Privacy statement

Who processes your data

BioNorth Labs operates bionorthlabs.com and is the controller of the personal data described here. You can reach us at info@bionorthlabs.com; it is the fastest route for anything in this statement.

What we record

Only what an order needs. There are no accounts, no passwords and no profiles.

• —Your name and email address, so we can identify the order and reach you about it.
• —Your country, and your company name if you fill one in.
• —The note you leave with your order — its contents are up to you.
• —What you ordered, the amount, the payment method and the status of the order.
• —The test ID and the unique key that belong to the order.

What we do not record

We do not track you. There is no analytics script, no advertising pixel and no tracking cookie on this site. We do not buy personal data, we do not sell it, and we do not pass it to anyone for their own purposes.

We do not ask what the sample is for, and we do not need to know.

Why we may process it

• —To carry out the agreement: without your email address and your order there is no analysis and no report.
• —To meet legal obligations, such as keeping our administration.
• —For our legitimate interest in a working, non-abused shop — for example when we look into fraud or misuse.

Your report stays anonymous

A report carries the test ID, not your name. Anyone you show the report to can check it against our database without learning who ordered it.

We do not publish results without your explicit consent.

Who else sees it

Three suppliers process data on our behalf, under their data processing agreements, and for nothing beyond what we ask of them:

• —Vercel — hosting of this website.
• —Neon — the database holding orders and reports. Its servers are in the United States.
• —Resend — sending and receiving the emails about your order. Its servers are in Ireland.

Data outside the European Union

Because our database runs on servers in the United States, your order data leaves the European Union. That transfer rests on the standard contractual clauses in the agreements with these suppliers.

We would rather state this plainly than bury it: if this matters to you, it is worth knowing before you order rather than after.

How long we keep it

Order data stays with us for as long as the analysis and any questions about it require, and after that for as long as the law obliges us to keep our administration.

Reports are kept beyond that on purpose. A report that can no longer be verified is worth nothing to the person holding it.

Security

Traffic to this site runs over an encrypted connection. Your order page is protected by a unique key that only you receive; the test ID on its own does not open it.

The lab side of the site is behind a password, and access to the database is limited to the people who need it to do the work.

Your rights

You can ask us to show you your data, to correct it, to erase it, to limit what we do with it, or to hand it to you in a portable form. You can also object to processing based on our legitimate interest.

Write to info@bionorthlabs.com and we will answer within a month. If we cannot honour a request — because the law obliges us to keep something, for instance — we will tell you why.

You also have the right to complain to the data protection authority in the country where you live.

Changes

If this statement changes, the date at the top changes with it. A change never applies retroactively to data that was collected under an earlier version.