This Privacy Policy ("Privacy Policy") explains what information we collect from Laboratory Partners, why we collect it, how we use and protect it, and the circumstances in which it may be shared.
ℹ️By registering as a Laboratory Partner or using the Testify Samples Laboratory Partner Portal, you acknowledge that you have read and understood this Privacy Policy.
1. Scope of this Privacy Policy
This Privacy Policy applies to personal and business information collected from or relating to a Laboratory Partner, including its owners, directors, authorised representatives, contact persons, and other individuals associated with the Laboratory Partner.
This Privacy Policy applies to information collected in connection with:
- Laboratory registration and account creation;
- Laboratory profile creation;
- Laboratory verification and onboarding;
- KYC and business verification;
- Certification and accreditation verification;
- GST and PAN verification;
- Laboratory Partner Agreement execution;
- Electronic signing/eSign;
- Laboratory payouts and settlements;
- Laboratory marketplace operations;
- Communication and support; and
- Compliance, security, fraud prevention, and legal requirements.
2. Information We Collect
We collect information that is reasonably necessary to register, verify, onboard, operate, and maintain the Laboratory Partner relationship.
2.1 Account and Login Information
During account registration, we may collect:
- Name;
- Email address;
- Password or login credentials;
- Authentication information;
- Account and login activity; and
- Security-related information.
Passwords are intended to be protected using appropriate security mechanisms and should not be stored in plain-text form.
2.2 KYC and Compliance Documents
For laboratory onboarding and verification, we may collect documents such as registration certificates, GST/PAN details, accreditation or certification documents, authorised representative identification, bank/settlement details, and other compliance documents. These may be retained for verification, marketplace operations, settlements, taxation, contractual, legal and regulatory purposes, for as long as necessary or as required or permitted by applicable law.
3. Laboratory Profile Information
During onboarding, we may collect information about the Laboratory, including:
- Laboratory name;
- Laboratory logo;
- Laboratory banner or cover image, if provided;
- Laboratory slug or profile identifier;
- Legal name;
- Legal/business status;
- Business constitution, such as:
- Private Limited Company;
- Partnership;
- Proprietorship;
- Limited Liability Partnership (LLP);
- Society;
- Trust;
- Educational or institutional laboratory; or
- Other applicable legal structure;
- Legal registration number;
- Business registration information;
- About/description of the Laboratory;
- Opening days;
- Opening hours;
- Laboratory address;
- Laboratory location and geographical coordinates;
- Laboratory category;
- Laboratory specialisations;
- Tests and services offered; and
- Other information voluntarily provided for the Laboratory profile.
Certain Laboratory profile information may be displayed to researchers or other users through the Testify Samples platform to enable them to discover and select Laboratory Partners.
4. Contact Person Information
We may collect information relating to the Laboratory's designated contact person, including:
- Full name;
- Designation;
- Business email address;
- Primary phone/mobile number;
- Secondary phone/mobile number; and
- Other contact information provided for business communication.
This information may be used for onboarding, operational communication, order-related communication, support, sample-related communication, report-related communication, payments, compliance, and other legitimate business purposes.
5. Owner, Director or Authorised Representative Information
For Laboratory verification and execution of the Laboratory Partner Agreement, we may collect information relating to the Laboratory's owner, proprietor, director, authorised signatory, or other authorised representative.
This may include:
- Full legal name;
- Name as appearing on the applicable identity document;
- Email address;
- Phone/mobile number;
- Designation or capacity in which the individual represents the Laboratory; and
- Information necessary to establish the individual's authority to represent the Laboratory.
Where the owner, director, or authorised representative executes the Laboratory Partner Agreement on behalf of the Laboratory, this information may be used to establish and maintain the contractual record.
6. Certifications and Accreditations
For Laboratory verification and to provide relevant information to researchers, we may collect:
- Certification details;
- Accreditation details;
- Certification or accreditation number;
- Issuing authority/organisation;
- Validity period;
- Certification/accreditation status;
- Copies, scans, or photographs of certificates; and
- Other supporting documentation.
This may include NABL, ISO, GLP, GMP, institutional, or other applicable certifications and accreditations.
Where appropriate, we may verify such information through issuing organisations, publicly available sources, or third-party verification services.
7. GST and PAN Information
For business verification, taxation, invoicing, settlement, accounting, and compliance purposes, we may collect:
- GST Identification Number (GSTIN);
- GST registration information;
- GST registration document;
- Permanent Account Number (PAN);
- PAN-related documentation, where required; and
- Other tax information reasonably necessary for our business relationship.
Tax-related information may be retained for the period required under applicable tax, accounting, legal, and regulatory requirements.
8. Laboratory Documents
During onboarding or subsequently, the Laboratory Partner may be required to upload documents supporting its identity, legal status, business operations, or eligibility.
These may include:
- Business registration documents;
- GST documents;
- PAN documents;
- Certification documents;
- Accreditation documents;
- Licences and registrations;
- Authorisation documents;
- Ownership or representation documents; and
- Other documents reasonably required for verification, compliance, or contractual purposes.
We may review, verify, store, and process such documents for the purposes described in this Privacy Policy and the Laboratory Partner Agreement.
9. Laboratory Seal and Authorised Signature
After onboarding, we may collect and store:
- Laboratory seal/stamp;
- Specimen laboratory signature;
- Authorised signatory signature; and
- Other information required for laboratory reports, documents, or operational records.
Such information may be used to authenticate or validate documents and reports issued by or through the Laboratory Partner.
10. Bank and Payout Information
For processing Laboratory Partner payouts, settlements, refunds, and other applicable payments, we may collect:
- Account holder name;
- Bank account number;
- IFSC code;
- Account type;
- Bank name;
- Branch name;
- UPI ID; and
- Other payment or settlement information required for processing payouts.
Banking and payout information will be treated as confidential information and may be used for payment processing, settlement, reconciliation, accounting, fraud prevention, and legal or regulatory purposes.
We may share relevant information with authorised payment processors, banking partners, or financial service providers where necessary to process payments or settlements.
11. Laboratory Partner Agreement and Electronic Signing
As part of the onboarding process, the Laboratory Partner may be required to review and accept the Laboratory Partner Agreement containing the applicable commercial, operational, legal, confidentiality, sample-handling, reporting, settlement, and other terms governing the relationship between the Laboratory Partner and Testify Samples.
The Laboratory Partner may be required to complete an electronic signing/eSign process.
Information associated with the agreement execution process may include:
- Laboratory Partner details;
- Owner/director/authorised signatory details;
- Agreement version;
- Agreement date;
- Acceptance records;
- Electronic signing records;
- Electronic signature/eSign information;
- Transaction or reference identifiers;
- Date and time of signing; and
- Relevant audit trail.
The completed agreement and related records may be retained as contractual and legal records.
12. Aadhaar-Based eSign
Where the Laboratory Partner executes the Laboratory Partner Agreement through Aadhaar-based electronic signing, Testify Samples may use a third-party electronic signature/eSign service provider.
The eSign process may require the Laboratory Partner or authorised signatory to complete identity authentication through the third-party eSign provider.
Aadhaar authentication and OTP-based verification may be processed directly by the authorised third-party eSign provider in accordance with its applicable processes, terms, privacy policy, and legal requirements.
🔒Testify Samples does not intend to independently collect or store the Aadhaar OTP used during the eSign authentication process.
Where applicable, Testify Samples may receive and retain the electronic agreement, electronic signature records, signature certificate, transaction/reference ID, timestamp, audit trail, or other evidence necessary to establish and verify execution of the agreement.
The Laboratory Partner should review the privacy policy and applicable terms of the relevant third-party eSign provider before proceeding with the electronic signing process.
13. Purpose of Collecting and Using Information
We may collect and process Laboratory Partner information for the following purposes:
Account Management
- Creating and managing Laboratory Partner accounts;
- Authenticating users;
- Securing accounts; and
- Managing access to the Laboratory Partner Portal.
Laboratory Onboarding and Verification
- Verifying Laboratory identity and business information;
- Conducting KYC/business verification;
- Reviewing submitted documents;
- Verifying certifications and accreditations; and
- Determining eligibility for participation in the Testify Samples marketplace.
Marketplace Operations
- Creating and maintaining Laboratory profiles;
- Displaying relevant Laboratory information to researchers;
- Enabling researchers to discover Laboratory Partners;
- Managing tests and services offered by the Laboratory; and
- Facilitating bookings and orders.
Operational Communication
- Communicating regarding orders;
- Sample pickup and delivery;
- Sample receipt;
- Testing status;
- Report uploads;
- Order issues;
- Customer/researcher communication; and
- Support.
Contract and Agreement Management
- Preparing and executing the Laboratory Partner Agreement;
- Establishing the identity and authority of the signatory;
- Facilitating electronic signing;
- Maintaining contractual records; and
- Managing contractual rights and obligations.
Payments and Settlements
- Processing Laboratory Partner payouts;
- Calculating settlements;
- Processing applicable refunds or adjustments;
- Maintaining financial records; and
- Reconciling transactions.
Security and Compliance
- Preventing fraud and misuse;
- Detecting suspicious activity;
- Maintaining audit trails;
- Protecting our systems;
- Resolving disputes; and
- Complying with applicable legal, tax, accounting, regulatory, and governmental requirements.
14. Publicly Displayed Laboratory Information
Certain Laboratory information may be displayed on the Testify Samples platform and may be visible to researchers or other users.
This may include:
- Laboratory name;
- Laboratory logo;
- Laboratory banner;
- Laboratory location or address;
- Laboratory category;
- Laboratory specialisations;
- Tests and services offered;
- Opening hours;
- Certifications/accreditations; and
- Other information specifically provided for public or marketplace display.
🛡️Confidential Information Protection: We do not intend to publicly display confidential information such as:
- Passwords;
- Bank account numbers;
- IFSC details;
- PAN details;
- Internal KYC documents;
- Confidential agreement records; or
- Other confidential onboarding information,
except where required or permitted by applicable law or expressly authorised by the Laboratory Partner.
15. Sharing and Disclosure of Information
We may share information with the following categories of recipients where reasonably necessary for the purposes described in this Privacy Policy.
15.1 Service Providers
We may use third-party service providers for:
- Cloud hosting and infrastructure;
- Database services;
- Authentication;
- Email, SMS, WhatsApp, and other communications;
- Payment processing;
- Banking and settlement;
- Document storage;
- Electronic signatures/eSign;
- Security and fraud prevention;
- Analytics; and
- Technical support.
Such service providers may process information on our behalf and may be subject to contractual, confidentiality, and security obligations.
15.2 Payment and Banking Partners
Relevant information may be shared with payment processors, banks, financial institutions, and settlement service providers where necessary to process Laboratory Partner payouts and related transactions.
15.3 eSign Service Providers
Information necessary for electronic execution of the Laboratory Partner Agreement may be shared with our authorised third-party eSign provider.
15.4 Legal and Regulatory Authorities
We may disclose information where required or permitted by applicable law, court order, governmental request, regulatory requirement, or legal process.
15.5 Professional Advisors
Where necessary, information may be shared with lawyers, auditors, accountants, consultants, or other professional advisors subject to appropriate confidentiality obligations.
15.6 Business Transfers
In the event of a merger, acquisition, restructuring, financing, sale of assets, or similar corporate transaction, relevant information may be transferred as part of the transaction, subject to applicable law.
16. Data Storage and Security
We take reasonable technical and organisational measures to protect Laboratory Partner information against unauthorised access, disclosure, loss, misuse, alteration, destruction, and other reasonably foreseeable security risks.
Depending on the nature of the information and processing activity, security measures may include:
- Access controls;
- Authentication mechanisms;
- Encryption where appropriate;
- Secure data transmission;
- Role-based access;
- Logging and monitoring;
- Secure cloud infrastructure; and
- Controlled access to confidential documents.
However, no electronic system, network, or transmission method can be guaranteed to be completely secure.
Laboratory Partners are responsible for maintaining the confidentiality of their account credentials and should promptly notify us of any suspected unauthorised access or security incident relating to their account.
17. Data Retention
We retain Laboratory Partner information for as long as reasonably necessary for the purposes for which it was collected, including:
- Maintaining the Laboratory Partner relationship;
- Providing services;
- Maintaining contractual records;
- Processing payments and settlements;
- Resolving disputes;
- Preventing fraud and misuse;
- Maintaining audit records; and
- Complying with applicable legal, tax, accounting, and regulatory requirements.
Certain information may continue to be retained after termination of the Laboratory Partner relationship where required or reasonably necessary for legal, contractual, accounting, security, dispute-resolution, or regulatory purposes.
When information is no longer required, we may delete, anonymise, or securely dispose of it in accordance with our retention practices and applicable law.
18. Accuracy of Information
Laboratory Partners are responsible for ensuring that information submitted to Testify Samples is accurate, complete, current, and not misleading.
Laboratory Partners should promptly update information where there are changes to:
- Ownership;
- Authorised representatives;
- Contact persons;
- Certifications;
- Accreditations;
- GST or tax details;
- Banking information;
- Laboratory address;
- Operating hours; or
- Other material business information.
We may request additional verification or supporting documentation before accepting changes to sensitive information.
19. Data Principal Rights
Where applicable under the Digital Personal Data Protection Act, 2023 and other applicable Indian laws, individuals whose personal data is processed may have rights available under applicable law, including rights relating to:
- Access to information about processing;
- Correction or updating of inaccurate or incomplete personal data;
- Erasure of personal data where applicable;
- Withdrawal of consent where processing is based on consent;
- Grievance redressal; and
- Nomination of another individual, where applicable under law.
Requests may be submitted through the contact details provided in this Privacy Policy.
We may require appropriate verification of identity and authority before processing a request.
20. Withdrawal of Consent
Where processing is based on consent, consent may be withdrawn subject to applicable law.
Withdrawal of consent will not affect processing that:
- Was completed before withdrawal;
- Is necessary to fulfil a contract;
- Is required by law;
- Is necessary for legal claims or dispute resolution; or
- Is otherwise permitted under applicable law.
Withdrawal of consent may affect our ability to provide certain services where the relevant information is necessary for those services.
21. Cookies and Technical Information
When the Laboratory Partner uses our website, Laboratory Partner Portal, or other digital services, we may automatically collect certain technical information, including:
- IP address;
- Browser type;
- Device information;
- Operating system;
- Login timestamps;
- Session information;
- Security logs;
- Usage information; and
- Diagnostic information.
We may use cookies and similar technologies to maintain sessions, improve security, remember preferences, understand usage, and improve our services.
22. Communications
We may contact Laboratory Partners using the contact information provided during registration or onboarding for:
- Account verification;
- Onboarding;
- Laboratory verification;
- Orders;
- Sample-related updates;
- Report-related notifications;
- Payments and settlements;
- Agreement-related communications;
- Security alerts;
- Service announcements;
- Support; and
- Compliance matters.
Operational, transactional, security, and legally required communications may continue even where a Laboratory Partner has opted out of non-essential promotional communications.
23. Third-Party Services and Links
The Testify Samples platform may contain links to or integrations with third-party websites or services.
Third-party services, including payment providers, eSign providers, communication providers, and other integrated services, may have their own privacy policies and terms.
Laboratory Partners should review the privacy policies and applicable terms of such third-party providers where appropriate.
24. International Data Transfers
Some of our technology or service providers may process or store information in locations outside India.
Where personal data is transferred or processed outside India, Testify Samples will take such measures as may be required under applicable Indian laws and regulations.
25. Children's Data
The Testify Samples Laboratory Partner services are intended for laboratories, businesses, institutions, and individuals acting in a professional or business capacity.
We do not knowingly seek to collect personal data from children for Laboratory Partner onboarding.
26. Changes to Laboratory Partner Information
If there is a change in ownership, management, authorised signatory, contact person, legal status, bank account, certification, accreditation, or other material Laboratory information, the Laboratory Partner must provide updated information and supporting documentation where required.
We may request additional verification before accepting changes to sensitive information, particularly:
- Bank details;
- Ownership information;
- Authorised signatory information;
- Legal entity information; and
- Agreement-related information.
27. Fraud, Misuse and Security Investigations
We may process Laboratory Partner information where reasonably necessary to:
- Detect fraudulent activity;
- Investigate suspicious transactions;
- Investigate misuse of the platform;
- Prevent unauthorised access;
- Investigate breaches of the Laboratory Partner Agreement;
- Protect researchers, Laboratory Partners, employees, service providers, and other users; and
- Protect Testify Samples' systems, services, and business interests.
Where appropriate and legally permitted, relevant information may be shared with competent authorities or professional advisors.
28. Grievance Redressal
In accordance with applicable Indian laws, including applicable provisions of the Digital Personal Data Protection Act, 2023 and rules made thereunder, you may contact our Grievance Officer regarding any privacy-related grievance, complaint, request, or concern relating to the processing of your personal data.
We aim to acknowledge and address grievances within the timelines prescribed under applicable law or our internal grievance-handling procedures, as applicable.
29. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, you may contact us at:
30. Consent and Acknowledgement
By registering as a Laboratory Partner, submitting information or documents, or using the Testify Samples Laboratory Partner Portal, you acknowledge that you have read and understood this Privacy Policy.
Where consent is required under applicable law, such consent will be obtained through an appropriate mechanism.
