Privacy Policy

Information You Provide Directly

• Contact information (name, email address, phone number) when you fill out a contact form, book an appointment, or create a portal account
• Company or employer information when provided in connection with testing services
• Payment information when purchasing tests or paying invoices (processed securely through our third-party payment processor — we do not store credit card numbers)

Information Collected Automatically

• Browser type and version
• Pages visited and time spent on pages
• Referring website address
• Device type and operating system
• IP address (used for security and fraud prevention only)

We use the information we collect to:

• Provide, maintain, and improve our laboratory testing services
• Process transactions and send related information (confirmations, invoices)
• Send notifications when your lab results are available in the client portal
• Respond to your inquiries and provide customer support
• Send appointment reminders and service-related communications
• Comply with legal obligations and regulatory requirements
• Protect against fraudulent or unauthorized activity

Pronto Test Labs is a HIPAA-covered entity. Any Protected Health Information — including lab results, specimen data, and health-related records — is handled in strict accordance with the Health Insurance Portability and Accountability Act (HIPAA) and our HIPAA Privacy and Security Policy. PHI is:

• Encrypted at rest and in transit using industry-standard encryption
• Stored in a HIPAA-compliant database with a signed Business Associate Agreement
• Accessible only to authorized personnel on a need-to-know basis
• Never sold, shared for marketing purposes, or disclosed without authorization except as required by law

For a full description of your rights regarding your health information, please request a copy of our HIPAA Privacy and Security Policy by contacting us at info@prontotestlabs.com.

When you create a client portal account, your login credentials are encrypted and your session is secured with automatic timeout after a period of inactivity. All access to your lab results is logged for security and compliance purposes. You can manage your notification preferences (email and SMS) through your portal settings at any time.

We use trusted third-party service providers to operate our website and deliver our services. These providers may include:

• Payment processors for secure transaction handling
• Email and SMS services for appointment and result notifications
• Hosting providers for website delivery

These providers are contractually bound to protect your information and are prohibited from using it for any purpose other than providing services to us. Where required by law, Business Associate Agreements are in place.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Our website uses essential cookies required for the site to function properly (such as maintaining your login session). We do not use advertising cookies or third-party tracking pixels. We do not sell data to advertisers.

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Lab results and health records are retained in accordance with applicable state and federal regulations. You may request deletion of your non-health-related personal data by contacting us.

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information (subject to legal retention requirements)
• Opt out of marketing communications at any time

To exercise any of these rights, contact us at info@prontotestlabs.com or call (956) 322-5996.

Our website and services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete that information.

We implement industry-standard administrative, technical, and physical security measures to protect your personal information. These include encryption, access controls, audit logging, and secure authentication. While no system is 100% secure, we are committed to protecting your information to the highest standard.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date. We encourage you to review this policy periodically.

If you have questions about this Privacy Policy or our data practices, contact us: