Privacy Policy

Bio Systems Laboratory LLC – Privacy Policy & HIPAA Notic

Last updated: May 2025

1.Introduction

Bio Systems Laboratory LLC (“Bio Systems,” “we,” “us”) is committed to protecting the privacy and security of your personal and health information. This Privacy Policy & HIPAA Notice explains how we collect, use, disclose, and safeguard your information, as required by federal law (HIPAA) and applicable state regulations.

2.Information We Collect

A. Personal Information
Contact details: name, email, phone, mailing address
Professional details: provider role, facility name, specialty
Account credentials: username, password (if you register on our portal)
B. Protected Health Information (PHI)
When you request or order testing services for your patients, we may collect:
Patient identifiers (name, date of birth, medical record number)
Specimen details (collection date, type, tracking number)
Clinical information (diagnosis codes, test orders, clinical notes)
C. Technical Information
IP address, browser type, device information (via cookies and web logs)
Usage data (pages visited, time on site, form submissions)

3.How We Use Your Information

To provide services: process test orders, generate reports, handle billing
To communicate: send confirmations, status updates, newsletters
To improve our services: analyze usage patterns, troubleshoot issues, plan new features
For legal compliance: maintain records as required by HIPAA, CLIA, and state laws

4.HIPAA Privacy & Your Rights

Under the Health Insurance Portability and Accountability Act (HIPAA), you have the right to:
Access & Copy: Request a copy of your PHI maintained by Bio Systems.
Amend: Request corrections to your PHI if you believe it is inaccurate or incomplete.
Accounting of Disclosures: Receive a list of disclosures of your PHI for purposes other than treatment, payment, or operations.
Request Restrictions: Ask us to restrict uses or disclosures of your PHI (we are not required to agree but will consider reasonable requests).
Confidential Communications: Request alternative means or locations for communications (e.g., email vs. phone).
Paper Copy of This Notice: Even if you agreed to receive it electronically.
To exercise any of these rights, email privacy@biosystemslab.com or write to:

5.Disclosure of Information

We will not sell your personal or health information. We may disclose PHI without authorization for:
Treatment: to laboratories, pathologists, or clinicians involved in patient care
Payment: to insurers for test reimbursement
Healthcare operations: quality assurance, accreditation, compliance reviews
Required by law: court orders, public health reporting, or subpoenas
All other uses or disclosures require your written authorization, which you may revoke at any time.

6.Data Security

Administrative safeguards: employee training, role‑based access controls
Technical safeguards: encryption of data in transit and at rest; secure firewalls
Physical safeguards: locked facilities, secured servers, visitor controls
Breach notification: we will notify affected individuals and regulators within 60 days of any unsecured PHI breach

7.Cookies & Tracking

We use cookies and similar technologies to enhance user experience, remember preferences, and analyze site traffic. You can disable cookies via your browser settings, but some features may not function properly.

8.Third‑Party Services

We engage trusted service providers (e.g., cloud hosting, analytics, billing platforms) under Business Associate Agreements (BAAs) to ensure they comply with HIPAA privacy and security rules.

9.Changes to This Policy

We may update this policy to reflect legal or operational changes. When we do, we will revise the “last updated” date and notify you via our website or direct communication.

10.Contact Us

If you have questions, concerns, or wish to submit a complaint, please contact:
You also have the right to file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.