Privacy Policy

1. Introduction

Praetor Health Limited, trading as PRÆTOR Health ("we", "us", "our"), is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our blood testing and health analytics platform.

We are the data controller for the personal data we process, and we are registered with the Information Commissioner's Office (ICO). For any questions about this policy, please contact us at [email protected].

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address and contact details when you create an account. Your password is handled by our sign-in provider, Auth0, and we never see it.
• Profile Information: Title, date of birth, biological sex, phone number and delivery address.
• Health Data: Blood test results, biomarker data, health history, and any information you voluntarily provide about your health goals.
• Payment Information: Billing address and payment card details (processed securely via Stripe).
• Communications: Any correspondence you send to us, including support requests.
• Questions you ask Praetor: What you type into Ask Praetor, the AI assistant on our homepage and shop, and the answers it gives you. If you are signed in, we also save these conversations with your account and, if AI Health Analysis is on, a summary of them (see sections 4 and 8).

2.2 Information We Collect Automatically

• Usage Data: Pages visited, features used, time spent on the platform, and interaction patterns.
• Device Information: Browser type, operating system, device identifiers, and IP address.
• Cookies: We use essential and optional cookies as described in our Cookie Policy.

2.3 Information from Third Parties

• Laboratory Partners: Blood test results from our UKAS-accredited laboratory partners.
• Authentication Providers: Basic profile information if you sign in using a third-party provider.
• ChatGPT App Requests: If you choose to use the Praetor app in ChatGPT, we receive the product-search wording and filters that ChatGPT passes to the app, together with limited technical request data. This can include a health goal, symptom, named condition or biomarker. We use this text transiently to match public catalogue information. We do not add it to your Praetor account or health records, or record tool arguments in our application logs. This app does not connect to your Praetor account or receive your orders, test results, reports or profile information.
• Claude Connector Requests: If you choose to use the Praetor connector in Claude, we receive the product-search wording and filters that Claude passes to the connector, together with limited technical request data. This can include a health goal, symptom, named condition or biomarker. We use this text transiently to match public catalogue information. We do not add it to your Praetor account or health records, or record tool arguments in our application logs. This connector does not connect to your Praetor account or receive your orders, test results, reports or profile information.

Your use of ChatGPT or Claude is also governed by OpenAI's or Anthropic's own terms and privacy policy. Please do not include names, contact details, personal test results or other information that identifies you. These apps can match public catalogue information to a health concern, but they cannot diagnose, interpret personal results, recommend medication or treatment, determine medical suitability or replace urgent care.

4. How We Use Your Information

We use your personal data for the following purposes:

5. Legal Basis for Processing

Under UK GDPR, we process your data on the following bases:

6. Who We Share Your Data With

We may share your personal data with:

• Laboratory Partner: Inuvi, our UKAS-accredited laboratory partner, receives your name, title, sex, date of birth, email address, mobile number and address so it can post your kit, arrange any nurse visit and analyse your sample. Inuvi may send some tests to another UKAS-accredited laboratory.
• Clinic Partner: If you book a clinic appointment, Goodbody Clinic receives your name, date of birth, email address and phone number to book and manage it.
• Payment Processors: Stripe processes your payment information securely.
• Cloud Service Providers: Microsoft Azure hosts our platform and stores your data within the UK/EEA. Our AI features use Microsoft's Azure OpenAI service, which processes your data within Microsoft's EU Data Boundary (the EU and EFTA countries). That covers your results if you turn on AI Health Analysis, the questions you ask Praetor and the summaries of your conversations. If you turn on AI Health Analysis and upload a lab report, Microsoft's Document Intelligence service reads the text in it in the UK (UK South) before AI extracts your results. Cloudflare protects and delivers our website, so the information sent between your browser and our website passes through it.
• Authentication Services: Auth0 manages secure account authentication.
• Review Platform: Trustpilot processes your first name, email address and an order reference on our behalf so it can send a review invitation. We do not share your health results, test names or appointment details with Trustpilot. Trustpilot may retain invitation data for up to two years unless we request earlier deletion.
• Advertising Partners: Meta and Google Ads receive limited advertising measurement events only if you accept marketing cookies. Google Ads purchase events contain the amount paid, currency and an opaque transaction identifier. We do not send test names, health results or customer contact details to Google Ads. We never share health results or account details with Meta.
• Professional Advisors: Lawyers, accountants, or auditors when required.
• Law Enforcement: When legally required or to protect our legal rights.

We do not sell your personal data to third parties. All data processors we use are bound by contractual obligations to protect your data.

7. International Data Transfers

Your data is primarily stored and processed within the United Kingdom and European Economic Area. Where data is transferred outside these regions, we use a valid UK transfer mechanism as appropriate, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for more information about these safeguards.

8. How Long We Keep Your Data

We retain your personal data for as long as necessary to:

• Provide you with our services while your account is active
• Comply with legal obligations (e.g., financial records for 7 years)
• Resolve disputes and enforce our agreements

Health data is retained for 10 years from your last test to enable longitudinal health tracking, unless you request earlier deletion. When you ask us to delete your account, we wait 30 days in case you change your mind, then anonymise or delete your personal data, except where retention is legally required.

If you are signed in, each Ask Praetor conversation is deleted automatically 12 months after its last message, and a new message in that conversation restarts the 12 months. The summary we keep of your conversations is limited in size: it holds about your 20 most recent conversation summaries, with older ones condensed or removed. It is deleted after 2 years with no activity on your account, such as signing in to our website or app, chatting with Praetor, placing an order or its progress at the lab, results arriving, saving a report, uploading results, changing your profile or basket, or opening your dashboard with AI Health Analysis on. Both are also deleted when you delete your account, after the 30-day wait described above, and you can ask us to delete them sooner. Deleted conversations and summaries can remain in our encrypted backups for up to 30 days. Download my data includes them and shows the date each conversation is due to be deleted. If you are not signed in, we do not store your questions or Praetor's answers. To limit how often the assistant can be used, we keep a scrambled (hashed) form of your IP address and a random session identifier for up to two days. Our technical logs record details of each request, such as its timing and, if a usage limit is reached, a hashed IP address and browser type, but not what you typed. They are kept for 30 days.

9. Your Rights

Under UK GDPR, you have the following rights:

To exercise any of these rights, please contact us at [email protected]. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Download my data, on your Profile page, includes your saved Ask Praetor conversations and the summary we keep of them. You cannot yet delete them yourself in your account. To have them deleted without closing your account, email us at [email protected]. Turning off AI Health Analysis stops new conversations being added to that summary and stops the summary being used, but does not delete what is already there. Conversations you have with Ask Praetor while signed in are still saved.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit (TLS 1.2 or higher) and at rest (AES-256)
• Secure sign-in through Auth0, our authentication provider
• Regular security reviews of our code and systems, including testing with specialist AI security tools
• Access controls limiting data access to authorised personnel

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately, and we will take steps to delete such information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our platform or sending you an email. The "Last updated" date at the top of this policy indicates when it was last revised.