1. Introduction

This Privacy Policy outlines how Scanletics Ltd collects, uses, shares, and protects the personal information provided by customers of our body composition testing facility. We are committed to safeguarding your privacy and ensuring the security of your personal data in accordance with the UK General Data Protection Regulation (UK GDPR).

2. Data Collection

Scanletics may collect personal data from users in the following ways:

• Information provided voluntarily: When you book an appointment, make a purchase, or fill out forms on our website, we may collect personal information such as your name, email address, phone number, date of birth, health-related information, test results, and payment details.

• Automatically collected information: We may collect information about your device and browsing activity on our website, including your IP address, browser type, and referring website.

3. Use of Personal Data

Scanletics may use your personal data for the following purposes:

• To provide and improve our services

• To schedule and manage appointments

• To process transactions

• To communicate with you, including booking confirmations, reminders, results, and updates

• To personalise your experience on our website

• To comply with legal and regulatory obligations

• To respond to inquiries and provide customer support

4. Data Sharing

Scanletics may share your personal data with third parties in the following circumstances:

• With service providers: We may share your information with trusted third-party providers who assist us in operating our website, processing payments, managing communications, or delivering services.

• With legal authorities: We may disclose your information in response to a court order, legal obligation, or other official request.

4. Data Sharing

Scanletics may share your personal data with third parties in the following circumstances:

• With service providers: We may share your information with trusted third-party providers who assist us in operating our website, processing payments, managing communications, or delivering services.

• With legal authorities: We may disclose your information in response to a court order, legal obligation, or other official request.

5. Data Security

Scanletics is committed to protecting your personal data and employs appropriate technical and organisational measures to safeguard it against unauthorised access, disclosure, alteration, or destruction.

6. Data Retention

We will retain your personal and health data for as long as necessary to provide our services and comply with legal and regulatory obligations. In most cases, health records are retained for up to seven years unless a longer period is required by law.

7. Your Rights

Under UK GDPR you have the following rights regarding your personal data:

• Right to access: You may request access to the personal data we hold about you.

• Right to rectification: You may request that we correct any inaccuracies in your personal data.

• Right to erasure: You may request that we delete your personal data under certain circumstances.

• Right to restrict processing: You may request that we restrict the processing of your personal data under certain circumstances.

• Right to data portability: You may request a copy of your personal data in a structured, machine-readable format.

• Right to withdraw consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time.