Your rights under the General Data Protection Regulation.
Last updated: September 2026
heath-lumen is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take your privacy seriously and have implemented measures to ensure your personal data is handled lawfully, fairly, and transparently.
heath-lumen acts as the data controller for personal information collected through our website and service operations. This means we determine the purposes and means of processing your personal data.
Contact details:
heath-lumen
47 Granby Street
Leicester, LE1 6EJ
Email: [email protected]
The UK GDPR provides you with certain rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request.
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
In certain circumstances, you have the right to request that we delete your personal data. This applies when the data is no longer necessary for the purpose it was collected, or when you withdraw consent.
You may request that we limit how we use your personal data in certain situations, such as when you contest the accuracy of the data or object to our processing.
Where technically feasible, you have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we have compelling legitimate grounds.
We do not use automated decision-making or profiling that produces legal effects or significantly affects you.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex or we receive numerous requests, we may extend this period by a further two months, but we will inform you of any extension within the first month.
We may need to verify your identity before processing your request to protect your data from unauthorised access.
We process personal data under the following lawful bases:
We primarily store and process data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and inform affected individuals without undue delay.
If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
We may update this GDPR notice from time to time to reflect changes in our practices or legal requirements. We encourage you to review this page periodically.
This document provides general information about GDPR compliance and does not constitute legal advice. If you have specific concerns about data protection, please contact us directly.