Last updated: 4/10/2025
1. Introduction
Welcome to KoLab ("we", "our", or "us"). We respect your privacy and are committed to protecting your personal data, including your health information. This privacy policy will inform you about how we look after your personal data when you visit our website or use our services, including when you book lab tests, schedule home sample collections, or access your test results.
2. Important Information and Who We Are
KoLab is a healthcare platform that connects users with diagnostic laboratories and facilitates the booking of medical tests and home sample collection services. This privacy policy aims to give you information on how we collect and process your personal data through your use of this website and our services.
We have appointed a data protection officer (DPO) who is responsible for overseeing questions in relation to this privacy policy. If you have any questions, including any requests to exercise your legal rights, please contact the DPO using the details set out below:
Email: privacy@kolab.com
Phone: +91 9728899908
Address: 123 Health Street, Medical District
3. The Data We Collect About You
We collect several different kinds of personal data about you, depending on how you interact with us:
- Identity Data: includes first name, last name, username or similar identifier, date of birth, gender, and government-issued identification numbers when required for certain tests.
- Contact Data: includes billing address, delivery address, email address, and telephone numbers.
- Health Data: includes medical test results, health records, medical history, symptoms, medications, and other health-related information you provide to us.
- Financial Data: includes payment card details and transaction data.
- Technical Data: includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
- Profile Data: includes your username and password, your interests, preferences, feedback, and survey responses.
- Usage Data: includes information about how you use our website, products, and services.
- Location Data: includes your current location disclosed by GPS technology or derived from your IP address to facilitate home sample collection services.
4. How We Collect Your Personal Data
We use different methods to collect data from and about you including through:
- Direct interactions: You may give us your Identity, Contact, Health, and Financial Data by filling in forms or by corresponding with us by post, phone, email, or otherwise.
- Automated technologies or interactions: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns.
- Third parties or publicly available sources: We may receive personal data about you from various third parties such as diagnostic laboratories, healthcare providers, and payment service providers.
5. How We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- Where we need to perform the contract we are about to enter into or have entered into with you.
- Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests.
- Where we need to comply with a legal obligation.
- With your consent.
Purposes for which we will use your personal data:
- To register you as a new customer
- To process and deliver your orders including managing payments
- To manage our relationship with you
- To facilitate home sample collection services
- To deliver relevant website content and advertisements to you
- To use data analytics to improve our website, products/services, marketing, customer relationships, and experiences
- To make suggestions and recommendations to you about goods or services that may be of interest to you
6. Home Sample Collection Services
When you book a home sample collection service, we collect additional information to facilitate this service:
- Your precise location for the technician to reach your home
- Preferred time slots for the collection
- Special instructions, if any, for the technician
- Contact information for coordination
Our technicians are trained healthcare professionals who follow strict protocols for sample collection, handling, and transportation. They are bound by confidentiality agreements and are trained in privacy practices.
7. Sharing Your Personal Data
We may share your personal data with the following parties for the purposes set out above:
- Diagnostic Laboratories: To process your test orders and provide you with test results.
- Healthcare Professionals: Including phlebotomists and technicians who conduct home sample collections.
- Service Providers: Including payment processors, IT service providers, and delivery services.
- Professional Advisers: Including lawyers, bankers, auditors, and insurers.
- Regulatory Bodies: Including healthcare regulatory authorities and government agencies when required by law.
8. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. These measures include:
- Encryption of sensitive data
- Secure storage of medical records
- Regular security assessments and audits
- Staff training on data protection and privacy
- Access controls and authentication mechanisms
We have also put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
9. Data Retention
We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.
For medical test results and health data, we typically retain this information for a period of 7 years or as required by applicable healthcare regulations, whichever is longer. This allows for continuity of care and historical analysis of your health trends.
10. Your Legal Rights
Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:
- Request access to your personal data
- Request correction of your personal data
- Request erasure of your personal data
- Object to processing of your personal data
- Request restriction of processing your personal data
- Request transfer of your personal data
- Right to withdraw consent
You can exercise these rights by contacting our Data Protection Officer using the contact details provided above. You will not have to pay a fee to access your personal data or to exercise any of the other rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.
11. Children's Privacy
Our services are not intended for children under 18 years of age without parental consent. We do not knowingly collect personal data from children under 18. If you are a parent or guardian and you are aware that your child has provided us with personal data without your consent, please contact us. If we become aware that we have collected personal data from children without verification of parental consent, we take steps to remove that information from our servers.
12. Changes to This Privacy Policy
We may update our privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date at the top of this privacy policy. You are advised to review this privacy policy periodically for any changes.
13. Contact Us
If you have any questions about this privacy policy or our privacy practices, please contact us at:
Email: privacy@kolab.com
Phone: +91 9728899908
WhatsApp: +91 9728899908
Address: 123 Health Street, Medical District