Privacy

Privacy policy

JorClinic processes personal data and health data carefully and in accordance with the General Data Protection Regulation (GDPR). Below you can read exactly what we process and why.

What data we process

When you place an order we ask for your name, date of birth, optionally your gender, email address, phone number and address details. For the analysis and medical interpretation we also process the data you provide yourself about your health, diet, lifestyle and medication, and the results of the laboratory analysis.

What we use your data for

Your data is used solely for processing and sending your order, carrying out and interpreting the analysis, preparing your personal report and advice, and communicating about this. We do not use your data for advertising and do not sell it to third parties.

Legal basis

Processing takes place on the basis of performance of the agreement with you, your explicit consent for processing health data and, where applicable, statutory retention obligations.

Sharing with third parties

We only share what is strictly necessary: with the laboratory that analyses your sample, with the courier delivering your sampling kit, and with our payment partner Mollie for processing your payment. Data processing agreements are in place with all parties.

Retention period

Medical data is retained in accordance with the statutory retention period for medical records. We retain administrative and invoice data for the statutory tax retention period of seven years.

Security

Data is transmitted and stored encrypted within the European Union. Access is limited to the doctor and staff who need the data for their work. Online consultations take place via a secure video connection.

Your rights

You have the right to access, correct, delete, restrict processing, object, and to data portability. You may withdraw given consent at any time. You can send a request to info@jorclinic.nl; we respond within thirty days. If you disagree with how we handle your request, you may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Questions about privacy? Email info@jorclinic.nl.