Privacy Policy

Canos is the data controller for personal data processed through this website and our registrations. For testing services ordered through a veterinary practice, the practice may act as an independent controller for your and your dog's clinical records, and we act as controller of the data needed to perform and report the test.

You can contact us about this policy at hello@canos.ai.

• Contact details — name, email address and (if you provide it) phone number, when you register, request a test, or contact us.
• Professional details — practice name, number of vets and optional city when a veterinary professional registers with us.
• Dog and sample information — your dog's name, breed, age and relevant clinical context provided with a blood sample, together with the test result. Genomic and molecular data generated from a sample relates to your dog; we treat it with the same care as personal data.
• Technical data — IP address, browser and device information, and pages visited, collected through standard server logs and privacy-respecting analytics.

• To manage registrations and contact you about testing and sample collection.
• To perform tests, return results to you and your veterinarian, and support clinical interpretation.
• To meet legal, regulatory and laboratory quality obligations.
• To improve our tests and the underlying science — using de-identified or aggregated data wherever possible.

We do not sell your personal data, and we do not share it for cross-context behavioural advertising.

Where the UK GDPR or EU GDPR applies, we rely on: your consent (for example, registering for testing); performance of a contract (delivering a test you or your practice ordered); our legitimate interests in operating and improving our services, balanced against your rights; and compliance with legal obligations. You may withdraw consent at any time by contacting us.

Canos is a research-driven company. De-identified sample and result data may be used to develop and validate our tests. Where data could identify you or your dog, we will ask for your explicit permission before using it for research beyond delivering your result, and you can decline without affecting the service you receive.

We share data only with: the veterinary practice involved in your dog's care; trusted service providers who process data on our instructions (hosting, email, laboratory logistics); and regulators or authorities where the law requires it. All processors are bound by written data-protection terms.

We operate between the United Kingdom and the United States, and some service providers process data in other countries. Where personal data leaves the UK or EEA, we protect it using approved safeguards such as the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or the recipient's certification under an applicable adequacy framework.

We keep personal data only as long as needed for the purpose it was collected, and to meet laboratory, regulatory and legal retention requirements. We apply technical and organisational measures appropriate to a clinical-diagnostics environment, including encryption in transit, access controls and staff confidentiality obligations.

You have the right to access, correct, delete or restrict your personal data, to object to processing, to data portability, and to withdraw consent. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority. To exercise any right, email hello@canos.ai.

Depending on your state of residence (including California under the CCPA/CPRA), you may have the right to know, access, correct and delete your personal information, to opt out of sale or sharing (we do not sell or share it), and not to be discriminated against for exercising your rights. Contact us at hello@canos.ai and we will verify and respond within the required period.

We use CheatGTM and Mixpanel automatically on public pages to understand visits, campaign sources and blood draw signups. No analytics permission prompt is shown. CheatGTM measures campaign visits and saved signups. Mixpanel measures public-page visits, order clicks, signup progress and error categories, and a signup reference after the application is saved. Mixpanel uses EU ingestion and has no session recording or automatic form capture. Random visitor IDs and CheatGTM campaign click IDs last up to seven days. These events exclude your name, email, dog’s details, form content and page URL. Mixpanel receives only fixed page labels and a mobile/desktop category. Login, client and staff portals, and report pages are excluded. CheatGTM browser retries can be stored for up to one day; Mixpanel browser retries stay in memory until the page closes. Blocking analytics does not prevent ordering. For privacy questions or requests, contact us using the details below.

We may update this policy as our services develop; the "last updated" date above shows the current version, and material changes will be flagged on this page. Questions, requests or concerns: hello@canos.ai.