Who we are, and what this covers
PCR Lab Pro is the reporting and release platform for molecular labs, operated at pcrlabpro.com with the application at app.pcrlabpro.com. This policy covers both. The demo lab at demo.pcrlabpro.com runs entirely in your browser on fictional data — nothing you do there reaches our servers, so there is nothing for this policy to cover there.
What we collect
- Account data — your name, email address, and sign-in records, so the audit trail can say who did what.
- Lab profile — lab name, address, phone, license number (CLIA in the US), laboratory director, and logo. These exist because they print on your reports.
- Report data — orders, accessions, specimens, runs, results, and released reports. This is your lab’s clinical record-keeping and may include protected health information (PHI) about your patients.
- Billing data — your plan and the count of released reports, which is what billing is based on. Card details are held by our payment processor, never by us.
- Technical data — the logs and device information needed to run and secure the service.
Why we collect it
To run the service, to bill per released report, to answer your support email, and to keep the service secure. Your data is never sold and never used for advertising. Patient data is used to do exactly what your lab asked the software to do with it — turn results into released, versioned reports — and nothing else.
How patient data is handled
Data handling is HIPAA-compliant. Patient data is encrypted in transit and at rest. Access inside your lab follows the permission grid your administrators set, and each grant is recorded. On our side the separation is structural: the lab application and platform administration are two apps, isolated by role, and a platform administrator cannot pay for a lab’s report, approve its runs, or delete its orders — platform staff can look, never act as the lab. We’ll put the specifics your compliance officer needs in writing before you upload anything, including whether we’ll sign what they need signed: support@pcrlabpro.com.
Retention
Your records are kept for as long as your account is active. Released reports are versioned clinical documents: an amendment creates version 2 with a reason, who, and when — version 1 is superseded, not erased. If you close your account, we delete your data on request, subject to your own lab’s legal duty to retain clinical records — which is why the export below comes first.
Your data on the way out
Every table in the app exports to CSV, whenever you like, and released reports leave as branded PDFs. Before any deletion we’ll confirm you have exported what your lab is required to keep. Export needs no request to us — it’s a button in the product.
Subprocessors
The companies that process data on our behalf — name, role, data touched, region — are listed at /legal/subprocessors, with our change-notification promise.
Cookies and local storage
Below is everything this website stores in your browser, and every company besides us that is involved when you visit it.
- Cookies — none, our own or anyone else’s.
- Local storage — one entry,
plp:theme, written only when you press the theme button. It records whether you chose light or dark, so the next page opens the same way. It is never sent to us, does not expire on its own, and is removed when you clear this site’s data in your browser. Until you press the button, the site follows your device’s setting and stores nothing. - Third-party content — none. Every file a page loads, from its scripts to its fonts and artwork, comes from
pcrlabpro.comitself: no advertising, no tracking pixels, no social-media buttons or embedded videos, and nothing that follows you to other sites. - Visitor statistics — none at the moment. Plausible Analytics, listed among our subprocessors, is not switched on yet. It counts visits without cookies; before it is switched on, this section will say what it records, with a new “Last updated” date.
- Server logs — the servers that deliver these pages record each request, including your IP address, to run and secure the site. Those logs are kept by our host, Amazon Web Services, not in your browser.
Because none of this tracks you, there is no cookie banner to accept. A browser that sends Global Privacy Control or Do Not Track is never counted in our visitor statistics.
This section covers this website only. The application and the demo lab, at the addresses at the top of this policy, are separate sites that may keep their own data in your browser.
Your rights and choices
You can read and correct your account and lab profile in the app. For anything this page doesn’t answer — access requests, correction, deletion, or a question about a specific record — write to support@pcrlabpro.com and a person answers within one business day. Patients should direct requests about their results to the lab that performed the testing — the lab is the clinical record-holder; we process on its behalf.
Changes to this policy
When this policy changes, the new version appears here with a new “Last updated” date, and material changes are announced to lab administrators by email before they take effect.
Contact
support@pcrlabpro.com · or see the contact page.