This privacy notice explains how Phlebo Mobile Service Ltd (“we”, “us”, “our”) collects, uses, stores, and protects personal information when providing phlebotomy services.
1. Who We Are (Data Controller)
Phlebo Mobile Service Ltd is the data controller responsible for your personal data.
Company type: Limited company
ICO Registration Reference: ZB537224
Location: Bristol, United Kingdom
Contact details:
Phone: +44 771 122 7838
Email: contact@phlebo.co.uk
Website: www.phlebo.co.uk
2. Personal Data We Collect
To provide phlebotomy services, we may collect and process the following personal data:
Personal information
-
Name
-
Date of birth
-
Postal or visiting address
-
Email address
-
Telephone number
Special category (health) data
-
Medical information relevant to blood sample collection
-
Information required to ensure samples are collected safely and correctly
Personal data may be collected:
-
Directly from you
-
Via email, telephone, or our website
-
From a referring organisation or service provider
3. How We Use Your Information
We use your personal data to:
-
Arrange and carry out blood sample collection
-
Communicate with you about appointments
-
Ensure samples are correctly labelled and handled
-
Share required details with laboratories or referrers so samples can be processed
-
Investigate and resolve complaints
-
Meet legal, regulatory, and professional obligations
If you do not provide the information required, we may be unable to provide the service.
4. Lawful Basis for Processing
Under the UK General Data Protection Regulation (UK GDPR), we rely on the following lawful bases:
Article 6 (General personal data)
-
Contract – processing is necessary to provide the service you have requested
-
Legal obligation – where we are required to comply with law or regulation
Article 9 (Special category health data)
-
Health or social care – processing is necessary for medical diagnosis and the provision of healthcare services
We do not rely on consent as the primary lawful basis for healthcare-related processing.
5. Sharing Your Information
We may share limited, relevant personal data with:
-
Diagnostic laboratories
-
Referring healthcare providers or organisations
Only the minimum information required (such as name, date of birth, and contact details) is shared to ensure samples can be handled correctly.
We do not sell your data.
6. How We Store and Secure Your Information
Your information is stored securely in both electronic and paper formats, where applicable.
Security measures include:
-
Password-protected devices and email accounts
-
Restricted access to personal data
-
Secure handling of paper records
7. How Long We Keep Your Information
We keep personal data only for as long as necessary to:
-
Provide the phlebotomy service
-
Resolve complaints
-
Meet legal, regulatory, insurance, and professional requirements
When personal data is no longer required:
-
Paper records are securely shredded
-
Electronic records are securely deleted
8. Your Data Protection Rights
Under data protection law, you have the right to:
-
Request access to your personal data
-
Request correction of inaccurate or incomplete data
-
Request erasure of your data in certain circumstances
-
Request restriction of processing
-
Object to processing in certain circumstances
-
Request data portability, where applicable
You do not have to pay a fee to exercise your rights.
We will respond within one month.
To exercise your rights, contact:
Email: contact@phlebo.co.uk
9. Complaints
If you have concerns about how we use your personal data, please contact us first:
You also have the right to complain to the Information Commissioner’s Office (ICO):
www.ico.org.uk