Privacy Policy
How Lab63 handles the information you give us, including health information.
Draft. This document is pending review by counsel and should not be relied on in its current form.
What we collect
Contact details you provide, the answers you give in the assessment, and any health information you share with your consultant during a consultation.
Why we hold it
To let your consultant assess whether a program is appropriate, to follow up on it, and to meet the record-keeping obligations that apply to us.
Who can see it
Your assessment answers are read by your consultant and the care team supporting them. They are not visible to anyone browsing the site, and are not used for advertising.
Where your records are held
Your assessment answers, the notes you give us, the record of your consultation and your consultant’s notes are stored by our database provider, Supabase, in London, United Kingdom, outside the Philippines, encrypted at rest. Your contact details and booking records are held there too, separately from the health records.
Who processes it for us
Supabase stores your records. Resend sends our emails and Google Calendar issues meeting invitations; neither carries health information. The consultation is free, so no payment provider receives your details. An automated review of consultation transcripts by Anthropic is switched off; if we switch it on we will update this policy first.
How long we keep it
Records are kept for as long as you are a Lab63 customer and for as long after that as the law requires, then deleted. Database backups are retained for a limited period and then age out. Ask us at care@lab63.ph and we will tell you the current periods.
Your rights
Under the Data Privacy Act of 2012 you may ask what we hold about you, have it corrected, object to its processing, ask for it to be erased or blocked, and receive a copy. You may also complain to the National Privacy Commission. Write to care@lab63.ph.
Governing law
This policy is governed by the laws of the Philippines, including the Data Privacy Act of 2012 (Republic Act 10173).