Privacy Policy

1. Data Controller

Reghelp Group Ltd, trading as Preventivia, is the controller of your personal data for UK and EU users. For US users, Reghelp Group Ltd acts as the "business" (as defined under CCPA/CPRA).

Contact: team@preventivia.health

Registered office: 128 City Road, London, EC1V 2NX. Registered in England and Wales, company no. 13640913.

2. What Data We Collect

• Profile Information: Name, date of birth, sex at birth, contact details, payment details (via secure provider).
• Lifestyle & Well-being Data: Questionnaire responses on diet, exercise, sleep, stress, mood, daily habits.
• Health & Medical Data (with consent, HIPAA-protected in the US when applicable): Biomarkers (blood test results, hormonal and metabolic data), imaging and fitness assessments (DEXA, VO₂ max, body composition, strength tests), genomic or microbiome results if uploaded, symptoms, medical history, family history, medications, supplements, uploaded reports (PDFs, images, videos).
• Interaction Data: Chat history, app usage, coach communications.
• Technical Data: IP address, browser/device type, cookies, analytics.

You remain the owner of your data. Preventivia processes it only for the purposes listed below.

3. How We Use Your Data

• Deliver personalized preventive health programs
• Generate reports, progress tracking, and habit-building plans
• Facilitate communication between you, Preventivia coaches, and AI tools
• Process payments and manage accounts
• Conduct service improvements and anonymized research
• Meet legal, regulatory, and security obligations

We never sell your data.

4. Medical Disclaimer

Preventivia is not a healthcare provider. Our services are preventive, lifestyle-oriented, and educational. Nothing in our services constitutes medical advice, diagnosis, or treatment. Always consult a qualified healthcare professional before making medical decisions. In emergencies, call your healthcare provider or emergency services immediately.

5. Use of AI

• We use AI to analyse health data (questionnaires, biomarkers, uploaded reports) to generate insights.
• Final reports and recommendations are reviewed by human clinicians or coaches.
• Under GDPR, this may be considered profiling. You have rights to request human-only review, object to AI-assisted processing, or withdraw consent at any time.
• We may use fully anonymized data for research, AI model training, and service improvement.

6. Legal Basis for Processing

• Consent: required for processing health data, AI analysis, and marketing
• Contract: to deliver services you request
• Legitimate Interests: to improve services using anonymized data
• Legal Obligations: for compliance with accounting, regulatory, and security duties

7. Data Sharing

We only share data with trusted parties under strict safeguards:

• Medical professionals, with your consent
• Diagnostic labs, imaging providers, or wearables if you choose integration
• Cloud hosting and technical providers (e.g. Supabase, AWS/S3, OpenAI/OpenRouter)
• Communication tools (e.g. Twilio)
• Payment processors (e.g. Stripe)
• Regulators or authorities where legally required

HIPAA compliance:

• When Preventivia works with US-based labs, healthcare providers, or other HIPAA-covered entities, we ensure data handling meets HIPAA requirements.
• We sign Business Associate Agreements (BAAs) with such partners to safeguard Protected Health Information (PHI).
• Your PHI is processed, transmitted, and stored in compliance with HIPAA standards (encryption, access control, audit logs).

8. International Transfers

• For UK/EU residents: if your data is transferred outside the UK/EEA (e.g. to US-based providers), this is done under Standard Contractual Clauses (SCCs) or adequacy decisions.
• For US residents: your data may be processed internationally under comparable safeguards.

9. Data Retention

• Health data: up to 7 years after last contact (for legal and compliance standards)
• Marketing/analytics data: usually no more than 2 years
• Financial data: as required by law

You may request deletion subject to these obligations.

10. Your Rights

Under UK & EU GDPR:

• Access your data
• Correct inaccurate data
• Request deletion ("right to be forgotten")
• Restrict processing
• Data portability (structured format)
• Object to processing (e.g. AI, marketing)
• Withdraw consent anytime
• Lodge complaints: UK residents via ICO (ico.org.uk) | EU residents via local data protection authority

Under US CCPA/CPRA (California):

• Right to know what personal data we collect and how it's used
• Right to access and request a copy of your data
• Right to request deletion (with legal exceptions)
• Right to correct inaccurate data
• Right to opt out of "sale" or "sharing" of personal data (Preventivia does not sell personal data)
• Right to non-discrimination for exercising your rights

Requests can be submitted via: team@preventivia.health. We respond within 30 days (extendable by law).

11. Security

• Encryption in transit and at rest
• Secure cloud storage
• Multi-factor authentication for staff
• Role-based access controls
• Regular testing and audits
• Breach notification within 72 hours (GDPR) or as required by HIPAA/US law

12. Cookies and Tracking

• Essential cookies – necessary for service operation
• Analytics/marketing cookies – only with your consent (opt-out available)
• US users: you can also exercise opt-out rights through "Do Not Sell or Share My Personal Information" links if required by state law

13. Third-Party Links & Integrations

Preventivia may link or integrate with external services (labs, wearables, apps). These providers have their own privacy policies. You may revoke integrations anytime. Preventivia is not responsible for third-party practices.

14. Children

Our services are not intended for individuals under 18. We do not knowingly collect data from minors. If discovered, we will delete it or notify a guardian.

15. Updates to This Policy

We may update this policy periodically. Significant changes will be notified via email or website notice. Continued use of our services after changes constitutes acceptance.

16. Contact Us

For privacy questions, rights requests, or complaints: team@preventivia.health

Reghelp Group Ltd (trading as Preventivia), 128 City Road, London, EC1V 2NX. Registered in England and Wales, company no. 13640913.