Privacy Policy

Last updated: March 2026

1. Who We Are

PerfTest provides home blood testing services for performance-enhanced athletes in Oxfordshire. We are committed to protecting your personal data and health information.

2. Data We Collect

  • Account information: Name, email, phone number, date of birth, gender
  • Address: For home phlebotomy visits
  • Health data: Blood test results, biomarker values, cycle phase information, compounds reported
  • Payment data: Processed securely via Stripe (we do not store card details)
  • AI commentary: AI-generated interpretations of your results, reviewed by our team

3. Legal Basis (UK GDPR)

Your blood test results are special category data under UK GDPR Article 9. We process this data with your explicit consent, given when you create an account and book a test.

4. How We Use Your Data

  • Processing and fulfilling your blood test bookings
  • Delivering test results via our secure online portal
  • Generating AI-powered health commentary on your results
  • Sending appointment confirmations, reminders, and result notifications
  • Tracking biomarker trends over time (if you opt in)

5. Data Sharing

We share your data only with:

  • Viva Health Laboratories: Our lab partner processes your blood samples
  • Stripe: Payment processing
  • Anthropic (Claude AI): AI commentary generation (anonymised biomarker values only)

We never sell your data to third parties.

6. Data Security

All data is encrypted in transit (TLS) and at rest. Access to health data is restricted to authorised personnel only. We maintain audit logs of all data access.

7. Your Rights

  • Access: Export all your data from your dashboard
  • Rectification: Update your information in account settings
  • Erasure: Request account deletion from your dashboard
  • Portability: Download your data in JSON format
  • Withdraw consent: Contact us to withdraw consent at any time

8. Data Retention

We retain your health data for as long as your account is active. Upon account deletion, all personal and health data is permanently removed within 30 days.

9. Contact

For data protection enquiries, contact our Data Protection Officer at privacy@perftest.co.uk.

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.