1. Introduction

RapidTest Mobility Services, LLC (“RapidTest,” “we,” “us,” or “our”) respects the privacy and confidentiality of every client and donor we serve. This Privacy Policy describes how we collect, use, disclose, and safeguard personal, medical, and payment information when you:

• Schedule or complete mobile specimen collection or drug/alcohol testing services;
• Use our website https://rapidtestmobilityservices.com; or
• Interact with us for billing, reporting, or compliance purposes.

By using our website or services, you consent to the practices described in this Privacy Policy.

2. Information We Collect

We may collect the following categories of information:

3. How We Use Information

We use collected data to:

• Schedule, perform, and document testing and collection services
• Maintain legal compliance with DOT 49 CFR Part 40, CLIA, and other governing regulations
• Process payments, send receipts, and manage invoices
• Communicate test status and results (as authorized)
• Ensure quality assurance, auditing, and recordkeeping
• Improve our services and customer experience

4. HIPAA & Medical Information Privacy

We comply with the Health Insurance Portability and Accountability Act (HIPAA) and maintain all required safeguards to protect Protected Health Information (PHI).

• PHI is used and disclosed only for treatment, payment, and healthcare operations, or as otherwise permitted by law.
• Access to PHI is restricted to authorized personnel and business associates who require it to perform their duties.
• We obtain written consent where required before sharing PHI with third parties.
• All electronic PHI is encrypted and stored in secure, access-controlled systems.

5. Information Sharing

We do not sell or rent your information. We may share limited data with:

• Certified laboratories and Medical Review Officers (MROs) for result verification and reporting;
• Employers, TPAs, or regulatory agencies as legally authorized;
• Stripe and other vendors providing secure payment or IT services under confidentiality agreements;
• Law enforcement or government authorities when required by law.

Each partner is contractually required to maintain HIPAA-compliant privacy and security standards.

6. Data Security

We implement administrative, physical, and technical safeguards including:

• SSL encryption on our website and payment pages
• Password-protected systems and limited access permissions
• Secure data backups and disposal protocols

7. Data Retention

We retain personal and health records for the duration required by law (typically five years for DOT testing records and two years for Non-DOT), or longer if necessary for compliance or contractual purposes. Payment records are retained as required by accounting and tax regulations.

8. Your Rights

You may request to:

• Access or obtain a copy of your records
• Correct inaccurate information
• Request limited use or disclosure of your data
• Withdraw consent (where applicable)

To exercise these rights, contact us using the details below. Verification of identity may be required.

9. Cookies & Analytics

Our website may use cookies and analytic tools to monitor performance and enhance usability. You may disable cookies through your browser settings, but some features may not function properly.

10. Policy Updates

We may revise this Privacy Policy periodically. Any updates will be posted to this page with a new effective date. Material changes may also be communicated directly to clients or partners when required by law.