Privacy Policy

Who We Are

Bloods by Amy is a private phlebotomy and health screening service operating in Essex, providing blood tests, B12 injections, and related health services at clinic locations and via home visits.

For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), Bloods by Amy is the data controller for the personal information described in this policy.

Information We Collect

When you book an appointment, contact us, or complete a consent form, we may collect: your name, email address, phone number, and — for home visits — your address; appointment and booking details; health information you provide as part of a consent form (such as confirmation of fitness for treatment, medical conditions, or allergies); and any messages you send us.

We also generate and store records relating to your test results and appointment history so that we can deliver your care and let you look up your results securely.

How We Use Your Information

We use your information to: schedule and manage appointments; carry out blood tests and other health services safely; communicate with you about bookings, results, and reminders; respond to enquiries sent via our contact form; and meet our legal and professional record-keeping obligations as a healthcare service.

Legal Basis for Processing

We process your personal data on the basis of: performance of a contract (to provide the health services you book), consent (for health/medical information you provide, and for marketing communications where applicable), and legal obligation (for record-keeping required of healthcare providers).

Who We Share Data With

We do not sell your personal data. We share information only with trusted service providers who help us run the business, including our database and hosting provider (Supabase), our email delivery provider (Resend, used to send booking confirmations and reminders), and our website hosting provider (Vercel). Each of these providers is contractually required to protect your data and only process it on our instructions.

We will disclose information where required by law, for example to comply with a legal obligation or protect the vital interests of a client.

Data Retention

We retain booking, consent, and results records for as long as necessary to provide our services and to meet professional and legal record-keeping requirements for healthcare providers. Contact form enquiries that do not result in a booking are retained only as long as needed to respond to and resolve the enquiry.

Your Rights

Under UK data protection law, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure of your data (subject to our record-keeping obligations); object to or restrict certain processing; and request a copy of your data in a portable format.

To exercise any of these rights, contact us using the details below. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled.

Cookies

Our website uses only the cookies strictly necessary for it to function, such as keeping you signed in to your account or admin session. We do not use third-party advertising or analytics cookies.

Security

We take appropriate technical and organisational measures to protect your personal data, including encrypted storage, access controls, and rate limiting on our systems, to guard against unauthorised access, loss, or misuse.

Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or for legal reasons. The date below shows when it was last updated.

Contact Us

If you have any questions about this privacy policy or how we handle your data, please contact us at bookings@bloodsbyab.co.uk or 07415639032.