Skip to content
HB Phlebotomy

Template notice: This privacy policy must be reviewed by HB Phlebotomy and their legal adviser before the site goes live. Do not rely on it as final legal text.

Legal

Privacy & Cookie Policy

Last updated: 3 September 2026

Who we are

HB Phlebotomy & Health by Hollie (HB Phlebotomy) provides private phlebotomy, blood testing, and wellness services from The Vibe Studio, Station Road, Bluntisham, Cambridgeshire, PE28 3PA, United Kingdom.

You can contact us at hbphlebotomy@gmail.com or +44 7585 116316.

To be confirmed by HB Phlebotomy: legal entity name, registered business address, and company registration number (if applicable).

What personal data we collect

Depending on how you interact with us, we may collect:

  • Contact details: name, email address, phone number, and postal address.
  • Identity details: date of birth, used with your contact details to identify you and match you to the correct appointment and service records.
  • Appointment details: services booked, preferred dates and times, and any notes you provide when arranging an appointment.
  • Health information you choose to share: symptoms, medical history, medications, allergies, or other health-related information you voluntarily provide so we can deliver services safely.
  • Blood test results: laboratory reports and any summaries or coaching notes we prepare in connection with your results.
  • Communications: messages sent via email, WhatsApp, phone, or our contact form.
  • Website usage data: if analytics or cookies are enabled, we may collect technical information such as IP address, browser type, and pages visited (see Cookies below).

Why we process your data

We use your personal data to:

  • Provide phlebotomy, testing, and wellness services you request.
  • Arrange and communicate about appointments.
  • Send transactional booking messages, including confirmations, appointment reminders, changes, cancellations, and service instructions.
  • Collect samples and arrange analysis with accredited UK laboratories.
  • Share results and wellbeing summaries with you, and with your GP or private consultant only at your request.
  • Maintain appropriate clinical records and aftercare information.
  • Respond to enquiries and improve our services.
  • Meet legal, regulatory, and insurance obligations where applicable.

Special category data

Health information and blood test results are “special category” personal data under UK GDPR. We handle this data with particular care: access is limited to those who need it, records are kept securely, and we only collect what is necessary to provide the service safely.

Lawful bases for processing

Under UK GDPR, we rely on the following lawful bases depending on the activity:

  • Consent: where you have given clear consent, for example to receive vitamin therapies, share health information, or receive marketing communications (if offered).
  • Contract: processing necessary to perform our agreement with you when you book a service.
  • Legitimate interests: to respond to enquiries, maintain service quality, and operate our business, balanced against your rights and expectations.
  • Legal obligation: where we must comply with applicable law.

Where we process special category health data, we do so on the basis of your explicit consent and/or as necessary for the provision of health or social care (as applicable to the service provided).

Who we share data with

We may share your data with:

  • Accredited UK laboratories: to analyse blood samples and return results.
  • Your GP or private consultant: only if you ask us to share results or reports.
  • Professional advisers: such as insurers or lawyers, where reasonably necessary.
  • Service providers: who help us operate (for example email, website hosting, or booking tools), under appropriate confidentiality arrangements.
  • Resend: our transactional email delivery provider, which processes the contact details and booking message content needed to deliver appointment emails.
To be confirmed by HB Phlebotomy: the complete processor list, Resend's applicable processing location and safeguards, and any hosting, analytics, or booking providers not named here.

We do not sell your personal data. We do not share your health information with third parties for marketing purposes.

How long we keep data

We keep personal data only for as long as needed for the purposes described above, including to meet legal, regulatory, and professional requirements.

To be confirmed by HB Phlebotomy: specific retention periods for dates of birth, contact details, booking records, email templates and delivery history, clinical records, results, and correspondence.

Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure; if you have concerns about how we handle your data, please contact us.

Cookies and analytics

Our website may use cookies (small text files stored on your device) to make the site work, remember preferences, or understand how visitors use the site.

Types of cookies we may use

  • Essential cookies: required for basic site functionality.
  • Analytics cookies: to understand traffic and improve the site (only if enabled).
To be confirmed by HB Phlebotomy: whether analytics are used, which provider, and a full cookie list for a consent banner if required.

You can control cookies through your browser settings. Blocking essential cookies may affect how the site works.

Your rights under UK GDPR

You have the right to:

  • Access the personal data we hold about you.
  • Ask us to correct inaccurate data.
  • Ask us to erase your data in certain circumstances.
  • Restrict or object to certain processing.
  • Data portability, where applicable.
  • Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at hbphlebotomy@gmail.com. We will respond within the timeframe required by law.

To be confirmed by HB Phlebotomy: contact details for data protection queries if different from the main clinic email.

Complaints

If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve the issue. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: ico.org.uk/make-a-complaint.

Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of this page will change when we do. Significant changes may also be communicated by email or a notice on our website where appropriate.

Contact us

For privacy-related questions or requests:

Book nowWhatsApp