Privacy Policy

1. Information We Collect

We collect information you provide directly, including:

• Account data: laboratory name, administrator name, email, phone number
• Patient data: names, MRN numbers, test orders, and results entered by your staff
• Billing data: payment method details processed by Stripe (we do not store card numbers)
• Usage data: log files, access timestamps, IP addresses, browser type

2. How We Use Your Information

We use collected information to:

• Provide, operate, and improve the Mednor LIS service
• Process subscription payments and send billing notifications
• Send system notifications, result alerts, and support communications
• Ensure platform security and detect fraudulent activity
• Comply with legal obligations

3. Data Storage & Security

Your data is stored on encrypted servers. We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, regular automated backups, and access controls with audit logging. Sensitive patient data is isolated per laboratory (multi-tenant architecture).

4. Data Sharing

We do not sell your data. We share data only with:

• Stripe: for payment processing
• Email providers: for transactional email delivery
• Legal authorities: when required by applicable law

5. Patient Data & Healthcare Compliance

Patient data entered into Mednor is owned by your laboratory. You are the data controller for patient information. We act as a data processor under your instructions. You are responsible for obtaining proper patient consent and complying with applicable healthcare data regulations.

6. Data Retention

Account and patient data is retained for the duration of your active subscription plus 90 days. After subscription cancellation, you may request a data export within this window. After 90 days, data is permanently deleted from our systems.

7. Your Rights

As a subscriber, you have the right to: access your data, request corrections, export all data, and request deletion of your account and associated data. Contact us at [email protected] to exercise these rights.

8. Cookies

We use essential session cookies required for authentication and security. We do not use tracking or advertising cookies.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by email. Continued use of the Service after notification constitutes acceptance of the revised policy.

10. Contact

For privacy inquiries: [email protected]