BERDE™ (LabWork Tools)
Last updated: October 3, 2026
This privacy notice for Karla M. Resto Delgado, the individual who owns and operates LabWork Tools (“LabWork Tools,” “we,” “us,” or “our”) describes how and why we might collect, store, use, and/or share (“process”) your information when you use our services (“Services”), such as when you:
Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at [email protected].
This summary provides key points from our privacy notice. You can find out more details about any of these topics using the table of contents below.
What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the features you use — primarily contact information and employment/training-related information supplied by your employer (a client laboratory).
Do we process any sensitive personal information? No. We do not process sensitive personal information (such as health data, racial or ethnic origin, or biometric data) and, within our current scope, we do not process patient clinical information (PHI).
Do you receive any information from third parties? No. We do not currently receive personal information about you from public databases, marketing partners, social media platforms, or other outside sources.
How do you process my information? We process your information to provide and administer the Services, communicate with you, process payments, and comply with law. We process your information only when we have a valid legal reason to do so.
In what situations and with which parties do we share personal information? We may share information with service providers who support our infrastructure and payment processing (currently Cloudflare and PayPal), and as otherwise described in this notice.
How do we keep your information safe? We use technical and organizational measures designed to protect your personal information, though no method of transmission or storage can be guaranteed 100% secure.
What are your rights? Depending on where you are located, applicable privacy law may give you certain rights regarding your personal information.
How do I exercise my rights? The easiest way is to contact us at [email protected]. We will consider and act upon any request in accordance with applicable data protection laws.
1. What Information Do We Collect?
2. How Do We Process Your Information?
3. What Legal Bases Do We Rely On to Process Your Information?
4. When and With Whom Do We Share Your Personal Information?
5. What Is Our Stance on Third-Party Websites?
6. Do We Use Cookies and Other Tracking Technologies?
7. How Do We Handle Your Social Logins?
8. Is Your Information Transferred Internationally?
9. How Long Do We Keep Your Information?
10. How Do We Keep Your Information Safe?
11. Do We Collect Information From Minors?
12. What Are Your Privacy Rights?
13. Controls for Do-Not-Track Features
14. Do California Residents Have Specific Privacy Rights?
15. Do Virginia Residents Have Specific Privacy Rights?
16. Do We Make Updates to This Notice?
17. How Can You Contact Us About This Notice?
18. How Can You Review, Update, or Delete the Data We Collect From You?
In Short: We collect personal information that you or your employer (a client laboratory) provide to us.
We collect personal information that is voluntarily provided to us when a client laboratory registers for BERDE™, when an authorized administrator adds employee records to the platform, when you contact us, or when you express interest in our services.
The personal information we collect may include the following:
Sensitive Information. We do not process sensitive information. BERDE™ does not collect or store patient clinical information (PHI), Social Security numbers, government identification numbers, or health data about our users.
Payment Data. We collect data necessary to process subscription and setup fee payments. Payment instrument information (such as card or bank account details) is collected and stored by our payment processor, PayPal. We do not collect or store your full payment card number. You may review PayPal’s privacy statement here: https://www.paypal.com/us/webapps/mpp/ua/privacy-full.
Social Media Login Data. Not applicable. We do not currently offer registration or login through third-party social media accounts.
Application Data. Not applicable. BERDE™ is a browser-based web application; we do not currently offer a mobile application and do not collect mobile device permissions, geolocation, or push notification data.
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.
In Short: Some information — such as your Internet Protocol (IP) address and browser and device characteristics — is collected automatically when you use the Services.
We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, browser type, operating system, and other technical information. This information is primarily needed to maintain the security and operation of our Services, for troubleshooting, and for internal reporting.
In Short: Not applicable.
We do not currently collect personal information about you from public databases, marketing partners, social media platforms, or other third-party sources. If this changes, we will update this notice accordingly.
In Short: We process your information to provide and administer the Services, communicate with you, process payments, maintain security, and comply with law.
We process your personal information for the following reasons:
In Short: We process your personal information only when we have a valid legal reason to do so. This section is primarily relevant if you are located in the EU, UK, or Canada; BERDE™ is currently offered to clinical laboratories in the United States and Puerto Rico, so this section may not apply to most users.
If you are located in the EU or UK, we may rely on the following legal bases: Consent, Performance of a Contract (to provide the Services you or your employer signed up for), Legitimate Interests (e.g., to maintain and secure the Services), and Legal Obligations.
In legal terms, we are generally the “data processor” for the training and competency data that client laboratories enter into BERDE™ on their own behalf — the client laboratory is the “data controller” responsible for that data, and we process it in accordance with our agreement with them and our Terms and Conditions.
If you are located in Canada, we may process your information with your express or implied consent, which you may withdraw at any time, or in the limited circumstances permitted under applicable Canadian law.
In Short: We share information only with the service providers necessary to operate the Services, and in limited circumstances described below.
We may share your data with the following categories of third-party service providers, under contract, solely to perform services on our behalf:
We do not use, and do not share personal information with: ad networks, affiliate marketing programs, retargeting platforms, or social networks.
Our infrastructure provider, Cloudflare, may also provide basic website traffic statistics (Cloudflare Web Analytics). Cloudflare describes this service as privacy-focused, without cookies or cross-site tracking of individual visitors.
We may also share your information in the following situations:
Google Maps Platform APIs, Affiliates, Other Users, Offer Walls: Not applicable — we do not use these features or integrations.
In Short: We are not responsible for the practices of third-party websites we link to.
The Services may link to third-party websites (for example, our Lab Sheets storefront on Etsy, or our payment processor) that are not operated by us. We do not guarantee the safety or privacy practices of these third parties, and we are not liable for any loss or damage arising from your use of them. We encourage you to review their privacy notices directly.
In Short: We use limited cookies necessary for account authentication and platform functionality. We do not currently use cookies for targeted advertising.
BERDE™ uses essential cookies/session tokens required to keep you securely logged in and to remember your preferences within the platform. Our payment processor (PayPal) may set its own cookies during checkout, governed by PayPal’s own privacy statement. We do not currently use cookies or pixels for targeted advertising or cross-site tracking. Our website (www.labworktools.com) also uses a small functional cookie, site_lang, to remember the language you choose for up to one year; it contains no personal information and is not used for tracking. The BERDE™ sign-in screen likewise remembers your language choice in your browser.
In Short: Not applicable.
We do not currently offer the ability to register or log in to the Services using a third-party social media account.
In Short: Your information is processed in the United States through our infrastructure provider.
Our Services are hosted on Cloudflare’s global network; our primary infrastructure and payment subprocessors (Cloudflare and PayPal) are headquartered in the United States. LabWork Tools operates from Puerto Rico, a territory of the United States. We do not currently have users or operations in the European Economic Area or United Kingdom; international-transfer mechanisms such as Standard Contractual Clauses, Binding Corporate Rules, or the EU-US/Swiss-US Privacy Shield Frameworks are not applicable to our current operations. If our operations expand to the EEA or UK, we will update this notice accordingly.
In Short: We keep your information only for as long as necessary to provide the Services, as described in our Terms and Conditions.
We retain personal information for the duration of the client laboratory’s active subscription. Following cancellation, non-renewal, or termination for non-payment, data is permanently deleted according to the schedule set out in our Terms and Conditions:
Deleted data may remain in our backups for up to thirty (30) days before it is permanently removed. Order, payment, and tax records are kept separately for as long as accounting and tax laws require, and do not include your laboratory’s competency or training records. When a laboratory’s data is deleted, we keep only a minimal record that the deletion took place (the laboratory’s name and code, the date, and the reason).
When we have no ongoing legitimate business need to process your personal information, we will delete or anonymize it, or, where that is not possible, securely isolate it from further processing until deletion is possible.
In Short: We use technical and organizational security measures designed to protect your information.
We use industry-standard security measures appropriate to the size of our operation, including encrypted connections (HTTPS/TLS) across the Site and Services, role-based access controls that restrict data access to authorized users within each client laboratory’s own account, PINs stored only in hashed (non-readable) form, an automatic lockout of a login ID after three incorrect PIN attempts until its PIN is reset, and reliance on PayPal for payment processing so that we do not collect or store full payment card numbers. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
In Short: No. Our Services are intended for use by working professionals in clinical laboratory settings and are not directed at children.
We do not knowingly solicit data from or market to individuals under 18 years of age. By using the Services, you represent that you are at least 18 years old. If we learn that personal information from an individual under 18 has been collected, we will take reasonable steps to delete such data. If you become aware of any such data, please contact us at [email protected].
In Short: In some regions, you have rights that give you greater access to and control over your personal information. This section is primarily relevant to residents of the EEA, UK, and Canada; most current users of BERDE™ are located in the United States and Puerto Rico.
Where applicable law grants these rights, you may request access to, correction of, or deletion of your personal information, and may object to or request restriction of certain processing. You can make such a request by contacting us using the details in Section 17 below. If you are located in the EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority.
Withdrawing consent: Where we rely on your consent, you may withdraw it at any time by contacting us. This will not affect the lawfulness of processing carried out before withdrawal.
Account information: To review, update, or request deletion of information in a client laboratory account, an authorized administrator may contact us at [email protected], or use the account management features within BERDE™. Upon request to terminate an account, we will deactivate and delete the associated information from our active databases in accordance with the retention schedule in Section 9, subject to any legal retention obligations.
Most web browsers include a Do-Not-Track (“DNT”) feature. Because no uniform standard for recognizing DNT signals has been finalized, we do not currently respond to DNT browser signals. If a uniform standard is adopted, we will update this notice.
In Short: Yes. If you are a California resident, the CCPA grants you specific rights regarding your personal information.
We have collected the following categories of personal information in the past twelve (12) months:
| Category | Collected? |
|---|---|
| A. Identifiers (name, contact details, email, IP address) | Yes |
| B. Personal info under Cal. Customer Records statute (name, contact info, employment info) | Yes |
| C. Protected classifications (gender, date of birth) | No |
| D. Commercial information (subscription/billing history — not full payment card data) | Yes (limited) |
| E. Biometric information | No |
| F. Internet or network activity (basic platform usage/log data; no ad tracking) | Yes (limited) |
| G. Geolocation data | No |
| H. Audio, visual, or similar information | No |
| I. Professional or employment-related information (job title, employer, training/competency records) | Yes |
| J. Education information (formal student records) | No |
| K. Inferences about preferences/characteristics | No |
| L. Sensitive personal information | No |
We retain the categories marked “Yes” above for the duration of the applicable subscription plus the retention periods described in Section 9. We have not sold or shared any personal information to third parties for monetary or other valuable consideration in the preceding twelve (12) months, and we do not use or disclose sensitive personal information for purposes requiring an opt-out right.
Categories A, B, D, and I above have been disclosed to our service providers (Cloudflare and PayPal) for the business purpose of operating and securing the Services and processing payments, under written contracts that restrict their use of that information.
Your CCPA rights include: the right to know what personal information we collect and how we use it; the right to request deletion of your personal information; the right to correct inaccurate information; and the right to be free from discrimination for exercising these rights.
To exercise these rights, contact us at [email protected] or (787) 410-2010. We may need to verify your identity before completing your request.
Financial incentives: Not applicable — we do not offer financial incentives in exchange for personal information.
In Short: Yes, though this section is unlikely to apply given our current customer base.
Under the Virginia Consumer Data Protection Act (CDPA), Virginia consumers have rights to confirm whether we process their personal data, access it, correct inaccuracies, request deletion, obtain a copy of it, and opt out of processing for targeted advertising, sale, or certain profiling. We have not sold personal data to third parties and do not process personal data for targeted advertising or profiling. To exercise these rights, contact us at [email protected]. We will respond within forty-five (45) days, as required by law.
In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this privacy notice from time to time. The updated version will be indicated by a revised “Last updated” date. If we make material changes, we will notify client laboratory administrators by email or by posting a notice within BERDE™.
If you have questions or comments about this notice, you may contact us at:
LabWork Tools
Attn: Karla M. Resto Delgado
K7 Calle 9, Trujillo Alto, PR 00976
Phone: (787) 410-2010
Email: [email protected]
EEA/UK representative: Not applicable — we do not currently operate in, or direct our Services to, the EEA or UK.
Based on applicable law, you may have the right to request access to, correction of, or deletion of your personal information. To make such a request, please contact us at [email protected].