Privacy Policy & Patient Data Terms
Effective Date: October 2026 • HumanResearchLab Patient Report Portal
1. Patient Medical Confidentiality
HumanResearchLab treats all clinical diagnostic results, pathology findings, and patient demographics as strictly confidential medical records. We adhere to international healthcare confidentiality standards, ensuring that patient records are stored with encryption-at-rest and transmitted over secure TLS/SSL protocols.
2. Two-Factor Authentication & Verification
To eliminate the risk of unauthorized data harvesting or identity theft, access to patient reports requires matching registration numbers with the registered mobile number. A temporary, single-use 6-digit cryptographic SMS OTP (One-Time Password) is sent to ensure that only verified patients or their authorized guardians can open the report dashboard.
3. Zero-Knowledge Logging Policy
Our web portal strictly forbids the logging of plain-text OTPs, clinical test parameters, or diagnostic observations in application log files. System audits only record administrative events (such as session creation, OTP requests, and report downloads) alongside masked identifiers to maintain compliance.
4. Payment & Report Delivery Terms
Laboratory investigations require settlement of the relevant diagnostic fee. In accordance with clinical policy, verified report findings remain in a protected state until the bill is settled. Upon payment confirmation via an authorized gateway (bKash, Nagad, or Cards), the full authenticated report and downloadable PDF are immediately unlocked.
5. Clinical Interpretation Disclaimer
Laboratory reports provide objective analytical observations of specimens submitted. They do not constitute an independent medical prescription. Patients must share these reports with their registered physician for proper diagnostic interpretation, clinical correlation, and therapeutic planning.
Contact for Data Protection Inquiries:
Email: support@humanresearchlab.com • Hotline: +880 9610-001122