Privacy Policy
This Privacy & Confidentiality Policy explains how Lumi Health Ltd ("we", "us" or "our") collects, uses and protects your personal data when you use our website, contact us, or receive services from us. It explains your rights and how the law protects you, and should be read alongside our Website Terms & Conditions.
For the purposes of UK data protection law, the data controller is:
Lumi Health Ltd
Company registered address: 1-3 Manor Road, Chatham, Kent, England, ME4 6AE
Email: enquiries@lumihealthclinic.co.uk
Keeping your information accurate
It is important that the personal data we hold about you is accurate and up to date. Please let us know if your details change during your relationship with us by contacting us at the email address above.
What personal data we collect
We may collect identity and contact details, health and clinical information (special category data), appointment and billing information, communications with us, and basic website usage data. We only collect what is necessary to provide safe, effective care and operate our services.
How we collect your data
We collect data when you contact us, book or receive services, sign up for communications, or use our website.
How we use your data
We use your data to provide care, manage appointments and payments, communicate with you, meet legal and regulatory obligations, improve services, and send marketing where you have opted in.
Legal basis for processing
We rely on contract, legal obligation, legitimate interests and consent as lawful bases. Health data is processed for healthcare provision and management, and in some cases with explicit consent.
Marketing communications
We only send marketing emails to people who have opted in. You can unsubscribe at any time and we do not share your details for third‑party marketing.
Sharing your information
We may share data with healthcare professionals involved in your care, laboratories, your GP with consent, service providers, advisers and regulators. We only share what is necessary and require confidentiality from all third parties.
International transfers
Where data is processed outside the UK or EEA, we ensure appropriate safeguards are in place.
How long we keep your data
We keep data only as long as necessary to provide care and meet legal and professional requirements, in line with healthcare sector guidance.
Security and confidentiality
We use appropriate technical and organisational measures to protect your data. All staff are bound by confidentiality obligations.
Online consultations and digital services
We use secure systems for online services and only record consultations where necessary and with your consent.
Data breaches
We have procedures to manage data breaches and will notify you and the ICO where required.
Your legal rights
You have rights to access, correct, delete or restrict processing of your data, and to withdraw consent. You may complain to the ICO if needed.
Third‑party links
We are not responsible for the privacy practices of third‑party websites linked from our site.
Changes to this policy
We may update this policy from time to time and publish changes on our website.
How We Share Your Personal and Health Information
Lumi Health provides a coordinated approach to healthcare and wellbeing. To provide the services you have requested, it may sometimes be necessary to share relevant information about you with other professionals involved in your care.
Who we may share your information with
Depending on the services you receive and your individual care needs, this may include:
Doctors and specialist consultants
Pharmacists and other healthcare professionals
Registered dietitians and nutrition professionals
Mental wellbeing or mind coaches
Diagnostic, laboratory or testing providers
Your GP, hospital or other healthcare professionals involved in your care
Other professionals or organisations where this is necessary to provide, coordinate or support your care
We will only share information that is relevant and necessary for the particular purpose for which it is being shared. We will not routinely share your entire Lumi health record where this is not necessary.
Why we share your information
Information may be shared where this is necessary to:
Provide healthcare, nutritional, wellbeing or other services you have requested from Lumi Health
Enable another professional involved in your care to assess you or provide advice or treatment
Coordinate different aspects of your care
Ensure professionals involved in your care have relevant information needed to provide safe and appropriate services
Arrange investigations, diagnostic testing or other services
Communicate with other healthcare professionals involved in your care
Meet legal, regulatory or safeguarding requirements
Protect your vital interests or prevent serious harm where appropriate
External professionals
Some professionals involved in providing services to you may be employed or engaged by Lumi Health, while others may operate independently.
Where an external professional operates independently, they may have their own professional, legal and data protection responsibilities and may become independently responsible for the personal information they receive in connection with the services they provide.
Where appropriate, we will ensure that suitable contractual, confidentiality and data protection arrangements are in place with professionals and organisations with whom we share your information.
Your information is shared securely
We take reasonable steps to ensure that information is shared securely and only with people who need it for the relevant purpose.
We apply the principle of data minimisation, meaning that we aim to share only the information that is necessary for the particular service or purpose.
We do not sell your personal or health information and do not permit third parties to use your health information for their own marketing or unrelated commercial purposes.
Your agreement and consent
In many circumstances, Lumi Health can use and share relevant health information as part of providing and coordinating healthcare and wellbeing services that you have requested.
Where your specific agreement, consent or other authorisation is required before information is shared, we will obtain this from you.
Where we intend to share information with an external professional as part of your care, we will, where appropriate, explain who the information will be shared with, the purpose of the sharing and the type of information that will be shared.
You can ask us at any time about how your information is being used or who it has been shared with.
For further information about your rights and how we process your personal information, please see the remainder of this Privacy Notice or contact us using the details provided below.