Privacy policy

Last updated: 2026-11-09

Who we are

We're BioBench Labs, an independent business based in Jordan that serves clients remotely, and we run this website. If you have a question about privacy, use the request form (choose "General question") or email [email protected].

What we collect

• Request form: your name, company, work email, role, the service you chose, the number of sites or assets or your test type and timeline, your message, and any file you attach.
• Quotes and invoices: when you accept or decline a quote, we record the name and job title you enter and the time. We also keep the quotes, invoices and payment status for your request, and the files we deliver to you. You can see all of these on your status page.
• Status checks: the reference number and email you type in. We use them to find your request and do not store the lookup.
• Spam protection: the request form uses Cloudflare Turnstile. To tell people from bots, Cloudflare processes technical signals from your browser and your IP address. See the Cloudflare Turnstile privacy addendum.
• Server logs: our host, Cloudflare, processes IP addresses and request details to deliver and protect the site. We do not add any tracking of our own.

Patient information

Please don't send patient information (PHI). We only need equipment records and test data. If we ever receive a file that contains patient information, we delete it and let you know.

Cookies and tracking

This site sets no cookies and uses no advertising or tracking tools. If you pick a light or dark theme, that choice is saved in your own browser's storage and is never sent to us.

We do not currently use any website analytics. If we turn on Cloudflare Web Analytics (cookieless, counts page views only), this page will say so.

The private admin area, used only by us, is protected by Cloudflare Access, which sets a sign-in cookie for the administrator. Visitors never see it.

How we use your information

We use what you send us to answer your request, prepare a quote and deliver the work, to show you the status of your request, and to keep basic business records (for example, what was quoted and delivered). We don't sell your information, share it for advertising, or add you to a mailing list.

Where it is stored and who processes it

Requests, quotes and invoices are stored in a Cloudflare D1 database, and files in private Cloudflare R2 storage. Emails are handled by Zoho Mail. Payments are received through Payoneer, which processes the payment details you use to pay us. These providers may process data in the United States and other countries.

Your file is stored in private, access-controlled storage and on our encrypted work computer, used only for the work you asked for, and deleted within 90 days after delivery, or sooner if you ask. Only the person doing your work has access to it, and we're glad to sign your NDA first. We are based in Jordan, so your data are handled outside your own country.

How long we keep it

• Uploaded files and our working copies: deleted within 90 days after the work is delivered or the request is closed, or sooner if you ask.
• Recall Watch: for an active subscription, we keep your equipment lists for the life of the subscription, then delete them within 90 days after it ends.
• Request records (your name, company, email and messages): kept for 24 months after the request is closed, then deleted.
• Quotes, acceptances and invoices: kept for as long as tax and accounting law requires, which is usually several years. These financial records can't be deleted on request.

Your choices

You can ask us to show, correct or delete the information we hold about you. Send a request through the form, quoting your reference number, and we will reply within 30 days.

Security

The site uses HTTPS. Uploaded files are stored in private storage that is not publicly reachable. Our admin area requires two separate sign-in checks.

Changes

If we change this policy, we'll update the date at the top of this page.