Privacy Policy

1. Introduction & Canadian Privacy Compliance

CanBioLab (“we”, “us”, or “our”) respects the privacy of our clients, institutional partners, and website visitors. This Privacy Policy outlines our standards for collecting, using, disclosing, and safeguarding personal and organizational information collected through our website and analytical laboratory operations in Canada.

Our practices comply with Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy statutes.

2. Information We Collect

We collect information necessary to process testing requests, communicate analytical results, and manage client accounts:

• Contact & Submission Details: Name, professional title, institution or company name, email address, phone number, shipping address, and Chain of Custody (CoC) submission details.
• COA Verification Queries: Lot/batch numbers entered into our public or client-restricted COA Verification Tool to confirm report authenticity.
• Technical Website Data: Standard server logs, IP addresses, browser types, and usage metrics captured via essential cookies to maintain website stability and security.

3. How We Use Your Information

Information collected by CanBioLab is strictly utilized for core laboratory operations and analytical service delivery:

• Processing and fulfilling sample testing, HPLC/MS analysis, and generating official Certificates of Analysis (COAs).
• Communicating report updates, technical findings, and administrative billing inquiries.
• Maintaining internal quality control standards and legal/regulatory record-keeping compliance under Canadian laboratory standards.

No Marketing Distribution: CanBioLab does not sell, rent, trade, or lease client contact lists or research data to third-party advertisers or commercial brokers.

4. Confidentiality of Analytical Data

All laboratory test results, compound identity records, chromatographic raw data, and client communications remain 100% confidential. Analytical data generated for a client will never be shared with third parties except under the following specific conditions:

• With the explicit written consent or authorization of the submitting client or organization.
• When required by applicable Canadian federal or provincial law, legal subpoena, or regulatory audit.

5. Data Storage, Security & Retention

We employ industry-standard technical, administrative, and physical security measures to safeguard digital records and physical paperwork against unauthorized access, loss, or disclosure.

Analytical records and official COA copies are securely retained in our encrypted archives to support long-term report verification services for our clients. Physical samples are handled and safely disposed of according to standard Canadian hazardous waste protocols.

6. Access to Information & Your Rights

Under Canadian privacy laws, individuals and client representatives have the right to request access to the personal information we hold about them, request corrections to inaccurate details, or inquire about our data governance practices.