Privacy Policy

This Privacy Policy describes how CLIA FOR SALE Brokering Services (“we,” “us”) collect, use, and share information when you use our website and services.

1. Information we collect

• Account data: name, email, password (hashed), role (buyer/seller), company, phone
• Listing data submitted by sellers (including restricted fields such as CLIA ID and address)
• Messages exchanged between buyers and sellers
• Usage logs and device/browser information

2. How we use information

• Operate the marketplace and access controls
• Enable buyer–seller communication
• Security, fraud prevention, and abuse detection
• Comply with law and enforce terms
• Marketing related to the clinical laboratory industry by CLIA FOR SALE and its subsidiaries (see Section 3)

3. Industry marketing use

When you create a buyer or seller account, you acknowledge that your information may be used by CLIA FOR SALE and its subsidiaries for marketing purposes only within the clinical laboratory industry. We do not sell your personal information to third parties for unrelated commercial use, and we do not sell it outside the clinical laboratory industry.

4. Sharing

Restricted listing fields are shared with authenticated buyers who accepted confidentiality terms (and obtained seller approval where required), and with the listing seller. We do not sell personal information outside the limited industry marketing use described above. We may share data with service providers under contract, or if required by law.

5. Security

We use industry-reasonable measures (password hashing, httpOnly session cookies, role-based access). No method of transmission is 100% secure.

6. Your choices

You may request account deletion or data export by contacting us. Certain records may be retained as required for legal or security purposes.

7. PHI caution

The Platform is not designed as a HIPAA covered entity system for patient care. Sellers must not upload protected health information (PHI) or unnecessary patient-level data in listings or messages.

Have counsel adapt this policy for GDPR/CCPA and your hosting jurisdiction before production launch.