Effective date: October 15, 2026

A-List Mobile Labs ("A-List," "we," "our") serves patients and partners in North Carolina. This policy describes information involved when you use our websites, contact our team or AI receptionist, book a collection, purchase services, or request educational materials. Different services may use different checkout, scheduling, and communication providers.

1. Information we may receive

Depending on your interaction, we may receive your name, contact details, service address, appointment preferences, referral source, booking and payment status, purchase details, inquiries, communication records, and the information needed to coordinate a collection. When necessary for your service, we may also receive physician orders, specimen-handling instructions, and other sensitive health information through an approved channel. Please do not submit medical records in an ordinary website contact message or social-media direct message.

Our websites and service providers may also process technical information such as browser type, device information, approximate location derived from your network, page interactions, referral parameters, and cookie choices. We do not request full card numbers over the telephone; payments are entered into the checkout provider's secure interface.

2. Where information is collected

Our services may link to Square for appointments and collection payments; Stan or other testing/checkout partners for certain heart-panel purchases and educational products; and separate secure document-submission tools for medical paperwork. Phone and text inquiries may be handled through Upfirst, including our AI receptionist Tiffany, and email or other authorized business systems. Those providers process information under their own policies and applicable agreements. A-List may receive transaction, booking, contact, and service records needed to provide the service.

3. How we use information

We use information to answer questions, identify the appropriate service or referral price, check service-area and specimen compatibility, arrange appointments, coordinate orders and specimens with authorized healthcare and laboratory partners, process and reconcile purchases, provide requested communications, maintain business records, address complaints, prevent fraud, and satisfy applicable legal duties.

Educational purchases, mentorship, and professional inquiries

For our Starter System, downloadable guides, professional networking, and 30-Day Mobile Phlebotomy Launch Mentorship, we may receive purchase and enrollment details, contact information, business goals, submitted intake answers, scheduling preferences, and communications needed to deliver the requested education or coaching. These business-education records are not a reason to send us patient charts or identifiable clinical records. Checkout, form, scheduling, video-call, and delivery platforms may process this information under their own notices and applicable agreements.

4. Health information and confidentiality

Health-related information is handled under applicable confidentiality, contractual, and privacy requirements. Whether HIPAA applies to a particular activity depends on the role of the entities and the transaction involved. This general website policy is not a substitute for a legally required HIPAA Notice of Privacy Practices, if one applies. To request an applicable notice, exercise a privacy right, or ask about an authorized record-handling process, contact us using the details below. We will verify identity and route requests according to applicable law.

5. Calls, SMS, email, and AI assistance

Our telephone service uses an AI receptionist and may record and transcribe calls with notice as appropriate. Please share only the information necessary to arrange a callback or service; do not read card numbers, complete medical records, or detailed results aloud to the AI agent. Transactional messages may concern appointments, requested links, updates, and support. Promotional email or SMS, where offered, requires the applicable permission and has separate opt-out controls. For text messages, reply STOP to opt out or HELP for assistance; message and data rates may apply. Opting out of marketing does not prevent essential service communications where permitted by law.

6. Cookies and analytics

We use necessary site technologies and may offer optional analytics or advertising-measurement cookies depending on your preferences and site configuration. Choose or revisit your preferences using the Cookie settings control in the site footer. Third-party linked checkout pages manage their own cookies. We do not authorize advertising partners to receive lab orders, test results, or other medical records. Because website URLs and activity can themselves disclose sensitive context, our tracking implementation and vendor configurations must be reviewed and restricted accordingly; do not rely on a cookie choice as a way to transmit medical records.

7. Sharing and disclosures

We may provide information to providers, receiving laboratories, authorized service partners, booking and payment processors, communications and technology vendors, and professional advisers when reasonably needed to provide services or meet legal obligations. We may also disclose information when required by law or to address safety, security, or misuse. We do not sell patient medical records. We do not promise that third-party platforms offer identical privacy practices; review their notices when leaving our website.

8. Security and retention

We use administrative, technical, and operational safeguards appropriate to the information and services involved, but no internet service or communication channel is entirely risk-free. Records are retained as needed for services, legitimate business needs, applicable contractual duties, disputes, and legal retention requirements, then disposed of under applicable policies. We cannot promise a universal deletion deadline for medical, billing, or legally required records.

9. Your choices and requests

You may request information about our practices, ask to update contact information, inquire about applicable access or correction rights, change optional cookie preferences, or withdraw marketing permission. Some requests may require identity verification, may need to be directed to a healthcare provider or platform holding the original records, or may be subject to retention exceptions.

10. Children and service eligibility

Some collections may be performed for minors with appropriate parent or legal guardian involvement and applicable authorization. The website is not designed to independently solicit personal information from children. Guardians should contact us to coordinate pediatric appointments and required documentation.

11. Changes to this policy

We may update this policy as our services, vendors, or requirements change. A new effective date will appear on this page. Material notices will be provided when legally required.

12. Contact A-List

For privacy inquiries or to request the appropriate secure method for submitting a physician's order, contact xyonlucas@alistmobilelabs.com or 919-794-5683. Do not include sensitive medical information in your initial ordinary email inquiry.