Labs by &you ('we', 'our', or 'us') is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our telehealth platform and related services.

By accessing or using our services, you agree to the collection and use of information in accordance with this policy. Please read it carefully before using our platform.

We collect information that you provide directly to us and information generated through your use of our services.

• Personal identifiers such as your name, email address, phone number, and date of birth.
• Health and medical information including lab results, vitals, medical history, allergies, and current medications.
• Payment information processed securely through our payment providers.
• Communications between you and our medical team, including consultation notes and messages.
• Device and usage data such as IP address, browser type, and pages visited.

We use the information we collect to deliver and improve our services, including:

• Providing telehealth consultations, lab bookings, and prescription services.
• Communicating with you about your health, appointments, and orders.
• Processing payments and fulfilling orders through our platform.
• Improving the accuracy and quality of our health assessments.
• Complying with applicable laws, regulations, and medical standards.

We may share your information only in the following limited circumstances:

• With licensed medical professionals involved in your care.
• With trusted service providers (e.g., labs, pharmacies) necessary to fulfill your orders.
• With payment processors to complete transactions securely.
• When required by law, court order, or applicable regulation.
• With your explicit consent for any other purpose.

We implement industry-standard security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. These include encryption in transit and at rest, role-based access controls, and regular security reviews.

While we take all reasonable precautions, no method of transmission over the internet is 100% secure. We encourage you to protect your account credentials and notify us immediately if you suspect unauthorized access.

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that inaccurate or incomplete information be corrected.
• Deletion: Request deletion of your personal information, subject to legal and medical record retention obligations.
• Portability: Request your data in a machine-readable format where applicable.
• Withdrawal of consent: Withdraw consent for non-essential data processing at any time.

We retain your personal and health information for as long as necessary to provide our services and comply with applicable laws. Medical records may be retained for a minimum period as required by Philippine medical regulations.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the effective date. We encourage you to review this policy periodically.

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact our team through the Concierge section of your &you account or email us at [email protected].