Privacy Policy

Who we are

LabFlow is a laboratory management platform operated by Arbnexo (arbnexo.com/). This policy explains what we collect on this website and in the LabFlow application, why, and how to reach us about it. Questions and requests go to info@arbnexo.com.

Website visitors

Browsing the marketing pages requires no account and sets no advertising or analytics trackers. Our servers keep standard technical logs (request time, path, browser type) for security and troubleshooting, and delete them on a rolling basis.

Demo requests and demo bookings

When you request a demo we store the details you type into the form: name, email, and optionally company, phone and message. We keep a one-way hash of your IP address and your browser type solely to detect abuse of the form; the raw IP address is not stored. This information is used only to arrange and follow up on your demo.

If you choose a time slot, we create an event in Arbnexo’s Google Calendar containing the details above and add your email address as a guest. Google then sends you the calendar invitation and Google Meet link, and processes that invitation under Google’s privacy policy. Before showing available times, the website only reads whether our calendar is free or busy; no calendar content is ever shown to visitors.

Laboratory customers and their users

When a laboratory subscribes to LabFlow, we store account data for its users (name, email, role, sign-in activity) and the operational data the laboratory enters: clients, projects, samples, test results, reports, quotes and invoices. That data belongs to the laboratory, which decides what to enter and who may see it; we process it on the laboratory’s behalf to provide the service, and its own privacy notices apply to its clients. Each laboratory’s data is isolated from every other laboratory’s.

The application uses strictly necessary cookies to keep you signed in and to protect forms against cross-site request forgery. With your permission it may also send push notifications you have enabled, which you can switch off at any time in your browser or in the app.

Emails

We send transactional emails only: sign-in and password links, invitations, notifications about reports and invoices, and replies to your demo request. We do not send marketing newsletters without your consent.

Who else sees your data

We do not sell or rent personal data. We share it only with providers needed to run the service, such as our hosting provider, our email delivery provider and, for demo bookings, Google Calendar, and only to the extent needed for those purposes. We may disclose data when the law requires it.

Retention

Demo request details are kept while we are in contact about the demo and deleted or anonymised afterwards on request. Laboratory data is kept for as long as the laboratory’s subscription is active and for a limited period after it ends, so it can be exported or restored, unless the laboratory asks for earlier deletion.

Your rights

You can ask us to show you the personal data we hold about you, correct it, delete it, or stop using it for a particular purpose. Users of a laboratory’s LabFlow workspace should contact that laboratory first, as it controls the data it entered; we will assist it in responding. For anything else, write to info@arbnexo.com.

Changes

We will update this page when our practices change and adjust the date at the top. Material changes affecting laboratory customers are announced to the account owner by email.