Last updated: 6/7/2026
Inflamatrix Ltd is committed to protecting your privacy. This policy explains how we collect, use, store, and protect your personal data, including health information, in line with UK GDPR and the Data Protection Act 2018.
01
Who We Are
Inflamatrix is operated by Inflamatrix Ltd, founded by Matthew Burden, BSc DC. For any data protection queries, contact us at info@inflamatrix.com.
02
What Data We Collect
- Contact details: name, email address, postal address, phone number.
- Order & payment data: processed via our payment provider (we do not store full card details).
- Health data (special category data): biomarker results, genomic results, and any health information you provide, such as through a Results Discovery Call.
- Technical data: IP address, browser type, and website usage data via cookies and analytics.
- Marketing preferences: whether you’ve opted in to receive communications from us.
03
How We Collect It
- Directly from you when you place an order, create an account, book a consultation, or contact us.
- From our laboratory partners (Inuvi Diagnostics, LifeCode Gx) once your sample has been processed.
- Automatically via cookies and website analytics when you browse our site.
04
Why We Process Your Data (Legal Basis)
| Purpose | Legal Basis |
|---|---|
| Processing your order and delivering your kit | Contract |
| Generating and delivering your results report | Contract |
| Health data processing (biomarker/genomic results) | Explicit consent (Article 9 UK GDPR) |
| Sending marketing emails | Consent (opt-in) |
| Improving our website and services | Legitimate interest |
| Complying with legal/accounting obligations | Legal obligation |
We only process special category health data with your explicit, separate consent, obtained at the point of purchase or booking.
05
Who We Share Your Data With
- Inuvi Diagnostics — processes your blood biomarker sample and returns results to us. UKAS-accredited.
- LifeCode Gx — processes your genomic sample and returns results to us.
- Jane App — used for booking and delivering your optional Results Discovery Call, operated under Narberth Chiropractic Clinic.
- Brevo — our email marketing platform, used only for contacts who have opted in to marketing communications.
- Payment processor — for secure payment handling.
- We do not sell your personal data to third parties.
All third-party processors are bound by data processing agreements requiring them to protect your data to UK GDPR standards.
06
International Transfers
Where any of our processors store or process data outside the UK/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses, in line with UK GDPR requirements.
07
How Long We Keep Your Data
- Order and health results data: retained for [7 years] in line with standard clinical record-keeping practice, or as required by law.
- Marketing data: retained until you unsubscribe or withdraw consent.
- Website analytics data: retained per our cookie policy (see below).
08
Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data (“right to be forgotten”), subject to legal retention requirements.
- Withdraw consent for health data processing or marketing at any time.
- Request a copy of your data in a portable format.
- Object to or restrict certain processing.
- Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk if you believe your data has been mishandled.
To exercise any of these rights, contact us at info@inflamatrix.com.
09
Cookies
Our website uses cookies to improve your browsing experience and analyse site traffic. You can control cookie preferences via your browser settings or our cookie banner.
10
Data Security
We use appropriate technical and organisational measures to protect your data, including secure hosting, encrypted transmission of health results, and restricted access to personal data on a need-to-know basis.
11
Children’s Data
Our services are not intended for individuals under 18. We do not knowingly collect data from minors.
12
Changes to This Policy
We may update this policy from time to time. The “last updated” date at the top will reflect the most recent revision.

