Privacy notice

Identity and contact details: your name, mobile number, email address, date of birth, sex and the address where a sample is collected.

Booking details: the tests and packages you order, the people you order them for, collection slots, payment status and the history of each order.

Health information: the laboratory reports produced for you, and any report you upload yourself. Health information is sensitive personal data and is handled with additional care described below.

Technical information needed to keep your account safe: the one-time codes sent to your mobile, sign-in times and the device and browser you use.

To take and fulfil your booking: scheduling sample collection, processing the sample, producing your report and telling you by SMS or email when each step happens.

To take payment through the payment gateway the laboratory uses. Card and bank details are entered on the gateway's own pages; this shop never stores them.

To keep your account secure and to prevent misuse.

To meet the laboratory's legal and accreditation obligations, such as retaining test records for the period the law requires.

Where the laboratory has switched it on and you have agreed to it, to show trends and plain-language explanations alongside your results. These explanations are informational and are never a diagnosis.

Before an order is placed you are shown a consent notice and asked to accept it. The version you accepted and when you accepted it are recorded with the order. You can withdraw consent for future processing at any time by contacting the laboratory; this does not affect tests already carried out.

The laboratory's staff who schedule, collect, process and report on your tests.

Partner laboratories or collection services the laboratory uses to carry out a test it does not perform itself. They receive only what is needed for that test.

Service providers that run this shop on the laboratory's behalf: hosting, storage, SMS and email delivery and the payment gateway. They process data under contract and only for those purposes.

Authorities, where the law requires it.

Your data is never sold.

Health reports are stored encrypted and are only ever opened through short-lived, signed links issued to the signed-in customer they belong to. Mobile numbers and other identifiers are stored encrypted. Access by laboratory staff is limited to their role and is logged.

Test records and reports are kept for the period medical record-keeping rules require of the laboratory, and then deleted or anonymised. Account and booking details are kept while your account is active and for as long afterwards as the laboratory needs them to answer queries, handle refunds and meet tax rules.

You can ask the laboratory for a copy of the personal data it holds about you, ask for mistakes to be corrected, ask for data to be deleted where the law allows, and complain if you think it has been mishandled. Use the contact details in the footer of this page. The laboratory will respond within the time the applicable law allows.

When this notice changes, the date at the top changes with it and, where the change matters to you, you will be asked to accept the new version before your next order.