Korte Laboratory Advisors, LLC
Effective date: October 22, 2026
Korte Laboratory Advisors, LLC (“KLA,” “we,” “us”) is a Kentucky limited liability company that provides laboratory consulting and laboratory information software to clinical laboratories. This policy explains what information we collect, how we use and share it, how long we keep it, and the choices you have.
This policy applies to:
• our website, https://kortelabadvisors.com (the “Website”);
• our mobile application for iPhone and iPad (the “App”); and
• our web-based laboratory information system and related services (together with the App, the “Services”).
The Services are designed for laboratory professionals. Your account is set up by the laboratory or organization you work for (our “Client”). We do not sell the App to consumers, and you cannot create an account inside the App.
Questions about this policy: erik@kortelabadvisors.com.
Laboratory and patient data we process for our Clients
Our Clients use the Services to keep their laboratory records, such as quality control results, temperature and maintenance logs, personnel competency records and, where a Client enables it, patient test results. These records belong to the Client. We process them only on the Client’s instructions and only to provide the Services.
Where those records include protected health information, KLA acts as a “business associate” under the Health Insurance Portability and Accountability Act (HIPAA). We handle that information as required by HIPAA and by a written business associate agreement with each Client. We do not use it for any purpose of our own.
If you are a patient, the laboratory or health care provider that ordered or performed your testing controls your information, and its Notice of Privacy Practices describes your rights. Please send requests about your health information to that provider. If you contact us, we will forward your request to the right Client.
Information we collect
From the Website. We collect what you choose to send us, such as your name, email address, organization and message when you use our contact form or email us. Our website host keeps standard server logs (IP address, browser type, pages requested, date and time) to run and secure the site. The Website does not use analytics, advertising or tracking cookies.
Account information (App and Services). Your Client gives us your name, work email address, job role, permissions and laboratory qualifications so it can set up your account. When you sign in, we collect your authentication data, including the multi-factor authentication factor you enroll. We never see or store your password in readable form.
Records you create. When you use the App or the Services, we collect the entries you make, such as temperature readings, maintenance and quality control records, comments, reviews and electronic signatures. Each entry is stored with your user ID and the date and time, because laboratory regulations require a record of who did what and when.
Technical and security data. We collect sign-in times, IP address, device and operating-system type, app version and a security audit log of actions taken in the Services. We use this data to keep accounts secure and to meet audit requirements.
Device permissions. If the App asks for camera access, it is only to scan barcodes and labels, and images are not stored. If the App asks permission to send notifications, they are log reminders, and you can turn them off in iOS Settings. The App does not access your location, contacts, photos, microphone or health data.
Crash reports. If you choose to share analytics with app developers in your iOS settings, Apple sends us crash and performance reports that are not linked to your identity.
How we use information
We use the information described above only to:
• provide, operate and maintain the Website and the Services;
• verify your identity, enforce the permissions your Client assigns, and protect accounts from unauthorized access;
• keep the complete, unalterable audit records that clinical laboratory regulations require;
• respond to your questions and support requests;
• fix errors and improve the reliability and security of the Services; and
• comply with law, legal process and our contracts with Clients.
What we do not do. We do not sell personal information. We do not use it for advertising, marketing profiles or data mining. We do not track you across other companies’ apps or websites, and the App contains no third-party advertising or analytics code. We do not share your information with third-party artificial intelligence services. We do not use information collected for one purpose for an unrelated purpose without your consent, unless the law requires it.
How we share information
We share personal information only as follows:
• With your Client. Your laboratory can see your account details and the records you create, because those records belong to it.
• With service providers that run the Services for us. These are Google Cloud (hosting, database, sign-in and multi-factor authentication, in the United States), Apple (App distribution and, if you opt in, crash reports) and WordPress.com (Website hosting).
• When the law requires it. We disclose information when required by law, subpoena or court order, or to protect the rights, safety or security of our Clients, users or the public.
• In a business transfer. If KLA is merged, acquired or sells its assets, information may transfer to the successor, which must honor this policy and our Client agreements.
Every service provider that receives personal information is bound by a written agreement to use it only to provide services to KLA and to protect it at a level at least equal to this policy. Where a provider handles protected health information, it has signed a HIPAA business associate agreement with KLA. We have no parent, subsidiary or affiliated company that receives your information.
How long we keep information, and how to delete it
Laboratory records. Records in the Services, including entries and signatures you made, are kept for as long as your Client’s agreement with us and applicable law require. Federal clinical laboratory rules (42 CFR Part 493) require laboratories to keep many records for at least two years, and some longer. To meet those rules, records are never altered or erased in place: corrections are saved as new versions, and the original is kept. When a Client’s agreement ends, we return or delete its records as that agreement and the law direct.
Account information. We keep your account information while your account is active and for as long afterward as needed to keep the audit trail of records you created.
Website inquiries. We keep contact-form messages and emails for up to two years, then delete them.
Deleting your account. You can request deletion of your account by emailing erik@kortelabadvisors.com. Because your Client controls your account, we will confirm the request with your Client and complete it within 30 days. When an account is deleted, we permanently disable sign-in, remove your multi-factor authentication enrollment, and delete account information we are not required to keep. Your name and user ID remain only on laboratory records the law requires your Client to retain.
Withdrawing consent. You can turn off notifications or camera access at any time in iOS Settings. You can stop sharing crash reports in iOS Settings → Privacy & Security → Analytics & Improvements. You can ask us to delete Website inquiries at any time.
Security
We protect information with encryption in transit and at rest, mandatory multi-factor authentication, role-based access limited to each Client’s own data, and tamper-evident audit logs. No system is perfectly secure. If we learn of a breach affecting your information, we will notify you or your Client as the law and our agreements require.
Children
The Website and the Services are for adult professionals and are not directed to children. We do not knowingly collect personal information from children under 13. Some Clients serve pediatric patients; any information about those patients reaches us only through the Client, under HIPAA, as described above.
Where information is stored
We store and process information in the United States. The Services are offered only to laboratories in the United States.
Your rights
You may ask us to access, correct or delete your personal information by emailing erik@kortelabadvisors.com. For records that belong to your Client, we will work with the Client to respond. We will not treat you differently for making a request. Depending on where you live, you may have additional rights under state law, and we will honor them as that law requires.
Changes to this policy
We will post any changes on this page and update the effective date. If a change materially affects how we use your information, we will notify Clients and, where required, ask for your consent first.
Contact us
Korte Laboratory Advisors, LLC, Louisville, Kentucky. Email: erik@kortelabadvisors.com