Privacy policy
What we collect, why, where it lives and what you can ask us to do with it.
Draft for review. This text is a starting point and has not yet been reviewed by legal counsel.
Last updated 12 September 2026
Who we are
ZapLab ("we") provides a laboratory information system to diagnostic laboratories ("labs"). This policy covers this website and the accounts labs create on the platform. Contact: hello@example.com.
Two kinds of data
Account data is what a lab gives us to run its account: the organisation name, staff names, emails, phone numbers and billing details. We are the data fiduciary for account data.
Patient data is what a lab enters into the platform about its patients: registrations, samples, results and reports. The lab is the data fiduciary for patient data and decides why it is collected and for how long it is kept. We process it only on the lab’s instructions to provide the service.
What we collect on this website
If you send a demo request we keep the details you enter (name, lab, email, phone, city, message) to respond to you. This site does not use advertising cookies. A theme preference may be stored in your browser’s local storage.
Where data is stored
The platform and its databases are hosted in India. We do not transfer patient data outside India to provide the service. Service providers we rely on for email, messaging and payments process only the data needed for their function.
How long we keep it
Account data is kept while the account exists and for as long afterwards as tax and accounting law require. Patient data is kept for as long as the lab keeps it on the platform; labs remain responsible for their own statutory retention periods for medical records.
Your rights
Under the Digital Personal Data Protection Act 2023 you may ask for access to, correction of, or erasure of your personal data, and you may withdraw consent where processing is based on it. For account data, write to us. For patient data, contact the lab that performed your test; we will support the lab in responding.
Security
Connections are encrypted with TLS. Each lab’s data is isolated from every other lab’s. Access inside a lab is permission-based, and an audit trail records changes to results and reports. See the Security page for detail.
Changes to this policy
We will post changes here and update the date above. Material changes will be announced to account holders by email.