Privacy notice
Last updated October 6, 2026
BetterLabs is software that diagnostic centers use to run their reception, laboratory, imaging, billing and staff work. This notice explains how personal information is handled in it, in line with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.
Who is responsible
Each diagnostic center that uses BetterLabs decides what information it collects about its patients, employees and partners, and why. The center is the personal information controller for that information. BetterLabs keeps and processes it for the center, on the center's instructions — we are its personal information processor.
If you are a patient or an employee examined by a center, your questions and requests about your records go first to that center and its Data Protection Officer.
What information is kept
- Patients: name, birth date, sex, contact details, visits, requested tests, specimens, results, images and reports, payments, and the consent you gave.
- Company employees in annual physical exams: what the employer's HR shares (name, birth date, department, employee number) and what you enter when you register online.
- Staff of the center: name, username, role, licences, signatures, schedules, attendance and pay records.
- Records of use: who did what and when (an audit trail), and short error reports that never include form contents.
Why it is used
Only for the center's diagnostic, reporting, billing, payroll and legal duties, and to keep the service secure and working. BetterLabs does not sell personal information, does not use it for advertising, and does not use patients' records for any purpose of its own.
Who it is shared with
- The center's own staff, each seeing only what their role needs.
- Those the center sends it to for your care or billing — for example a reference laboratory, your HMO or your employer. What an employer sees after an annual exam is limited to what you agreed to when you registered.
- Our service providers that host the system: Supabase (database and file storage, in Singapore) and Vercel (the website). If a center turns on email, its email provider sends the messages it chooses to send.
- Government authorities when the law requires it (for example, reporting of notifiable diseases).
How it is protected
- Each center's records are kept apart: staff of one center cannot see another's, and the database enforces this.
- Every connection is encrypted, sign-in is required, and each person's access follows their role.
- Changes are recorded in an audit trail that cannot be edited.
- Data is backed up daily.
How long it is kept
As long as the center needs it for your care and as required by Department of Health rules and other laws on medical, tax and employment records. When a center stops using BetterLabs, its records are returned to it or deleted as it instructs.
Your rights
Under the Data Privacy Act you may ask to be informed, to see your records, to correct them, to object, to have them erased or blocked where the law allows, to receive a copy in a usable form, and to be compensated for damage caused by misuse. Ask the center that holds your records. You may also complain to the National Privacy Commission (privacy.gov.ph).
Contact
For questions about your records, contact the center that holds them; they will reach us when needed.