Privacy Policy

RDW Blood Test is an independent health education website providing clinically reviewed information about the Red Cell Distribution Width (RDW) blood test and related haematological markers. We are the data controller responsible for any personal information collected through this website.

Website: rdwbloodtest.co.uk

Registered Address: 27 Layard Road, Drummond Road, London SE16 2JE, United Kingdom

Contact Email: info@rdwbloodtest.co.uk

As the data controller, we determine the purposes and means by which your personal data is processed. We take our responsibilities under UK GDPR seriously and are committed to ensuring that all data collection and processing on this website is lawful, fair, and transparent.

We collect only the information necessary to operate this website effectively and to respond to your enquiries. The categories of data we may collect include:

• Contact Form Data: When you submit an enquiry through our contact form, we collect your first name, last name, email address, optional phone number, selected subject, and the content of your message.
• Technical Data: We automatically collect certain technical information when you visit our website, including your IP address, browser type and version, operating system, referring URL, pages visited, time and date of visit, and time spent on each page. This data is collected through analytics tools such as Google Analytics.
• Cookie Data: We use cookies and similar tracking technologies to enhance your browsing experience and analyse site usage. Please see our Cookies section below for full details.
• Email Correspondence: If you contact us directly by email, we retain a record of your correspondence including your email address and any personal information you choose to include in your message.

We use the personal data we collect strictly for the following purposes:

• To respond to your enquiries: When you contact us via the contact form or by email, we use your contact details and message content solely to provide you with a timely and relevant response.
• To improve our website: Technical and analytical data helps us understand how visitors use our site, which pages are most helpful, and where we can improve content quality, navigation, and performance.
• To ensure website security: IP addresses and technical data help us detect and prevent fraudulent activity, malicious attacks, and unauthorised access attempts.
• To comply with legal obligations: We may be required to process or retain certain data to comply with applicable UK law, court orders, or regulatory requirements.

We do not use your personal data for automated decision-making or profiling. We do not send unsolicited marketing emails. We do not sell, rent, or trade your personal information to any third party under any circumstances.

Under UK GDPR, we must have a lawful basis for processing your personal data. The legal bases we rely on are:

Cookies are small text files placed on your device when you visit our website. We use the following categories of cookies:

You can control and manage cookies through your browser settings at any time. Disabling certain cookies may affect the functionality of some parts of our website. You may also withdraw your consent for analytics cookies at any time by adjusting your preferences via our cookie consent tool.

For more information about cookies and how to manage them, visit allaboutcookies.org.

We work with a limited number of trusted third-party service providers who may process your data on our behalf. All third-party processors are bound by data processing agreements and are required to handle your data securely and in accordance with UK GDPR.

• Google Analytics (Google LLC): We use Google Analytics to collect anonymised data about website traffic and user behaviour. Google may transfer data to servers outside the UK. We have enabled IP anonymisation to minimise data collection. Google's Privacy Policy applies: policies.google.com/privacy
• WordPress (Automattic Inc.): Our website is hosted on the WordPress platform. Automattic processes certain technical data in the course of hosting our site. Their Privacy Policy applies: automattic.com/privacy
• Email Service Provider: Contact form submissions and direct email correspondence may be handled through our email service provider. We select providers that comply with UK GDPR data processing requirements.
• Google Maps: Our Contact page embeds a Google Maps iframe to display our office location. When this map loads, Google may collect certain technical data from your device. Google's Privacy Policy governs this: policies.google.com/privacy

We do not share your personal data with any third party for marketing, advertising, or commercial purposes. We will never sell your data.

We retain your personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. Our standard retention periods are as follows:

After the applicable retention period expires, data is securely deleted or anonymised so that it can no longer be associated with any individual.

Under UK GDPR, you have the following rights in relation to your personal data. You may exercise any of these rights at any time by contacting us using the details at the bottom of this page:

• Right of Access (Article 15): You have the right to request a copy of the personal data we hold about you, along with information about how it is processed. We will respond within one calendar month.
• Right to Rectification (Article 16): If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure (Article 17): Also known as the right to be forgotten. You may request that we delete your personal data where there is no compelling reason for us to continue processing it, subject to any legal obligations we have to retain it.
• Right to Restrict Processing (Article 18): You have the right to request that we limit how we use your data in certain circumstances, for example while a dispute about accuracy is being resolved.
• Right to Data Portability (Article 20): Where processing is based on your consent or a contract, you have the right to receive your data in a structured, commonly used, machine-readable format.
• Right to Object (Article 21): You have the right to object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, such as analytics cookies, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Our website is intended for use by adults seeking general health education information. We do not knowingly collect personal data from children under the age of 13. If we become aware that a child under 13 has submitted personal data through our contact form, we will delete that data as promptly as possible.

If you are a parent or guardian and believe that your child has provided personal information to us without your consent, please contact us immediately at info@rdwbloodtest.co.uk and we will take prompt action to remove the data.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website following any updates constitutes your acceptance of the revised policy. If we make changes that significantly affect your rights, we will make reasonable efforts to notify you directly where possible.

Archived versions of previous policies are available upon request by emailing info@rdwbloodtest.co.uk.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact us using any of the following methods. We will respond to all data protection enquiries within one calendar month in accordance with our obligations under UK GDPR.