Privacy Policy

JRS INTEGRITY LAB SERVICES — PRIVACY POLICY

Effective Date: 08/22/2025

JRS Integrity Lab Services ("JRS," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our client portal, or engage our Services.

1. INFORMATION WE COLLECT

a. Information you provide directly

- Name, contact information (phone, email, address)

- Employer/organization information, if applicable

- Information submitted through consent forms, intake forms, or scheduling requests

- Payment information (processed via our secure third-party payment processor; we do not store full card numbers)

b. Information collected as part of Services

- Test results (drug/alcohol testing, background check findings, DNA test results, as applicable)

- Chain-of-custody documentation

- Appointment and scheduling history

c. Automatically collected information

- IP address, browser type, device information

- Website usage data via cookies or similar tracking technologies

2. HOW WE USE YOUR INFORMATION

- To schedule, perform, and deliver testing and related Services

- To provide access to your results and account history through the client portal

- To process payments and manage invoicing

- To communicate with you about appointments, results, and account updates

- To comply with applicable legal, regulatory, or DOT/federal reporting requirements

- To improve our website and Services

3. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information. We may share information in the following circumstances:

- With your employer or designated third party, where you have consented or where required as part of employer-sponsored testing

- With laboratories or collection partners necessary to perform the Service

- With our client portal provider (SuiteDash) and other service providers who help us operate our business, under confidentiality obligations

- When required by law, court order, or regulatory request

- In connection with a business transfer (e.g., merger or acquisition), with notice to affected clients where required

4. DATA SECURITY

We take reasonable administrative, technical, and physical measures to protect your information, including:

- Secure, role-based access to the client portal so clients can only view their own results and account information

- Access controls limiting internal staff access to sensitive results on a need-to-know basis

- Routine backups of client data

No method of electronic storage or transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. HIPAA AND PROTECTED HEALTH INFORMATION

Certain information we handle — including lab test results — may constitute Protected Health Information (PHI) depending on the nature of the testing and how the results are used. Where applicable, we maintain the following safeguards:

- Our client portal provider maintains a Business Associate Agreement (BAA) covering the storage and transmission of PHI through the portal.

- Results and related documents are accessible only to the individual client (or authorized employer representative, where applicable) through secure, role-based portal permissions.

- Secure in-portal messaging is used for communications involving results, rather than including PHI directly in email notifications.

- Internal staff access to client results is limited to personnel with a legitimate need to know.

Where a specific service is provided solely for employment purposes (e.g., employer-sponsored drug testing), resulting records may be treated as employment records rather than PHI once received by the employer, consistent with applicable law. For DNA testing and other services involving sensitive genetic or health-related data, we also comply with applicable state privacy laws, which may impose requirements in addition to HIPAA.

6. DATA RETENTION

We retain client information and test results for as long as necessary to fulfill the purposes described in this Policy, comply with legal and regulatory obligations (including DOT recordkeeping requirements where applicable), resolve disputes, and enforce our agreements.

7. YOUR RIGHTS AND CHOICES

- You may request access to, correction of, or deletion of your personal information, subject to our legal and regulatory recordkeeping obligations.

- You may opt out of non-essential marketing communications at any time.

- To make a request, contact us using the information in Section 10 below.

8. CHILDREN'S PRIVACY

Our Services are not directed to individuals under the age of 18, except where testing is required in connection with an authorized employer, school, or legal guardian arrangement. We do not knowingly collect personal information from children outside of these contexts.

9. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. The "Effective Date" above reflects the most recent revision. Continued use of our website, portal, or Services after changes are posted constitutes acceptance of the revised Policy.

10. CONTACT US

If you have questions about this Privacy Policy or wish to exercise your rights regarding your personal information, please contact us:

JRS Integrity Lab Services

Website: www.jrslabservices.com

Email: info@jrslabservices.com

Phone: 219-533-8064

This document is a general template and does not constitute legal advice. Because JRS collects sensitive information such as drug test results, background check data, and DNA results, we strongly recommend having an attorney licensed in Indiana review this Policy — particularly regarding any state-specific genetic privacy laws and DOT/federal recordkeeping rules — before publishing it.