Privacy policy

To perform an analysis, the laboratory processes the details needed to accept a sample and return a report: a contact address, a sample reference, the analysis ordered, and the resulting record.

Payment is handled by a payment provider. In this demonstration build no payment is processed and no card details are collected or stored at any point.

Samples are logged against a reference rather than a client name, so that the analytical record and the client identity are not held together by default.

Results are released only to the client who submitted the sample. ZERA does not publish client results.

The verification service accepts a report number and a verification key and returns whether a matching issued record exists. It does not return measured values or client identity, and a failed lookup is indistinguishable from a lookup of a report number that does not exist.

Issued records are retained so that a report can be verified for as long as a client may need to rely on it. Physical samples are retained only as long as the analysis and any re-analysis require, and are then destroyed.

PLACEHOLDER — concrete retention periods must be set and reviewed before launch.

Depending on your jurisdiction you may have rights of access, correction, erasure and portability over personal data held about you. Requests can be sent to the laboratory's contact address.

PLACEHOLDER — this section must be reviewed against the GDPR and any other applicable regime, including the identity of the data controller and the lawful basis relied upon.