External Privacy Notice 

Introduction

Central Medical Laboratories (“CML”) is committed to protecting your personal data and respecting your privacy rights. This privacy notice explains how we collect, use, share, and protect personal information, and outlines your rights under applicable privacy regulations, including Jamaica’s Data Protection Act.

This notice applies to all personal data collected through our website, telephone, email, and in person at our location at 3-5 Eureka Crescent, Kingston 5, Jamaica. It covers:

  1. What personal data we collect
  2. How we use and process your data
  3. How we share your data
  4. Where your data is processed
  5. How long we store your data
  6. How we protect your data
  7. Your rights regarding your data
  8. Contact information
  9. Changes to this privacy notice

Who We Are

Central Medical Laboratories is a medical testing laboratory. As a data controller, we determine how and why your personal data is processed.

We have appointed a Data Protection Officer (DPO) to manage any queries or concerns you may have. You may contact our DPO via the information provided in the “Contact Information” section below.

Data We Collect

We collect and process personal information that you voluntarily provide or that is collected in the course of using our services. This includes:

  • Full name
  • Date of birth
  • Contact details (email, phone number, address)
  • National identification number or TRN (where necessary)
  • Medical and laboratory test information
  • Billing and payment information
  • Communications with us (calls, emails, in-person conversations)
  • Information submitted through our website, forms, or online services

In some cases, we may collect data from authorized third parties such as referring physicians or healthcare providers.

How We Use Your Data

We use your personal data for the following purposes:

  • To provide medical testing and diagnostic services
  • To communicate test results to you or your authorized healthcare provider
  • For appointment scheduling and patient support
  • For billing, payments, and insurance processing
  • For compliance with legal obligations under Jamaican health and data protection laws
  • To improve our services and internal operations
  • To respond to inquiries, complaints, and feedback
  • For data analysis and quality assurance
  • With your consent, to send you updates or marketing materials

We will not use your personal data for purposes that are incompatible with those listed above without your consent.

Legal Basis of Processing

We process personal data on the following legal bases:

  • Consent – when you give us permission to collect and use your data
  • Contract – to fulfill our obligations to provide you with healthcare services
  • Legal obligation – to comply with Jamaican laws and regulations
  • Legitimate interests – to improve our operations, provided this does not override your rights

You may withdraw your consent at any time by contacting us.

Specific Data Use

Examples of how we specifically use your data include:

  • When you complete a laboratory test form, we collect your contact details and clinical information to process your test.
  • When you call us for results or queries, we may verify your identity and record your communication for quality assurance.
  • We may share anonymized lab results for medical research, where appropriate and legal.

How We Share Your Data

We may share your personal data with:

  • Referring physicians and healthcare providers
  • Accredited third-party laboratories (for external test referrals)
  • Insurance companies (where applicable)
  • Regulatory and legal authorities, when required by law
  • IT and support service providers under strict confidentiality agreements

All third parties are required to maintain the security and confidentiality of your data and use it only for the specific purposes outlined in this notice.

Where We Process Your Data

Your data is primarily processed in Jamaica. However, in certain instances, personal data may be securely transferred to and processed in other countries, for example by international laboratories for specialized testing. In such cases, we ensure appropriate safeguards are in place, such as data processing agreements and confidentiality protocols.

How Long We Store Your Data

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, and as required by applicable laws and medical retention guidelines. For example:

  • Medical records and test results may be kept for at least 7 years
  • Billing records are retained in accordance with tax and financial regulations

When retention is no longer required, your data will be securely deleted or anonymized.

How We Protect Your Data

We implement robust administrative, technical, and physical safeguards to ensure the confidentiality, integrity, and availability of your personal data, including:

  • Encryption of sensitive data
  • Role-based access controls
  • Regular staff training on data privacy
  • Confidentiality agreements with all staff and third parties
  • Procedures for data breach response and incident reporting

Use of Cookies

Our website uses cookies to improve your browsing experience, remember preferences, and collect analytical data. Cookies do not give us access to your device or any personal data unless you provide it. For more information, see our Cookie Policy.

Your Rights Regarding Your Personal Data

Under Jamaica’s Data Protection Act, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your data, where lawful
  • Object to certain types of processing
  • Withdraw consent where previously given
  • Lodge a complaint with the Information Commissioner

To exercise these rights, please contact our DPO using the information provided below.

External Links

Our website may contain links to other websites. Please note that we are not responsible for the privacy practices of those websites. We encourage you to review their privacy notices.

Contact Information

For any questions, concerns, or to exercise your data rights please contact:

Data Protection Officer
Central Medical Laboratories
3-5 Eureka Crescent, Kingston 5, Jamaica
Phone: (876) 754-6200
Email: dpo@cmlabsja.com

Changes to This Privacy Notice

This privacy notice was last updated on June 20th, 2025. Updates will be posted on our website at: www.cmljamaica.com/privacy