This privacy policy applies to Allergy Link and explains how we use and protect any information that you give us, when you use our website (www.allergylink.co.uk) and our testing service.
We are committed to protecting your privacy. We will only use the information that we collect about you lawfully (EU General Data Protection Regulation 2018 - GDPR).
By ordering / using our test service, to the extent permitted by applicable law, you are consenting to us and our trusted agents / corporate partner (Clinic / Practitioner or otherwise) gathering and processing information about you in accordance with this Policy, although consent may not be required for all of the elements described in this Policy.
We collect information about you for 2 reasons: to process your order and to provide you with the best possible test service.
If you have any questions regarding our Privacy Notice, or how we use your personal data, please contact info@allergylink.co.uk
CONTENTS:
- WHAT TYPE OF PERSONAL INFORMATION DO WE COLLECT?
- HOW WE COLLECT YOUR PERSONAL DATA
- HOW WE USE YOUR PERSONAL INFORMATION
- CONTACTING YOU
- WHERE IS MY DATA STORED?
- HOW LONG DO WE STORE INFORMATION FOR?
- DISCLOSURES OF YOUR PERSONAL DATA
- THE LEGAL BASIS FOR OUR USE AND OTHER PROCESSING OF YOUR PERSONAL INFORMATION UNDER DP LAW
- YOUR LEGAL RIGHTS
- UPDATING AND AMENDING YOUR PERSONAL INFORMATION
- COMPLAINTS
- CHANGES TO THIS PRIVACY POLICY
1. WHAT TYPE OF PERSONAL INFORMATION DO WE COLLECT?
Personal information is information that can be used to identify a person as an individual. Allergy Link may process personal data such as a first name, surname, date of birth, email address, postal address, home telephone number, mobile telephone number, gender.
When you visit our website we may collect information about your device such as your bowser type and IP address and language
We may collect personal information when a person:
- uses our website
- orders services from us
- creates an account with us
- asks for us to send something about our services;
- becomes an agent / corporate partner;
- signs up to receive our newsletter;
- downloads a Form or Factsheet from our website
- fills out our questionnaire: Test-Application-Form
- and asks us a question, requests something from us, or sends us a direct message;
- Details about how you've engaged with us, including your shopping basket
- or otherwise provides us with their personal information through other means.
When purchasing services via our website, by phone or through our trusted agent / corporate partner we collect:
- Your first name and surname
- Your email address
- Your billing and delivery address/es
- Your login data which allows our system to create your user account
- Your personal or work related contact details (depending on which you choose to
- submit) such as your telephone number(s) and postal address
- Your contact and communication preferences
We do not store any of your payment details and your password(s) are encrypted, so we cannot access those.
We aim to ensure that all information we hold about a person is accurate and kept up-to-date. If any of the information we hold about a person is inaccurate and either they advise us or we become otherwise aware, we will ensure it is amended and updated as soon as possible.
Health Data
When you choose to order a combination 'Food Intolerance & Substance Sensitivity Test', we will collect your contact details as above. You also need to provide us with some additional personal information in order for us to process your Test. This includes sensitive personal data relating to health. This is fully at your discretion. However the Test-Application-Forms with hair-sample - necessary for testing purposes only - will be destroyed after 3-4 weeks. The electronic records of your test will be kept for up to 6 years as well as any relevant correspondence with you about this.
A person may ask for any personal information about them that we hold to be deleted and destroyed at any time but. There may also be times when we cannot delete data because of other laws or regulations. We will inform a person, if possible, if data cannot be deleted.
We will not sell, distribute or lease your personal information to third parties.
You have the right to access your personal information (subject to certain exemptions).
If you do not provide us with certain of your information, we may not be able to fulfill the requested Purpose of collection, such as to respond to your test order.
2. HOW WE COLLECT YOUR PERSONAL DATA
We collect data about you when you provide information by ordering our test service, filling in forms on our website or otherwise order your test through an authorised agent / corporate partner (Clinic / Practitioner). This includes communicating with us by post, phone, email or otherwise, including when you:
- Visit our website
- Create an account on our website
- Order our services
- Return your completed questionnaire / Test-Application Form
- or give us feedback
3. HOW WE USE YOUR PERSONAL INFORMATION
We will only use your personal data when legally permitted. The most common uses of your personal data are:
- Where we need to perform the contract between us. Fulfilling orders for test services (i.e. to enable us to process your order). This includes any test orders made through our website or through an agent / corporate partner (Clinic / Practitioner or otherwise).
- Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests.
- Where we need to comply with a legal or regulatory obligation.
- This may include retaining proof of posting / email in case of problems with delivery.
If you choose to order any of the Food Intolerance & Substance Sensitivity Test from our website www.allergylink.co.uk or through an authorised agent / corporate partner i.e. clinic, practitioner (or otherwise), you are required to provide us with some personal and health related information. We will collect that information for our own use, and only for the purpose of providing you with our comprehensive testing service.
4. CONTACTING YOU
Allergy Link will only contact you
- to send you the test results
- or in case of clarifying anything related with your test order
We will ask you to “opt-in” to receive communications from us when ordering/purchasing services from us (such as the combination Food Intolerance & Substance Sensitivity Test). You have the choice whether you want to receive these messages, or create an account. Where you opt out of receiving our communications, this will not apply to personal data provided to us as a result of a service purchase.
You can decide not to receive communications or change how we contact you at any time. If you wish to do so please contact info@allergylink.co.uk
5. WHERE IS MY DATA STORED?
Your data is kept safe and securely within the European Economic Area (EEA). We never rent or sell your information to any third party or other organisation, so it will never be transferred outside of this area.
6. HOW LONG DO WE STORE INFORMATION FOR?
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and the applicable legal requirements.
By law we have to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for 6 years after they cease being customers for tax purposes. We continually review what information we hold and delete what is no longer required. We never receive or store payment card information.
- Forms - The 'Test-Application-Forms' containing personal data and health related information will be destroyed app. 3-4 weeks after testing / test delivery.
- Electronic data - The Test-Reports will be kept for up to 6 years, unless immediate deletion is required (You can specify this option on the Test-Application-Form).
7. DISCLOSURES OF YOUR PERSONAL DATA
We never rent or sell your information to any third party or any other organisation.
We never store payment card information. However, non-financial contact information may be visible to any (future) IT or system administration staff.
Some data/information (test-result) will be shared with / through our authorised agents / corporate partners (test-order route). As trusted agents they are responsible for the safe delivery of our test-results.
8. THE LEGAL BASIS FOR OUR USE AND OTHER PROCESSING OF YOUR PERSONAL INFORMATION UNDER DP LAW
Set out below is a description of the ways we intend to use your personal data and the legal grounds on which we will process such data. We have also explained what our legitimate interests are where relevant.
Generally, we do not rely on consent as a legal ground for processing your personal data, other than in relation to sending communications to you via email. You have the right to withdraw consent to us emailing you at any time by emailing us at info@allergylink.co.uk
We may process your personal data for more than one lawful ground, depending on the specific purpose for which we are using your data. Please email us at info@allergylink.co.uk if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below.
|
Purpose/Activity |
Type of data |
Lawful basis for processing and Legitimate Interests |
|
To register you as a new customer for services |
(a) Identity |
Performance of a contract with you |
|
To process and deliver your order including: (a) Manage payments, fees and charges (b) Collect and recover money owed to us |
(a) Identity (c) Financial (d) Transaction |
(a) Performance of a contract with you (b) Necessary for our legitimate interests to recover debts owed to us |
|
To send your Test results and other related communications when you purchase/ sign up to the Allergy Link test service. |
(a) Identity |
(a) Performance of a contract with you (b) Necessary for our legitimate interests for running our business |
|
To gather health information in order to process your Food Intolerance & Substance Sensitivity Test. |
(a) Identity |
(a) Performance of a contract with you |
|
To administer and protect our business and our web sites (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) |
(a) Identity (c) Technical |
(a) Necessary for our legitimate interests for running our business, provision of administration and IT services, network security, to prevent fraud |
|
To add you to our mailing lists (none currently) |
(a) Identity |
Consent |
9. YOUR LEGAL RIGHTS
We want to ensure you remain in control of your personal data. Part of this is making sure you understand that you have rights under data protection laws in relation to your personal data. These include the right to:
- Request access to your personal data
- Request correction of your personal data
- Request erasure of your personal data
- Object to processing of your personal data
- Request restriction of processing your personal data
- Request transfer of your personal data
- Right to withdraw consent
You can see more about these rights by clicking here on the ICO website.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
10. UPDATING AND AMENDING YOUR PERSONAL INFORMATION
If, at any time, you wish to verify, update or amend the personal information you have provided to Allergy Link, please contact us at info@allergylink.co.uk or use any of the contact details outlined at the start of this privacy notice.
11. COMPLAINTS
If you are not happy with any aspect of how we collect and use your data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).
We should be grateful if you would contact us first if you do have a complaint so that we can try to resolve it with you. In this instance please contact us at info@allergylink.co.uk or use any of the contact details outlined at the start of this privacy notice.
12. CHANGES TO THIS PRIVACY POLICY
This Privacy Policy may change from time-to-time, for instance to reflect new legal requirements. Please visit this website page to keep up-to-date with any changes. Where appropriate, you will be notified by email. Please check back frequently to see any updates or changes to our Privacy policy.
This privacy policy was last updated on 05.10.2021
