Privacy policy

LAST UPDATED: AUGUST 29, 2026

Crisis Box LLC, doing business as Crisis Box Direct Lab (“Crisis Box,” “we,” “us,” or “our”), respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit cbxdirectlab.com, communicate with us, or use services connected with our Site.

  1. INFORMATION WE MAY COLLECT

We may collect:

• Contact information, such as your name, email address, telephone number, billing address, and shipping address.
• Order information, such as the test selected, order date, order status, payment status, and fulfillment information.
• Communications you send to customer support.
• Device and online activity information, such as IP address, browser type, device identifiers, pages viewed, referring links, cookies, and similar technologies.
• Transaction information provided by Shopify, Evexia Diagnostics, or payment processors, excluding complete payment-card numbers.
• Limited laboratory-order or fulfillment information available through authorized secure systems when needed to administer an order, address an operational issue, or meet applicable obligations.

The laboratory tests you view or select may reveal or permit inferences about health interests. We treat this information as sensitive and do not use laboratory results or medical records for targeted advertising.

  1. INFORMATION THAT SHOULD NOT BE SENT THROUGH SHOPIFY OR EMAIL

Do not submit laboratory results, medical records, government identification documents, detailed medical histories, or other sensitive health information through Shopify contact forms or ordinary email.

Information required for laboratory ordering, provider authorization, specimen processing, or results delivery must be submitted through the designated secure platform operated by Evexia Diagnostics, the ordering provider, or the performing laboratory.

  1. HOW WE USE INFORMATION

We may use personal information to:

• Operate and maintain the Site.
• Display products and educational information.
• Facilitate access to a secure third-party ordering platform.
• Process and administer test requests.
• Confirm eligibility and order status.
• Coordinate requisitions, specimen kits, collection instructions, and customer support.
• Communicate administrative and service-related information.
• Prevent fraud, misuse, and security incidents.
• Comply with legal, regulatory, contractual, accounting, and recordkeeping obligations.
• Analyze and improve Site performance.
• Send marketing communications only when permitted and subject to your choices.

  1. THIRD PARTIES

We may disclose information as reasonably necessary to:

• Shopify and its service providers.
• Evexia Diagnostics.
• Independent healthcare providers or provider networks involved in authorizing an order.
• Performing laboratories and specimen collection centers.
• Payment processors.
• Shipping and delivery companies for at-home kits.
• Website hosting, security, customer service, analytics, and email-service providers.
• Accountants, attorneys, insurers, auditors, and other professional advisers.
• Government authorities or other parties when legally required or reasonably necessary to protect rights, safety, or security.

Each independent third party may process information under its own privacy notice and terms.

We do not sell or rent laboratory results or medical records. We do not use laboratory results or medical records for targeted advertising.

  1. EVEXIA AND LABORATORY INFORMATION

When you continue to an Evexia Diagnostics Promo Page or another third-party ordering platform, you leave our Site. Information entered on that platform is collected and processed by the organization operating it.

Depending on the service, Crisis Box may receive or access limited order information, order status, result availability, or laboratory information through an authorized secure system for administrative, compliance, or customer-support purposes.

Laboratory results should be accessed only through the secure method designated by Evexia or the performing laboratory.

  1. COOKIES AND TRACKING TECHNOLOGIES

The Site may use cookies and similar technologies for essential operation, preferences, analytics, fraud prevention, and, when permitted, advertising.

You may manage applicable choices through our cookie banner or Data Sharing Opt-Out page. Browser settings may also allow you to block or delete cookies, although doing so may affect Site functionality.

  1. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing services, resolving disputes, maintaining business and transaction records, preventing fraud, and satisfying legal or contractual requirements.

Retention periods may differ depending on the type of information and the organization responsible for processing it.

  1. DATA SECURITY

We use reasonable administrative, technical, and organizational safeguards appropriate to the information we handle. However, no Internet transmission, email, platform, or storage system can be guaranteed to be completely secure.

If you believe information has been submitted incorrectly or that an account or communication has been compromised, contact us promptly without including additional sensitive information.

  1. YOUR PRIVACY CHOICES

Depending on where you reside and applicable law, you may have the right to request:

• Access to certain personal information.
• Correction of inaccurate information.
• Deletion of certain information.
• A copy of certain information.
• Withdrawal of marketing consent.
• Opt-out from certain targeted advertising, sale, or sharing activities.
• Review or appeal of a privacy decision where required.

We may need to verify your identity before fulfilling a request. Certain information may be retained when required by law or for legitimate operational, security, transaction, or recordkeeping purposes.

To submit a privacy request, email orders@cbxdirectlab.com with the subject line “Privacy Request.” Do not include laboratory results or medical records in the initial email.

  1. CHILDREN

The Site and services are intended for adults. We do not knowingly offer testing to anyone under 18 unless an appropriate minor-consent process has been expressly approved and completed.

  1. INTERNATIONAL USERS

The Site and services are directed primarily to eligible individuals in the United States. Information may be processed and stored in the United States.

  1. CHANGES TO THIS POLICY

We may update this Privacy Policy when our practices, vendors, or legal obligations change. We will post the revised version with a new “Last Updated” date.

  1. CONTACT

Crisis Box LLC
Doing business as Crisis Box Direct Lab
Email: orders@cbxdirectlab.com

Please do not send laboratory results, medical records, identification documents, or sensitive health information through ordinary email.