Privacy Policy
Introduction: Our Commitment to Your Privacy
At Medi Test Direct (a trading name of Clinical Services Group Ltd), we treat your data with the same care we would our own. Because we facilitate medical testing, we handle "Special Category Data" — the most sensitive type of personal information under UK GDPR.
This policy outlines our rigorous standards for collecting, protecting, and processing your information — from your home to our accredited laboratories.
The Layers of Data We Collect
We collect data at different points to ensure your medical kit is delivered, tested, and reported accurately.
Personal Identification
Full name, date of birth, and billing address to verify your identity and create your patient record.
Clinical Verification
Patient name and date of birth as entered at checkout, used to label your sample and generate your clinical report.
Contact Information
Email address and phone number to send your results report and provide customer support.
Health Data (Special Category)
The results of your blood analysis. This is Special Category Data under UK GDPR and is handled with the highest level of protection.
Correspondence
Any communications you send us, including support queries, complaints, or feedback, are retained to ensure continuity of care.
Technical Data
IP address, browser type, and pages visited, collected automatically via cookies to improve our website performance and security.
The Testing Journey: How Your Data Moves
To provide a laboratory-grade service, your data must be shared with a small number of trusted, professional partners — all bound by strict data protection obligations.
How We Use Your Information
We do not sell or rent your data. We use it only for the following purposes:
Fulfilment
To process your order, dispatch your kit, and manage the return of your sample to the laboratory.
Clinical Accuracy
To ensure your sample is correctly identified at the laboratory and your results are matched to your patient record.
Reporting
To generate and securely deliver your personalised clinical results report to the email address you provided.
Customer Support
To respond to your queries, manage complaints, and provide follow-up guidance on your results where requested.
Public Health
In exceptional circumstances, we may be legally required to report certain results to public health authorities (e.g., notifiable diseases). This is a legal obligation, not a choice.
Security, Retention & Sample Disposal
Data Encryption
All data is transmitted over encrypted HTTPS connections. Your results report is delivered via a secure, access-controlled link.
Clinical Anonymity
Within the laboratory, your sample is identified by a unique barcode reference, not by your name, to protect your privacy during analysis.
Physical Sample Disposal
All physical biological samples are disposed of by the laboratory in accordance with clinical waste regulations following analysis.
Data Retention
We retain your personal and clinical data for a minimum of 8 years from the date of your test, in line with NHS and CQC clinical record-keeping standards. After this period, data is securely deleted.
Your Legal Rights (UK GDPR)
You have strong rights over your personal data. We make it easy to exercise them.
Changes to This Policy
We may update this policy to reflect changes in health regulations or our website features. We will notify you of any significant changes by posting the new policy here and updating the date below.
Contact Our Data Lead
If you have any questions, concerns, or wish to exercise your data rights, please contact our dedicated privacy team.
Medi Test Direct — a trading name of Clinical Services Group Ltd
Address: 28, Maisies Way, The Village, South Normanton, Derbyshire, DE55 2DS, United Kingdom
Email: sales@meditestdirect.co.uk
Company Registration: 15967942