PRIVACY POLICY

Last updated: January 31, 2026

 

Welcome to Caledonia Medical Laboratory Limited.

Caledonia Medical Laboratory Limited (“we”, “us”, or “our”) operates biomedicaljm.com (the “Service”).

This Privacy Policy explains how we collect, use, safeguard, and disclose information arising from your use of our Service. We are committed to protecting your personal data in accordance with the Jamaica Data Protection Act, 2020, and where applicable, international data protection standards.

By using our Service, you acknowledge that you have read and understood this Privacy Policy. Where we require your explicit consent to process sensitive personal data (such as medical or diagnostic information), we will obtain this separately. This Policy should be read in conjunction with our Terms and Conditions; together, they govern our relationship with you regarding your data.

 

Definitions

  • Service: the biomedicaljm.com website operated by Caledonia Medical Laboratory Limited
  • Personal Data: information relating to an identifiable living individual
  • Usage Data: data collected automatically from use of the Service
  • Cookies: small data files stored on your device
  • Data Controller: Caledonia Medical Laboratory Limited
  • Data Processor / Service Provider: third parties processing data on our behalf
  • Data Subject / User: any individual using the Service

 

Information We Collect and Use

We collect and process personal data only when we have a lawful basis to do so, such as with your consent, to fulfill a contract, comply with legal obligations, or pursue legitimate interests. Specifically, we process personal or sensitive personal data only as necessary to provide medical and diagnostic services and fulfill our statutory clinical duties.

Types of Data Collected

  1. Personal Data

We may collect information you voluntarily provide, including but not limited to:

  • Email address
  • Full name
  • Phone number
  • Address and location details
  • Cookies and usage data

You may receive service-related communications from us. Marketing communications are optional, and you may opt out at any time.

  1. Sensitive Personal Data

In providing medical and diagnostic services, we may process health and medical information strictly for clinical, operational, and regulatory purposes. This data is not used for marketing.

  1. Financial Data

Payment information is processed securely by third-party payment processors. We do not store payment card details.

  1. Usage Data

This may include IP address, browser type, pages visited, time spent, device identifiers, and diagnostic data. Usage data is generally retained for a limited period and used to improve security and performance.

  1. Location Data

Location data may be collected where you enable this feature through your device settings. You may disable location services at any time.

  1. Cookies and Tracking Technologies

We use cookies to:

  • Operate the Website
  • Remember preferences
  • Enhance security
  • Support advertising and analytics

You may manage cookie preferences through your browser settings.

 

 

 

CCTV and On-Site Surveillance

For safety, security, and operational purposes, CCTV cameras are in active use at our physical premises.

  • CCTV footage may capture images of staff, visitors, and patients
  • Recordings are retained for no longer than 30 days, unless required for investigation, legal, or regulatory purposes
  • Access to footage is restricted and securely controlled

This processing is conducted in compliance with the Jamaica Data Protection Act, 2020.

 

Use of Data

We use collected data to:

  • Provide and maintain our Service
  • Deliver medical and diagnostic services
  • Communicate with users
  • Improve functionality and performance
  • Monitor usage and ensure security
  • Meet legal, regulatory, and contractual obligations

 

Retention of Data

Personal Data is retained only for as long as necessary to fulfill its purpose, comply with legal obligations, or resolve disputes. Retention periods vary based on data type, sensitivity, and applicable laws.

 

Transfer of Data

Your data may be processed and stored in Jamaica or other jurisdictions where our systems or service providers operate. We ensure appropriate safeguards are in place for all transfers.

 

Disclosure of Data

We may disclose personal data:

  • To trusted service providers and affiliates
  • To comply with legal obligations
  • With your consent

We do not sell personal data.

 

Security of Data

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, loss, or alteration. While we strive to protect your information through rigorous security protocols, please note that no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Your Data Protection Rights

Under the Jamaica Data Protection Act, 2020

You have the right to:

  • Access your personal data
  • Request correction or deletion
  • Object to or restrict processing
  • Withdraw consent where applicable

Where personal data is processed for data subjects in international jurisdictions such as the EU, we facilitate the exercise of your data protection rights in accordance with applicable local and international laws. This includes providing you with the ability to access, rectify, or erase your data, as well as the right to data portability and to object to or restrict processing.

Requests may be sent to:
📧 info@biomedicaljm.com

We may require identity verification before responding.

 

Service Providers

Third-party service providers may process personal data on our behalf under strict confidentiality and security obligations.

 

Payments

All payment processing is handled by PCI-DSS compliant third-party providers. We do not store payment card information.

 

Links to Other Websites

Our Service may contain links to third-party sites. We are not responsible for their privacy practices and encourage you to review their policies.

 

Children’s Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you become aware that a Child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from Children without verification of parental consent, we take steps to remove that information from our servers.

Updates to This Privacy Policy

We may update this Privacy Policy periodically. Changes take effect once posted on this page. Our website, services, and related materials are continuously updated and may change without prior notice.

 

Contact Us

If you have questions about this Privacy Policy or your personal data, contact us at:

📧 info@biomedicaljm.com