Privacy policy

Privacy Policy

1. Introduction

This Privacy Policy explains how Labraix Ltd collects, uses, stores and discloses personal information when you:

  • Visit our website
  • Create an account
  • Purchase products
  • Book consultations
  • Otherwise interact with our services

2. Who We Are

Labraix Ltd is incorporated in England and Wales under company number 16194793.

Registered Office:
11 Woodford Avenue
Gants Hill
Ilford
IG2 6UF

Labraix Ltd is the data controller for the purposes of UK data protection law.

3. Information We Collect

Information You Provide Directly

We collect personal information that you provide to us, including:

  • Name
  • Date of birth
  • Contact details
  • Billing and delivery address
  • Payment information
  • Account credentials
  • Consultation responses
  • Communications with us

Health Information (Special Category Data)

Where you use our consultation services, we collect health information including:

  • Medical history
  • Symptoms
  • Medications
  • Lifestyle information
  • Treatment outcomes

This information constitutes special category personal data under UK GDPR.

Information Collected Automatically

When you use our website, we may collect:

  • IP address
  • Device identifiers
  • Browser information
  • Usage data
  • Cookies

Our website and store are hosted by Shopify, which processes personal data as part of providing e-commerce services.

4. How We Use Personal Information

We use personal information to:

  • Administer accounts
  • Process payments
  • Fulfil orders
  • Arrange shipping
  • Facilitate consultations with regulated prescribers
  • Enable dispensing by partner pharmacies
  • Maintain accurate records
  • Comply with legal and regulatory obligations
  • Prevent fraud
  • Communicate with you
  • Improve our services

5. Legal Basis for Processing

Health data is processed under Article 9(2)(h) UK GDPR for the purposes of healthcare provision and treatment management, subject to duties of confidentiality.

Other personal data is processed under:

  • Article 6(1)(b) – Contract performance
  • Article 6(1)(c) – Legal obligations
  • Article 6(1)(f) – Legitimate interests, where appropriate

6. Sharing of Information

We share personal information with service providers acting on our instructions, including:

  • Payment processors
  • IT and hosting providers
  • Identity verification services
  • Communication providers
  • Delivery partners

Consultation data is shared with:

  • UK-registered prescribers
  • Regulated pharmacies

This sharing is solely for clinical assessment and dispensing.

Information may also be disclosed to regulators, such as the MHRA, where legally required.

7. International Transfers

Personal information may be transferred outside the UK or EEA.

Where this occurs, we ensure appropriate safeguards are in place, including:

  • Standard contractual clauses
  • Adequacy decisions

8. Data Retention

  • Medical records are retained for a minimum of eight years from the date of the last consultation.
  • Transaction and accounting records are retained for six years.
  • Other data is retained only for as long as necessary for the purposes for which it was collected.

9. Your Rights

You have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure
  • Restrict processing
  • Object to certain processing
  • Receive a copy of your data

Where processing is based on consent, you may withdraw that consent at any time.

Requests should be sent to:
sales@labraix.com

10. Complaints

You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been mishandled.