Privacy policy

Last updated: 27 August 2026

Myometrix Ltd, trading as Telomyx, is the controller of personal information collected through www.telomyx.co.uk, book.telomyx.co.uk and the health services we provide. Our registered office is 12 Old Library House, High Street, Frodsham, WA6 7DP. You can contact us at info@telomyx.co.uk.

Information we collect

When you browse our public website, we may collect limited device, public-page, referral, campaign and interaction information in accordance with your privacy choices. When you book, we collect the identity, contact, address, appointment, payment-status and screening information needed to provide the service. Payment-card details are collected by Stripe and are not stored by Telomyx.

Medical questionnaires, clinical documents, test records and results are health data and receive additional protection. They are held in our protected booking and clinical systems. They are never sent to Google Analytics or Google Ads and are not used for advertising.

Why we use information and our lawful bases

• Contract, UK GDPR Article 6(1)(b): to take payment, make and administer your booking, send service communications, and provide what you have purchased.
• Legal obligation, Article 6(1)(c): to maintain records and documents required for regulated clinical and radiation services, tax, accounting and other legal duties.
• Legitimate interests, Article 6(1)(f): to secure, troubleshoot and improve our services, prevent fraud and double-booking, and run the business effectively. We balance these interests against your rights.
• Consent, Article 6(1)(a): for optional analytics and advertising measurement cookies or similar access technologies. You can withdraw this at any time.

For health information, our additional condition is Article 9(2)(h), provision of health care or medical diagnosis under the responsibility of a health professional, together with the health or social care condition in Part 1 of Schedule 1 to the Data Protection Act 2018.

Identity, appointment and relevant screening information is necessary to enter into and perform the booking contract and to provide testing safely. If you do not provide it, we may not be able to accept or deliver a booking. Analytics and advertising measurement are optional and refusing them does not affect your ability to use the service.

Analytics and advertising measurement

We use Google Analytics 4 and Google Ads Consent Mode on public marketing and non-token booking journeys. Google tags start with analytics and advertising storage denied. Before you choose, Google may receive cookieless signals for aggregate reporting and modelling. These may include the public page URL after query parameters have been removed, timestamp, browser and device information, approximate location derived from the network request, referrer, consent state, a per-page random number and an indication that an advertising click occurred. Google states that it does not store or log IP addresses in Google Analytics.

If you allow analytics, we measure public pages and deliberately selected booking steps. If you also allow advertising measurement, we use advertising click information to attribute bookings. Advertising personalisation, remarketing, Google Signals and enhanced conversions are disabled. We do not send Google your name, email, phone number, address, date of birth, postcode, screening answers, exact appointment time, booking reference, Stripe session identifier, package-access token, questionnaire token or clinical information. Confirmation, manage-booking, package-access, questionnaire, authentication, patient and admin routes are excluded from Google tags.

Who receives information

Our principal processors include Cloudflare for public website delivery and security; Vercel for the booking application; Supabase for the booking database, authentication and private document storage; Stripe for payment and fraud prevention; Resend for transactional email; Semble for clinical administration and questionnaires; postcodes.io for postcode lookup; and Google for consent-aware analytics and advertising measurement. Professional advisers, regulators, public authorities or a purchaser of the business may also receive information where lawfully necessary.

International transfers

Some suppliers may process information outside the UK. Where UK adequacy regulations do not cover a transfer, we require an appropriate transfer mechanism, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with appropriate technical and organisational safeguards.

Retention

We keep booking, financial and clinical records only for the periods needed for the purposes above, our professional obligations and legal claims. Different records have different statutory and clinical periods. Google Analytics event data and the pseudonymous booking-attribution record are retained for up to 14 months. Your preference cookie is kept for up to six months, and the pseudonymous consent receipt used to demonstrate the choice is retained for up to three years.

Security

We use access controls, encryption in transit, UK-region infrastructure where available, audit trails and data minimisation appropriate to the sensitivity of the information. No system is completely secure, but access to health and identity data is limited to people and processors who need it for their role.

Your rights

Depending on the circumstances, you may ask for access, correction, erasure, restriction or portability, object to processing based on legitimate interests, and withdraw consent. Some rights are limited where we must retain clinical, regulatory, financial or legal records. We may need to verify your identity before acting on a request. Contact info@telomyx.co.uk. You may also complain to the UK Information Commissioner's Office at ico.org.uk.

Children

Online booking is for adults aged 18 and over. We do not knowingly provide the online booking service to children.

Changes

We may update this notice when our services, suppliers or legal duties change. We will publish the current version here and change the date above.