Privacy & Data

Privacy & Cookies Policy

My Blood Test is a service of The Vesey. This policy explains how we collect, use and protect your personal and health data.

Who we are

My Blood Test is a service of The Vesey Private Hospital Ltd ("The Vesey"), a CQC-registered private clinic in Sutton Coldfield. The Vesey is registered in England and Wales and is the data controller for the personal and health data collected through this website and your blood-test appointment. ICO data-controller registration: ZB342995.

Contact the data controller at hello@thevesey.co.uk or 0121 387 3727.

What data we collect and why

When you book a blood test we collect your name, date of birth, email address, phone number and the relevant health information needed to provide your test. We use this data to:

  • Deliver your blood-test appointment and clinical review of your results
  • Communicate with you about your appointment and results
  • Process payment via Stripe (PCI-DSS compliant)
  • Issue invoices where applicable
  • Maintain clinical records as required by CQC regulation

We do not sell your data to third parties. Health data is processed under Article 9(2)(h) of the UK GDPR — processing necessary for the provision of healthcare.

Cookies

This website uses cookies for analytics, session management and improving your experience. Third-party services we rely on — for example Stripe (payments), the booking engine, and email/analytics providers — each operate under their own privacy policy. You can manage cookie preferences in your browser settings.

Your rights

Under the UK GDPR you have the right to access your personal data, correct inaccuracies, request erasure (subject to legal retention requirements), restrict processing, and data portability. To exercise these rights, contact hello@thevesey.co.uk.

If you are unhappy with how we have used your information you can complain to us directly. You can also complain to the Information Commissioner's Office (ICO) at any time at ico.org.uk; you do not have to complain to us first.

Data retention

Clinical records are retained for a minimum of 7 years from last contact in line with NHS and CQC guidance. Payment records are retained for 7 years for tax purposes. Marketing data is retained until you unsubscribe or request deletion.

Contact

For any privacy queries: hello@thevesey.co.uk · 0121 387 3727

Last updated: July 2026.