This privacy policy explains how personal and medical information is collected, used, stored, and protected in accordance with UK privacy laws and regulations.

1. Information Collected

The following information may be collected:

Personal information: Name, date of birth, gender, and contact details.
Medical information: Test results, laboratory reports, and relevant medical history.
Payment information: Billing and payment details.
Technical information: IP address, browser type, and website usage data.

2. Use of Information

Information is used to:

Provide diagnostic and laboratory services.
Process test requests and deliver results.
Communicate with patients regarding appointments, results, and queries.
Comply with legal and regulatory requirements.
Maintain laboratory quality and improve services.

3. Legal Basis for Processing

Information is processed for the following purposes:

Consent: Information provided voluntarily.
Contractual necessity: Required to deliver requested services.
Legal obligations: Compliance with applicable laws and medical regulations.
Legitimate interests: Ensuring accurate, safe, and quality laboratory services.

4. Storage and Security

Information is stored securely in line with laboratory standards.

Access is restricted to authorised personnel only.
Electronic data is encrypted, and physical records are securely stored.
Information is retained only as long as necessary for service delivery or legal compliance.

5. Sharing of Information

Information is not sold or rented. It may be shared:

With healthcare providers if required for patient care.
With regulatory authorities as required by law.
With service providers under strict confidentiality agreements for operational purposes.

6. Rights of Individuals

Individuals have the right to:

Access their personal data.
Request correction of inaccurate data.
Request deletion of data where legally permitted.
Object to or request restriction of processing.
Withdraw consent at any time.
Requests can be submitted through the designated contact point.

7. Cookies and Online Tracking

The website may use cookies and analytics to improve user experience. Sensitive medical data is not collected via cookies. Users may manage cookies via browser settings.

8. Data Breach Notification

In the event of a data breach:

Affected individuals will be notified promptly.
Regulatory authorities will be informed as required.
Measures will be taken immediately to prevent recurrence.

9. Updates to Privacy Policy

This policy may be updated periodically. The effective date indicates the latest version. Users are encouraged to review it regularly.

10. Contact

For questions regarding personal data or privacy practices, contact the laboratory’s designated point of contact.