Privacy Policy

1. Who we are

We are a Texas-based, mobile provider of DOT and Non-DOT urine drug screening collections, ink fingerprinting, commissioned notary public services, I-9 authorized representative services, and licensed life-insurance consultations. We are not a clinical laboratory, law firm, healthcare provider, or financial advisor.

2. Information we collect

• Identity: full legal name, date of birth, address, government-issued photo ID image, and a live ID-with-selfie capture.
• Contact: email address and phone number.
• Health-related: information you provide on intake or consent forms (e.g., current medications, conditions, prescriptions relevant to a drug screen or notary appointment).
• Service data: appointment date/time, service requested, signed consent and chain-of-custody forms, notary journal entries, and lab paperwork.
• Payment data: all payments are handled exclusively by our PCI-DSS-compliant processor (Square). We never see, store, or have access to your full card number, CVV, or expiration date.
• Technical & evidentiary data: IP address, device, browser, geolocation (when you allow it), and timestamps captured when you sign forms electronically. This data is retained as legal evidence of the signing event.

3. How we use your information

• To verify your identity before any service is rendered.
• To schedule, deliver, document, and bill for the service you booked.
• To transmit results, signed forms, or notarized documents to authorized recipients (laboratory, employer, attorney, insurance carrier, agency) per your written authorization.
• To comply with HIPAA, DOT 49 CFR Part 40, Texas notarial law, chain-of-custody requirements, and other applicable regulations.
• To contact you about your appointment, payment, or results.
• To detect and prevent fraud, chargeback abuse, identity theft, and misuse of our services.
• To defend our legal rights in the event of a dispute, chargeback, subpoena, or audit.

We do not sell your personal information. We do not use your data for advertising, profiling, or third-party marketing.

4. HIPAA & protected health information

Information you provide that relates to your physical or mental health, treatment, or payment for healthcare is Protected Health Information (“PHI”) and is handled in accordance with HIPAA (45 CFR Parts 160 and 164). We disclose PHI only as authorized by you in writing or as required or permitted by law. Your HIPAA authorization is valid for one (1) year from the date you sign it, unless you revoke it earlier in writing. Revocation is not retroactive — it does not undo disclosures already made in good-faith reliance on your prior authorization.

5. How we protect your data

• All data in transit is encrypted using industry-standard TLS 1.2+ (HTTPS).
• All data at rest — including ID images, selfies, signed PDFs, and form responses — is encrypted in private, access-controlled cloud storage.
• Database access is governed by row-level security policies that restrict each record to authorized personnel only.
• Only verified, authenticated, role-based accounts can access client records, and access is logged.
• Payment information is tokenized and processed exclusively by Square; full card data never touches our systems.
• We follow least-privilege, defense-in-depth, and secure-by-default principles across our infrastructure.

No system can be guaranteed 100% secure. In the unlikely event of a breach affecting your data, we will notify you and the appropriate authorities as required by Texas Business & Commerce Code §521 and any other applicable law.

6. How long we keep records

• Notary journal entries: retained for the period required by Texas Government Code §406 (currently the longer of the notary’s commission term or any longer period required by law).
• DOT drug-test records: retained per 49 CFR Part 40 retention schedules.
• Non-DOT drug-test & DNA records: retained per applicable lab and federal/state requirements, typically a minimum of two (2) years.
• I-9 representative records: retained per USCIS retention rules (3 years from hire or 1 year from termination, whichever is later).
• ID images, selfies, and signed PDFs: retained for a minimum of two (2) years for verification, audit, and legal-defense purposes, including chargeback disputes; securely destroyed upon written request unless retention is required by law or an active dispute, claim, audit, or investigation is pending, in which case retention continues until full and final resolution.
• Appointment, billing, and payment records: retained for at least seven (7) years for tax, accounting, and chargeback-defense purposes.

7. Sharing your information

We share your information only with:

• The accredited laboratory, certifying agency, or court that must process your specimen, fingerprint, or document.
• The recipient(s) you have specifically authorized in writing — for example, your employer, attorney, immigration lawyer, insurance carrier, or family member.
• Service providers we contract with under written confidentiality and data-protection terms (secure cloud hosting, payment processing, electronic signature, and email delivery).
• Law enforcement, regulators, courts, or other parties when required by valid subpoena, court order, or applicable law.

We do not sell, rent, lease, or trade your personal information, ever. We do not use third-party advertising trackers or sell data to data brokers.

8. Cookies & analytics

This website uses only the minimum cookies necessary for the site to function (session, security, and form-state cookies). We do not use cross-site advertising cookies. Aggregated, non-identifying analytics may be collected to improve site performance.

9. Your rights

You have the right to:

• Request a copy of your records.
• Correct inaccurate or incomplete information.
• Revoke a HIPAA authorization (in writing, prospectively).
• Request deletion of records that are not subject to a legal retention requirement.
• Lodge a complaint with the U.S. Department of Health & Human Services Office for Civil Rights regarding HIPAA matters.

Submit requests through the contact methods on our contact page. We will respond within thirty (30) days.

10. Children’s privacy

Our website is not directed to children under 13, and we do not knowingly collect personal information from children online. Services involving minors (e.g., paternity DNA, parental-consent notarizations) require a parent or legal guardian to be present, present their own ID and proof of guardianship, and sign all required forms.

11. Texas Data Privacy & Security Act (TDPSA)

If you are a Texas resident, the Texas Data Privacy & Security Act (Tex. Bus. & Com. Code ch. 541) gives you the right to: (a) confirm whether we process your personal data; (b) access and obtain a copy of that data in a portable, readily usable format; (c) correct inaccuracies you have identified; (d) request deletion of personal data we hold about you, subject to legal retention exceptions; and (e) opt out of the processing of your personal data for purposes of (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects. We do not sell personal data, we do not engage in targeted advertising, and we do not use personal data for the kind of automated profiling described above. To exercise any TDPSA right, contact us through our contact page. We will respond within forty-five (45) days, with one extension of up to forty-five (45) additional days when reasonably necessary, and will tell you in writing. You may appeal a denial through the same channel; if your appeal is denied, you may submit a complaint to the Texas Attorney General.

12. Biometric & sensitive-data notice

Some of our services involve sensitive, biometric-adjacent data — specifically, ink fingerprint impressions and DNA buccal-swab specimens. We collect this data only for the limited purpose you book us for and transmit it to the receiving agency or accredited laboratory you identify. Fingerprint card images are retained only as long as required by the requesting agency or applicable law and are then securely destroyed. DNA samples are not analyzed by us; the testing laboratory is responsible for sample handling, analysis, retention, and destruction under that laboratory’s own published policy, which is available on request. We do not sell, share for advertising, or commercially license biometric or biometric-adjacent data, ever.

13. Service providers & subprocessors

We rely on a small number of vetted service providers to deliver our services. Each operates under contractual confidentiality and data-protection obligations:

• Cloud hosting, database, and authentication — managed backend platform used to host the website, store form submissions, and authenticate staff accounts.
• Payment processing — Square (Block, Inc.) handles all card, Apple Pay, Google Pay, and Cash App Pay transactions under PCI-DSS Level 1.
• Transactional email delivery — used to send booking confirmations, receipts, and required notices.
• Independent accredited laboratories — perform all drug-test and DNA sample analysis. Each lab is the data controller for the analysis it performs and operates under its own privacy practices.
• Government agencies and requesting parties — when you direct us to deliver fingerprint cards, I-9 documentation, notarized documents, or test results to a specific recipient, that recipient becomes the controller of the records they receive.

We will provide the current list of named subprocessors on written request and will give reasonable notice of material changes.

14. Out-of-state & international users

We are a Texas-based provider and our services are offered exclusively in Texas. By using this site from outside Texas, you consent to the transfer, storage, and processing of your information in the United States under U.S. law.

15. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date above reflects the current version. Material changes will be communicated through the website or by email when appropriate.

16. Contact

For privacy questions or to exercise any of your rights, contact us via the contact page.