How we handle your information

Malavia Advanced Laboratory LLP (“Malavia Advanced Laboratory”, “we”, “us”) runs the diagnostic laboratory and collection centres described on this website, and is responsible for the personal information described in this policy. Our main laboratory is at:

This policy covers this website and the testing services we provide through it and at our branches. If anything in it is unclear, ask us and we will explain it in plain words.

What you give us on this website

The website has three places you can send us something, and each one asks for the least it can:

• Booking a test. Your name, phone number, an email address if you choose to give one, the package or test you want, whether you want home collection or a branch visit, the collection address or the branch, a preferred date and time slot, and anything you add in the notes.
• Sending an enquiry. Your name, phone number, an optional email address, a subject and your message.
• Starting a WhatsApp chat. Every WhatsApp button on this site asks for your name and mobile number first. Those two fields are written into the message you are about to send and are also saved to us as an enquiry, so we can follow up if the chat does not reach us.

If you apply for a job, we receive whatever you send with your application: your CV, your contact details and your work history.

What we collect when you use our laboratory

Running a test means holding health information about you. Depending on the test, that can include your name, age, sex, contact details, the name of your referring doctor if you have one, the sample collected, the tests requested, your results and the report we issue. This is sensitive information and we treat it as such.

What our servers record

Like any website, ours is served by computers that keep short technical logs: the address of the request, the page asked for, the browser type and the time. We also count recent submissions per address for a few minutes so that an automated script cannot flood our forms. Neither is used to build a profile of you.

We use your information to:

• call or message you back to confirm a booking, the price and the preparation your test needs;
• collect your sample, at home or at a branch;
• run the tests, produce your report and deliver it to you by WhatsApp and email;
• answer the question you asked us, and keep a record of what was asked so the next person you speak to is not starting from nothing;
• keep the laboratory records we are required to keep, and meet our quality and legal obligations;
• consider your application if you have applied for a job.

We do not use your information to advertise to you, and we do not profile you.

We process your information because you have asked us for a test, a report or an answer, and it cannot be delivered without it. Where the law requires your consent, giving us your details through a form on this site, over WhatsApp or at a collection counter is that consent, and you can withdraw it (see your rights). Some records we are obliged to keep regardless, under the rules that apply to a diagnostic laboratory and under tax law.

We do not sell your information, rent it, or share it for anyone else’s marketing. It is seen by the people and services that have to see it:

• Our own staff, limited to the people handling your booking, your sample or your report.
• Your doctor, where a test was referred by one or where you ask us to send the report on.
• The companies that run this website for us: our hosting provider, which serves the pages and keeps the technical logs described above, and our database and file storage provider, which holds bookings, enquiries and anything staff upload. Both act on our instructions only.
• WhatsApp, if you choose to message us there. That conversation is carried on WhatsApp’s own service and is covered by their privacy terms as well as this one.
• Anyone we are legally required to tell, such as a public health authority for a notifiable disease, or a court or regulator acting within its powers.

No payment is taken on this website. You pay by UPI, card or cash at collection or at a branch, so no card details ever pass through this site.

This website sets no advertising cookies, runs no analytics, and carries no third-party tracking pixels of any kind. There is nothing here that follows you to another website, and nothing that reports your visit to an advertising network. We have kept it that way on purpose.

Two things do store something in your browser:

• The WhatsApp prefill.When you give your name and number to open a WhatsApp chat, they are kept in your browser’s session storage so a second button in the same visit is already filled in. It is deleted when you close the tab, and it never leaves your device by that route.
• The staff login cookie. Members of our team who sign in to the admin panel receive one session cookie. If you are a patient reading this site, you will never be issued it.

Test records and reports are kept for as long as a diagnostic laboratory is required to keep them, and because a past result is often what makes a new one meaningful. Bookings and enquiries are kept while we deal with them and for a reasonable period afterwards, so we can answer a question about what was done. Job applications are kept while the role is open and for a period after, in case something suitable comes up.

When information is no longer needed for any of those purposes, we delete it or keep it in a form that no longer identifies you. You can ask us to delete what we hold at any time, and we will unless we are required to keep it.

This site is served over an encrypted connection. Booking and enquiry records are held in an access-controlled database, and the staff panel that reads them is behind a password and an expiring session, so access ends when a session does. Inside the laboratory, records and reports are handled only by the staff whose work requires them.

No system is perfectly secure, and we will not pretend otherwise. If something goes wrong with information we hold about you, we will tell you and the authorities we are required to tell.

You can ask us to:

• tell you what information we hold about you and why;
• correct or complete anything that is wrong or out of date;
• delete what we hold, where we are not required to keep it;
• stop using your details to contact you about anything other than a test you have booked;
• nominate someone to exercise these rights for you if you become unable to.

Write to supportmalavia@gmail.com or call 99093 72732. We will ask for enough detail to be sure it is you before we release or change anything, because a health record handed to the wrong person is the worst thing we could do with it. We respond as quickly as we can, and will tell you if we need longer.

We test children regularly, and when we do, the booking is made and the report is collected by a parent or guardian. This website is not intended for children to use on their own, and we do not knowingly take details directly from a child. If you believe a child has sent us something through this site, tell us and we will remove it.

If we change how we handle your information, we will change this page and move the date at the top of it. The date is only moved when the wording actually changes, so it is a real signal that something is different. Material changes will be explained on the page rather than buried in it.

If you think we have handled your information badly, tell us first: write to supportmalavia@gmail.com, call 99093 72732, or use any of the routes on our contact page. Say what happened and what you would like us to do about it, and we will look into it and come back to you.

If we cannot settle it between us, you can take the complaint to the authority responsible for data protection in India.