Privacy
Short version: this site collects anonymous usage statistics and whatever you type into the contact form. Nothing else. It is not a place to send patient information, and we have deliberately built no reason for anyone to try.
Last updated August 2026.
This site handles no protected health information
Nothing on cercalabs.com asks for patient data, and none of our forms should ever receive it. Our client work touches PHI under a business associate agreement inside the client’s own environment. That is a separate matter from this website, and it is described on the security and compliance page.
If you send us patient information by accident, tell us and we will delete it and confirm in writing.
A small number of service providers process this data on our behalf: an analytics provider, a customer relationship system where enquiries are recorded, an email service that delivers our replies, and our hosting provider. Each is bound by its own agreement with us, and none receives patient data because this site never holds any.
Ask and we will name them. We would rather answer that question than have you guess.
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. We do not require a form or a legal basis for that request, email us and we will do it, and confirm when it is done.
Browser-level controls work here as they do anywhere: blocking analytics scripts or clearing local storage will stop the collection described above, and nothing on this site will break if you do.
Questions about this page, or about anything we hold, go to whoever is listed on our about page. A person answers, usually within four business hours.
If we change how any of this works, we will change this page and update the date at the top. We will not quietly broaden it.