phlebo.co.uk

This privacy notice explains how Phlebo Mobile Service Ltd (“we”, “us”, “our”) collects, uses, stores, and protects personal information when providing phlebotomy services.

1. Who We Are (Data Controller)

Phlebo Mobile Service Ltd is the data controller responsible for your personal data.

Company type: Limited company
ICO Registration Reference: ZB537224
Location: Bristol, United Kingdom

Contact details:
Phone: +44 771 122 7838
Email: contact@phlebo.co.uk
Website: www.phlebo.co.uk

2. Personal Data We Collect

To provide phlebotomy services, we may collect and process the following personal data:

Personal information

  • Name

  • Date of birth

  • Postal or visiting address

  • Email address

  • Telephone number

Special category (health) data

  • Medical information relevant to blood sample collection

  • Information required to ensure samples are collected safely and correctly

Personal data may be collected:

  • Directly from you

  • Via email, telephone, or our website

  • From a referring organisation or service provider

3. How We Use Your Information

We use your personal data to:

  • Arrange and carry out blood sample collection

  • Communicate with you about appointments

  • Ensure samples are correctly labelled and handled

  • Share required details with laboratories or referrers so samples can be processed

  • Investigate and resolve complaints

  • Meet legal, regulatory, and professional obligations

If you do not provide the information required, we may be unable to provide the service.

4. Lawful Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we rely on the following lawful bases:

Article 6 (General personal data)

  • Contract – processing is necessary to provide the service you have requested

  • Legal obligation – where we are required to comply with law or regulation

Article 9 (Special category health data)

  • Health or social care – processing is necessary for medical diagnosis and the provision of healthcare services

We do not rely on consent as the primary lawful basis for healthcare-related processing.

5. Sharing Your Information

We may share limited, relevant personal data with:

  • Diagnostic laboratories

  • Referring healthcare providers or organisations

Only the minimum information required (such as name, date of birth, and contact details) is shared to ensure samples can be handled correctly.

We do not sell your data.

6. How We Store and Secure Your Information

Your information is stored securely in both electronic and paper formats, where applicable.

Security measures include:

  • Password-protected devices and email accounts

  • Restricted access to personal data

  • Secure handling of paper records

7. How Long We Keep Your Information

We keep personal data only for as long as necessary to:

  • Provide the phlebotomy service

  • Resolve complaints

  • Meet legal, regulatory, insurance, and professional requirements

When personal data is no longer required:

  • Paper records are securely shredded

  • Electronic records are securely deleted

8. Your Data Protection Rights

Under data protection law, you have the right to:

  • Request access to your personal data

  • Request correction of inaccurate or incomplete data

  • Request erasure of your data in certain circumstances

  • Request restriction of processing

  • Object to processing in certain circumstances

  • Request data portability, where applicable

You do not have to pay a fee to exercise your rights.
We will respond within one month.

To exercise your rights, contact:
Email: contact@phlebo.co.uk

9. Complaints

If you have concerns about how we use your personal data, please contact us first:

📧 contact@phlebo.co.uk

You also have the right to complain to the Information Commissioner’s Office (ICO):
🌐 www.ico.org.uk