Privacy Policy

1. Information We Collect
   
   

We may collect and process the following personal data:
• Contact Information: Name, email address, phone number, postal address.

• Health Data: Blood test results, biomarker data, medical history you provide, GP consultation notes and recommendations, Health questionnaire responses

• Account Data: Login credentials, communication preferences, dashboard activity and settings

• Transaction Information: Purchase history and billing records, payment details (processed securely by Stripe – we do not store full card numbers)

• Technical Information: IP address, browser type, device identifiers, operating system, usage data.

• Communications: Emails, messages, reviews, or customer support inquiries.

  
  

2. How We Use Your Information

We use the information we collect to:

• Provide and fulfill your purchases and bookings

• Provide blood testing services and deliver results

• Arrange GP consultations

• Proces payments

• Create and manage your account

• Sending service-related communications (results ready, a

• Communicate with you about orders, updates, promotions, and support

• Personalize your experience and recommend products or services

• Improve our website, services, and marketing efforts

• Comply with legal obligations and prevent fraud

Health data is special category data under UK GDPR. We process this data on the basis of:

• Your explicit consent
• The provision of health services

3. How we share your data

We may share your personal data with:

Laboratory partners – to process your blood samples and generate results. Our laboratory partner is Randox, a UKAS-accredited facility.
Healthcare professionals – GPs and clinicians who conduct your consultations and review your results
Payment processors –Stripe processes payments on our behalf. They are PCI-DSS compliant
Technology providers – Hosting, email, and dashboard services that help us deliver our service. All providers are UK or EU based, or have appropriate safeguards in place.
Legal and regulatory bodies – Where required by law or to protect our legal rights.

We do not sell your personal data. We do not share your health data for marketing purposes.

4. Your rights

Under UK GDPR, you have the right to:

• Access your personal data (Subject Access Request)
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten"), subject to legal retention requirements
• Restrict processing in certain circumstances
• Data portability – receive your data in a structured, machine-readable format
• Object to processing based on legitimate interests
• Withdraw consent at any time, where processing is based on consent
• Complain to the ICO if you believe we have mishandled your data

To exercise any of these rights, contact us at privacy@bloodtestlondon.com.

5. Data Security

We implement appropriate technical and organisational measurer to protect your personal data, including:

• Encryption of data in transit (TLS). and at rest
• Secure, access-controlled systems
• Staff training on data protection
• Regular security assessments
• Strict access controls – only authorised personnel can access health data

6. International transfers

Your data is primarily stored and processed in the United Kingdom. Where we use service providers outside the UK, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or UK adequacy decisions).

7. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through your dashboard. The "last updated" date at the top of this page indicates when the policy was last revised.

8. Cookie Policy
   (Last updated: February 2026)

What are cookies?

Cookies are small text files stored on your device when you visit a website. They help the site function properly, remember your preferences, and understand how you use the site.

How we use cookies

Strictly Necessary Cookies – These are essential for the website to function. They enable core features like secure login, account access, and payment processing. You cannot opt out of these cookies.

Functional Cookies – These remember your preferences and choices to provide a more personalised experience.

Analytics Cookies – These help us understand how visitors use our website, so we can improve it. We use privacy-focused analytics that do not track you across other websites.

Marketing Cookies – These are used to deliver relevant advertisements and track campaign effectiveness. We only set these with your explicit consent.

Managing Cookies
When you first visit our website, you'll see a cookie banner asking for your consent. You can:

• Accept all cookies — enables all cookie categories

• Reject non-essential cookies — only strictly necessary cookies will be set

• Manage preferences — choose which categories to allow

You can change your preferences at any time by clicking "Cookie Settings" in the website footer.

You can also control cookies through your browser settings. Note that blocking certain cookies may affect website functionality.

More information
For questions about our use of cookies, contact us at privacy@bloodtestlondon.com.