1. Introduction
This Privacy Policy outlines how Bio-Diagnostics Ltd collects, uses, stores, and protects
personal data in accordance with applicable data protection laws, including the UK GDPR,
EU GDPR (where applicable), and the Data Protection Act 2018.

2. Who We Are
Bio-Diagnostics Ltd operates as a diagnostic testing medical laboratory, medical device
(including In Vitro diagnostics, IVD) manufacturer and medical device and pharmaceutical
distribution company.

3. Data We Collect
We may collect and process the following categories of personal data:
Patient data: name/ initials, date of birth, test results, medication, and clinical data.
• Customer data: names, contact information, order history.
• Employee data: HR, payroll, and training records.
• Supplier and partner data: business contacts, communication records.

4. Lawful Basis for Processing
We process personal data under the following legal bases:
• Consent (Article 6(1)(a) GDPR) where required.
• Contractual necessity (Article 6(1)(b)).
• Legal obligation (Article 6(1)(c)).
• Legitimate interests (Article 6(1)(f)).
• Provision of healthcare and public health (Article 9(2)(h) and (i)) for special
category data.

5. How We Use Personal Data
We use personal data to:
• Conduct laboratory testing and issue results.
• Fulfil distribution and delivery of products.
• Maintain customer relationships and respond to inquiries.
• Ensure compliance with regulatory obligations.
• Manage employment records and internal operations.

6. Data Sharing
We may share data with:
• Healthcare providers, clinics, and authorised third parties involved in patient care.
• Regulatory authorities such as the MHRA, UKHSA, or NHS bodies.
• Third-party service providers (e.g., IT support, logistics) under contractual safeguards.

7. Data Security
We implement appropriate technical and organisational measures to safeguard personal data,
including:
• Encryption of data.
• Access controls and audit logging.
• Staff training in data protection and confidentiality.

8. Data Retention
Personal data is retained only as long as necessary for the purpose collected, in accordance
with statutory and regulatory retention periods.

9. Data Subject Rights
Individuals have the right to:
• Access their data.
• Request correction or deletion.
• Object to or restrict processing.
• Lodge a complaint with the Information Commissioner’s Office (ICO).

10. Contact Information
For privacy-related inquiries, please contact:
enquiries@bio-diagnostics.co.uk
Bio-Diagnostics Ltd, Upton Industrial Estate, Rectory Road, Upton-upon-Severn,
Worcestershire, WR8 0LX
+44(0)1684 592262

11. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements
or our data practices. Updates will be posted on our website.