Privacy policy
How Skyline Vitality collects, uses and protects your personal data, including your health data.
Who we are
This policy explains how Skyline Vitality Ltd (company number 17457338, registered office 8 Ambleside Road, Middlesbrough TS6 0DY) collects, uses and protects your personal data when you use skylinevitality.com, buy a blood test or coaching, or contact us. We are the data controller for the personal data described here and are registered with the Information Commissioner's Office, registration number ZC280840. You can reach us through the contact page or by writing to our registered office.
What we collect
- Identity and contact details: your name, email address, phone number, postal address and postcode (used to route your appointment and post kits).
- Order and payment records: what you bought, when, and the payment reference. Card details go directly to our payment provider and are never stored by us.
- Booking details: your chosen collection route, clinic or home-visit appointment, and any access notes you give us.
- Health data: when you buy a test, the sample reference, your laboratory results and the report we prepare from them, and your date of birth and sex, which the laboratory needs to analyse the sample. Health data is special category data under UK GDPR.
- Account and usage data: your sign-in details, the pages you visit and the device you use, as described in our cookie policy.
- Anything you send us in a message or a coaching questionnaire.
Why we use it and our lawful basis
- To take your order, arrange your appointment, send your kit and deliver your results: performance of our contract with you.
- To process your health data: your explicit consent, which you give at checkout and can withdraw at any time by asking us to delete your results.
- To send service messages about your order, booking and results by email and text: performance of our contract.
- To keep accounting records and respond to legal requests: our legal obligations.
- To run and protect the website, prevent fraud and understand how the site is used: our legitimate interests, balanced against your rights.
- To send marketing emails: only with your consent, and you can unsubscribe from every message.
We never use your results for marketing, never sell personal data and never share health data with advertising or analytics tools.
Who we share it with
- Nationwide Pathology, the UKAS accredited laboratory that analyses your sample. They receive your name, date of birth, sex, contact details and the tests ordered, and they hold your results under their own privacy policy.
- The phlebotomist or clinic that takes your sample, who receive your name, contact details and appointment.
- Stripe, which processes your payment.
- Astrocart, the platform our website runs on, which hosts our data on Google Cloud servers in London and processes it only on our instructions.
- Our email and text message providers, which deliver service messages on our behalf.
- A coach, only if you choose to share your results with coaching.
- Professional advisers, insurers and authorities where the law requires it.
Every provider is bound by contract to protect your data. We do not transfer your health data outside the United Kingdom.
How long we keep it
We keep your account, order and results records while your account is open and for as long as we need them to meet our legal, accounting and insurance obligations. You can ask us to delete your results and close your account at any time, and we will do so unless the law requires us to keep a record. Messages you send us are kept for as long as needed to deal with them.
How we protect it
Your data is held encrypted on servers in the United Kingdom, access is limited to the people who need it to run the service, and results are only shown to you after you sign in. Our platform provider keeps the systems patched, monitored and backed up.
Your rights
Under UK GDPR you can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, withdraw consent, and ask for your data in a portable format. Contact us through the contact page or in writing at our registered office and we will respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113, quoting our registration number ZC280840.
Changes to this policy
We will update this page when our practices change and show the date of the latest version here. This version is dated 21 October 2026.