Privacy Notice

Nonacus website Privacy Notice: effective as of 15/03/2024

Nonacus values your privacy and confidentiality of your Personal Data. We are committed to treating your Personal Data with care, integrity and transparency.

We will not publish your Personal Data or share/distribute your Personal Data to any third parties unless we have your prior agreement, or to do so is compliant with applicable Data Protection Laws. We use technical and organisational measures which help us to safeguard your Personal Data and ensure that access to your Personal Data is limited to our officers, employees or Nonacus Affiliates who are directly involved in the provision of our services. Where we use other companies in the support of our services (Processors/Sub-Processors), we ensure that their officers, employees and affiliates are bound by a contractual duty of confidentiality.

We may not accept (or process) Personal Data of patients (Customer Patient Data) under the age of 18.

We do not enter into any contract with (and therefore do not provide services to) patients directly. If you are a patient and interested in our GALEAS Software Services, please speak to a member of our customer support team who will assist with the arrangement of a clinical referral to our GALEAS services.


The words of which the initial letter is capitalized have meanings as defined in our Glossary (see end of this document). All definitions shall have the same meaning regardless of whether they appear in singular or in plural.


Business Terms and Conditions means our contractual terms for the provision of goods and services, including the GALEAS Software Services.

Controller(s) are the individuals or organisations who determine the purposes for which, and the manner in which, any Personal Data is processed.

Customer Personal Data means such Personal Data which relates to our Customers’ (key) personnel, including their name, job title, telephone number and email address. In most cases, we will process Customer Personal Data as an independent Controller.

Customer Patient Data means Special Category Data (in the form of Genetic Data) which we process as a Processor on behalf of our customers (Controllers) for the purposes of providing GALEAS Software Services.

Data Protection Law means the EU General Data Protection Regulation (2016/679) (“EU GDPR"), EU GDPR as transposed into English Law by virtue of section 3 of the European Union Withdrawal Act (“UK GDPR”), the Data Protection Act 2018 and the Privacy & Electronic Communications Regulation (PECR) 2003, all as amended from time to time.

Direct Identifiers: is only relevant in the context of our GALEAS Software Services and means, by way of example, name, date of birth, or any other information, such that Nonacus would be able to identify the patient without recourse to other, externally available information.

GALEAS Software: means the combination of various software designed to enable the rapid Analysis and interpretation of sequencing data at scale, being composed of (downloadable) software for the uploading of Customer Patient Data, as well as Cloud hosted bioinformatic workflows for the interpretation and Analysis of Customer Patient Data.

GALEAS Software Services: means those services as fully described in our GALEAS Terms of Use, available on our website.

Genetic Data means Personal Data related relating to the inherited or acquired genetic characteristics of a natural person which can give unique information about the physiology or the health of that natural person and which result, in particular, from an analysis of a biological sample from the natural person in question. EU/UK GDPR classifies Genetic Data as Special Category Data.

Local Privacy Laws means the national or federal laws that apply to a specific geographical area which govern how personal information (including ‘Customer Personal Data’ and ‘Customer Patient Data’) is to be protected and may be shared with a service provider such as Nonacus.

Nonacus Affiliates means our sister company ‘Informed Genomics Ltd’, a registered company with the company registration 13082290.

Personal Data means information relating a natural living person or ‘data subject’ which can be used to identify such person. This provides for a wide range of information as set out in section 5 of this Privacy Notice. It does not include anonymised data where your identity has been removed or information about a deceased person.

Processor(s) means the individuals or organisations who process Personal Data based on the instructions of the Controller(s).

Sub-Processor(s) means a company which acts on behalf of the instructions of a Processor.

Special Category Data means information which is legally deemed to be extra sensitive in nature such as information about ethnicity, race, health or genetic information. The processing of ‘Special Category’ data is only permitted where one of the conditions 9 of (EU/UK) GDPR is present.