Effective Date: September 1, 2026
PRIVACY & DATA PROTECTION POLICY
1. INTRODUCTION & SCOPE
EQAsure (“we,” “us,” or “our”) operates as an independent external quality assurance provider for in-vitro diagnostic
laboratories, accessible via https://eqasure.com/. We are committed to safeguarding the privacy of our website
visitors, participating medical laboratories, authorized lab representatives, and healthcare professionals.
This Privacy Policy details our practices concerning the collection, usage, processing, storage, disclosure, and protection
of personal data and operational proficiency testing (PT) data. This document complies with the Digital Personal Data
Protection (DPDP) Act, 2023 of India, ISO 17043:2023 guidelines for proficiency testing, and ISO 13528 statistical
requirements.
2. CATEGORIES OF INFORMATION WE COLLECT
We collect and process the following categories of data necessary to provide our EQA services:
- Personal & Contact Information: Full name, professional designation, official email address, primary phone number,
and physical postal/shipping address of laboratory personnel and primary contact persons. - Laboratory Registration Data: Laboratory name, facility address, regulatory licensing details, NABL accreditation
status, and billing details. - Account Credentials: Usernames, encrypted passwords, and unique Participant Identification Numbers (PIN)
assigned upon web portal registration. - Proficiency Testing & Performance Data: Analyte test results, methodology details, reagent/equipment
specifications, peer group comparison data, and historical cycle evaluations submitted via our intuitive web portal. - Technical & Usage Data: Internet Protocol (IP) addresses, browser type/version, device details, login timestamps,
and system activity logs gathered automatically during portal access.
3. LEGAL BASIS & PURPOSE OF DATA PROCESSING
We process data strictly for lawful, legitimate, and service-oriented purposes, including:
- Service Execution: Enrolling participating laboratories, dispatching high-quality control samples, processing survey
entries, and issuing online evaluation reports. - Statistical Analysis: Conducting scientific statistical calculations and peer group evaluation pursuant to ISO 13528
standards. - Certification & Compliance: Issuing end-of-cycle Certificates of Participation and maintaining audit-ready records
required by national accreditation bodies (e.g., NABL). - Administrative Communications: Dispatching program calendars, survey submission deadline reminders, invoice
receipts, and technical support notices.
4. CONFIDENTIALITY OF EQA RESULTS & ANONYMIZATION
Strict Data Confidentiality Mandate: EQAsure maintains absolute confidentiality regarding individual laboratory
performance data. All peer group comparison summary reports and published statistical analyses utilize anonymized
unique participant codes. No participant’s individual test scores are disclosed to third parties or other participating
laboratories without explicit written consent.
Exceptions: Confidential participant data will only be disclosed to external parties when required by law, court order, or
formal mandate from regulatory/accreditation authorities (such as NABL) under standard assessment obligations.
5. INFORMATION SHARING & THIRD PARTIES
EQAsure does not sell, rent, or trade personal data or participant lists to any third parties for commercial marketing.
Information is shared strictly on a need-to-know basis with:
- Logistics Partners: Verified courier and shipping providers necessary to physical delivery of biological/chemical
control sample kits to lab locations. - IT Infrastructure Providers: Secure web hosting servers, database managers, and encrypted transaction partners
maintaining web portal uptime. - Accreditation Assessors: Authorized ISO/IEC 17043 peer auditors reviewing quality system compliance during
routine audits.
6. DATA SECURITY & INTEGRITY
We implement robust technical and organizational security measures—including TLS/SSL protocol encryption for data in
transit, secure database firewalls, restricted access controls, and regular system monitoring. Participants are solely
responsible for maintaining the strict confidentiality of their web portal login credentials and participant numbers.
7. DATA RETENTION & ARCHIVAL
Personal details and test submission records are retained for the duration of the active subscription cycle and for a
mandatory retention period required by clinical accreditation standards (typically 3 to 5 years). Following expiry of legal
and operational requirements, data is securely anonymized or permanently deleted.
8. RIGHTS OF DATA PRINCIPALS (UNDER DPDP ACT)
Participating representatives possess specific rights regarding their personal data
- Right to Access & Correction: Review and request updates to inaccurate or outdated contact profiles.
- Right to Grievance Redressal: Submit queries or formal concerns to our designated Privacy & Grievance Officer.
- Right to Withdraw Consent: Request account deactivation (subject to active contract fulfillment and mandatory audit retention rules).
9. CONTACT & GRIEVANCE REDRESSAL
For privacy queries, data requests, or formal grievances, please reach out to our team:
Entity Name: EQAsure
Postal Address: 104, Dharmabhakti Complex, Khushalwadi, Jamalpore, Navsari – 396 445, Gujarat, India
Contact Phone: +91 635 802 1480
Official Email: eqasure@gmail.com