Privacy policy.

Fava Health ("we," "our," "us") is committed to protecting your privacy and handling your personal data with transparency and care. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in compliance with the UK General Data Protection Regulation (UK GDPR).

1. Information we collect

We may collect the following categories of personal data:

  • Personal Information: Name, date of birth, contact details, and account credentials.

  • Health and Genetic Information: Information necessary to provide our pharmacogenomic testing services, including genetic test results.

  • Transaction Data: Details of payments and services requested.

  • Technical Data: IP addresses, browser type, and usage data collected through cookies and similar technologies.

2. How we use your information

We use your personal data for the following purposes:

  • To provide pharmacogenomic testing and related services.

  • To communicate with you regarding results, updates, and customer support.

  • To comply with legal obligations and regulatory requirements.

  • To improve our services through anonymised data analytics.

We do not use your genetic or health data for marketing purposes.

3. Data storage and security

We do not store DNA samples. All samples are destroyed after testing is completed. Genetic and personal data are stored securely in compliance with UK GDPR, using encryption and access control measures to prevent unauthorized access.

4. Data sharing and disclosure

We do not sell or share your personal data with third parties for marketing purposes. However, we may share your information in the following cases:

  • With accredited laboratories to perform genetic testing.

  • With healthcare professionals involved in your care, as authorized by you.

  • To comply with legal and regulatory requirements.

  • With research organisations, but only with your explicit consent and in an anonymised format.

5. Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you.

  • Request correction of inaccurate or incomplete data.

  • Request deletion of your data, subject to legal and regulatory requirements.

  • Restrict or object to certain data processing activities.

  • Withdraw consent for data processing where applicable.

  • Request data portability, where technically feasible.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been handled unlawfully.

We do not transfer personal data outside the UK unless appropriate safeguards are in place, in accordance with UK GDPR.

To exercise any of these rights, please contact us at info@favahealth.com.

6. Data retention

We retain personal and genetic data only for as long as necessary to fulfil the purposes outlined in this policy and to meet legal and regulatory requirements. Genetic test results may be retained long-term due to their ongoing relevance to medication-related decisions and future healthcare discussions. You may request deletion of your data at any time; however, we may be required to retain certain information where this is necessary for safety, legal, or regulatory reasons.

7. ​​Lawful basis for processing
 We process personal data where it is necessary to provide our services to you (Article 6(1)(b)), to meet legal and regulatory obligations (Article 6(1)(c)), and, where applicable, with your consent (Article 6(1)(a)).

We process genetic and health data only where this is necessary for the provision of our services and in the public interest in health, or with your explicit consent, in accordance with Article 9(2)(a) and 9(2)(h) UK GDPR.

8. Updates to this policy

We may update this Privacy Policy from time to time. Any changes will be communicated via our website, and significant updates will be notified to you directly where required.

9. Contact information

If you have any questions or concerns regarding this Privacy Policy, please contact us at:

Email: info@favahealth.com or C/O Btmr Limited Century Buildings, 14 St Mary's Parsonage, Manchester, Greater Manchester, England, M3 2DF

By using our services, you acknowledge that you have read and understood this Privacy Policy.

Last updated: 06/02/2026