Privacy Policy

Last updated: September 1, 2026

This Privacy Policy describes how RSM Diagnostics Lab LLC, a Delaware limited liability company (“RSM Diagnostics Lab LLC,” “RSM Diagnostics Lab,” “RSM,” “we,” “us,” or “our”), handles personal information in connection with rsmdiagnosticslab.com, related online forms, Document Center resources, and communications.

Website access and acceptance

By visiting, accessing, browsing, viewing, downloading from, submitting through, or otherwise using the website, Document Center, online forms, patient or provider portals, communications, or any other online or related service made available by RSM, you agree to be bound by this Privacy Policy, RSM’s Terms of Service, RSM’s Notice of Privacy Practices, and all other applicable RSM legal notices, policies, account agreements, order-specific documents, and mandatory regulatory and program requirements governing laboratory services, billing, privacy, security, and data handling, in each case as posted, published, or made available by RSM through the website or a related service, including as revised, replaced, supplemented, suspended, or withdrawn from time to time, to the fullest extent permitted by applicable law. This agreement by access or use applies whether or not you complete a separate acceptance step and is in addition to any affirmative acceptance, electronic signature, checkbox confirmation, or other express agreement RSM may require.

Except where applicable law, a signed agreement, or an order-specific document requires a different result for a particular matter, relationship, or transaction, your continued visiting, accessing, browsing, viewing, downloading from, submitting through, or otherwise using the website, Document Center, online forms, patient or provider portals, communications, or any other online or related service made available by RSM after RSM conspicuously posts or provides notice of a revised or replacement privacy policy, term, notice, billing policy, fee schedule, collection practice, portal term, form instruction, or other website or online-service arrangement constitutes your agreement to that revised or replacement version for website use and for future services, orders, specimens, shipments, kits, account activity, billing, collections, portal access, and related interactions, to the fullest extent permitted by applicable law.

Where RSM presents a legal notice that requires affirmative acceptance, you must complete that step before accessing the applicable restricted website feature, Document Center material, online form, portal function, or other service identified in that notice. That action constitutes your electronic signature and agreement to this Privacy Policy and RSM’s Terms of Service, to the fullest extent permitted by applicable law.

Information we collect

We may collect personal information that you provide to us, including your name, practice, facility, provider, or organization details, professional contact information, email address, telephone number, mailing or shipping address, account information, message content, and information submitted through an RSM form or portal.

We may also collect information generated through your interaction with the website or related services, including device type, browser type, IP address, operating system, approximate location derived from IP address, pages or features accessed, referring website, date and time of access, form-submission metadata, account or portal activity, and security or fraud-prevention information.

The Request a Kit page includes three Google Forms. The Account Requisition Form collects practice, facility, provider, and administrative contact information for account review, account setup, KOLIMS portal access, and initial kit coordination. The Bulk Shipment Request Form collects approved-account shipping and fulfillment information for blank collection-kit supply. The Patient Direct Drop Shipment Request Form is for authorized users of approved RSM accounts and may collect patient identity, contact, shipping, and other information RSM requires to evaluate and fulfill a kit-shipment request.

Do not submit personal information, protected health information, test results, diagnoses, payment-card information, government identification numbers, or other sensitive information through a form unless RSM expressly requests it through an approved process.

Cookies and similar technologies

RSM uses local storage to retain a visitor’s selected light or dark theme preference. This preference remains in the visitor’s browser unless the visitor clears browser or site data.

RSM does not knowingly use advertising cookies or knowingly sell, rent, or share personal information for cross-context behavioral advertising. RSM may use hosting, security, server-log, and other operational tools that collect limited technical information necessary to operate, secure, troubleshoot, and improve the website.

The Request a Kit page embeds Google Forms. Google may collect information, set cookies, or use similar technologies in connection with those forms under Google’s own terms and privacy policy. RSM does not control Google’s independent practices.

Depending on your location, you may have privacy rights under applicable law. See the Privacy requests and rights section below.

If RSM adds analytics, advertising, tracking, session-replay, cookie-consent, or similar technology, RSM may update this Privacy Policy and provide any notice or consent required by applicable law before using that technology, as further described in the Changes section below.

When you accept RSM’s Terms through a legal notice, RSM may maintain records of that acceptance in browser, server, portal, account, form-submission, electronic-signature, or other electronic systems, subject to applicable law and RSM’s record-retention practices. Such records may include the Terms version presented, the date and time of acceptance, and available technical, account, or transaction information associated with the acceptance.

How we use information

We use collected information to respond to inquiries; review, process, and fulfill account, kit, shipment, portal, and service requests; communicate with users, patients, providers, practices, facilities, and account representatives; maintain, secure, troubleshoot, and administer the website and related services; prevent fraud, misuse, unauthorized access, and security incidents; enforce RSM’s agreements and protect RSM’s rights; and meet operational, legal, regulatory, accreditation, payor, audit, accounting, and record-retention requirements.

How we disclose information

RSM may disclose personal information to service providers, contractors, professional advisors, payment processors, hosting providers, cloud-service providers, communications providers, form providers, portal providers, security providers, carriers, laboratories, affiliates, and other parties that process information on RSM’s behalf or as necessary to provide requested services.

RSM may also disclose information to comply with applicable law, regulation, subpoena, court order, government request, accreditation requirement, payor requirement, audit, investigation, or legal process; to establish, exercise, or defend legal claims; to protect the rights, property, safety, security, or operations of RSM, patients, providers, or others; to prevent fraud or misuse; or in connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or other corporate transaction.

RSM does not sell personal information for money. RSM does not knowingly share personal information for cross-context behavioral advertising.

Protected health information

RSM Diagnostics Lab LLC is a CLIA-certified clinical laboratory. To the extent RSM acts as a HIPAA covered entity or business associate, RSM handles protected health information in accordance with HIPAA, applicable state privacy law, and any applicable Business Associate Agreement.

This Privacy Policy governs general website, business-contact, and online-form information. Protected health information created, received, maintained, or transmitted in connection with laboratory testing is governed by RSM’s Notice of Privacy Practices, applicable requisition forms, patient financial-responsibility forms, account agreements, Business Associate Agreements, and other clinical or order-specific documents. If there is a conflict, the document that governs the specific activity controls.

The Account Requisition Form and Bulk Shipment Request Form are administrative forms. Do not use them to submit patient identifiers, test results, diagnosis information, or other protected health information unless RSM specifically directs you to use an approved process.

The Patient Direct Drop Shipment Request Form is intended only for authorized users of approved RSM accounts. It may collect patient information necessary to evaluate and fulfill a kit-shipment request. RSM uses Google Workspace services in connection with this form under RSM’s applicable Business Associate Agreement with Google, subject to the Google services, configurations, account settings, and safeguards RSM uses for that environment. Access to form responses is limited to personnel who require access for permitted operational purposes, subject to applicable law and RSM’s access controls.

The Patient Direct Drop Shipment Request Form does not create a laboratory order, substitute for a completed Test Requisition Form, replace patient consent or ordering-provider certification, or authorize RSM to perform testing.

Data security and retention

RSM uses administrative, technical, and physical safeguards designed to protect personal information appropriate to the nature of the information and the services involved. No system, transmission, storage method, or security measure is completely secure, and RSM does not guarantee the security, availability, confidentiality, or integrity of information.

RSM retains personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, to comply with legal, regulatory, accreditation, payor, tax, accounting, record-retention, audit, dispute, and business requirements, and to enforce RSM’s agreements and protect RSM’s rights. Retention periods may vary by information type, relationship, transaction, legal requirement, and operational need.

No guarantee of security

RSM cannot and does not guarantee that personal information, protected health information, website activity, electronic communications, forms, portal activity, or transmissions will always remain secure, confidential, available, complete, or free from unauthorized access, loss, alteration, delay, interruption, or other security incidents. You use the website, forms, and online services at your own risk to the fullest extent permitted by applicable law. Nothing in this section limits any obligation RSM cannot lawfully limit or exclude.

Privacy requests and rights

Depending on your state or country of residence and the nature of the information RSM holds, you may have rights to request access to, correction of, deletion of, restriction of, portability of, or information about RSM’s processing of certain personal information. These rights may be limited by applicable law, including where RSM must retain information for legal, clinical, regulatory, accreditation, payor, fraud-prevention, security, audit, or dispute-related reasons.

To submit a privacy request, email info@rsmdiagnosticslab.com with the subject line “Privacy Request.” RSM may require information to verify your identity, authority, residence, and the scope of your request before acting on it. An authorized agent may submit a request only where permitted by law and after providing evidence of authority and any verification RSM reasonably requires.

Requests involving protected health information or laboratory test records are governed by RSM’s Notice of Privacy Practices and applicable law, rather than this website Privacy Policy, to the extent those documents or laws apply.

Changes

RSM may revise, replace, supplement, suspend, withdraw, or discontinue this Privacy Policy, RSM’s Terms of Service, RSM’s posted billing policies, fee schedules, legal notices, website policies, portal terms, form instructions, and other website or online-service materials prospectively from time to time, in RSM’s sole discretion, to the fullest extent permitted by applicable law. The “Last updated” date on a posted document identifies that document’s effective version. Where RSM requires renewed acceptance through the site’s legal notice, the revised document applies after the user affirmatively accepts it. For website visitors who are not required to reaccept, continued visiting, accessing, browsing, viewing, downloading from, submitting through, or otherwise using the website or any related online service after conspicuous posting or other notice of a revised document may constitute acceptance of that revision only to the extent permitted by applicable law.

Revisions apply prospectively from their effective date, except where applicable law, an order-specific document, or a signed agreement requires a different result for a particular matter, relationship, or transaction. Without limiting the foregoing, RSM may change how the website, forms, portals, communications, and related services collect, use, disclose, retain, or secure information for future interactions where RSM determines that legal, regulatory, payor, licensure, operational, quality, privacy, security, fraud, supply, shipping, collection, or compliance considerations require that action.

It is your responsibility to review posted privacy policies, terms, notices, billing policies, and related materials periodically. RSM is not obligated to provide separate notice of every change except where applicable law requires notice for a particular change or communication.

Contact

For privacy questions, email info@rsmdiagnosticslab.com or write to RSM Diagnostics Lab LLC, 2500 Grubb Rd, Suite 120, Wilmington, DE 19810.