Privacy Policy
How TerryDR collects, uses, stores and shares personal data when you visit this website — and how to exercise your privacy rights.
Last updated: 27 October 2026In short
- We do not run accounts, and this website does not take payments or sell anything.
- Personal data we hold is limited to what you send us through the contact form or by email, plus standard technical data needed to serve and secure the site.
- We use Google Analytics to understand site traffic, and Cloudflare to host and protect the site. We do not sell your data, and we do not run advertising or cross‑site tracking cookies.
- Please do not send patient‑identifiable or clinical data through the form or by email — we cannot accept it.
- You can ask us to show, correct or delete your data at any time: [email protected].
Who we are
TerryDR Co., Ltd. (“TerryDR”, “we”, “us”) operates this website under the TerryDR and PathoAxis names. For the personal data described in this policy, TerryDR Co., Ltd. is the data controller — we decide what is collected and why.
TerryDR Co., Ltd. is based in Nanjing, Jiangsu, China. If you have a privacy question, complaint or request, contact us at [email protected] and we will deal with it directly.
What this policy covers
This policy applies to www.pathoaxis.com (the “Site”). It does not apply to:
- our separate Chinese‑language site at terrydr.com, which is operated under its own notice;
- third‑party websites we link to — for example our social media profiles on WeChat, Xiaohongshu, Douyin, Bilibili and Weibo — which are governed by their own policies once you follow the link;
- analysis services, software licences and instrument orders that are handled under a separate written agreement, where that agreement contains its own data terms.
What we collect
Information you give us
When you use the consultation form on the contact page, or write to us by email, we collect what you send us:
- your name;
- your institution or organisation;
- your email address;
- your phone number (optional);
- the area of interest you select;
- the content of your message.
Please do not include patient data. Do not send patient names, medical record numbers, images or other clinical or personal health information through the form or by email. We are not in a position to handle protected health information, and we cannot accept it — if a project requires it, we will agree a compliant transfer method with you separately.
Technical data collected when you submit the form
Alongside what you type, we record your IP address, your browser and device type (the user agent), the page the inquiry came from, and the date and time of submission. We use these to answer your inquiry and to block automated spam submissions. The IP address is included in the internal notification and archive of your inquiry, so a colleague handling it can tell a genuine enquiry from a repeated or automated one — see Section 7 for who receives it.
Approximate location
From your IP address, Cloudflare’s network derives an approximate country and region (a country code such as JP and a state or province name). We record those two values with your inquiry so that we can tell which market an enquiry comes from and route it to the right colleague. This is a network-level estimate, not a location trace: a corporate VPN, carrier NAT or similar shared exit can make it point at the wrong place, and city-level accuracy is poor — which is why we do not record a city.
Analytics
We use Google Tag Manager and Google Analytics 4 to understand how visitors use the Site — which pages are read, where visitors arrive from, their approximate region, their device and browser, and a cookie‑based analytics identifier that keeps a visitor‑s sessions grouped. Google acts as a processor on our instructions for this data.
Hosting and delivery
The Site is hosted on Cloudflare Pages and served through the Cloudflare network. Cloudflare processes technical request data (IP address, user agent, timestamps, requested URLs) to deliver pages, to cache content close to you, and to protect the Site from abuse.
What we do not collect
- no user accounts, and no login data;
- no payment or card details — the Site does not take payments;
- no patient records or clinical data;
- no advertising identifiers, and no cross‑site tracking cookies.
Cookies and similar technologies
The Site uses a small number of cookies, all of them set by the analytics tag in your browser:
| Cookie | Set by | Purpose |
|---|---|---|
| _ga, _ga_*up to 2 years | Google Analytics 4 | Distinguishes visitors and sessions so that traffic is counted once per visitor rather than once per page view. No advertising use. |
| _gcl_auup to 3 months | Google Tag Manager / Analytics | Stores the campaign source so that we can attribute visits to a referral link. |
Web fonts are served from our own domain rather than a third‑party font service, and no content from social platforms is embedded in the Site, so no other cookies are placed on your device before you choose to click a link.
You can block or delete cookies in your browser settings. Blocking analytics cookies does not stop you from using any part of the Site.
Why we use it
We use personal data for these purposes:
- Answering you. To reply to your inquiry, prepare a quotation or scope of work, and arrange a demonstration or consultation.
- Business records. To keep an internal record of the people we have spoken to, so we can follow up on an ongoing project and meet accounting and tax obligations.
- Improving the Site. To understand which content is useful, which pages are broken, and how the Site performs across devices.
- Security and spam prevention. To keep the Site available and to filter automated submissions to the contact form.
- Updates you asked for. To send you product news or technical articles where you have asked us to, and to withdraw that at any time.
Our legal bases
Where the GDPR or equivalent rules apply, we rely on the following legal bases:
- Pre‑contractual steps. Processing your inquiry and preparing a quotation, before any contract exists.
- Legitimate interests. Operating and securing the Site, understanding its traffic, keeping business contacts, and preventing spam — balanced against your interests and rights.
- Consent. Where we ask for it, for example before sending you marketing email. You can withdraw consent at any time, and withdrawal does not affect processing carried out before that point.
- Legal obligation. Where retention or disclosure is required by law.
Who we share it with
We share personal data only with the providers that help us operate the Site and respond to inquiries. Each of them processes the data on our instructions, for the purposes described in this policy.
| Provider | Role | Data involved |
|---|---|---|
| CloudflareHosting, CDN, inquiry database | Hosting provider | Technical request data (IP address, user agent, timestamps, URLs), the approximate country and region derived from your IP address, and the inquiry records you submit through the contact form. |
| GoogleTag Manager, Analytics 4 | Analytics provider | Site usage data: pages viewed, referrer, approximate region, device and browser, and an analytics identifier. |
| Lark / FeishuOur internal collaboration suite | Internal notification and archiving of inquiries | The inquiry details you submitted (name, institution, email, phone, interest, message), your IP address, and the approximate country and region derived from it, so that the right colleague follows up and can tell a genuine enquiry from a repeated or automated one. |
| Our email relayWhere configured | Notification delivery | The inquiry details you submitted, your IP address, and the approximate country and region derived from it, for the purpose of sending the acknowledgement and internal alert. |
We do not sell your personal data. We do not share it with third parties for their own advertising, and we do not use it for cross‑context behavioural advertising.
International transfers
Because our providers operate globally, personal data may be processed outside the country where you live — including in the United States, the European Economic Area, Singapore and China. Where a transfer is required in order to comply with applicable data protection law, we put appropriate safeguards in place for it.
If you want to know which mechanism applies to your region, contact us at [email protected] and we will explain it.
How long we keep it
- Inquiry records. Kept for as long as the business relationship continues, and otherwise for up to 24 months after our last contact with you, after which we delete or anonymise them. We keep them longer where a legal, tax or accounting obligation requires it.
- Analytics data. Retained by Google Analytics for 14 months and then deleted, unless a different retention period is configured for the account.
- Server and CDN logs. Retained for the period configured on our Cloudflare account, after which Cloudflare deletes them in line with its own policy.
Your rights
We apply the same standard of care to every visitor, wherever you live. If you are in the European Economic Area, the United Kingdom or Switzerland, the GDPR gives you the right to:
- ask what personal data we hold about you and get a copy;
- have inaccurate or incomplete data corrected;
- have your data erased;
- restrict or object to how we use it;
- receive certain data in a portable, machine‑readable format;
- withdraw consent at any time;
- complain to your local data protection authority.
If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collected about you, to request its deletion or correction, to opt out of its sale or sharing, and to limit the use of sensitive personal information. We do not sell or share personal information as those terms are defined under the CCPA, and we do not use sensitive personal information to infer characteristics about you. We will not discriminate against you for exercising any of these rights.
How to make a request
Email [email protected] with the subject line “Privacy request”, and tell us which right you want to exercise and which email address you used when contacting us. We may ask you to confirm your identity before we act on the request. We aim to respond within 30 days. If you are not satisfied with our response, you can complain to your local supervisory authority.
How we protect it
- all pages, including the contact form, are served over HTTPS/TLS, so data is encrypted in transit;
- the Site is protected by Cloudflare‑s edge security, which limits and absorbs automated abuse;
- inquiry records are stored in a database that only staff who need them for sales and support can reach;
- we do not publish customer project details or personal data on the Site.
Children’s privacy
The Site is a business and professional resource and is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us at [email protected] and we will delete it.
Changes to this policy
We may update this policy as the Site and our obligations change. The “Last updated” date at the top always reflects the current version. If we make a material change, we will note it on this page and, where you have asked to hear from us, tell you by email.