Kensington International Clinic is the Data Controller for your personal and health data under UK GDPR. Any laboratories involved in analysing samples act strictly as Data Processors under our instructions and legal contracts.
What information is analysed from my blood samples?
Only clinically relevant biomarkers required for your programme are analysed. This may include biochemical, hormonal, metabolic, and in some cases genetic or epigenetic markers. We receive clinically interpreted results, not unnecessary raw data.
Why are some samples or data processed outside the UK?
Certain advanced medical analyses are only available through highly specialised laboratories, some of which are based in the United States. These laboratories are selected for their expertise, accreditation, and compliance with international data-protection standards.
How is my data protected if it is transferred abroad?
All international transfers comply fully with UK GDPR. This includes encryption, strict access controls, and UK-approved legal safeguards ensuring your data receives protection equivalent to UK standards.
Who can access my data?
Access is strictly limited to authorised clinical staff at Kensington International Clinic and the laboratories directly involved in your care. No third parties can access identifiable data without your explicit consent.
Is my data used for research or AI development?
No. Your data is not used for research, product development, or algorithm training unless you explicitly opt in. You can fully participate in the programme without consenting to any secondary use.
Is my data anonymised?
Data shared with laboratories is pseudonymised wherever possible. Only the clinic can link your identity to your biological data.
How long is my data kept?
Digital health records are retained in line with UK medical and legal requirements. Blood samples are destroyed by laboratories once analysis is complete, unless further retention is clinically necessary and agreed.
What rights do I have over my data?
You have full rights under UK GDPR, including the right to access, correct, receive a copy of, or request deletion of your data where legally permitted.
What happens if there is a data breach?
In the unlikely event of a breach, you would be informed promptly in accordance with UK GDPR and ICO guidance, and appropriate support would be provided.