Human Performance ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights available to you. This policy applies to our website and to the testing, coaching and consultation services we provide.
1. Who we are
Human Performance is a private health testing, body composition and coaching clinic based at Pursley Farm, 2 London Road, Radlett, WD7 9EN. For the purposes of data protection law, we are the "data controller" of the personal data described in this policy.
2. What data we collect
Depending on how you interact with us, we may collect:
- Contact details — name, email address, phone number and postal address
- Booking and payment information — appointment details and payment confirmation (we do not store full card details; these are handled securely by our payment provider)
- Communications — messages you send us via our contact forms, phone, WhatsApp or email
- Health and testing data — the results of any blood panel, body composition scan, or other testing you undergo with us, together with relevant lifestyle information you provide
- Technical data — limited information such as your cookie preference, collected automatically when you use this website (see our Cookie Policy)
3. Health data
Health data is a special category of personal data under data protection law, and we treat it with particular care. We collect and process your health data only where necessary to provide the Services you have requested — for example, to carry out and interpret a blood test — and we rely on your explicit consent, given at the time of booking, as our legal basis for doing so. Access to your health data within our organisation is restricted to the practitioners and staff who need it to deliver your care.
4. Why we collect it
We use your personal data to:
- Provide, administer and improve the Services you book with us
- Interpret your test results and provide consultation and coaching
- Communicate with you about your appointments, results and account
- Respond to questions, requests and complaints
- Meet our legal, regulatory and clinical record-keeping obligations
- Where you have consented, understand how our website is used so we can improve it
5. Who we share it with
We do not sell your personal data. We share it only where necessary, including with:
- Accredited laboratories and testing partners who process samples on our behalf
- Qualified clinicians involved in your care, where clinical treatment is discussed
- Our payment processor, to handle bookings and payments securely
- IT and service providers who support our booking, email and record-keeping systems, under appropriate confidentiality obligations
- Regulators or authorities, where we are legally required to do so
6. How long we keep it
We retain personal and health data only for as long as necessary for the purposes described in this policy, including to meet applicable clinical record-keeping and legal obligations. Where you make an enquiry but do not proceed with a booking, we will retain your contact details for a reasonable period in case you wish to follow up, after which they will be deleted.
7. How we protect your data
We maintain appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or disclosure, including access controls, encryption where appropriate, and staff training on data handling. No method of transmission or storage is completely secure, but we work to protect your data to a high standard.
8. Your rights
Subject to applicable law, you have the right to:
- Request access to the personal data we hold about you
- Request correction of any inaccurate or incomplete data
- Request deletion of your data, subject to our legal and clinical record-keeping obligations
- Object to, or request that we restrict, certain processing
- Withdraw consent at any time, where processing is based on consent
- Request a copy of your data in a portable format
- Lodge a complaint with the Information Commissioner's Office (ICO), or your relevant supervisory authority
To exercise any of these rights, please contact us — we will respond within one month, as required by law.
9. Cookies
Our website uses a limited number of cookies. Full details are set out in our separate Cookie Policy.
10. Children's privacy
Our Services are intended for adults. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to remove it.
11. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. Any changes will be posted on this page with an updated "last updated" date, and, where changes are significant, we will take reasonable steps to notify you.
12. Contact us
If you have any questions about this Privacy Policy or how we handle your data, please get in touch or email us at hello@hupx.co.uk.