Privacy Policy

1. Who We Are

This Privacy Policy explains how KBMO Diagnostics (“we”, “us”, “our”) collects, uses and protects your personal data.

KBMO Diagnostics operates the website www.kbmodiagnostics.co.uk and is responsible for your personal data.

UK Address:
KBMO Diagnostics
Wigmore Lodge
Ockley Road
Beare Green
Dorking
Surrey
RH5 5PU

If you have any questions about this policy or your data, please contact us via our website contact form.

2. What Personal Data We Collect

We may collect and process the following types of personal data:

a) Identity and Contact Data
  • Name
  • Email address
  • Phone number
  • Address
b) Professional Information
  • Qualifications
  • Professional registration details
  • Business or clinic information (where applicable)
c) Technical Data
  • IP address
  • Browser type and version
  • Device information
  • Website usage data
d) Health-Related Data (Special Category Data)

Where relevant, we may process health-related data in connection with our services.

This type of data is treated as special category data under UK GDPR and is subject to additional protection.

3. How We Use Your Data

We use personal data for the following purposes:

  • To provide and manage access to our services
  • To respond to enquiries or requests
  • To manage practitioner accounts and verify credentials
  • To improve our website and user experience
  • To comply with legal and regulatory obligations
  • To communicate with you where appropriate

We do not sell your personal data.

4. Lawful Bases for Processing

We process personal data under the following lawful bases:

  • Contract – where processing is necessary to provide services
  • Legal obligation – where we are required to comply with law
  • Legitimate interests – where it is necessary for our business operations, provided your rights are not overridden
  • Consent – where required, particularly for health-related data

Where we rely on consent, you have the right to withdraw it at any time.

5. Processing of Health Data

Where we process health-related data:

  • this is done with explicit consent, or
  • where otherwise permitted under UK data protection law

We take additional steps to ensure this data is handled securely and confidentially.

6. Data Sharing

We may share personal data with:

  • service providers and partners who support our operations
  • laboratories or technical providers (where relevant to services)
  • regulatory or legal authorities where required

We require all third parties to respect the security of your data and to process it in accordance with the law.

We do not allow third parties to use your data for their own marketing purposes.

7. International Transfers

Some of our services involve collaboration with KBMO Diagnostics LLC, based in the United States.

Where personal data is transferred outside the UK, including to the United States, we ensure that appropriate safeguards are in place in accordance with UK data protection law. These may include:

  • adequacy regulations (where applicable)
  • standard contractual clauses approved for UK use
  • additional contractual and organisational safeguards

KBMO Diagnostics LLC operates in accordance with applicable US data protection and healthcare data regulations and maintains appropriate safeguards for the handling of sensitive and health-related data, including compliance with the Health Insurance Portability and Accountability Act (HIPAA), where applicable.

We take reasonable steps to ensure that any international data transfers are conducted securely and that your personal data continues to be protected to a standard consistent with UK data protection requirements.

8. Data Security

We implement appropriate technical and organisational measures to protect personal data, including protection against:

  • unauthorised access
  • accidental loss
  • misuse or disclosure

Access to personal data is limited to those who have a legitimate business need.

9. Data Retention

We retain personal data only for as long as necessary to:

  • fulfil the purposes for which it was collected
  • meet legal, regulatory or contractual requirements

Retention periods may vary depending on the nature of the data and our obligations.

10. Your Rights

Under UK data protection law, you have the right to:

  • access your personal data
  • request correction of inaccurate data
  • request erasure of your data
  • restrict or object to processing
  • request data portability
  • withdraw consent where applicable

To exercise your rights, please contact us via our website.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

11. Cookies

We use cookies and similar technologies to improve your experience on our Site.

For full details, including how to manage your preferences, please refer to our Cookie Policy.

12. Third-Party Links

Our Site may contain links to other websites. We are not responsible for the privacy practices of those websites.

13. Changes to This Policy

We may update this Privacy Policy from time to time.

Any changes will be posted on this page and take effect immediately.

14. Contact

If you have any questions about this Privacy Policy or how your data is handled, please contact us via our website.