Privacy notice · Last updated 11 September 2026

Privacy & blood-test data.

Beaches Health is operated by Beaches Health Ltd for the secure review and communication of blood-test results. Blood-test information is health data and is treated as sensitive personal information.

Our approach

Only use health data for the service you asked us to provide.

Beaches Health does not sell health data and does not use blood-test information for advertising, behavioural marketing or automated clinical decision-making. AI features are optional and require explicit permission.

What we collect

Account & identity

Name, email address and, where provided, date of birth and telephone number so we can identify you and match you to the correct clinical record.

Blood-test information

Uploaded laboratory reports, biomarker values, units, laboratory reference intervals, test dates, clinician comments, follow-up information, release status and related audit records.

Practitioner activity

For authorised practitioner accounts, Beaches Health records review, verification and release actions so clinically important changes are attributable and auditable.

Optional AI activity

If explicit AI-processing permission is given, relevant blood-test information may be processed to assist PDF extraction, factual trend summaries and plain-language explanations.

AI & third-party processing

AI is assistive and optional.

The app is hosted and operated using Base44. When AI features are enabled with explicit permission, relevant data may be processed through Base44 and its AI subprocessors, currently including OpenAI and Anthropic for large-language-model calls. Base44 also uses infrastructure subprocessors for hosting, databases, email delivery, logging and service operation. Base44 publishes its current subprocessor list and security information on its website.

AI output is clearly presented as AI-assisted or AI-generated. AI does not verify laboratory values, determine clinical urgency, diagnose a condition, prescribe treatment or release a result. A qualified practitioner remains responsible for clinical verification and any clinician-approved patient summary.

You may decline or withdraw AI-processing permission without losing access to your clinician-reviewed blood-test results. Withdrawing permission stops future AI processing through Beaches Health.

View Base44 security & subprocessors

Access & security

Health data is available only through authenticated, role-separated patient and practitioner pathways. Patient accounts receive only their own released results. Practitioner access is limited to authorised clinic relationships and server-side permission checks.

International processing

Base44 and its subprocessors may process data outside the UK. Where required, Base44 states that it uses recognised safeguards for international transfers, including approved contractual transfer mechanisms.

HealthKit & iCloud

The current Beaches Health app does not read health data from Apple HealthKit and does not store personal health information in iCloud. If this changes, this notice and the App Store privacy disclosures will be updated before release.

Medical information

Beaches Health supports understanding of clinician-reviewed information and is not a substitute for professional medical advice. Patients should speak with their clinician or GP before making medical decisions based on results.

Retention, deletion & your choices

You can control optional processing and request deletion.

Account information is kept while needed to provide Beaches Health and to meet applicable legal, regulatory and clinical-governance obligations. Blood-test and related clinical records may need to be retained according to applicable law, professional obligations and the clinic’s clinical-record retention requirements.

Patients can withdraw optional AI-processing permission from the Account or AI Guide screens. This does not delete clinician-reviewed results; it prevents future AI processing through the app.

Patients can initiate account deletion inside the Account screen. We aim to process deletion requests within 30 days. Where a clinical record must lawfully or professionally be retained, we will explain what is retained and why; account-only data that is no longer required will be deleted.

You may also ask about access, correction, restriction, portability or other applicable data-protection rights by contacting Beaches Health.

Account deletion is available in-app

Sign in, open Account, and choose Request account deletion. Healthcare records that must be retained for legal or professional reasons may be handled separately from deletion of the app account.

Contact

Beaches Health Ltd

For privacy, support, access or deletion questions, contact info@beacheschiro.co.uk or call 01639 888822.