Privacy Policy

1. Introduction

London Blood Tests Ltd (“we”, “us”, “our”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store and share your information when you use our website https://londonbloodtests.uk or our services.

We are the Data Controller under the UK Data Protection Act 2018 and the UK GDPR.

2. Data We Collect

We may collect and process the following information:

• Identity data: Name, date of birth, address.
• Contact data: Email, phone number.
• Health information: Medical history, test details, and results.
• Payment data: Card or transaction details (processed securely via our payment provider).
• Technical data: IP address, browser type, cookies and analytics.

3. How We Use Your Information

We process your data to:

• Manage and deliver your blood test services.
• Communicate test results securely.
• Handle bookings, payments and refunds.
• Improve our website and services.
• Comply with legal and regulatory obligations.

We will never sell your data.

4. Sharing Your Data

We share only what is necessary with:

• Third-party phlebotomy providers who collect your samples.
• Accredited laboratories that perform your analysis.
• IT and payment processors that securely manage our systems.

All third parties are bound by confidentiality agreements and UK GDPR compliance.

5. Data Storage & Retention

• Your data is stored on secure UK or EEA servers.
• Medical data is retained for up to 7 years (or as required by law).
• You may request deletion where legally permitted.

6. Your Rights

You have the right to:

• Access your data (subject access request).
• Request correction or deletion.
• Withdraw consent at any time.
• Lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

7. Security

We use encryption, secure servers, and restricted access to protect your data. Only authorised staff and clinicians can access personal medical information.

8. AI Wellness Reports

If you purchase an AI Wellness Report add-on with your blood test, we generate a personalised interpretation of your results using OpenAI's language models. This section explains exactly what happens with your data and your rights around it.

What data we send to the AI provider

Before sending anything to OpenAI, we anonymise your blood test PDF. We strip direct identifiers including: your name, date of birth, NHS number, UK postcode, phone number, email address, sample/lab identifiers, sex, and postal address. The AI provider only receives the biomarker values and, if you provided them, your age, weight, height, and health concern free-text — none of these can identify you on their own.

Who processes the data — OpenAI, USA

OpenAI, L.L.C. (San Francisco, USA) is the AI processor. We rely on the standard UK International Data Transfer Addendum (adopted from the EU Standard Contractual Clauses, IDTA / Article 46 UK GDPR) for the transfer of anonymised data from the UK to the United States.

We have configured our OpenAI account with the "Do not train on my data" setting enabled, which means the anonymised data you provide is not used to improve OpenAI's models. OpenAI retains anonymised inputs for a short operational window (typically 30 days for abuse-monitoring purposes) and then permanently deletes them.

Lawful basis

We process your AI wellness report data on the basis of your explicit consent (UK GDPR Article 6(1)(a) + Article 9(2)(a) for special-category health data). You give this consent on a dedicated screen at checkout, and we record the timestamp against your order. You can withdraw consent at any time; withdrawal stops further processing but does not undo processing that already happened.

How your report is stored

The generated report is stored in our UK-based database, encrypted at rest with AES-256-CTR. Only you (via your account) and authorised LBT staff can decrypt and read it. Each report row also includes non-sensitive metadata (which OpenAI model was used, token counts for cost tracking, generation timestamp).

How long we keep it

We keep your AI wellness reports for as long as your account exists, up to a maximum of 12 months from generation by default. An LBT administrator may configure a shorter or longer retention window from the admin settings; reports older than the configured window are automatically and permanently deleted, including the encrypted payload. The current retention window in force is documented on the "Retention policy" page.

Your specific rights around AI reports

• Delete a single report — from My AI Reports → Delete on any report row. This permanently removes the encrypted payload from our database; your account and other reports stay untouched.
• Delete all your reports and your account — from My details → Delete account. All AI reports are hard-purged as part of account deletion.
• Export your reports — from My details → Export data. You will receive a decrypted JSON file with the full contents of every AI report we have on file for you, together with your other account data.
• Withdraw AI consent for future orders — email [email protected]. This will stop us generating any further AI reports for you. Existing reports remain until you delete them.

Right to human review

AI reports are not automated decisions with legal or significant effects in the sense of UK GDPR Article 22 — they are informational interpretations for you to discuss with a qualified healthcare professional. Even so, if you believe an AI report has caused harm or contains a serious error, contact us at [email protected] and we will review the report and the underlying data with a qualified clinician.

Complaints

If you are unhappy with how we handle your AI wellness data, you have the right to complain to the UK Information Commissioner's Office at ico.org.uk.

9. Updates to this Policy

We may update this Privacy Policy periodically. The latest version will always be posted on our website.