1. Introduction
VLabNet (“we,” “us,” or “our”) operates an online laboratory directory that helps the public discover testing services, trainings, equipment, and laboratory contacts across participating agencies and laboratories. This Privacy Policy explains what personal information we collect, how we use it, and the choices available to you.
We process personal data in line with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, where applicable.
2. Information we collect
2.1 Laboratory and agency information
Participating laboratories and agencies provide operational information that may be shown publicly on the site, including laboratory names, descriptions, services, trainings, equipment listings, and designated focal person contact details (such as name, position, email address, and phone number). These details are intended so visitors can inquire about laboratory services.
2.2 Account and administrative data
Authorized administrators and laboratory managers create accounts to manage listings. For those accounts we store credentials and related profile information needed for authentication, authorization, and platform administration.
2.3 Visitor usage data
When you browse the public site, we may automatically collect:
- Pages viewed, search queries, and related activity on VLabNet
- IP address, browser/user-agent string, and approximate device type
- Session identifiers used to group activity during a visit
- Referrer URL (when provided by your browser)
This information supports first-party analytics so we can understand how the directory is used and improve the service. We do not use third-party advertising trackers for this purpose.
2.4 Optional demographic survey
You may be invited to optionally indicate your visitor type (for example student, researcher, or laboratory professional). Responses are stored with session and technical metadata to help us understand our audience. Participation is voluntary.
3. How we use information
We use personal information to:
- Operate and maintain the VLabNet directory and authenticated management tools
- Publish laboratory contact details that laboratories designate as public contact points
- Analyze site usage, search behavior, and visitor demographics to improve content and usability
- Protect the platform (security, abuse prevention, and rate limiting)
- Communicate with administrators and laboratory managers about their accounts
- Comply with applicable legal obligations
4. Cookies and similar technologies
VLabNet uses first-party cookies and related storage as follows:
- Session cookie (
ci_session) — required for secure session handling, CSRF protection, and linking analytics events to a visit - Remember-me cookie — set only if a signed-in user chooses “remember me” on login
- Browser session storage — used to remember whether you already answered the demographic survey during the current browser session
These technologies are used to run the site securely and to measure first-party usage. You can control cookies through your browser settings; disabling cookies may affect login and some site features.
5. Public display of contact information
Focal person names and contact details associated with laboratories are published on public pages so visitors can reach the appropriate laboratory contact. Laboratories and their authorizing agencies are responsible for ensuring that published contacts are accurate, current, and appropriate for public disclosure.
If you are a listed focal person and wish to update or remove your contact information, please contact your laboratory administrator or reach us using the details below.
6. Sharing of information
We do not sell personal information. We may share information with:
- Participating agencies and laboratory administrators, as needed to operate their listings
- Service providers that host or support the platform under appropriate confidentiality and security obligations
- Authorities when required by law or to protect rights, safety, and the integrity of the platform
Aggregate or anonymized statistics that do not identify individuals may be used for reporting and planning.
7. Retention
We retain personal information only as long as needed for the purposes described in this policy, including analytics, account administration, security, and legal compliance, after which data may be deleted, archived, or anonymized according to our operational practices.
8. Security
We apply reasonable technical and organizational measures to protect personal information, including access controls for administrative areas, secure session handling, and HTTPS. No method of transmission or storage is completely secure; we encourage users to protect their account credentials and report suspected unauthorized access promptly.
9. Your rights
Subject to applicable law, you may request access to, correction of, or deletion of personal data we hold about you, or raise questions about how your data is processed. For publicly listed laboratory contacts, changes are typically handled through the responsible laboratory or agency account holders.
To exercise privacy-related requests, contact us using the information in the section below. We may need to verify your identity before fulfilling certain requests.
10. Children’s privacy
VLabNet is intended for general public and professional use related to laboratory services. We do not knowingly collect personal information from children for marketing purposes. If you believe a child has provided personal information inappropriately, please contact us so we can review and address the matter.
11. Changes to this policy
We may update this Privacy Policy from time to time. The effective date at the top of this page will be revised when changes are posted. Continued use of VLabNet after updates constitutes notice of the revised policy, except where additional consent is required by law.
12. Contact us
For privacy questions or requests, contact:
- [email protected]
- +1 (123) 456-7890
- Magsaysay Village, La Paz, Iloilo City, Iloilo, Philippines
This page describes VLabNet’s current practices for informational purposes. It is not a substitute for formal legal advice. Organizations deploying VLabNet should have their Data Protection Officer or counsel review and adapt this text as needed.