Privacy Policy

1. Who We Are

Express Mobile Diagnostics ("EMD," "we," "us," or "our") is a mobile testing services company operating in Central Arkansas. We provide certified mobile drug testing, legal DNA testing, and employer compliance programs. This Privacy Policy applies to both of our websites:

• https://expressmobilediagnostics.com (main website)
• https://book.expressmobilediagnostics.com (booking portal)

and to all services we provide in person at client locations.

2. Information We Collect

We collect information in two ways: information you provide directly to us, and information collected automatically when you use our websites.

Information You Provide Directly:

Information Collected Automatically:

• IP address and general geographic location
• Browser type and version
• Pages visited and time spent on our websites
• Referring website or search terms
• Device type and operating system

This information is collected through standard web server logs and may be collected through cookies or similar technologies as described in Section 8.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To confirm appointments, dispatch collectors, conduct testing, and deliver results
• Communication: To contact you about your appointment, answer questions, and provide service updates
• Compliance: To meet federal and state regulatory requirements for drug testing, DNA testing, and employer programs
• Billing: To process payments and maintain financial records
• Quality Assurance: To improve our services, train staff, and maintain accreditation standards
• Legal Obligations: To respond to lawful requests from courts, regulatory agencies, or law enforcement
• Website Improvement: To understand how visitors use our websites and improve user experience

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.

4. HIPAA Compliance and Protected Health Information

As a HIPAA-covered entity or business associate (depending on the service context), we:

• Maintain administrative, physical, and technical safeguards to protect PHI
• Limit access to PHI to authorized personnel only
• Do not sell PHI under any circumstances
• Provide PHI only to authorized parties as described in Section 5
• Retain PHI for the period required by applicable law and then securely destroy it

You have the right to request access to your PHI, request corrections, and request an accounting of disclosures, subject to applicable legal limitations. To exercise these rights, contact us using the information in Section 12.

5. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

• Laboratory Partners: We share specimen and identifying information with our SAMHSA-certified laboratory partners to process test results. These partners are bound by confidentiality agreements and applicable law.
• Medical Review Officers (MROs): Positive drug test results are reviewed by a licensed MRO as required by federal regulations.
• Employers and Authorized Third Parties: If your employer or an authorized third party ordered your test, we will report results to them as permitted by law and as disclosed at the time of collection.
• Legal and Regulatory Authorities: We may disclose information when required by law, court order, subpoena, or regulatory requirement.
• Service Providers: We use third-party service providers to operate our websites and booking system (including Formspree for form submissions and Google Maps for address verification). These providers access only the information necessary to perform their functions and are prohibited from using it for other purposes.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

6. Third-Party Services

Our websites use the following third-party services that may collect or process data:

Each of these services has its own privacy policy. We encourage you to review them. We are not responsible for the privacy practices of third-party services.

7. Data Retention

We retain your information for the following periods:

• Booking and contact information: 3 years from the date of service, or as required by applicable law
• Drug test records: Minimum of 5 years for DOT-regulated tests, or as required by applicable federal and state regulations
• DNA test records: As required by our laboratory partners and applicable law, typically 2 to 5 years
• Employer program records: Duration of the program plus 5 years, or as required by applicable law
• Website analytics data: Up to 26 months

When retention periods expire, we securely delete or destroy your information in accordance with applicable law and industry standards.

8. Cookies and Tracking Technologies

Our websites may use cookies and similar technologies to improve your experience. Cookies are small text files stored on your device.

We use the following types of cookies:

• Essential cookies: Required for the website to function properly. These cannot be disabled.
• Analytics cookies: Help us understand how visitors use our websites. This data is aggregated and anonymous.
• Third-party cookies: Set by services like Google Maps when you use the address autocomplete feature.

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality. We do not currently respond to "Do Not Track" browser signals, but we do not engage in cross-site tracking for advertising purposes.

9. Data Security

We implement industry-standard security measures to protect your information, including:

• SSL/TLS encryption for all data transmitted through our websites
• Secure, access-controlled storage for physical and electronic records
• Limited access to personal information on a need-to-know basis
• Regular review of our security practices

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach that affects your rights or freedoms, we will notify you as required by applicable law.

10. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to legal retention requirements
• Restriction: Request that we limit how we use your information
• Portability: Request your information in a portable format
• Objection: Object to certain uses of your information
• HIPAA Rights: As described in Section 4, you have specific rights regarding your Protected Health Information

To exercise any of these rights, contact us using the information in Section 12. We will respond within 30 days. We may need to verify your identity before processing your request.

11. Children's Privacy

Our websites are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately and we will take steps to delete that information.

For minors between the ages of 13 and 17, a parent or legal guardian must provide consent before we collect or process their personal information or conduct testing services.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this policy. We encourage you to review this policy periodically. Your continued use of our websites or services after any changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

For HIPAA-related requests, please indicate "HIPAA Request" in your communication so we can route it to the appropriate team member.

This Privacy Policy was prepared for Express Mobile Diagnostics and reflects our current data practices as of the effective date above. This document does not constitute legal advice. If you have specific legal concerns, we recommend consulting a licensed attorney.