This policy explains how Me First Health Ltd, trading as Me First Health, handles your personal data. We comply with the UK GDPR and the Data Protection Act 2018.
1. Who is responsible for your data
The data controller is Me First Health Ltd, a company registered in England and Wales.
- Contact for privacy matters: hello@mefirsthealth.co.uk
2. What data we collect
Data you give us: your name, email, phone or WhatsApp number, city and postcode, your account password, the tests you chose, your preferences for how the sample is taken, time of day and days of the week, any notes you write and your answers to quotes.
Where your request came from: if you reached the site through a referral link (for example, from a health professional), we record whose link it was together with your request. This does not use cookies.
Health data: the test you choose and what you write in the notes can reveal information about your health. The law treats this as special category data and it receives extra protection.
Technical data: the server may record basic information, such as IP address, device type and pages visited, for security reasons and to keep the site working.
3. What we use your data for and our legal basis
- Creating your account and organising your test, including looking for collection points, preparing quotes and contacting you by WhatsApp, phone or email. Legal basis: performing a contract or taking steps you asked for before entering into one.
- Processing health data. Legal basis: your explicit consent, given in the consent box when you sign up. You can withdraw it at any time, and this does not affect what was already done before.
- Sending service emails, such as confirming your email, updates about your request and quotes. Legal basis: performing a contract or taking steps you asked for before entering into one.
- Sending news and offers by email, only if you tick the news and offers box. Legal basis: your consent. You can unsubscribe at any time, using the link in the email or by writing to us.
- Keeping the site secure and preventing abuse and fraud. Legal basis: legitimate interests.
- Meeting legal obligations. Legal basis: legal obligation.
We do not make automated decisions that have a legal effect on you.
4. Who we share your data with
We do not sell your data. We only share what is needed with:
- Sample collection and testing providers (clinics, pharmacies and laboratories), to book and carry out the test you accepted. This generally includes your name, contact details and the test requested.
- Technical service providers, such as the hosting and database service (Railway) and the email sending service (Resend), who process data on our behalf and are required to protect it.
- Authorities, when the law requires it.
5. Transfers outside the UK
Some providers may process data outside the UK. When that happens, we require the appropriate safeguards provided for by law to protect your data.
6. How long we keep your data
We keep data for as long as needed to provide the service and meet legal obligations. The data from your requests is kept for 12 months after the last service. After that, we delete it or make it anonymous. You can also ask us to delete it sooner, at any time.
7. Security
Your password is stored in encrypted form, and we cannot read the original password. Access to the internal panel requires a password and is limited to our team. Even so, no system is completely free of risk, so we recommend a strong, unique password.
8. Cookies
Essential cookies: we use the cookies strictly necessary for the site to work, such as the one that keeps you logged in to your account. They do not need consent and cannot be turned off.
At the moment we do not use marketing or analytics cookies. If that changes, we will ask for your consent first and update this page.
9. Your rights
You have the right to access, correct and delete your data, to ask us to restrict processing, to receive your data in a portable format, to object to certain uses and to withdraw consent at any time. To use any of these rights, contact us using the details above. We reply within one month.
10. Complaints
If you think we have handled your data incorrectly, please talk to us first. You can also complain to the UK data protection authority, the ICO, at ico.org.uk.
11. Under 18s
Our services are for people aged 18 and over. We do not knowingly collect data from under 18s.
12. Changes to this policy
We may update this policy. When that happens, we change the "last updated" date at the top of the page.
13. Contact
Write to hello@mefirsthealth.co.uk.