Legal
Privacy Policy.
How Hilmi Lab collects, uses, stores and protects your personal and health data in accordance with UK GDPR.
Who we are
Hilmi Lab provides laboratory analyses, imaging referrals, genetic testing and consultant-led report interpretation. This page is maintained by Hilmi Lab and explains how we handle personal and health data.
Data we collect
Identity and contact details you provide (name, email, telephone), the documents and clinical information you upload, order and payment records, and basic technical data required to operate the website securely.
Why we process it
To deliver the service you request — including preparing a professional interpretation of your report — to communicate with you about your request, to process payment, and to meet our legal and clinical record-keeping obligations.
Lawful basis under UK GDPR
We rely on your explicit consent for processing special category health data, on contract performance for delivering the services you order, and on legal obligation for records we are required to retain.
Storage and security
Documents and clinical details are handled confidentially, access is limited to the clinical and administrative staff involved in your case, and data is transmitted over encrypted connections.
Retention
Clinical records are retained for the period required by applicable medical record-keeping standards. Data no longer required is securely deleted.
Sharing
We share data only with the consultants reviewing your case, with payment providers to process your transaction, and where disclosure is required by law. We do not sell personal data.
Your rights
You may request access, correction, deletion, restriction or portability of your data, and you may withdraw consent at any time. Withdrawal does not affect processing already carried out.
Contact
For any privacy question or to exercise your rights, please contact Hilmi Lab through the contact page and we will respond within the statutory timeframe.