1. Scope and controller
This Privacy Notice applies to personal information processed by LabTrace Analytical Sciences in connection with this website, customer accounts, communications, analytical service requests, sample and report records, and report verification. It does not govern an independent third party’s own website or privacy practices.
2. Information we collect
Depending on how you interact with the service, we may collect:
- Identity and account data: authenticated user identifier, email address, full name when available, profile name, organization, and policy-acceptance records.
- Request and sample data: selected tests, add-ons, sample form, target or blind-panel information, quantity, sample identifiers, tracking information, scope messages, hazard declarations, and order status.
- Report data: document number, verification-key hash, sample metadata, measurements, report status, revision history, issue date, and access or verification events where enabled.
- Communications: contact-form messages, support correspondence, files you choose to provide, and records needed to resolve questions or complaints.
- Technical and security data: IP address, device and browser information, request logs, session information, timestamps, error records, and essential storage used for authentication, cart continuity, fraud prevention, and service security.
Do not submit patient records, protected health information, human-specimen identifiers, government identity documents, payment-card details in free-text fields, or other unnecessary sensitive information.
3. Sources of information
We receive information directly from you, from an organization that authorizes you to act, from shipping or service providers involved in an accepted order, from the sample and analytical process, and automatically from your use of the service. When you register or sign in, the account system processes the email address and credentials you provide for authentication and account security.
4. How we use information
- authenticate users, create profiles, and provide the saved testing cart;
- review feasibility, issue quotations, receive samples, perform analysis, and deliver or verify reports;
- communicate about requests, safety, shipping, quality investigations, support, policy changes, and service administration;
- maintain chain-of-custody, quality, financial, security, and compliance records;
- detect abuse, protect accounts and verification records, troubleshoot, and improve reliability; and
- comply with law, enforce agreements, and establish or defend legal claims.
5. When information is disclosed
We may disclose the minimum information reasonably necessary to hosting, authentication, communications, shipping, payment, data-storage, security, and specialist analytical providers that support the service; to professional advisers; to a successor in a legitimate business transaction; and to authorities or other parties when required by law or necessary to protect safety, rights, or service integrity.
Service providers may process information only for the contracted purpose and under applicable obligations. We do not sell personal information for money. We do not use personal information for cross-context behavioral advertising through this website.
6. Reports and public results
Private report verification uses the document number and private verification key supplied with the report. Protect that key from unauthorized disclosure. A report is not placed in a public-results library without separate express authorization. If publication is authorized, we will follow the selected attribution or de-identification terms, but no de-identification method can guarantee that surrounding facts will never permit recognition.
7. Retention
We retain account, request, analytical, report, verification, consent, transaction, and communication records for as long as reasonably necessary to provide the service, preserve report integrity, meet quality and legal obligations, resolve disputes, and enforce agreements. Retention periods vary by record type, accepted order, method, and applicable law. Data may be deleted, aggregated, or de-identified when no longer required.
8. Security
We use administrative, technical, and organizational safeguards proportionate to the information and service, including authenticated access, access controls, integrity records, and restricted database operations. No system, transmission, or storage method is completely secure. You are responsible for controlling access to your authentication account and private verification keys.
9. Your choices and privacy rights
You may request access, correction, deletion, or a copy of eligible personal information, or ask questions about processing, subject to identity verification and legal exceptions. Depending on your U.S. state or other applicable law, you may also have rights to restrict or object to certain processing and to appeal a denied request. We will not unlawfully discriminate for exercising a privacy right.
Submit a request through the contact page and identify it as a privacy request. We may retain information necessary to complete services, preserve report authenticity, meet legal obligations, detect fraud, or establish legal claims even after an account request.
11. Interstate and international processing
Information may be processed in the United States and other locations where authorized service providers operate. Those locations may have different privacy laws. We use contractual and operational safeguards appropriate to the processing where required.
12. Minors
The service is not directed to children and is available only to persons at least 18 years old. We do not knowingly create customer accounts for minors. Contact us if you believe a minor submitted personal information.
13. Changes and contact
We may update this notice to reflect service, vendor, legal, or security changes. The effective date is displayed on the page. Material changes will be presented for renewed acceptance when appropriate.
Privacy questions and requests may be submitted through the LabTrace contact page.