Blood results are among the most sensitive data anyone holds about you. This page explains, in plain English and without euphemism, exactly what we do with yours.
For the full legal position see the Privacy Policy. Where the two differ, the Privacy Policy applies.
Health data is special category data under Article 9 of the UK GDPR. That means it carries a higher level of legal protection than ordinary personal data, and we need a specific lawful basis to process it at all.
TrueVitals processes your health data on the basis of your explicit consent, given when you place your order and complete your health questionnaire. For ordinary personal data such as your name, contact details and order records, we rely on performance of our contract with you and, for record-keeping, our legal obligations.
You can withdraw consent at any time by emailing support@truevitals.co.uk. Withdrawing consent may mean we can no longer provide the service, and it does not affect processing already carried out lawfully before you withdrew.
Plenty of health companies describe data sent to AI systems as "anonymised". For us that would not be accurate, so we do not say it.
Before your biomarker results and questionnaire answers are processed by AI to generate your report, direct identifiers are removed — your name, email, address and phone number are not sent. But the data still carries a reference that lets us attach the finished report to your account. That link is what makes a personalised report possible at all.
Under UK GDPR this is pseudonymisation, not anonymisation. Pseudonymised data is still personal data and keeps the full protection of the regulation. We think you should know that rather than be reassured by a word that does not apply.
Where anonymisation does apply: the research datasets described further down this page are genuinely anonymised, with no key retained and no route back to an individual. That is a different process with a different standard, and it is the only context in which we use the word.
The organisations involved in delivering your test, and exactly what each one receives.
| Who | What they receive | Why | Where |
|---|---|---|---|
| Nationwide Pathology | Name, contact details, date of birth, sample | Booking and laboratory analysis for Advanced and Ultimate panels | UK |
| Randox Health | Name, contact details, date of birth, sample | Clinic appointment and laboratory analysis for Signature panels | UK and Ireland |
| Phlebotomy providers | Name, contact details, appointment details, address for home visits | Blood collection | UK |
| AI analysis tools | De-identified biomarker values and questionnaire answers. No name, email, address or phone number | Generating the cross-system analysis in your report | United States, under safeguards |
| Reviewing medical professional | Your full report and results | Clinical review before release | UK |
| Payment processor | Payment details, order value. We never see or store full card numbers | Taking payment securely | UK and EU |
| BNPL providers | Name, contact details, order value, where you choose this option | Credit or instalment agreement, which is between you and them | UK and EU |
| Hosting and email platforms | Account data, communications | Dashboard, login, report delivery, support | UK, EU and US |
Each of these operates under a contract requiring them to protect your data and use it only for the purposes we specify. None of them are permitted to use your data for their own purposes.
Your sample and its laboratory analysis stay in the UK and Ireland. Your identified personal data is held on UK and EU infrastructure.
The AI tools used to generate your report are provided by companies based in the United States. De-identified biomarker values and questionnaire answers are therefore transferred outside the UK for that processing.
These transfers are made under the appropriate safeguards required by Chapter V of the UK GDPR, which include the UK International Data Transfer Agreement or the UK Addendum to the European Commission's Standard Contractual Clauses. In practical terms: the receiving company is contractually bound to protect your data to UK standards, and you keep your rights over it regardless of where it is processed.
If you would prefer your data not to be processed outside the UK, we are unable to generate a report, since the analysis is central to the product. Contact us before ordering and we will discuss it.
Your personal data is never sold. Information that identifies you is never sold, rented or traded, and never will be.
Separately, we may create fully anonymised datasets from biomarker results and questionnaire responses, and share or license those to research institutions, universities, healthcare organisations and life sciences companies for scientific research. This contributes to health research and helps fund development of the service.
Anonymisation here follows UK GDPR Recital 26 and ICO guidance, meaning re-identification is not reasonably likely by any means reasonably available to a recipient. In practice that means direct identifiers removed entirely, dates of birth generalised to age bands, location data truncated or removed, small groups suppressed so no individual can be inferred, and no key retained that could link a dataset back to a person. Once data has been through that process it is no longer personal data under UK GDPR.
If you would rather your results were excluded from anonymised research datasets entirely, email support@truevitals.co.uk and we will exclude them. This will not affect the service you receive, the speed of your report, or the price you pay. No explanation needed.
Results and report data are retained while your account is active, so you can access past reports and track changes across repeat tests. Order and payment records are retained for the period required by accounting and tax law, currently six years.
You can request deletion at any time. We will comply unless we are required to keep specific records for legal, accounting or clinical governance reasons, in which case we will tell you exactly what we must keep and for how long.
A copy of everything we hold about you
Correction of anything inaccurate
Deletion of your personal data
Limits on how we process it
Your data in a machine-readable format
At any time, for any reason
Email support@truevitals.co.uk. We respond within one month, as required by UK GDPR.
Contact us first at support@truevitals.co.uk and we will investigate properly.
If you remain dissatisfied, you have the right to complain to the Information Commissioner's Office, the UK data protection regulator. You can do so at ico.org.uk or by calling 0303 123 1113. You do not need our permission and you do not have to come to us first, though it is usually quicker.
Health data is special category data under Article 9 of the UK GDPR. We process it on the basis of your explicit consent, given when you order and complete your health questionnaire. You can withdraw consent at any time, though it may mean we can no longer provide the service.
It is de-identified rather than anonymised, and the distinction matters. Direct identifiers are removed, but the data keeps a reference so your report can come back to you. Under UK GDPR that is pseudonymisation, and the data remains personal data with full protection. We use the accurate word rather than the more reassuring one.
Your sample and laboratory analysis stay in the UK and Ireland. The AI tools that generate your report are US-based, so de-identified biomarker and questionnaire data is transferred there under the safeguards required by UK GDPR Chapter V, including the UK International Data Transfer Agreement or the UK Addendum to Standard Contractual Clauses.
Personal data that identifies you is never sold. Separately, we may share or license fully anonymised datasets for research, prepared so that re-identification is not reasonably likely and with no key retained. You can opt out by emailing support, and it will not affect your service or price.
Nationwide Pathology for Advanced and Ultimate panels, Randox Health for Signature panels. Both are UKAS ISO 15189 accredited. Your personal and booking details are shared with the relevant laboratory to arrange collection and analysis. More on our labs.
Yes, at any time. Email support@truevitals.co.uk. We will comply unless we must retain specific records for legal, accounting or clinical governance reasons, in which case we will tell you exactly what and for how long.
Contact us first at support@truevitals.co.uk. If you remain dissatisfied you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. You do not need our permission to go to them.
No. Payment runs through a secure third-party processor. We never see or store full card numbers.
This page is a plain-English summary. The full legal position is set out in our Privacy Policy and Terms of Use. Where this page and those documents differ, they apply.
TrueVitals Group Ltd, registered in England and Wales, company number 16449605. Registered office: Ground Floor, Rear Barn, The Brookdale Centre, Knutsford, Cheshire, WA16 0SR. Data protection enquiries: support@truevitals.co.uk.
Email us and we will answer properly. No stock responses.
We use cookies to help improve your experience. Learn more
Keep you signed in and let checkout work. The site needs these.
Help us see which pages are useful and where people come from. No advertising, nothing sold.
.png)