Privacy Policy

Effective date October 27, 2026

This Privacy Policy explains how HomeAccess Labs collects, uses, discloses, and protects personal information when you visit our website, request a service, communicate with us, or otherwise interact with us. It also explains the choices and privacy rights available to you.

Scope

This policy applies to the HomeAccess Labs website, online service request forms and chat, customer communications, and related services that link to it. It does not govern an independent laboratory, clinician, payment processor, or other third party operating under its own privacy notice.

Service request forms and chat

When you submit a Request Service form or business testing request on our website, we collect the information you choose to provide so we can understand your needs and contact you. This may include your name, email address, phone number, preferred contact method and language, the service you need and the reason for your request, your city or ZIP code and preferred service location, the number of people or pets to be tested, your preferred days and dates, urgency or deadlines, and any additional details or questions you share.

Please do not submit medical records, identification documents or other sensitive documents through our website forms. If any documents are needed for your service, we will explain how to provide them securely when we contact you.

Form submissions are sent to our business email and stored securely in our website system, where access is limited to authorized HomeAccess Labs personnel (such as the owner and administrative assistant) who review and follow up on inquiries. By checking the consent box on the form, you agree that we may contact you by phone, text message, email or WhatsApp about your inquiry, including to discuss your needs, scheduling and pricing. We do not use inquiry information for unrelated marketing without your separate consent.

If you contact us through the WhatsApp chat button on our website, your messages are sent to us through WhatsApp and are also subject to WhatsApp’s own terms and privacy policy. We keep inquiry records only for as long as reasonably necessary to respond to you, provide any requested service, and meet our legal and business obligations.

Information we collect

Depending on how you interact with us, we may collect:

• Identifiers and contact information, such as your name, email address, telephone number, mailing address, date of birth, and request or appointment identifiers.
• Appointment and service information, such as requested tests or services, appointment date and location, preparation details, referring or ordering provider information, and service history.
• Health-related information that you choose to provide or that is needed to coordinate a requested service, including laboratory requisition details and information associated with specimen collection or results delivery.
• Payment and transaction information, such as billing address, payment status, refunds, and partial payment-card details supplied by our payment processor. We generally do not store complete card numbers.
• Communications, including calls, emails, text messages, customer-service requests, reviews, survey responses, and records of consent or preferences.
• Device and website information, such as IP address, browser type, device identifiers, pages viewed, referring pages, approximate location derived from an IP address, timestamps, and cookie or similar-technology data.
• Information from service providers and partners, such as website, form and messaging platforms, laboratories, clinicians, couriers, payment processors, communications providers, and analytics or security vendors.

How we use information

• provide, schedule, coordinate, and document requested services;
• confirm identity, eligibility, orders, and appointment details;
• process payments, refunds, late-cancellation charges, and no-show charges;
• communicate confirmations, preparation instructions, service updates, results-access information, and customer support responses;
• operate, secure, troubleshoot, personalize, and improve our website and services;
• detect fraud, misuse, security incidents, and violations of our terms;
• comply with legal, regulatory, licensing, recordkeeping, and public-health obligations; and
• send marketing communications when permitted by law and consistent with your choices.

How we disclose information

We may disclose personal information to:

• laboratories, clinicians, ordering providers, couriers, and other parties involved in providing or coordinating the service you request;
• vendors that support hosting, service requests, payments, customer communications, analytics, security, document storage, and professional services, subject to appropriate contractual restrictions where required;
• government agencies, regulators, law enforcement, courts, or other persons when disclosure is required or permitted by law or reasonably necessary to protect rights, safety, and security;
• a buyer, successor, lender, or adviser in connection with a merger, financing, reorganization, sale, or other business transaction, subject to applicable safeguards; and
• other parties at your direction or with your consent.

HomeAccess Labs does not sell personal information for money. We do not disclose health information for cross-context behavioral advertising. If our practices change, we will provide any notice and choice required by applicable law.

Health information and HIPAA

Some health information may be protected by the Health Insurance Portability and Accountability Act and its implementing regulations when HomeAccess Labs or a participating partner acts as a covered entity or business associate. When HIPAA applies, protected health information is handled under the applicable Notice of Privacy Practices and related agreements. If this Website Privacy Policy conflicts with an applicable Notice of Privacy Practices regarding protected health information, the Notice of Privacy Practices controls.

Not all health-related information collected through a website is necessarily protected by HIPAA. Other federal or state privacy and breach-notification laws may apply.

Cookies and analytics

We and our service providers may use cookies, pixels, local storage, and similar technologies to keep the website functioning, remember preferences, measure performance, prevent fraud, and understand website use. You can adjust browser settings to limit cookies, but parts of the website may not work correctly. Where required, we will request consent or provide a method to manage nonessential cookies.

Text messages and email

If you provide a mobile number or email address, we may send transactional messages about appointments, preparation, payments, security, or service updates. Marketing messages are sent only as permitted by law. You may opt out of marketing email using the unsubscribe link and may reply STOP to eligible marketing text messages. Opting out of marketing does not stop necessary service or safety communications. Message and data rates may apply.

Data retention

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including to provide services, maintain required clinical and business records, resolve disputes, enforce agreements, prevent fraud, and meet legal obligations. Retention periods vary by information type, relationship, and applicable law. We delete, deidentify, or securely dispose of information when it is no longer reasonably needed, unless continued retention is required or permitted by law.

Security

We use administrative, technical, and physical safeguards designed to protect personal information. No website, transmission method, or storage system can be guaranteed completely secure. Contact us promptly if you believe your information or account has been compromised.

Your privacy choices and rights

You may request access to, correction of, or deletion of certain personal information, or ask questions about our processing, by contacting us as described below. You may also update communication preferences and cookie choices using available website controls.

Texas residents may have rights under the Texas Data Privacy and Security Act, when it applies, including rights to confirm processing, access, correct, delete, and obtain a portable copy of personal data, and to opt out of certain targeted advertising, sale, or profiling. You may appeal our decision on a request by replying to the decision or contacting us with the subject “Privacy Appeal.” These rights are subject to legal definitions, exceptions, verification, and applicability requirements. We will not unlawfully discriminate against you for exercising an applicable privacy right.

To protect privacy, we may verify your identity and authority before fulfilling a request. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and direct identity verification.

Children

Our website is not directed to children under 13, and we do not knowingly collect personal information directly from a child under 13 without legally valid authorization. A parent or legal guardian must arrange services and provide information for a minor when permitted. Contact us if you believe a child provided information without appropriate authorization.

Third party links and services

The website may link to or integrate services operated by third parties. Their privacy practices are governed by their own notices, and HomeAccess Labs is not responsible for their independent practices.

Changes to this policy

We may update this policy to reflect changes in our services, technology, legal obligations, or privacy practices. We will post the revised policy with a new effective date and provide additional notice when required by law.

Contact us

Questions, complaints, and privacy requests may be sent to:

HomeAccess Labs
Attn Privacy
Houston, Texas
info@homeaccesslabs.com
(832) 428-0591
Homeaccesslabs

Drafting note: Replace every bracketed field and confirm the descriptions of website cookies, analytics, payment processing, laboratories, communications, and health-data workflows before submission or publication. This website policy is not a substitute for a HIPAA Notice of Privacy Practices when one is required.