Privacy Policy

Last updated: 30 July 2026

1. Who We Are

HealthLens ("we", "our", "us") operates the website at telehealthlens.com. We provide an AI-assisted health report interpretation service designed to help patients and individuals better understand their medical test results and health data.

For privacy-related enquiries, please contact us at: privacy@telehealthlens.com

2. Information We Collect

We collect different types of information depending on how you use our service:

• Health data you enter: Blood test results, imaging report text, and other health information you provide to receive an AI interpretation. This data is processed entirely client-side (in your browser) and is not transmitted to or stored on our servers.
• Contact information: If you contact us via our contact form, we collect your name and email address so we can respond to your enquiry.
• Payment information: When you make a payment for our premium features, your payment is processed by Stripe. We do not store your card details. Stripe's privacy policy applies to payment processing.
• Technical data: We may collect standard web server logs including your IP address, browser type, pages visited, and timestamps. This is collected automatically and used for security and service improvement.
• Cookies: We use cookies to maintain your session and remember your preferences. See Section 6 for details.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and operate the HealthLens service, including AI-assisted health report interpretation
• To process payments securely via our payment processor, Stripe
• To respond to your enquiries and provide customer support
• To improve and maintain the performance and security of our website
• To comply with legal obligations
• To detect and prevent fraud or misuse of our service

We do not use your health data for advertising purposes, and we do not sell your personal data to third parties.

4. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we rely on the following legal bases to process your personal data:

• Contractual necessity: Processing needed to provide the service you have requested, including payment processing.
• Legitimate interests: Processing for fraud prevention, security, and service improvement, where this does not override your fundamental rights.
• Consent: Where you have given explicit consent, such as optional email communications.
• Legal obligation: Where we are required to process data to comply with applicable law.

5. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy:

• Health data: Not retained on our servers. Analysis history you choose to save is stored locally in your browser's storage (localStorage) and is never transmitted to us.
• Contact enquiries: Retained for up to 2 years to allow us to respond to follow-up questions.
• Payment records: Retained for 7 years as required by UK financial regulations.
• Technical logs: Retained for up to 90 days for security purposes.

6. Cookies

Cookies are small text files stored on your device. We use the following types of cookies:

• Essential cookies: Required for the service to function, including session management. These cannot be disabled.
• Analytics cookies: We may use anonymised analytics to understand how users interact with our service. You can opt out of these.
• Payment cookies: Set by Stripe to facilitate secure payment processing.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our service.

7. Third-Party Services

We use the following third-party services that may process your data:

• Stripe: Payment processing. Stripe's Privacy Policy applies.
• Netlify: Website hosting and infrastructure. Netlify's Privacy Policy applies.
• OpenAI / AI providers: Our AI interpretation service may route anonymised health data through AI APIs. No personally identifiable information is included in these requests.

8. Your Rights Under UK GDPR

If you are based in the UK, you have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate data.
• Right to erasure: You may request deletion of your personal data where we have no legitimate reason to continue holding it.
• Right to restriction: You may request that we restrict processing of your data in certain circumstances.
• Right to data portability: You may request your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests.

To exercise any of these rights, please contact us at privacy@telehealthlens.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• HTTPS encryption for all data in transit
• No server-side storage of health data
• Regular security reviews
• Access controls limiting who can access any personal data we hold

10. Children's Privacy

Our service is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you become aware that a child has provided us with personal data, please contact us and we will take steps to delete such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the updated policy on this page with a new "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@telehealthlens.com
• Website: telehealthlens.com/contact