Privacy policy.

Who this notice is about

This notice covers the BloodPanel website and blood test guide. The legal name, address and privacy contact of the business responsible for your information will be added before public launch. It does not cover the independent providers linked from this website.

What you share

The guide receives the messages you send, including any test names, reasons for your search and location you choose to provide. Each new message gives the server the context it needs to follow the conversation and find relevant listings. For a saved chat, the server retrieves the earlier messages from your account.

A town is enough to start. You do not need to provide your name, date of birth, full address, payment details or medical records. Health information is sensitive, so share only what is needed for your search and avoid identifying information about yourself or someone else.

How the guide uses it

Your messages and location are used to understand your search, match published listings and generate a reply. Matching is automated; it does not diagnose you, determine your eligibility for care or make a booking. You choose whether to contact a provider.

The guide supports an optional AI reply service through Khimba. When enabled, it receives the conversation and matching context, including location and test preferences. The live service providers, their retention periods and any processing outside the EEA still need to be confirmed for launch.

Chat history, cookies and technical data

Guest and private chats stay in the open page’s memory. When you choose to save, we temporarily store a snapshot so switching to WhatsApp or reloading the page does not lose your conversation. That temporary snapshot expires after 90 minutes. Cancelling the save removes it sooner. Starting a new chat does not erase requests already processed or infrastructure logs.

When accounts are available, you can save a chat by sending a prepared sentence to our WhatsApp number and approving access for your browser. Saving requires your agreement to store conversations, including any health information they contain. We store messages, example listings, search location and dates in a private database linked to your account. New conversations save automatically while you are signed in. Choose “New private chat” when you do not want a conversation saved.

Saved chats have no automatic expiry. You can delete individual chats from “My chats” or delete your account and its conversations. Deletion removes the corresponding records from the application database. Infrastructure logs and backups have separate retention arrangements that still need to be confirmed before launch.

We use Meta’s WhatsApp Business Platform to receive your unique phrase and browser approval. Meta processes those messages and your WhatsApp identity under its own terms. We use that identity to connect your account; the prepared and approval messages do not contain your blood test conversation. Authentication details are not sent to the guide’s AI service. First-party cookies identify your anonymous browser and keep you signed in, subject to expiry and your browser settings. Local storage contains only preferences and conversation identifiers, never conversation text or authentication credentials.

Signing out clears the remembered conversation identifier and the conversation displayed on the page. Clearing browser storage does not delete chats saved in your account. Use “My chats” to delete them.

This version has no advertising or analytics tracking added by BloodPanel. Servers and hosting services may process technical request data, such as an IP address, browser information and request time. The production logging and retention arrangements have not yet been confirmed, so this draft does not promise immediate deletion or a fixed retention period.

When you visit a provider

BloodPanel does not send your conversation to a clinic to make a booking. Following a provider link opens a separate website. Any information you give there, including booking details, payment or test results, is handled under that provider’s own privacy notice.

The basis for processing

Saving a chat is a separate choice, with an explicit request for permission to store any health information in it. You can withdraw that choice by deleting the saved chat. Sending a guest message does not give permission for wider use of your information.

Before public launch, the business must confirm and explain the legal basis for each purpose, including account verification, the guest guide and the additional condition required for health information. The arrangements for Meta’s WhatsApp Business Platform and Cloudflare, processing regions and any international-transfer safeguards must also be confirmed.

Your rights and questions

Depending on the circumstances, you can ask to access, correct or erase your personal data, restrict or object to its use, or receive a portable copy. Where processing relies on consent, you can withdraw it. The contact route for these requests will be added with the confirmed business details.

You can also raise a concern with Ireland’s Data Protection Commission. Read more about the information a privacy notice should provide in the DPC’s transparency guidance.

See our Terms of use for how the guide and provider links work.