Privacy Policy

We collect the following personal information to identify you, manage your appointments, and communicate with you:

• Full name, date of birth, and sex
• Ethnicity – collected from the NHS 17-option list and used solely to apply clinically appropriate reference ranges to your biomarker results
• Email address and telephone number
• Home address (address line, city, and postcode)
• A unique Health3 Patient Identifier assigned to your record — this is generated by our system and not entered by you

Because we provide health screening services, we also collect detailed health information. This is classified as special category data under data protection law and is given a higher level of protection. We collect:

• Current medications and dietary supplements
• Known allergies
• Existing medical conditions, including mental health conditions, autoimmune conditions, and others
• Family medical history (first-degree relatives)
• Previous surgeries and procedures
• Lifestyle data: smoking status and method, alcohol consumption, exercise habits, diet, sleep quality, and stress level
• Biomarker results: measurements from blood and urine analysis across 65 or more analytes, including haematology, biochemistry, immunoassay, and urinalysis
• Physical measurements: height, weight, waist and hip circumference, BMI, blood pressure, heart rate, oxygen saturation, respiratory rate, and temperature
• ECG data: 12-lead resting electrocardiogram (Gold and Platinum patients only)
• Mole mapping: full-body mole mapping images and AI-assisted risk stratification outputs (Silver, Gold, and Platinum patients — Glasgow clinic, launch year)
• Ultrasound findings: point-of-care bedside ultrasound results (Platinum patients only)
• Clinician consultation notes and clinical assessments
• Your personalised digital patient health report

At present, in-clinic card payment processing is not enabled. When we introduce card payment in future, payment card data will be processed by a third-party payment provider – card data will not be stored by Health3 directly. We will update this policy when payment processing is introduced.

Your health data is sensitive, and we treat it as such. All special category health data collected by Health3 is processed directly by, or under the responsibility of, our GMC-registered clinicians. Our clinicians are subject to professional secrecy obligations in accordance with GMC standards of professional conduct — this means they are legally and professionally bound to keep your health information confidential.

We process your special category health data for the following reasons:

• To carry out your health screening appointment and produce your personalised health report
• To allow our clinicians to interpret your biomarker results in the context of your personal health history
• To communicate your results to you securely
• To maintain a clinical record of your care
• To refer you to a specialist where our clinicians identify a clinical need – with your knowledge

We do not use your health data for commercial purposes, and we do not sell it to third parties. We do not use your health data for marketing purposes without your separate, explicit consent.

Where we rely on your consent as our legal basis (GP sharing and marketing), you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of any processing we carried out before you withdrew it, and it will not affect your right to receive your health screening service.

To withdraw consent, please contact us at privacy@health3.co.uk.

We use a small number of trusted third-party service providers – known as data processors – to help us deliver our services. Each processor operates under a Data Processing Agreement with Health3 before any data is shared with them.

We will only share your results with your GP if you explicitly request this. Your results are yours – we do not share them with your GP automatically. If you request GP sharing, we rely on your explicit consent to do so. You may withdraw this consent at any time.

We will only share your results with your GP if you explicitly request this. Your results are yours – we do not share them with your GP automatically. If you request GP sharing, we rely on your explicit consent to do so. You may withdraw this consent at any time.

Where our clinicians identify a finding that requires a specialist opinion, we may refer you to an appropriate specialist. You will always be informed before a referral is made. Referrals are made only where clinically indicated and only with the minimum information necessary for the receiving clinician to provide appropriate care.

When we carry out total body mole mapping, the IntelliStudio Gen3 system uses DeXI – an AI programme – to analyse your mole mapping images and produce a risk stratification score. This score is reviewed by a GMC-registered clinician who makes all clinical decisions. The AI output is not shared with you directly and does not appear in your patient health report. All decisions about any further clinical action are made by your clinician.

Our clinicians may use a clinical decision support system to assist with the interpretation of your biomarker results. This system provides analysis and reference information to support clinician judgement – it does not make decisions. All outputs are reviewed by your clinician, who holds full responsibility for your care. No AI-generated content appears in your patient report.

We do not make any decisions about your health or your care solely by automated means. A qualified, GMC-registered clinician reviews all AI-assisted outputs before any decision is communicated to you. This means Article 22 of the UK GDPR – which governs solely automated decisions with legal or similarly significant effects – does not apply to our use of these tools.

You have the right to request human review of any decision made about you and to contest any decision you believe is incorrect. Please contact us using the details in Section 1 to exercise this right.