NHSBT Privacy Policy - Homediq Europe B.V.

LAST UPDATE: JANUARY 2021. This privacy statement (“Privacy Statement”), together with our Cookies Policy, describes the types of personal information collected and created in connection with your use of our Products and Services, how and why we use such information, who we share it with, and your legal rights. Please read the following carefully to ascertain how we process your personal information (or “information”).

Homediq Europe BV owns and operates an online platform that connects customers with certified medical laboratories. With Homediq, customers can order, manage and track laboratory tests. The Homed-IQ online portal is used for results sharing of laboratory tests.

In order to provide our services, we need to process certain personal information about you. Homediq respects your privacy and the personal data we process are treated with the utmost care and control.

In this privacy statement we inform you about the way we process your personal data. When processing your personal data, we use our website (www.homediq.com), where we store information we have received from you.

  1. Who does this privacy & cookie statement apply to?

This privacy statement applies to you when:
– you use the services and/or
– you order or use the tests and/or
– you visit the website and/or
– when you contact us.

  1. Who is the data controller? 

For residents of the United Kingdom and the European Economic Area (the “EEA”), the service provider and the controller of your information is Homediq Europe BV, with a registered office at Waaier 30B, Leimuiden within the Netherlands. Homediq Europe BV is a registered business name with registered business number 77050444.

  1. What types of personal data do we process?

We may process the following types of personal data about you:

Account on the website
In order to use our services, you must create a user account on the website. To do this, you must provide the following information:
– First and last name;
– Address details
– E-mail;
– Telephone number;
– Gender;
– Date of birth;
– Sample collection date
– Blood type;
– Any other information we receive from you through our website.

Send tests by mail
After you have ordered a test kit, we will send the test (s) to you by mail. For this we need:
– Contact details;
– Delivery address, zip code, country;

Surveys / questionnaires
We may ask you to complete surveys and/or questionnaires for the correct execution of our services, but that information may also be used for certain research purposes. We will only process data collected through such surveys anonymously and with your consent.

If you contact us by email, we may keep that correspondence.

Presenting test results on our website

In order to provide our laboratory testing services to the best of our ability, we need to disclose information to several individuals within our company, the NHSBT, the accredited laboratory, and our IT service providers. As soon as you have signed up to receive a product from us, your order data must be processed so that the test can be sent to you.

The accredited laboratory only has access to your name, date of birth, your test sample and the test results published therein. The accredited laboratory does not have access to your other personal information and the data to which it has access cannot be attributed to you without the use of additional information that is separately stored in our database.

The NHSBT only has access to your name, date of birth, your blood type and the test results published therein. The accredited laboratory does not have access to your other personal information and the data to which it has access cannot be attributed to you without the use of additional information that is separately stored in our database.

After we have received the results, Homediq may present the results to you by email or they will be accessible on the secure portal through the Homediq website. Homediq will ask for your explicit permission during the ordering process.

Children’s Privacy
We will not knowingly collect personal information from website users under the age of 18. We rely on your promise in the terms and conditions that you are over 18 years old. You may not use the Homediq website or its services, including purchasing products if you are not 18 years of age or older.

  1. What are the applicable legal grounds for the processing of your personal data?

We may only process your personal data if there is a legal ground. Therefore we always ask your explicit permission for the processing of health data or other data.

We may also ask your permission for certain data processing activities, for example when we want to send emails for marketing purposes. In some cases, we have a legitimate interest in the processing of your personal data where we do not infringe on your privacy. For example, if you are an existing customer and we want to keep you informed of interesting developments around Homediq. In addition, we can process personal data to comply with our legal obligations.

All other forms of data processing are carried out for the execution of the agreement concluded before we provide you with services or tests.

  1. How long are your personal data kept?

We will not keep your personal data longer than is necessary for the purposes for which we obtained your personal data. In principle, we can keep your personal data for a maximum of one (1) year after the termination of our business relationship, unless we have to keep your personal data to comply with a legal obligation. In addition, we may retain personal information necessary for legal proceedings, complaints and disputes for as long as is necessary to protect our interests.

  1. Who has access to your personal data?

We share information with service providers, affiliates, partners, and other third parties where it is necessary to provide our products and services, or for any other purposes described in this Privacy Statement. In particular, we may share your information with certain third party suppliers and service providers to help us operate, provide, improve, understand, customize, support, and market our products and services We will take all steps reasonably necessary to ensure that your information is treated securely and in accordance with this Privacy Statement by imposing obligations of security and confidentiality on such service providers.

Your information may be provided as necessary to following categories of recipients: Accredited Laboratories, couriers, communications and marketing service providers, analytics providers, legal or financial advisors, or government/regulatory/law enforcement agencies (e.g. NHSBT) pursuant to legally binding order.

We may disclose and transfer your information to our Accredited Laboratory for the purpose of (i) accepting and processing an accepted order by us, (ii) in order to procure the products is delivered to you by it, and (iii) to test any Sample provided and make your Test Information available to you on our secure account on our website.

To process a request for a product and for our Accredited Laboratory to test the Sample and send you the Test Information, we need to disclose information within our company including to the Medical Practitioner, to our Accredited Laboratory and our IT services providers. Your request for a product will result in your order details being accessed by and processed by our Accredited Laboratory and our IT service providers.

The Accredited Laboratory shall have access to: your name, date of birth, your Sample, information relevant to your test (i.e. gender), and the test results created therein. The Accredited Laboratory shall not have access to your other personal information.

  1. Are your personal data processed outside the EEA?

The information that we collect from you may be transferred to and stored with an Accredited Laboratory (as defined in the Terms of Use) or any supplier of data processing and data hosting services to us at, a destination within the EEA. It may also be processed by staff operating inside the EEA who work for any of them. Such staff may be engaged in, among other things, the fulfilment of your order, the provision of data processing and data hosting services to us.

  1. Is your personal information secure?

We process your personal data with the utmost care and control. This means that we will take appropriate technical and organizational measures to ensure that all information is correct, current and complete and to prevent unauthorized persons from accessing our organization. We protect our systems and applications in accordance with applicable information security standards.

  1. Where can you submit requests for access, rectification, deletion and restriction?

You can exercise your right of access to your personal data at reasonable intervals at any time. After your inspection, you can request that we correct or delete incorrect information or allow us to restrict the processing of your personal data. Please contact us at [email protected].

If your personal data is processed based on your consent, you can withdraw your consent at any time. To exercise this right and the rights mentioned above, please contact us using the contact details in this privacy statement.

If you have complaints about how we handle your personal data, you can contact us using the contact details in this privacy statement. We are happy to help you find a solution. If that does not work, you can always file a complaint with the Dutch supervisory authority (Dutch Data Protection Authority); more information about submitting a complaint can be found on this page.

We take your privacy very seriously and try to protect your privacy as much as possible. If you have any questions about how we process your personal data, or if you would like to assert your rights, you can always contact us at [email protected].

This privacy statement can change at any time. You will always find our current privacy statement on the website.

This privacy statement was last modified on January 1, 2021.