Blood Work & Health Data Privacy

This notice covers blood and pathology results, and the health information that goes with them, when you run a panel through Base Performance Centre or send us results as a client. It sits alongside our full Privacy Policy, which covers everything else (bookings, forms, analytics, cookies). Where the two overlap, this notice is the more specific version for blood data.

Base Performance Centre is a performance nutrition and coaching practice run by Gareth Morris. Blood testing is available in Australia and the UK only, not worldwide. In Australia, testing is practitioner-ordered and pathology is processed by accredited Australian laboratories.

We keep the markers on your report and the minimum needed to act on them. That usually means:

• Marker names, values, units and the laboratory's reference ranges (for example ferritin, haemoglobin, vitamin D, HbA1c, lipids, thyroid markers).
• The date the sample was taken, the ordering practitioner, and the laboratory or collection centre.
• Your pathology report itself — the PDF, print-out or photo you or the laboratory provide.
• Your name and contact details, which the laboratory needs to process a practitioner-ordered test.
• The health context that changes how a result is read: symptoms, medications and supplements, sleep, energy availability, menstrual cycle, training load, and your goal or event date.

That combination is sensitive health information. We treat it that way: collected with your explicit consent, and only where it changes the plan we write.

A panel ordered through us

You book a bloods review, we order the panel, and you attend a collection centre. The laboratory draws the sample, analyses it and issues the report. We receive the results for the tests we ordered, and we review them with you.

Results you already have

You can send us a report from your GP or a previous panel as a PDF, photo or screenshot. Once it reaches us it is handled the same way as a panel we ordered.

Values typed into the free tool on this site

The "Understand your bloods" tool takes values you type in. That route is different — see section 5.

Blood data is used for coaching, and nothing else:

• To build and adjust your nutrition and training plan against what your numbers show.
• To prioritise: what to work on first, and what to retest and when.
• To keep you safe: spot red flags and refer anything outside healthy ranges to your GP or sports doctor.
• To track change over time, so we can see whether the plan is working.
• To keep your coaching file complete, which is also a professional and insurance record.

We do not use blood results to:

• Diagnose, or to tell you what a medical condition is. Results are read as coaching context; medical interpretation belongs with your GP or specialist.
• Sell, rent or trade your data, or share it with advertisers, brokers or data partners.
• Add you to a newsletter, marketing list or advertising audience.
• Train AI models, or as a testimonial, case study or before-and-after — including anonymised — without your written permission.

• Don't type your name, date of birth, laboratory number or anything else that identifies you. The tool doesn't ask for it and doesn't need it.
• The lab reference range box is optional. Filled in, the summary says whether a value sits inside, above or below that range. Left empty, the number isn't judged at all.
• The output is written by AI for discussion only. It is not a diagnosis, and it will not tell you what a result means medically or suggest treatment, medication or supplements.
• Because a third-party model reads the values, use the tool for a general read. For anything you'd act on, send your report to Gareth and we'll review it properly.

• Gareth Morris, and any practitioner you agree is involved in your coaching.
• The accredited laboratory that runs your panel and issues your report — under its own privacy policy and legal obligations, which is why we can't delete the laboratory's copy for you.
• Your GP, physio or specialist, only when you ask us to share results or notes with them.

It is not shared with our accountant, insurer or other business advisers, and it is never posted in a public channel. If we're legally required to disclose something, or there's a serious risk to someone's life, health or safety, we'll tell you what we disclosed.

• Reports and notes live in access-controlled files and folders, not in shared or public places.
• Access is limited to the people in section 6, with strong passwords and multi-factor authentication on those accounts.
• This website is served over HTTPS. The site itself holds no blood database — the free tool keeps nothing (section 5).
• Health data is kept separate from enquiry and marketing lists, so it can't be pulled into a campaign by accident.
• If a breach affected you and caused serious harm, we'd tell you what happened and what we're doing about it.

No system is perfectly secure. If you're sending something especially sensitive, ask first and we'll agree the safest way to do it.

• Blood results and the health notes that go with them: kept with your coaching record, for 7 years after your last session, in line with professional and tax record-keeping expectations.
• Athletes under 18: 7 years after their 18th birthday.
• A bloods enquiry that never became coaching: up to 3 years, so we can pick up a conversation you started.
• Values typed into the free tool: not kept at all.

When a record reaches its limit, we delete it or de-identify it. The laboratory's own copy follows the laboratory's retention rules, which are outside our control.

Email gareth@baseperformance.io and say what you want deleted. We'll verify it's your request, then remove your blood results and the health notes attached to them from the files we control, and confirm when it's done.

• You can ask for a copy of everything we hold on you, in a usable format, at any time and at no cost.
• We respond within 30 days.
• Two limits, stated plainly: we may have to keep something for legal, tax or insurance reasons, and we can't delete the laboratory's copy of your report. We'll tell you which applies.
• Withdrawing consent to hold health data is your right. It may mean we can no longer coach you, and we'll say so rather than quietly carry on.

• Decline any marker or question. If we can't coach safely without it, we'll tell you why instead of pushing.
• Send a partial report, or redact anything you'd rather we didn't see.
• Skip the free tool and send results directly, so nothing goes through a model.
• Ask us to stop using a particular data type while still coaching you.
• Ask what we hold, correct it, or delete it — sections 9 and the Privacy Policy explain how.

If we change this notice, we'll update the "Last updated" date at the top of this page and email current clients about significant changes. Complaints: email Gareth first; in Australia you can also contact the Office of the Australian Information Commissioner (oaic.gov.au).