Privacy Policy

Lenira Health Ltd

Registered Office: 28 Fernbrook Drive, Harrow, Greater London, HA2 7EB, United
Kingdom
Company Number: 16762189
Website: www.lenirahealth.co.uk
Email: info@lenirahealth.co.uk

​

PRIVACY POLICY

Last updated: [20/01/2026]

This Privacy Policy provides information about how Lenira Health Ltd ('we','us','our') collects, uses, stores, and shares personal data. If you have any questions,
please contact us using the details below.

​

1. Status

We are Lenira Health Ltd, a company registered in England and Wales.

Registered Office: Greater London, HA2 7EB, United Kingdom
Company Number: 16762189
Email: info@lenirahealth.co.uk
Website: www.lenirahealth.co.uk

​​

2. Legal Basis for Processing

We collect, control, and process personal data in order to:

• Respond to enquiries and requests for quotations

• Deliver workplace health screening and preventive health services

• Communicate with clients and participants

• Meet legal and regulatory obligations

​​

The lawful bases for processing personal data under UK GDPR are:

• Contractual necessity

• Legal obligation

• Legitimate interests

• Explicit consent (for special category health data)

​

We do not process special category data unless it is necessary for service delivery
and appropriate consent has been obtained.

​

3. Special Category (Sensitive) Personal Data

Special category data may include:

• Data concerning health

• Racial or ethnic origin (where relevant to screening)

Where such data is required, we will explain why it is necessary. The provision of this
data will be treated as explicit consent for processing in line with this policy.

Providing personal data is voluntary; however, failure to provide required information
may mean we are unable to deliver our services.

​

4. What Data We Collect and How We Use It

Enquiries and quotations
When you complete an enquiry or request a quote via our website or email, we
collect contact and company details to respond to you.

Website forms are protected by secure encryption. Data submitted may be
transmitted via email and stored on secure UK-based systems and cloud services.

Working with us

We collect and process personal data including names, contact details, and service-
related information to arrange and deliver our services.

Telephone calls may be recorded for training, quality assurance, and compliance
purposes.

Personal data

​​

• Name

• Date of birth

• Contact details (email, phone number, address)

• Employer/company details

• Appointment information

Health screening data

 

• Medical and lifestyle questionnaire responses

• Screening measurements (e.g., blood pressure, BMI, cholesterol, glucose, etc.)

• Relevant medical history where provided

Site Visits and Virtual Assessments

Prior to delivering services, we may conduct a site visit or a virtual assessment
(such as a video call) to confirm that premises or home settings are suitable and safe
for service delivery.

During these assessments, limited personal data may be incidentally observed or
shared, such as access arrangements or environmental details. Video calls or
images will not be recorded or stored unless necessary for service planning and only
with prior consent.

Any information obtained during these assessments is used solely for operational
planning, health and safety, and service delivery purposes, and is handled in
accordance with this Privacy Policy.

Clients and participants are encouraged to avoid displaying personal or sensitive
information that is not relevant to the assessment during virtual assessments.

5. Data Sharing

To fulfil our contractual obligations, we may share personal data with trusted third
parties acting as Data Controllers or Data Processors, including:

​

• Healthcare professionals involved in service delivery

• IT and cloud service providers

• Secure data storage and backup providers

• Professional advisers and regulators where required by law

All processors act only on our instructions and are subject to confidentiality and data
protection obligations.

Following workplace health screening services, we may provide employers or
commissioning organisations with anonymised, aggregated reports summarising
workforce health trends. These reports do not identify any individual participant, and
individual health results are never shared with employers without explicit consent.

We do not sell personal data or share it with third parties.party marketing purposes.

​

6. Where We Store Your Data

Personal data is stored securely on encrypted systems located in the United
Kingdom or with approved data processors operating under appropriate safeguards.

​

We use Cliniko, a secure practice management system, to manage appointments
and clinical records. Cliniko processes data on our behalf in accordance with data
protection laws and under contractual safeguards.

​

7. Marketing

We will only send marketing communications where you have opted in or where
permitted by law. You can withdraw consent at any time.

​

8. Data Retention

We retain personal data only for as long as necessary, including:

​

• Enquiry and quotation data: up to 7 years

• Client service records: up to 10 years where required for clinical, legal, or regulatory purposes

​

9. Your Rights

Under UK data protection law, you have the right to:​

 

• Access your personal data (Subject Access Request)

• Request correction or deletion

• Restrict or object to processing

• Withdraw consent at any time

• Lodge a complaint with the Information Commissioner’s Office (ICO)

Requests can be made by contacting us using the details above. We do not usually
charge a fee for Subject Access Requests.

​

10. Cookies and IP Addresses

Our website uses cookies to enhance user experience and monitor website
performance. Please refer to our Cookie Policy for further information.

​

11. Subject Access Requests (SAR)

​

Individuals have the right to request access to the personal data we hold about them. This is commonly referred to as a Subject Access Request.

​

A Subject Access Request enables you to obtain:

​

• Confirmation that we are processing your personal data

• A copy of your personal data

• Information about how and why your data is used

• Information about data retention periods

• Details of your rights in relation to your personal data

​​

Requests should be submitted in writing using the contact details provided in this Privacy Policy. To protect personal data, we may request information to verify identity before releasing information.

​

We will respond to requests within the timeframes required under applicable data protection legislation. In most cases, requests are provided free of charge; however, a reasonable administrative fee may be charged where requests are manifestly unfounded or excessive, or where additional copies are requested.

​

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always
be available on our website.

​

If you have any questions about this Privacy Policy or data protection enquiries,
please contact info@lenirahealth.co.uk.