Privacy Policy

1. Who We Are

InnerMe is a UK-based functional blood testing service. This Privacy Policy explains how we collect, use, store and protect your personal data when you use our website and services. We are committed to handling your information responsibly and in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We collect the following types of information when you create an account, place an order or use our services:

• Personal details: name, date of birth, gender, contact information
• Account credentials: email address and encrypted password
• Health information: blood test results and biomarker data generated through your tests
• Payment details: processed securely via Stripe — we do not store card data
• Usage data: pages visited, device type and browser information collected via cookies

3. How We Use Your Information

We use your information to:

• Process and fulfil your test orders
• Deliver your results securely to your dashboard
• Manage your account and provide customer support
• Send important transactional emails (order confirmations, results notifications)
• Comply with legal and regulatory obligations
• Improve our services and website experience

We do not use your health data for marketing purposes and we do not sell your data to any third parties.

4. Our Laboratory Partner

Your blood samples are analysed by Acculabs, our accredited UK laboratory partner. We share the minimum necessary information (name, date of birth, test request details) with Acculabs for the purpose of processing your sample. Acculabs operates under strict confidentiality obligations and UK GDPR compliance.

5. Data Security

We take the security of your personal and health data seriously. We apply industry-standard security measures including encrypted data storage, secure HTTPS connections and role-based access controls. Access to your results is restricted solely to your personal account.

6. Data Retention

We retain your account and test result data for as long as your account remains active. If you close your account, we will retain anonymised data for legitimate business and regulatory purposes and will securely delete your personally identifiable information within 30 days of your request.

7. Your Rights

Under UK GDPR, you have the right to:

• Access a copy of the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal obligations)
• Object to certain types of data processing
• Request restriction of processing in certain circumstances
• Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, contact us at privacy@innerme.co.uk.

8. Cookies

We use essential cookies to maintain your login session and ensure the website functions correctly. We do not use tracking or advertising cookies. You can control cookie settings through your browser preferences.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. The latest version will always be available at this page.

10. Contact Us

For any privacy-related questions or requests, please contact us at privacy@innerme.co.uk.