Privacy Policy
This Privacy Policy explains how Fertility Signal, a service of the Marylebone Diagnostic Centre ("we", "us", "our"), collects, uses, stores, and protects your personal information and medical data when you use our website (fertilitysignal.com) and patient portal.
We are committed to protecting your privacy in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Fertility Signal is operated by Marylebone Diagnostic Centre, located at 73 Baker Street, London W1U 6RD, United Kingdom. For any privacy-related enquiries, you can contact us at tharb@marylebonelab.co.uk.
2. Information we collect
Personal information
- Name, email address, phone number
- Date of birth
- Billing and contact details
- Account login credentials (email and encrypted password)
Medical and clinical data
- Semen analysis results (sperm count, motility, morphology)
- DNA fragmentation test results
- Hormone panel results (testosterone, FSH, LH, and others)
- Clinician notes and reviews
- Historical test records for trend analysis
Technical information
- IP address, browser type, device information
- Pages visited on our website
- Cookies and similar tracking technologies (see our Cookie Policy)
3. How we use your information
We process your information for the following purposes:
- Providing our services: processing your lab samples, computing your Fertility Signal Score, and delivering results through your patient dashboard.
- Clinical care: allowing our clinicians to review your results, provide personalised recommendations, and offer follow-up care.
- Account management: creating and maintaining your patient account, sending you login credentials, and processing password resets.
- Communication: notifying you when results are available and responding to your enquiries.
- Legal and regulatory compliance: meeting our obligations under UK healthcare regulations.
- Service improvement: analysing anonymised usage data to improve our platform.
4. Legal basis for processing
Under UK GDPR, we rely on the following legal bases:
- Contract: processing necessary to deliver the fertility testing services you have booked.
- Consent: for any marketing communications, which you can withdraw at any time.
- Legitimate interests: improving our services and maintaining security.
- Legal obligation: keeping medical records as required by UK healthcare law.
- Vital interests: in emergency medical situations where necessary.
5. Who we share your data with
We only share your data where necessary and with appropriate safeguards:
- Our clinicians: to review results and provide clinical care.
- Our lab partners: to process semen and blood samples.
- Cloud infrastructure providers: Vercel (application hosting) and Neon (database hosting), both located in the EU/UK region for GDPR compliance.
- Regulatory bodies: only where required by UK law.
We do not sell your personal or medical data to third parties.
6. Data security
We take the security of your data seriously. Measures include:
- End-to-end encrypted connections (HTTPS)
- Encrypted database storage
- Role-based access control (only authorised staff can view your data)
- Password hashing with industry-standard algorithms
- Audit logging of all data access
- Regular security reviews
7. Data retention
Medical records are retained in line with UK healthcare regulations, typically for a minimum of 8 years from the date of your last test. After this period, records may be anonymised or securely deleted.
Non-medical personal data is retained only as long as necessary for the purposes described above.
8. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legal retention requirements)
- Restrict how we process your data
- Object to certain types of processing
- Data portability - receive your data in a machine-readable format
- Withdraw consent for marketing at any time
- Lodge a complaint with the Information Commissioner's Office (ICO)
To exercise any of these rights, please email us at tharb@marylebonelab.co.uk.
9. International transfers
Your data is stored on servers located within the EU/UK region. If any data is transferred outside this region, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner.
10. Children's data
Our services are intended for adults aged 18 and over. We do not knowingly collect data from anyone under 18.
11. Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be posted here with an updated "Last updated" date. For significant changes, we will notify you by email.
12. Contact us
If you have questions about this Privacy Policy or how we handle your data, please contact:
Fertility Signal / Marylebone Diagnostic Centre
73 Baker Street
London W1U 6RD
United Kingdom
Email: tharb@marylebonelab.co.uk
Phone: 020 7724 0540
You can also contact the UK Information Commissioner's Office at ico.org.uk if you have concerns about how we handle your data.