the Global Privacy Control as a valid consumer request to opt out of marketing cookies for the browser that you use to access the Sites.

Appealing a Denial of Your Privacy Rights Request

If you are a resident of Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, or Virginia and we refuse to take action on your privacy rights request, you may appeal our decision.

You may appeal our decision using the following methods:

Data Retention

We retain personal information for as long as necessary to provide the Service or perform our business or commercial purposes, and as otherwise permitted or required by applicable law.

12. Effective Date and Changes to This Privacy Policy

This Privacy Policy is effective as of the date at the top of this policy. Day1Labs may update this Privacy Policy at any time and will revise the effective date when updates are made.

13. How to Contact Us

If you have any questions about this Privacy Policy or our Service, please contact us at:

Email:
hello@day1labs.org

Address:
ITS Limited
P.O. Box 348
Road Town, Tortola
British Virgin Islands

```