Privacy Policy

1. Who We Are

Tests.ac (“we”, “us”, “our”) operates the website located at tests.ac (the “Site”). The Site is an educational, non-commercial laboratory reference resource providing general information about blood tests, reference ranges, and related laboratory data for educational purposes only.

For any privacy-related enquiries, please contact us at: admin@innovationsandmore.com

This Privacy Policy applies to all visitors to the Site, regardless of geographic location. We are committed to complying with applicable data protection law, including (but not limited to):

• The UK General Data Protection Regulation (UK GDPR) and the UK Data Protection Act 2018;
• The EU General Data Protection Regulation (Regulation 2016/679) (GDPR) where applicable;
• The California Consumer Privacy Act 2018 (CCPA) as amended by the California Privacy Rights Act 2020 (CPRA);
• Other applicable national and state privacy laws.

2. Information We Collect

We do not require users to register an account, submit personal details, or provide any directly identifying information in order to use the Site. However, certain technical and usage data is collected automatically when you visit the Site.

2.1 Automatically Collected Technical Data

When you access the Site, our servers and analytics tools may automatically record:

• Internet Protocol (IP) address — your device’s network address, used to approximate geographic region (country/region level only) and to maintain server security;
• Browser type and version — e.g., Chrome 124, Safari 17;
• Operating system and device type — e.g., Windows 11, iPhone iOS 17;
• Referring URL — the page or search engine that linked you to our Site;
• Pages viewed and navigation paths — which pages you visited and in what order;
• Date and time of access — timestamps of your visit;
• HTTP response codes — whether pages were successfully loaded.

2.2 Search and Interaction Data

If you use the Site’s search functionality, the search terms you enter (e.g., test names or abbreviations) may be recorded in server logs and, if analytics cookies are accepted, transmitted to our analytics provider. Search queries are treated as usage data and are not linked to individual identities.

2.3 Cookie Data

The Site uses cookies as described in our Cookie Policy. The categories of cookie data we may collect include your consent preferences, session data, and, where you have consented, aggregated analytics data. We do not use cookies for advertising or third-party tracking.

2.4 Data We Do Not Collect

We do not intentionally collect, and you should not submit, the following:

• Names, email addresses, or any other directly identifying personal information;
• Health or medical data, test results, or clinical information;
• Financial information of any kind;
• Special category personal data as defined under UK GDPR / GDPR Article 9;
• Data relating to children (see Section 9 — Age Restriction).

If you voluntarily contact us by email, we will receive the email address and content you provide. Such communications are used solely to respond to your enquiry and are not shared with third parties or used for marketing.

3. How and Why We Use Your Information

3.1 Essential Operations (Legitimate Interests / Legal Obligation)

• Delivering the Site and its content to your device;
• Maintaining server security, detecting and preventing abuse or malicious activity;
• Diagnosing technical errors and maintaining Site performance;
• Complying with legal obligations, including responding to lawful requests from authorities.

3.2 Analytics (Consent)

Where you have provided consent via our cookie banner, we may use analytics data to:

• Understand which content is most accessed and improve Site quality;
• Analyse aggregated search query trends to identify gaps in reference content;
• Monitor Site performance and user experience at a population level.

You may withdraw analytics consent at any time via the “Cookie Settings” link in the footer. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

3.3 Legal Basis Summary (UK GDPR / GDPR)

We rely on the following legal bases:

• Legitimate interests (Article 6(1)(f)) — for server log processing, security, and Site operation;
• Consent (Article 6(1)(a)) — for optional analytics and functional cookies;
• Legal obligation (Article 6(1)(c)) — where disclosure is required by law.

4. Cookies

We use cookies in accordance with your preferences. Please see our full Cookie Policy for a complete description of the cookies we use, their purpose, and duration. You can manage your cookie preferences at any time using the Cookie Settings panel.

5. Data Sharing and Disclosure

We do not sell, rent, trade, or otherwise transfer your personal data to third parties for commercial purposes. We may share data in the following limited circumstances only:

• Service providers: where analytics cookies are accepted, aggregated usage data may be processed by a third-party analytics provider acting as a data processor on our behalf and bound by appropriate data processing agreements;
• Legal compliance: where we are required to disclose data by applicable law, court order, regulatory requirement, or lawful request from a competent public authority;
• Protection of rights: where disclosure is necessary to protect our legal rights or the safety of the public.

We do not transfer personal data to advertising networks, data brokers, or any party for the purpose of profiling or targeted advertising.

6. International Data Transfers

The Site is accessible globally. If you access the Site from outside the United Kingdom or European Economic Area (EEA), your data may be processed in countries that do not provide the same level of data protection as your home jurisdiction.

Where we transfer personal data outside the UK or EEA, we take steps to ensure appropriate safeguards are in place as required by UK GDPR / GDPR, including the use of Standard Contractual Clauses (SCCs), adequacy decisions, or other approved transfer mechanisms.

7. Data Retention

Server access logs containing IP addresses and technical request data are retained for a maximum of 90 days for security and diagnostic purposes, after which they are permanently deleted or anonymised.

Consent records (your cookie preferences) are stored on your device via localStorage and a cookie for up to 365 days, after which you will be prompted to confirm your preferences again.

Email correspondence is retained only as long as reasonably necessary to respond to and resolve the relevant enquiry.

8. Your Privacy Rights

8.1 UK and EU Residents (UK GDPR / GDPR)

You have the following rights under UK GDPR and/or EU GDPR:

• Right of access — to request a copy of the personal data we hold about you (Article 15);
• Right to rectification — to request correction of inaccurate personal data (Article 16);
• Right to erasure (“right to be forgotten”) — to request deletion of your personal data where no lawful basis for retention applies (Article 17);
• Right to restriction — to request we restrict processing of your data in certain circumstances (Article 18);
• Right to data portability — where processing is based on consent or a contract, to receive your data in a structured, machine-readable format (Article 20);
• Right to object — to object to processing based on legitimate interests (Article 21);
• Right to withdraw consent — at any time, without affecting the lawfulness of prior processing;
• Right to lodge a complaint — with the UK Information Commissioner’s Office (ICO) at ico.org.uk, or with the relevant supervisory authority in your EU member state.

8.2 California Residents (CCPA / CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

• Right to know — to request disclosure of the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties with whom it has been shared;
• Right to delete — to request deletion of personal information we have collected from you, subject to applicable exceptions;
• Right to correct — to request correction of inaccurate personal information;
• Right to opt out of sale or sharing — we do not sell or share personal information for cross-context behavioural advertising purposes. No opt-out is required, but you may confirm this via our contact address;
• Right to limit use of sensitive personal information — we do not collect sensitive personal information as defined under the CPRA;
• Right to non-discrimination — you will not receive discriminatory treatment for exercising any CCPA/CPRA right.

To exercise any of the above rights, please contact us at admin@innovationsandmore.com. We will respond to verifiable requests within the timeframes required by applicable law (generally 30 days under GDPR; 45 days under CCPA/CPRA, with a permitted extension).

9. Age Restriction

The Site is intended for individuals aged 18 years or older. We do not knowingly collect personal data from persons under the age of 18. If you are under 18, you must not use this Site without the supervision of a parent or legal guardian.

If we become aware that personal data has been collected from a person under 18 without appropriate consent, we will take reasonable steps to delete such data promptly. If you believe a minor’s data has been collected, please contact us immediately at admin@innovationsandmore.com.

10. Data Security

We implement appropriate technical and organisational measures to protect data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security and accept no liability for security breaches beyond our reasonable control.

11. Changes to This Policy

We reserve the right to update or amend this Privacy Policy at any time. Material changes will be indicated by an updated “Last updated” date at the top of this page. Continued use of the Site following the posting of changes constitutes acceptance of the revised policy. We encourage you to review this page periodically.

12. Contact and Complaints

For all privacy-related queries, requests to exercise your rights, or complaints regarding our data handling practices, please contact:

If you are not satisfied with our response, you have the right to complain to your applicable supervisory authority. UK residents may contact the Information Commissioner’s Office (ICO) at ico.org.uk. EU residents may contact the supervisory authority in their member state of habitual residence.