Privacy Policy
Privacy Policy
This policy explains what personal information we handle and why. Health information is special category data under UK GDPR and is treated accordingly.
What we collect
Information you provide during assessment, including height, weight, medical history, current medication and relevant health conditions. This is health data and is handled as special category data.
Account information such as name, contact details and delivery address, and technical information such as device and browser data collected through essential site functionality.
Your rights
Under UK GDPR you have the right to access the personal data we hold about you, to have inaccurate data corrected, to request erasure in defined circumstances, to restrict or object to processing, and to data portability.
Clinical records are subject to retention requirements that may limit erasure, because a prescriber must retain a record of decisions made about your care.
You may also complain to the Information Commissioner's Office if you believe your data has been handled improperly.
Awaiting client detail
Data controller contact details, ICO registration number, named data protection contact and specific retention periods publish here once confirmed. This policy requires review by the client's data protection adviser before launch.