Privacy Policy

We collect different information depending on which services you use:

All Customers

• Name, email address, phone number
• Delivery address
• Payment card details (processed securely via payment providers)
• Purchase history
• IP address and device information
• Cookie data (see our Cookie Policy)

We use your personal data to:

• Process and fulfil your orders
• Send order confirmations and updates
• Provide customer support
• Comply with legal and regulatory obligations
• Prevent fraud and maintain security
• Send marketing communications (where you’ve consented)
• Improve our services

For laboratory testing specifically, we also use your data to:

• Verify eligibility for testing services
• Process samples and deliver results
• Meet healthcare regulatory requirements
• Provide clinical governance where required

We process your personal data under UK GDPR on the following bases:

• Contract: To process and fulfil your orders, provide customer support, and deliver laboratory test results
• Legal obligation: To keep accounting and tax records and to comply with laws and healthcare regulations
• Legitimate interests: For fraud prevention, security, and service improvement
• Consent: For marketing communications, and for non-essential cookies and similar technologies (including analytics and advertising cookies)

Health data

Information about your health is special category data. This includes your laboratory test results and, where they reveal information about your health, records of the tests you have purchased. We process this data only with your explicit consent (Article 9(2)(a) UK GDPR), which we ask for when you order or register for a test. Where a clinician is involved in reviewing your results, we may also process this data for the provision of healthcare (Article 9(2)(h) UK GDPR).

You can withdraw your consent at any time by contacting us. This may mean we are no longer able to provide the testing service to you, and we may need to keep some records where the law requires us to.

We only share your data with:

Service Providers

• Payment processors
• Delivery and logistics companies
• IT and hosting providers
• Email service providers
• Analytics and advertising providers (such as Google and Meta), where you have consented to the relevant cookies
• Affiliate and referral partners, where you reach us through a partner’s link or we refer you to a partner’s service
• Our group companies

For Laboratory Testing

• Our laboratory testing platform provider
• UKAS-accredited laboratory partners
• Regulatory authorities (where legally required)

We do not sell your personal data.

Our laboratory testing platform and UKAS-accredited laboratory partners process and store your laboratory test results in the UK, and we do not routinely transfer them outside the UK.

Some of our other service providers (such as our e-commerce, email, analytics and advertising platforms) and our group companies may process data outside the UK. Where this happens, we ensure appropriate safeguards are in place.

We keep your personal data for:

• Purchase records: 6 years (UK tax requirements)
• Laboratory test results: 6 years
• Marketing preferences: Until you withdraw consent
• Account information: While your account is active plus 6 years

Under UK GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate information
• Erase your data (subject to legal retention requirements)
• Restrict processing
• Data portability
• Object to processing, including an absolute right to object to direct marketing at any time
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at info@newfoundland.io. We will respond within one month. In some cases we may extend this period, and if so we will tell you why.

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security assessments
• Staff training on data protection

Our website uses cookies as described in our separate Cookie Policy. You can manage your cookie preferences through the cookie settings on our website.

Our services are not intended for children under 16. We do not knowingly collect data from anyone under this age. Laboratory testing services may have higher age restrictions.

Where you have consented, we may send you marketing communications about our products and services. You can unsubscribe at any time by:

• Clicking the unsubscribe link in any marketing email
• Contacting us at info@newfoundland.io

We may update this Privacy Policy from time to time. We will notify you of any material changes via email or through our website.

If you have concerns about how we handle your personal data, please contact us first at complaints@newfoundland.io, or write to us at the address in section 14. We will acknowledge your complaint within 30 days, investigate it, and keep you informed of progress and of the outcome without undue delay.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at any time:

• Website: ico.org.uk
• Phone: 0303 123 1113

For any questions about this Privacy Policy or how we handle your personal data:

• Email: info@newfoundland.io
• Address: Newfoundland Diagnostics Ltd, 3a Station Road, Amersham, Buckinghamshire, HP7 0BQ

Newfoundland Diagnostics Ltd is registered in England and Wales (company number 13095376) and is the controller of your personal data.