At-Home Blood Draws, Hassle-Free

PRIVACY POLICY

LabCare Mobile Phlebotomy Services

Effective Date: October 16, 2026

1. Introduction

LabCare Mobile Phlebotomy Services (“LabCare,” “we,” “our,” or “us”) respects your privacy and seeks to protect the personal information and health-related information you provide through our website, appointment scheduling process, payment services, and communications.

This Privacy Policy describes the categories of information we may collect, how we may use and disclose it, the safeguards we use, and certain rights and choices that may apply under federal law and Maryland law. It applies to information collected through our website, online forms, appointment requests, payment processes, email, telephone, text messages, and related services, unless a separate notice applies.

This Policy is intended to describe our practices accurately. It does not create rights or obligations beyond those required by applicable law, and it does not replace any separate notice required for protected health information, employment information, or other regulated information.

2. Information We Collect

Depending on how you interact with LabCare, we may collect:

● Identifiers and contact information: Name, email address, telephone number, mailing address, service address, and similar contact details.

● Appointment and service information: Requested appointment dates, service locations, scheduling details, laboratory orders, ordering-provider information, and information needed to perform or coordinate requested services.

● Health-related information: Information you voluntarily provide or that is provided by an authorized healthcare provider, laboratory, or other authorized party, including information related to laboratory testing or phlebotomy services.

● Payment and transaction information: Payment status, transaction history, billing information, and limited payment details received from our payment processor. We generally do not store complete payment-card numbers when payment is processed by a third-party payment provider.

● Communications: Information contained in emails, telephone calls, text messages, contact forms, appointment requests, and other communications.

● Internet and device information: IP address, browser type, device identifiers, operating system, referring pages, pages viewed, approximate location derived from IP address, and website activity.

● Cookie and similar technology information: Information collected through cookies, pixels, analytics tools, or similar technologies, as described in Section 8.

● Marketing and preference information: Newsletter subscriptions, communication preferences, and responses to communications.

● Information from other sources: Information from laboratories, healthcare providers, authorized representatives, service providers, public sources, or other parties involved in providing requested services.

Please do not submit medical records, laboratory orders, or other sensitive health information through a general website contact form, newsletter signup form, or other channel that LabCare has not designated for secure health-related communications. If you need to provide health information, use the secure method provided by LabCare or follow the instructions of your healthcare provider or laboratory.

3. Purposes for Collecting and Using Information

We may collect, use, and disclose information as reasonably necessary to:

● Respond to inquiries and service requests.

● Schedule, provide, and coordinate mobile phlebotomy services.

● Verify identity, appointment details, service locations, and ordering information.

● Communicate appointment confirmations, reminders, changes, cancellations, service instructions, and other operational information.

● Coordinate with laboratories, healthcare providers, ordering providers, authorized representatives, and other parties involved in requested services.

● Process payments, refunds, billing, and related transactions.

● Maintain business, financial, clinical, and service records.

● Provide customer support and respond to complaints or requests.

● Operate, maintain, secure, and improve our website, systems, and services.

● Detect, investigate, and prevent fraud, abuse, unauthorized activity, security incidents, and other harmful or unlawful conduct.

● Send newsletters, educational materials, business announcements, or promotional communications where permitted and consistent with your choices.

● Comply with applicable federal, state, and local laws, regulations, court orders, subpoenas, professional obligations, and contractual requirements.

● Establish, exercise, or defend legal claims.

● Carry out other purposes disclosed at the time information is collected or otherwise permitted by law.

We do not use health-related information for unrelated purposes merely because it was provided to us. Where a specific law, contract, authorization, or notice limits the use or disclosure of information, we will follow the applicable limitation.

4. Legal Bases and Applicable Privacy Frameworks

The laws that apply to LabCare’s information practices may depend on the services we provide, our contractual relationships, the type of information involved, and whether LabCare is acting as a healthcare provider, business associate, service provider, or another type of organization.

Depending on the circumstances, we may process information because it is necessary to provide requested services, perform a contract, comply with law, protect health or safety, prevent fraud or security threats, establish or defend legal claims, or pursue legitimate business purposes that are not overridden by applicable privacy rights.

Federal laws that may apply to particular activities include, among others:

● The Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”), when LabCare is a covered entity or business associate and the information is protected health information.

● The Federal Trade Commission Act, including prohibitions on unfair or deceptive acts or practices.

● The Controlling the Assault of Non-Solicited Pornography and Marketing Act (“CAN-SPAM”) for certain commercial email communications.

● The Telephone Consumer Protection Act and related federal rules for certain calls and text messages.

● The Children’s Online Privacy Protection Act (“COPPA”) for certain online collection from children under 13.

● Federal breach-notification requirements that may apply to particular entities or information, including requirements applicable to certain health information.

Maryland laws may also apply, including Maryland privacy, consumer-protection, health-information, electronic-communications, and data-breach-notification requirements. The scope of those laws may depend on LabCare’s size, activities, data practices, and applicable exemptions. This Policy does not state that any particular law applies when that has not been confirmed.

5. How We Share Information

We do not sell personal information for money.

We may disclose information to the following categories of recipients, when reasonably necessary and permitted by applicable law:

● Laboratories and healthcare providers: To perform, order, receive, report, or coordinate requested laboratory or phlebotomy services.

● Authorized representatives: Such as a parent, guardian, caregiver, or other person you authorize or who is legally permitted to act on your behalf.

● Service providers and contractors: Including website hosting, scheduling, payment processing, communications, information technology, cloud storage, analytics, customer support, accounting, legal, and security providers.

● Professional advisers: Such as attorneys, accountants, insurers, auditors, and consultants, subject to applicable confidentiality obligations.

● Government authorities and law enforcement: When required or permitted by law, subpoena, court order, regulatory request, or other legal process.

● Parties involved in safety or legal matters: When necessary to protect the rights, property, safety, or security of LabCare, our patients, our personnel, or others.

● Business-transfer parties: In connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, subject to applicable legal requirements.

● Other parties with authorization or consent: When you direct us to disclose information or provide legally valid authorization.

We do not disclose protected health information for marketing, sale, or other purposes requiring authorization unless the applicable authorization has been obtained or an exception applies. We do not knowingly share health information with advertising or analytics providers for targeted advertising unless permitted by applicable law and consistent with any required authorization, consent, or notice.

Where required, we use contracts, confidentiality obligations, access controls, or other safeguards for service providers that handle sensitive information. The specific safeguards and contractual requirements depend on the services provided and the information involved.

6. Health Information and HIPAA

HIPAA may apply to LabCare only if LabCare is acting as a HIPAA covered entity or business associate and the information meets the definition of protected health information. Whether HIPAA applies depends on LabCare’s actual activities and relationships, not solely on the fact that LabCare provides phlebotomy services.

If HIPAA applies, LabCare will handle protected health information in accordance with applicable HIPAA requirements and any applicable business associate agreement, authorization, Notice of Privacy Practices, or other required documentation. A separate HIPAA Notice of Privacy Practices may apply to patients of a covered entity, and a separate notice may be provided by LabCare if required.

If HIPAA does not apply to a particular activity, other federal or Maryland privacy and consumer-protection laws may still apply. HIPAA does not necessarily regulate every piece of information collected through a website, appointment form, payment process, or marketing program.

This Privacy Policy does not itself establish HIPAA compliance, create a business associate relationship, or replace a HIPAA Notice of Privacy Practices. LabCare should maintain appropriate policies, workforce training, access controls, vendor agreements, secure communication procedures, and incident-response procedures based on the roles and systems it actually uses.

7. Security Safeguards

We use reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, acquisition, use, disclosure, alteration, or destruction. Depending on the information and system, safeguards may include access controls, authentication, encryption or secure transmission, vendor due diligence, workforce procedures, backups, monitoring, and secure disposal.

No website, electronic transmission, mobile device, cloud service, or storage system can be guaranteed to be completely secure. You should use caution when sending sensitive information and should not send health information through unsecured email, general website forms, or public communication channels unless LabCare has specifically instructed you to do so.

If LabCare discovers a security incident involving personal information or protected health information, we will assess the incident and provide notices to affected individuals, regulators, healthcare organizations, or other parties when required by applicable federal or Maryland law. The timing, content, and recipients of any notice will depend on the type of information, the circumstances of the incident, applicable legal thresholds, and any permitted delay.

8. Cookies, Analytics, and Similar Technologies

Our website may use cookies, pixels, tags, log files, analytics tools, or similar technologies to:

● Operate and secure the website.

● Remember preferences and support functionality.

● Understand website traffic and usage.

● Diagnose technical problems.

● Measure communications or marketing performance.

● Improve our services and user experience.

The technologies used depend on our website platform and the third-party tools enabled. Some tools may be provided by website hosting, analytics, advertising, scheduling, or payment companies.

You may be able to manage cookies through your browser or device settings. Blocking or deleting cookies may affect website functionality. Where required by law, we will provide additional choices or notices for certain nonessential cookies or targeted advertising technologies.

LabCare does not knowingly use website tracking technologies to collect protected health information for advertising purposes. Because website configurations and third-party tools can change, LabCare should periodically review its website, forms, analytics settings, pixels, and vendor contracts to confirm that they are appropriate for the information collected.

9. Email, Telephone, and Text Communications

If you provide contact information, we may use it to communicate about requested services, appointments, payments, account matters, safety information, and other operational issues.

If you subscribe to marketing or educational updates, we may send commercial emails or other promotional communications as permitted by law. Commercial emails will include required identification and an unsubscribe method where applicable. You may opt out of marketing emails by using the unsubscribe link or contacting us.

You may also have rights or choices regarding marketing calls and text messages. LabCare will seek any consent required for automated or prerecorded calls or texts and will honor applicable opt-out requests. Message and data rates may apply, and consent to receive marketing messages is not a condition of purchasing services.

Opting out of marketing communications does not prevent necessary service-related communications, including appointment confirmations, reminders, cancellations, payment information, or responses to your requests.

10. Third-Party Websites and Services

Our website may link to or integrate with third-party websites and services, including payment platforms, appointment tools, laboratories, healthcare providers, social-media platforms, analytics providers, and communication services.

Third parties may collect, use, and disclose information under their own privacy policies and terms. LabCare does not control the privacy or security practices of independent third parties. Review the applicable policies before submitting information or making payments through an external service.

A third-party service’s presence on our website does not necessarily mean that LabCare endorses all of that service’s practices or that the service is appropriate for submitting health information. Use only the secure method designated for health-related information.

11. Data Retention and Secure Disposal

We retain information for as long as reasonably necessary for the purposes described in this Policy, including to provide services, maintain business and financial records, comply with legal and contractual obligations, resolve disputes, investigate incidents, enforce agreements, and establish or defend legal claims.

Retention periods vary based on the type of information, the purpose for which it was collected, applicable federal and Maryland requirements, professional or contractual obligations, litigation holds, and the systems in which the information is stored.

Health-related records may be subject to additional retention requirements. We do not promise a specific retention period unless required by law or stated in a separate agreement or notice.

When information is no longer required, we will take reasonable steps to delete, destroy, de-identify, or securely dispose of it, subject to legal holds, backup systems, and applicable retention requirements.

12. Your Privacy Rights and Choices

Depending on applicable law, the type of information involved, and LabCare’s role, you may have rights or choices that include:

● Requesting access to certain personal information.

● Requesting correction of inaccurate or incomplete information.

● Requesting deletion of certain information, subject to legal, clinical, contractual, security, and recordkeeping exceptions.

● Requesting information about categories of personal information collected, used, disclosed, or sold, if a law provides that right.

● Opting out of marketing emails, certain calls, or certain text messages.

● Withdrawing consent where processing is based on consent, subject to legal or contractual limitations.

● Requesting restrictions or confidential communications for protected health information when HIPAA applies.

● Filing a complaint with LabCare or an applicable federal or Maryland regulator.

These rights are not absolute and may not apply to every person, transaction, or category of information. For example, certain health information, payment information, security information, legally privileged information, de-identified information, or records that LabCare must retain may be exempt from access, deletion, or correction requests.

To submit a privacy request, contact LabCare using the information in Section 16. We may need to verify your identity and authority before responding. We will not discriminate against you for exercising a right provided by applicable law. If we deny a request, we will explain the basis for the denial to the extent required and describe any available appeal or complaint process.

13. Children’s Privacy

Our website and general services are not directed to children under 13, and we do not knowingly collect personal information online from children under 13 without legally required parental consent.

If LabCare provides services to a minor, information may be collected from a parent, guardian, healthcare provider, or other authorized representative as appropriate and permitted by law.

If you believe a child has provided personal information to LabCare through the website without appropriate authorization, contact us so that we can evaluate and address the request.

14. Maryland-Specific Notices and Rights

LabCare is located in Maryland and may be subject to Maryland privacy, consumer-protection, health-information, electronic-communications, and data-breach-notification requirements. The specific requirements that apply depend on LabCare’s business model, annual revenue, number of Maryland residents whose information is processed, information collected, exemptions, and role in providing healthcare services.

Maryland law may provide rights or protections concerning personal information, sensitive personal information, health data, consumer communications, unfair or deceptive practices, and security breaches. Where a Maryland law applies to LabCare’s processing, LabCare will provide the notices, access, correction, deletion, opt-out, appeal, authorization, or other rights required by that law, subject to applicable exceptions.

Maryland breach-notification requirements may require notice to affected Maryland residents and, in some circumstances, notice to the Maryland Attorney General or other authorities when a breach of personal information creates a risk of harm or otherwise meets the applicable statutory standard. The timing and content of notices will be determined under the law applicable to the incident. Separate federal requirements may apply to protected health information or other regulated information.

Nothing in this Section is intended to waive rights provided by Maryland law or to state that a particular Maryland statute applies when its applicability has not been determined.

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, information practices, website technology, vendors, or legal obligations.

We will post the updated Policy on our website with a revised effective date. If required by law, we will provide additional notice or obtain consent for material changes.

Your continued use of the website or services after an updated Policy becomes effective does not eliminate any rights you may have under applicable law.

16. Contact Information and Privacy Requests

For questions about this Privacy Policy, privacy requests, security concerns, or complaints, contact:

LabCare Mobile Phlebotomy Services

Email: queena@labcaremobilephleb.org

Phone: 240-389-4701

Location: Maryland, United States

Website: labcaremobilephleb.org

When contacting us about a privacy request, please do not include unnecessary medical information or complete medical records in an unsecured email. We may provide a secure method for submitting additional information.

17. Important Compliance Review

This Privacy Policy should be reviewed and updated to match LabCare’s actual operations before publication. In particular, LabCare should confirm:

● Whether it is a HIPAA covered entity, business associate, subcontractor, or none of these for each relevant service.

● Whether a separate HIPAA Notice of Privacy Practices or business associate agreement is required.

● Which laboratories, healthcare providers, payment processors, scheduling platforms, email providers, cloud services, analytics tools, and other vendors receive or can access information.

● Whether those vendors provide appropriate contractual protections and security controls.

● Whether website forms, cookies, pixels, analytics, advertising tools, and appointment systems collect or transmit health-related information.

● Whether Maryland or other state privacy laws apply based on LabCare’s activities and the volume and types of information processed.

● Whether commercial email, telephone, and text-message practices comply with applicable federal and Maryland requirements.

● Whether written security, retention, secure-disposal, incident-response, breach-notification, authorization, and consumer-request procedures are in place.

● Whether any professional, laboratory, payer, contractual, or licensing requirements impose additional privacy or recordkeeping obligations.