Overview
Ramsey Diagnostics Corporation d/b/a Labb ("Labb," "we," "our," or "us") operates LabbPO, a platform designed for criminal justice supervision programs to enroll participants, conduct random drug test selections, and manage compliance documentation.
This Privacy Policy describes how we collect, use, disclose, and safeguard information when you use LabbPO — whether as a supervising agency, an officer, or as part of a supervision program. Please read this policy carefully.
LabbPO operates as a data processor. Supervising agencies (probation departments, drug courts, community supervision programs) are the data controllers responsible for the personal information of program participants. Labb processes that data on their behalf, under their instructions, pursuant to our agreement with each agency.
Information We Collect
We collect information in several ways depending on your role on the platform.
Information provided by supervising agencies (about participants):
- Participant name, case number, and date of birth
- Supervision type (probation, parole, drug court, pretrial, etc.)
- Assigned officer and program enrollment details
- Drug test panel configurations and testing frequency
- Test results and compliance documentation
Information provided by agency staff (account users):
- Name, work email address, and job title
- Agency name and jurisdiction
- Login credentials (passwords are hashed and never stored in plaintext)
- Activity logs within the platform
Information collected automatically:
- IP address and browser/device type
- Pages visited and features used within LabbPO
- Session timestamps and duration
How We Use Information
We use the information collected to:
- Operate and deliver the LabbPO platform and its features
- Execute random selection algorithms and generate auditable selection records
- Facilitate drug test ordering through the Labb collection network
- Return and display test results to authorized agency staff
- Generate compliance reports and documentation for court or agency use
- Authenticate users and maintain platform security
- Provide customer support and respond to agency inquiries
- Improve platform performance and develop new features
- Comply with applicable law, court orders, and regulatory requirements
We do not sell participant data. Participant information entered by supervising agencies is never sold, rented, or used for advertising purposes.
Information Sharing
Labb does not share personal information except in the following circumstances:
- With collection sites and laboratories: To fulfill drug test orders, we share the minimum necessary participant information with authorized collection facilities and SAMHSA-certified laboratories in the Labb network.
- With your agency: Results, reports, and participant records are accessible to authorized officers and administrators within your agency's LabbPO account.
- With service providers: We engage vetted third-party vendors (hosting, security, analytics) who process data only on our behalf and under confidentiality obligations.
- For legal compliance: We may disclose information when required by law, subpoena, court order, or to protect the rights and safety of users or the public.
- Business transfers: In the event of a merger, acquisition, or asset sale, participant and agency data may be transferred — with prior notice provided to affected agencies.
Agency responsibility: Supervising agencies are responsible for ensuring their use of participant data within LabbPO complies with applicable federal, state, and local law, including any consent or notification requirements applicable to program participants.
Data Security
We implement and maintain technical, administrative, and physical safeguards appropriate to the sensitivity of the data we process, including:
- Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
- Role-based access controls limiting data access to authorized personnel only
- Audit logging of all access and actions involving participant records
- Regular security assessments and vulnerability testing
- Incident response procedures with agency notification protocols
No system is completely secure. If you believe your account has been compromised, contact us immediately at [email protected].
Data Retention
We retain participant and agency data for as long as your agency's account is active, or as required to provide services, comply with legal obligations, resolve disputes, and enforce our agreements.
Upon termination of an agency account, we will retain data for a minimum of 12 months to support any pending legal matters or audit requests, after which data is securely deleted or anonymized unless a longer retention period is required by law or agreed upon in writing.
Agencies may request export of their data at any time prior to account termination.
HIPAA & Health Information
Drug test results may constitute protected health information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA). Where applicable, Labb acts as a Business Associate of the supervising agency.
We are prepared to enter into a Business Associate Agreement (BAA) with agencies that are Covered Entities under HIPAA. Contact your Labb account representative to request a BAA.
Note: Drug testing conducted in criminal justice contexts may be subject to 42 CFR Part 2 (Confidentiality of Substance Use Disorder Patient Records) in addition to HIPAA. Agencies should consult legal counsel to determine applicable requirements for their specific program.
Your Rights
Agency staff (account users) may request access to, correction of, or deletion of their personal account information by contacting us at the address below.
Participants in supervision programs should direct requests regarding their personal information to the supervising agency that enrolled them in LabbPO, as that agency is the data controller for participant records.
Residents of certain states (including California under CCPA) may have additional rights regarding their personal information. Please contact us to inquire about rights applicable to your jurisdiction.
Cookies & Tracking
LabbPO uses cookies and similar technologies to maintain authenticated sessions, remember user preferences, and collect aggregate usage analytics to improve platform performance.
- Essential cookies: Required for login and platform functionality. Cannot be disabled.
- Analytics cookies: Used to understand how features are used. Aggregate and non-identifying. May be opted out of by contacting us.
We do not use advertising cookies or share cookie data with ad networks.
Minors
LabbPO is a platform intended for use by criminal justice agencies and their authorized staff. It is not directed to children under 13. In some cases, supervision program participants may be minors; in such cases, the supervising agency is responsible for ensuring all applicable legal requirements for handling minors' data are met.
If you believe we have inadvertently collected information from a child under 13 without appropriate authorization, contact us immediately.
Changes to This Policy
We may update this Privacy Policy periodically. When we do, we will revise the effective date at the top of this page. For material changes, we will provide notice to agencies via the platform or email at least 30 days before the change takes effect.
Continued use of LabbPO after the effective date of any update constitutes acceptance of the revised policy.
Contact Us
If you have questions about this Privacy Policy, want to exercise a data right, or need to report a security concern, please reach out: