Privacy Policy
PRIVACY POLICY
Last updated: 1st September 2025
This Privacy Policy explains how Newfoundland Diagnostics Ltd ("we", "us", or "our") collects, uses, and protects your personal information when you use our website www.newfoundland.io and our services.
Note: The Newfoundland Health Hub portal has its own supplementary privacy statement which applies alongside this policy when using that service.
1. INFORMATION WE COLLECT
We collect different information depending on which services you use:
All Customers
- Name, email address, phone number
- Delivery address
- Payment card details (processed securely via payment providers)
- Purchase history
- IP address and device information
- Cookie data (see our Cookie Policy)
2. HOW WE USE YOUR INFORMATION
We use your personal data to:
- Process and fulfil your orders
- Send order confirmations and updates
- Provide customer support
- Comply with legal and regulatory obligations
- Prevent fraud and maintain security
- Send marketing communications (where you've consented)
- Improve our services
For laboratory testing specifically, we also use your data to:
- Verify eligibility for testing services
- Process samples and deliver results
- Meet healthcare regulatory requirements
- Provide clinical governance where required
3. LEGAL BASIS FOR PROCESSING
We process your personal data under UK GDPR on the following bases:
- Contract: To fulfil your orders and provide services
- Legal obligation: To comply with laws and regulations
- Legitimate interests: For fraud prevention, security, and service improvement
- Consent: For marketing communications
- Healthcare purposes: For processing health data in laboratory testing (Article 9)
4. WHO WE SHARE DATA WITH
We only share your data with:
Service Providers
- Payment processors
- Delivery and logistics companies
- IT and hosting providers
- Email service providers
For Laboratory Testing
- Our laboratory testing platform provider
- UKAS-accredited laboratory partners
- Regulatory authorities (where legally required)
We do not sell your personal data.
5. INTERNATIONAL TRANSFERS
Some of our service providers (such as our e-commerce and email platforms) may process data outside the UK. Where this happens, we ensure appropriate safeguards are in place. Your health data from laboratory testing remains within the UK.
6. DATA RETENTION
We keep your personal data for:
- Purchase records: 6 years (UK tax requirements)
- Laboratory test results: 6 years
- Marketing preferences: Until you withdraw consent
- Account information: While your account is active plus 6 years
7. YOUR RIGHTS
Under UK GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate information
- Erase your data (subject to legal retention requirements)
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent where processing is based on consent
To exercise any of these rights, contact us at info@newfoundland.io
8. DATA SECURITY
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encryption of data in transit and at rest
- Access controls and authentication
- Regular security assessments
- Staff training on data protection
9. COOKIES
Our website uses cookies as described in our separate Cookie Policy. You can manage your cookie preferences through the cookie settings on our website.
10. CHILDREN
Our services are not intended for children under 16. We do not knowingly collect data from anyone under this age. Laboratory testing services may have higher age restrictions.
11. MARKETING
Where you have consented, we may send you marketing communications about our products and services. You can unsubscribe at any time by:
- Clicking the unsubscribe link in any marketing email
- Contacting us at info@newfoundland.io
12. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. We will notify you of any material changes via email or through our website.
13. COMPLAINTS
If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113
14. CONTACT US
For any questions about this Privacy Policy or how we handle your personal data:
Email: info@newfoundland.io
Address: Newfoundland Diagnostics Ltd, 3a Station Road, Amersham, Buckinghamshire, HP7 0BQ
This Privacy Policy complies with UK GDPR and associated data protection legislation.