Privacy Policy

1. Who We Are

LISDESK is a Laboratory Information Management System (LIMS) provider headquartered at Karak, Kalyanpur, Nandakumar, West Bengal, India. We are the Data Controller for personal data collected through our website and the Data Processor for clinical/patient data managed within our platform on behalf of our laboratory clients.

2. What Data We Collect

2.1 Website Visitors

• Name, email address, phone number (via contact/demo request forms)
• Organization name, job title, laboratory type
• IP address, browser type, device, and approximate geographic location
• Page interaction data and referral sources (analytics)

2.2 Platform Users (Laboratory Staff)

• Login credentials (hashed and salted — never stored in plain text)
• Action audit logs (specimen accessioning, result sign-out, QC entries)
• Workflow preferences and user configuration settings

2.3 Patient/Clinical Data (Processed on behalf of Laboratory Clients)

• Patient demographics, MRN, insurance identifiers
• Laboratory test orders, results, QC data
• Genomic/NGS variant data and reports
• Billing and insurance claim data

3. How We Use Your Data

• To provide, operate, and improve our LIMS Services
• To respond to demo requests, support tickets, and inquiries
• To send clinical insight newsletters (with your explicit consent)
• To process billing and manage your subscription
• To fulfil CAP/CLIA/ISO 15189 audit trail requirements
• To detect and prevent security threats and unauthorized access
• To comply with legal obligations under Indian and international law

We do not sell, trade, or rent your personal data to third parties for marketing purposes.

4. Data Retention

5. Your Rights

Under India's DPDP Act 2023, you have the right to:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate data
• Erasure — Request deletion of your personal data (subject to legal retention requirements)
• Withdrawal of Consent — Withdraw consent for non-essential processing at any time
• Grievance Redressal — Lodge a complaint with our Data Protection Officer

To exercise these rights, contact us at privacy@lisdesk.com or call +91 99075 52631.

6. Security

We implement enterprise-grade technical and organizational safeguards including:

• AES-256 encryption at rest and TLS 1.3 in transit
• Role-based access control (RBAC) and multi-factor authentication
• Immutable cryptographic audit trails meeting FDA 21 CFR Part 11
• Regular third-party penetration testing and vulnerability assessments
• SOC 2 Type II aligned controls

7. Contact & Grievance Officer