Privacy Policy

1. Introduction

TBioScan® ("TBioScan," "we," "us," or "our") operates a specialized diagnostic platform for objective blood biomarker testing related to traumatic brain injury (TBI). Laboratory testing is developed, validated, and performed by BioCentra®, a CAP-accredited, CLIA-certified high-complexity laboratory. We are committed to protecting your personal privacy and your Protected Health Information (PHI). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the TBioScan platform — whether you are a patient, a treating clinician, a partner clinic, or a referring attorney or law firm.

2. Who This Policy Covers

• Patients whose specimens are collected by a partner clinic and analyzed by our laboratory, and who may access their reports through the platform.
• Clinicians and partner clinics who order tests, submit specimens, and receive reports on behalf of their patients.
• Attorneys and law firms who refer cases and, with proper patient authorization, receive reports in support of a legal matter.
• Website visitors who browse our public pages or submit partner onboarding forms.

3. Information We Collect

• Personal Identification Information (PII): Name, email address, phone number, date of birth, and mailing address.
• Protected Health Information (PHI): Test requisitions, relevant medical and incident history provided during intake, specimen collection details, and the biomarker results and reports generated by our laboratory. PHI is handled in strict accordance with the Health Insurance Portability and Accountability Act (HIPAA).
• Case and Referral Information: When a test is referred by an attorney or law firm, we collect the referral details needed to associate the test with the correct case and to deliver reports to authorized recipients.
• Partner and Professional Information: Practice or firm name, professional credentials, and business contact details submitted through our partner onboarding forms.
• Payment Transaction Data: Where payments are processed through the platform, we store the transaction response received from our payment processor (Intuit QuickBooks), including the charge identifier, payment status, and transaction date. We do not store your full card number, CVV, or expiration date on our servers.

4. How We Use Your Information

We use the information collected to:

• Process test requisitions and coordinate specimen collection and shipping with partner clinics.
• Perform laboratory analysis and generate TBioScan® reports.
• Deliver reports securely to the patient and to recipients the patient has authorized, such as the treating clinician or referring attorney.
• Facilitate secure payments through our third-party processor.
• Operate, maintain, and secure the platform, including audit trails required for laboratory compliance.
• Comply with applicable legal, regulatory, CLIA, and HIPAA requirements.

5. Disclosure of Your Information

We do not sell your personal data, and we do not use PHI for advertising. We share information only in the following circumstances:

• Our Laboratory: Specimens and requisition data are shared with BioCentra®, the laboratory that performs the testing, under HIPAA-compliant safeguards.
• Authorized Recipients: Reports are released to your treating clinician and, where you have provided written authorization, to your attorney or law firm.
• Service Providers: We share the minimum necessary data with vendors who support the platform, such as Intuit QuickBooks for payment processing, under appropriate agreements.
• Legal Compliance: We may disclose information when required by law, court order, or governmental authority, or as permitted by HIPAA.

6. Security

We use administrative, technical, and physical safeguards to protect PII and PHI, including encrypted transmission (HTTPS), role-based access controls, and tenant-level data isolation so that each clinic and firm can access only its own records. Payment details are transmitted directly to our payment processor and never stored on our servers. No security measure is impenetrable, and we cannot guarantee absolute security.

7. Data Retention

Laboratory records and test results are retained for the periods required by CLIA and applicable state law, which may exceed the retention you request. Other personal information is retained only as long as needed for the purposes described in this Policy or to satisfy legal obligations.

8. Your Rights

Depending on your jurisdiction, you may have the right to request access to, correction of, or deletion of the personal information we hold about you, and to receive a copy of your test reports. Because we operate in a regulated clinical laboratory context, certain medical-record retention laws may supersede deletion requests. To exercise a right, contact us using the details below; we will verify your identity before acting on a request.

9. Children's Privacy

The platform is not directed to children, and we do not knowingly collect information directly from children. Testing for a minor is coordinated through the minor's clinician, parent, or legal guardian.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date above reflects the most recent revision. Continued use of the platform after changes take effect constitutes acceptance of the revised Policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: