How we handle information.

AK-LABS is currently a pre-launch trading project. The full legal name, company number, registered office and data-protection contact of the organisation acting as controller will be published here before the website collects booking, payment or clinical information.

Until then, questions about this website or an email you have sent can be directed to clinic@ak-labs.co.uk. This draft is not intended to conceal the controller’s identity; that identity is a launch requirement.

• Email enquiries and registrations: your name, email address and anything you choose to include in your message.
• Staff identity and access: for authorised staff, the secure identity provider supplies an email address and may supply a display name. AK-LABS stores the assigned role, account status, invitation and activation times, and minimal access/audit events needed to control the training workspace.
• Technical and security information: the hosting and identity providers may process limited device, browser, IP-address, time and request information needed to deliver, authenticate and protect the website. The final processor and retention details are being verified.
• No clinical intake: the public website does not currently ask for symptoms, medicines, medical history, samples or test results.

Please do not send health information through ordinary email. Health information is special-category personal data and requires additional protection.

• To reply to a question or take steps you request before a possible service.
• To record and manage a request for launch information.
• To authenticate authorised staff, apply job-role permissions, suspend access and maintain an auditable training environment.
• To operate, secure, troubleshoot and protect the website and mailbox.
• To establish, exercise or defend legal claims and comply with legal obligations where necessary.

The final notice will state the precise Article 6 lawful basis for each purpose. If AK-LABS later processes health information, it will also identify and document an appropriate Article 9 condition before processing begins.

AK-LABS will send launch updates to an individual only where there is valid permission or another lawful route under the applicable electronic-marketing rules. A request to join the launch list is voluntary. You can withdraw it at any time by emailing the clinic address. Health information will not be used to build advertising audiences or personalise marketing without an appropriate lawful basis and special-category condition.

At the pre-launch stage, information may be handled by the organisations providing website hosting, email, cyber security and professional advice. AK-LABS does not sell personal information. Before clinical services open, the notice will identify or meaningfully describe all relevant categories, which are expected to include the booking/payment provider, clinic team, clinician, laboratory, courier where applicable, secure-results provider and professional advisers.

Information will be disclosed to public authorities or regulators only where required or permitted by law.

The location of every final service provider is still being verified. If information is transferred outside the UK, the final notice will identify the destination and the lawful transfer mechanism or safeguard, together with how to obtain further information.

AK-LABS will keep information only for as long as needed for the stated purpose, clinical and professional record-keeping, regulatory requirements, dispute resolution and legal obligations. Staff access is suspended when no longer required; the minimum identity information needed to interpret security and audit events may be retained under the approved schedule. The final retention schedule will give meaningful periods or decision criteria for enquiries, marketing permissions, staff access records, booking records, clinical records, results, payment records and complaints. Unnecessary pre-launch emails will be deleted under that schedule.

AK-LABS will use proportionate organisational and technical safeguards, access controls, confidentiality obligations and vetted processors. No internet or email system can be guaranteed completely secure. The clinical service will not open until secure collection, booking and results routes have been confirmed and tested.

Depending on the purpose and lawful basis, you may have rights to be informed, access a copy, correct inaccurate information, request erasure or restriction, object to processing and receive eligible information in a portable format. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. No solely automated decision with legal or similarly significant effect is currently made through this website.

To make a request, email clinic@ak-labs.co.uk. Identity may need to be verified before information is disclosed.

Please contact AK-LABS first so the concern can be investigated. You also have the right to complain to the Information Commissioner’s Office. Visit ico.org.uk/make-a-complaint for current contact routes.

The planned service is for adults aged 18 and over. This website is not intended to collect information from children. Contact AK-LABS if you believe a child has provided information through the pre-launch email route.

This notice will be reviewed as the operating model, legal entity, clinic, laboratory and technology providers are confirmed. Material new uses of information will be explained before they begin. The current review date will remain visible at the top of the page.