Privacy Policy

1. Introduction

Jace Medical Blood Testing ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and safeguard your information in accordance with UK data protection laws, including the UK GDPR and the Data Protection Act 2018.

2. Information We Collect

Personal Information

• Name, email address, phone number
• Date of birth and biological sex
• Billing and payment information
• Appointment and clinic location details

Medical & Health Information

• Blood sample information and test selections
• Relevant medical history provided by you
• Laboratory test results and biomarker data

Technical Information

• IP address, browser, and device information
• Usage data related to your online portal
• Cookies and similar technologies

3. How We Use Your Information

We use your information to:

• Book and manage clinic blood test appointments
• Collect blood samples at our clinics
• Send samples to our partner laboratory for analysis
• Receive, review, and present test results to you
• Display your results securely in your online patient portal
• Communicate important medical or service-related updates
• Process payments and issue invoices
• Comply with legal, medical, and regulatory obligations

4. Blood Testing & Laboratory Processing

Blood samples are collected at one of our clinics by trained professionals. Samples are then securely transferred to our partner laboratory, Randox Laboratories, for analysis.

Randox Laboratories acts as a data processor and processes your medical data strictly in accordance with our instructions and applicable data protection laws.

5. Results & Patient Portal

Once laboratory testing is complete, results are returned to us and made available to you through your secure online portal.

You can view your results, download reports, and retain access to historical tests. Access to your portal is protected using appropriate security measures.

6. Data Sharing

We may share your data with:

• Randox Laboratories for test analysis
• Healthcare professionals involved in your care
• Payment providers for transaction processing
• Regulatory or legal authorities where required by law

We do not sell your personal or medical data to third parties.

7. Data Retention

We retain personal and medical data only for as long as necessary to provide services and meet legal and regulatory requirements. Medical records are typically retained for a minimum of 8 years in line with healthcare regulations.

8. Your Rights

Under UK GDPR, you have the right to:

• Access your personal and medical data
• Request correction of inaccurate information
• Request deletion of data where applicable
• Restrict or object to certain processing activities
• Request data portability
• Withdraw consent where processing is consent-based

9. Data Security

We apply appropriate technical and organisational security measures to protect your data against unauthorised access, loss, or misuse. Medical data is accessible only to authorised personnel.

10. International Transfers

Your data is stored primarily within the UK and EEA. Where data is transferred internationally, appropriate safeguards are in place.

11. Contact Us

For privacy-related questions or to exercise your rights, please contact:

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be communicated via our website or directly where required.