Privacy Policy

Last updated: Aug 2026

1. Our Commitment to Your Privacy

At Myelin Health, protecting your privacy is fundamental to the trust placed in us by patients, clinicians and healthcare organisations.

Health information is among the most personal information anyone can share. We believe you should always understand what information we collect, why we collect it, how it is protected, and the choices available to you.

We are committed to handling personal information responsibly, securely and transparently in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how Myelin Health collects, uses, stores and protects your personal information whenever you visit our website, create an account, use our platform, or otherwise interact with our services.

If you have any questions about this Privacy Policy or how we process your information, please contact us using the details provided at the end of this document.

We know that choosing to share your health information requires trust. We will always strive to earn that trust by protecting your information, communicating openly about how it is used and continually improving the way we safeguard your privacy. If we ever make significant changes to how we process your personal information, we will explain those changes clearly and provide updated information through this Privacy Policy. Our commitment to protecting your privacy is ongoing, and we will continue to review our practices as technology, healthcare and data protection standards evolve.

2. Our Privacy Principles

Everything we do at Myelin Health is guided by the following principles.

We collect only what we need.

We only collect personal information that is necessary to provide and improve our services, fulfil our legal obligations and maintain the security of our platform.

We are transparent.

We explain what information we collect, why we collect it and how it is used. We aim to avoid unnecessary legal jargon and communicate openly about our data practices.

We protect your information.

We use appropriate technical and organisational security measures to safeguard your information against unauthorised access, loss, misuse or disclosure.

Your information is never sold.

We do not sell your personal information to third parties.

We support informed healthcare.

Myelin Health is designed to help individuals and healthcare professionals securely organise and better understand health information. Our platform supports clinical decision-making through evidence-based educational content and clinician-authored recommendations, but it does not replace professional medical judgement.

We continue to improve.

As our platform develops, we will continue to review and strengthen our privacy and security practices to ensure they remain appropriate, proportionate and aligned with evolving legal requirements.

3. Who We Are

Myelin Health is a digital health platform that enables individuals and healthcare professionals to securely collect, organise and review health information in one place.

Depending on how you use the platform, this information may include laboratory test results, body measurements, wearable device data, clinician recommendations and other health-related information that you choose to provide or that is entered by your healthcare professional.

Myelin Health provides evidence-based educational content and clinical decision support tools designed to support informed conversations between patients and healthcare professionals.

Myelin Health is not a diagnostic service and does not replace the judgement of qualified healthcare professionals. Clinical decisions remain the responsibility of the treating clinician.

Throughout this Privacy Policy, “Myelin Health”, “we”, “our” and “us” refer to Myelin Health, the operator of the Myelin Health platform, contactable at myelinhealthlabs@gmail.com. Formal registered company details will be published here once incorporation is complete.

4. Scope of This Privacy Policy

This Privacy Policy applies whenever you interact with Myelin Health, including when you:

visit our website;
create a Myelin Health account;
use the patient platform;
use the clinician platform;
upload health information;
connect wearable devices or third-party services;
contact our support team;
subscribe to updates or newsletters;
participate in surveys or product research;
communicate with us by email or other channels.

This Privacy Policy does not apply to third-party websites, applications or services that may be linked from our website or integrated with our platform. Those services operate under their own privacy policies, and we encourage you to read them before providing any personal information.

Our services are intended for individuals aged 18 years or older. We do not knowingly provide services to children or knowingly collect personal information from individuals under the age of 18.

5. Definitions

For the purposes of this Privacy Policy:

“Myelin Health”, “we”, “our” or “us”: means the legal entity responsible for operating the Myelin Health website, platform and related services.
“Platform”: means the Myelin Health website, patient portal, clinician portal, mobile applications (if available), and any associated digital services provided by Myelin Health.
“Personal Information” (also known as Personal Data): means any information relating to an identified or identifiable individual, as defined under applicable data protection legislation.
“Health Information”: means personal information relating to an individual’s physical or mental health, including laboratory test results, physiological measurements, medical history, medications, clinician observations, recommendations, and other health-related information processed through the Platform.
“Patient”: means an individual who creates an account with Myelin Health or whose health information is processed through the Platform.
“Clinician”: means a registered healthcare professional or other authorised healthcare provider using Myelin Health to support the care of patients.
“Healthcare Organisation”: means a clinic, practice, hospital, laboratory or other organisation authorised to use the Myelin Health Platform.
“Wearable Data”: means information imported from connected health or fitness devices and services, including but not limited to heart rate, sleep, activity, physiological measurements and other health-related metrics made available through authorised integrations.
“Third-Party Service”: means an external organisation, application or service that integrates with Myelin Health or provides services on our behalf.
“Applicable Data Protection Laws”: means all legislation governing the collection, use and protection of personal information that applies to Myelin Health, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and any other applicable legislation in jurisdictions where Myelin Health operates.

6. Who This Privacy Policy Applies To

This Privacy Policy applies to anyone who interacts with Myelin Health, including:

individuals who visit our website;
patients who create an account directly with Myelin Health;
patients invited to use Myelin Health by a healthcare professional or healthcare organisation;
clinicians using the Platform;
representatives of healthcare organisations;
individuals who contact us with enquiries or support requests; and
visitors who subscribe to newsletters, updates or other communications.

Depending on how you use Myelin Health, we may act as either a Data Controller or a Data Processor under applicable data protection laws.

Where you create an account directly with Myelin Health or use our website independently, Myelin Health will generally act as the Data Controller, determining how and why your personal information is processed.

Where a healthcare organisation uses Myelin Health to provide services to its patients, that healthcare organisation may act as the Data Controller, with Myelin Health acting as a Data Processor on its behalf. In these circumstances, the healthcare organisation determines the purposes for which your information is processed, and Myelin Health processes that information in accordance with its instructions and applicable law.

Where applicable, additional information about how your healthcare provider processes your personal information will be available through their own privacy notices.

7. Information We Collect

The information we collect depends on how you use Myelin Health and the services you choose to access.

In some cases, you provide information directly to us. In other cases, information may be entered by your healthcare professional, imported from connected services that you authorise, or collected automatically when you use our website or Platform.

7.1 Account Information

When you create a Myelin Health account, we may collect information including:

your name;
email address;
encrypted password;
date of birth;
country of residence;
account preferences;
communication preferences; and
other information required to create and manage your account.

We use this information to create your account, provide our services, maintain platform security and communicate with you about your use of Myelin Health.

7.2 Health Information

Health Information is a special category of personal information and receives additional protection under applicable data protection laws.

Depending on how you use Myelin Health, Health Information may include:

laboratory test results;
body measurements;
blood pressure;
heart rate measurements;
medications;
allergies;
medical history;
family history where provided;
symptoms;
lifestyle information;
clinician recommendations;
clinician notes;
prescriptions where supported;
uploaded reports or documents; and
other health-related information that you or your healthcare professional choose to record within the Platform.

We only process Health Information where necessary to provide our services or where otherwise permitted by applicable law.

7.3 Laboratory Information

Myelin Health allows laboratory results to be securely stored and reviewed.

Laboratory information may be:

entered manually by you;
entered manually by your clinician;
uploaded from laboratory reports;
imported through future laboratory integrations where available.

Examples include blood test results, biomarker measurements, laboratory reference ranges and test dates.

7.4 Wearable Device Information

If you choose to connect a compatible wearable device or health platform, Myelin Health may receive information including:

heart rate;
resting heart rate;
heart rate variability;
sleep duration and sleep stages;
physical activity;
step count;
energy expenditure;
VO₂ max;
body measurements where available;
recovery metrics;
exercise sessions; and
other health-related metrics made available through the authorised integration.

Wearable devices are entirely optional. You decide whether to connect a wearable device and may disconnect it at any time through the relevant integration where supported.

7.5 Clinician Information

If you are a healthcare professional using Myelin Health, we may collect information including:

your name;
professional email address;
organisation;
role within your organisation;
account activity; and
information necessary to provide clinician access to the Platform.

7.6 Technical Information

When you use our website or Platform, we automatically collect certain technical information, which may include:

pages visited;
features used;
dates and times of access;
referral information; and
diagnostic information required to maintain the security and reliability of the Platform.

7.7 Communications

If you contact Myelin Health, we may keep records of:

emails;
contact form submissions;
customer support requests;
feedback;
survey responses; and
other communications between you and Myelin Health.

7.8 Payment Information

If you purchase products or services directly from Myelin Health in the future, we may process payment-related information necessary to complete your transaction.

Payment card information is processed by our authorised payment providers and is not stored by Myelin Health except where necessary for accounting, fraud prevention or legal compliance.

7.9 Information We Do Not Intentionally Collect

Unless required to provide our services or required by law, Myelin Health does not intentionally collect:

information relating to children under the age of 18;
biometric identifiers used solely for identity verification;
precise location information;
information about political opinions;
religious beliefs;
sexual orientation;
criminal convictions; or
other categories of information that are not necessary to operate our services.

If such information is provided to us unintentionally, we will process it only where necessary and in accordance with applicable law.

8. How We Collect Your Information

We collect personal information in a number of different ways, depending on how you interact with Myelin Health.

8.1 Information You Provide Directly

You may provide information directly to us when you:

create a Myelin Health account;
complete your profile;
upload laboratory reports or other health information;
enter body measurements or lifestyle information;
contact our support team;
subscribe to updates or newsletters;
respond to surveys or questionnaires; or
otherwise communicate with us.

You are responsible for ensuring that any information you provide is accurate and kept up to date.

8.2 Information Provided by Healthcare Professionals

If you receive care through a healthcare professional or healthcare organisation using Myelin Health, authorised members of your care team may add information to your record, including:

laboratory results;
body measurements;
clinical notes;
recommendations;
prescriptions (where supported);
review summaries; and
other information relevant to your care.

Healthcare professionals are responsible for ensuring they have an appropriate legal basis to provide this information through Myelin Health.

8.3 Information from Connected Services

Where you choose to connect compatible wearable devices or other authorised third-party services, we will receive the information that you have authorised those services to share with Myelin Health.

The information we receive depends on the connected service and the permissions you grant.

You can withdraw access to connected services at any time by disconnecting the integration through the relevant provider or your Myelin Health account where available.

8.4 Information Collected Automatically

When you visit our website or use the Platform, certain information is collected automatically to help us operate, secure and improve our services. This may include:

device information;
browser information;
IP address;
pages viewed;
session activity;
error logs;
security events; and
website analytics where enabled.

Some of this information is collected using cookies or similar technologies. Further information is available in our Cookie Policy.

8.5 Information from Third Parties

In some circumstances, we may receive information from trusted third parties, including:

healthcare organisations using Myelin Health;
laboratories where integrations become available;
wearable device providers that you authorise;
payment providers where applicable;
identity verification providers where required; and
other service providers necessary to operate our Platform.

We only receive information that is relevant to the services you choose to use.

9. How We Use Your Information

We only use personal information where we have a lawful reason to do so.

Depending on how you use Myelin Health, we may use your information to:

Provide our services

Including to:

create and manage your account;
display your health information securely;
allow clinicians to review patient information;
present clinician recommendations;
maintain your health record;
synchronise authorised wearable data; and
provide access to the features you request.

Improve the Platform

Including to:

maintain platform reliability;
identify and resolve technical issues;
improve usability and accessibility;
develop new features;
monitor performance; and
understand how our services are used.

Where possible, we use aggregated or anonymised information for these purposes.

Communicate with You

Including to:

respond to enquiries;
provide customer support;
send service-related communications;
notify you about important changes;
send security alerts;
send newsletters or marketing communications where you have chosen to receive them.

You can opt out of marketing communications at any time.

Protect the Security of the Platform

Including to:

prevent fraud;
detect unauthorised access;
investigate security incidents;
protect users and healthcare organisations;
maintain system integrity.

Meet Legal and Regulatory Obligations

We may process personal information where necessary to:

comply with applicable laws;
respond to lawful requests from regulators or public authorities;
maintain accounting records;
prevent unlawful activity;
establish, exercise or defend legal claims.

Research and Service Improvement

From time to time, Myelin Health may use anonymised or aggregated information to:

improve our services;
validate health algorithms and clinical decision support tools;
improve the accuracy and usability of the Platform;
support scientific or academic research; and
contribute to public understanding of health and wellbeing.

Where information directly identifies you, we will only use it for research where you have provided your explicit consent or where otherwise permitted by applicable law.

What we do not do

We believe transparency includes explaining what we do not do with your information. Myelin Health does not:

sell your personal information;
provide advertisers with your identifiable health information;
use your health information for targeted advertising;
make automated medical diagnoses;
replace the judgement of qualified healthcare professionals.

10. Lawful Bases for Processing

Under applicable data protection laws, we must have a lawful basis for processing your personal information.

The lawful basis we rely upon depends on the information we collect and how you use Myelin Health.

10.1 Performance of a Contract

Where you create an account or use the Myelin Health Platform, we process your personal information where it is necessary to:

create and manage your account;
provide access to the Platform;
display your health information;
enable authorised clinician access;
provide the services you request; and
communicate with you about your account or the services we provide.

Without this information, we may be unable to provide certain features or services.

10.2 Legitimate Interests

We may process your personal information where it is necessary for our legitimate interests, provided these interests are not overridden by your rights and freedoms.

This includes processing information to:

maintain and improve the Platform;
monitor performance and reliability;
identify and resolve technical issues;
improve accessibility and user experience;
maintain platform security;
prevent fraud and misuse;
protect our users and healthcare organisations; and
support the day-to-day operation of our business.

Where we rely on legitimate interests, we carefully balance our interests against your privacy rights.

10.3 Legal Obligations

We may process personal information where necessary to comply with legal or regulatory obligations. This may include:

complying with court orders or lawful requests;
meeting tax and accounting requirements;
responding to regulatory authorities;
maintaining appropriate records;
preventing unlawful activity; or
establishing, exercising or defending legal claims.

10.4 Consent

For certain activities, we will ask for your consent before processing your information. Examples may include:

sending marketing communications;
optional surveys or research participation;
connecting certain third-party services where consent is required;
future optional services that require your permission.

You may withdraw your consent at any time where processing is based on consent. Withdrawing consent will not affect the lawfulness of processing carried out before your consent was withdrawn.

10.5 Health Information

Health Information receives additional protection under applicable data protection laws because it is considered special category personal data.

Where we process Health Information, we do so only where an appropriate legal condition applies, including where processing is necessary to:

provide health-related services through the Platform;
support healthcare professionals providing care;
manage your health record;
fulfil our contractual obligations;
comply with legal obligations; or
where you have given your explicit consent.

We apply additional safeguards when processing Health Information to ensure it remains protected and confidential.

10.6 Research

Where Myelin Health undertakes research or uses information to improve its services, we will wherever possible use anonymised or aggregated information that cannot reasonably identify an individual.

If identifiable personal information is required for a specific research project, we will only process it where an appropriate legal basis exists and, where required, with your explicit consent or other lawful authority.

11. Sharing Your Information

We only share your Personal Information where it is necessary to provide our services, comply with the law, protect our users, or where you have asked us to do so.

We do not sell your Personal Information to third parties.

We do not permit third parties to use your identifiable Health Information for advertising or marketing purposes.

The organisations we share information with depend on how you use Myelin Health.

11.1 Healthcare Professionals and Healthcare Organisations

Where you use Myelin Health as part of your care, your Personal Information may be shared with authorised healthcare professionals and Healthcare Organisations involved in providing your care. This may include access to:

laboratory results;
body measurements;
Wearable Data;
clinician recommendations;
clinical notes;
uploaded reports;
other Health Information that forms part of your health record.

Access is restricted to authorised users with appropriate permissions and is governed by role-based access controls.

11.2 Service Providers

We work with carefully selected service providers who help us operate, maintain and secure the Platform. Depending on the services we use, these providers may assist with:

secure cloud hosting;
database infrastructure;
data backup and recovery;
website hosting;
email delivery;
customer support;
payment processing;
website analytics;
security monitoring; and
other technical services necessary to operate Myelin Health.

Where service providers process Personal Information on our behalf, they do so only under written contractual arrangements and only for the purposes of providing services to Myelin Health. They are not permitted to use your Personal Information for their own purposes.

11.3 Connected Third-Party Services

Where you choose to connect compatible wearable devices or other authorised third-party services, information may be exchanged between Myelin Health and those services in accordance with the permissions you have granted.

These third-party services operate under their own privacy policies and terms of use.

We encourage you to review those policies before connecting your accounts.

11.4 Healthcare Integrations

As Myelin Health develops, we may integrate with healthcare providers, laboratories or other healthcare systems to improve the secure exchange of health information. Where such integrations are available, information will only be shared where:

you have authorised the connection;
the integration is necessary to provide the requested service; or
sharing is otherwise permitted or required by law.

11.5 Professional Advisers

We may disclose Personal Information where reasonably necessary to obtain professional advice from organisations such as:

solicitors;
accountants;
auditors;
insurers; or
other professional advisers.

These organisations are subject to professional confidentiality obligations.

11.6 Business Changes

If Myelin Health undergoes a merger, acquisition, investment, corporate restructuring or sale of assets, Personal Information may be transferred as part of that transaction.

If this occurs, we will take reasonable steps to ensure that your Personal Information continues to be protected in accordance with this Privacy Policy and applicable law.

11.7 Legal Requirements

We may disclose Personal Information where required or permitted by law, including where necessary to:

comply with legal obligations;
respond to lawful requests from courts or public authorities;
protect the rights, safety or security of individuals;
investigate fraud or unlawful activity; or
establish, exercise or defend legal claims.

11.8 Research

Where Myelin Health undertakes research or collaborates with academic or healthcare institutions, we will wherever reasonably possible use anonymised or aggregated information.

We will not disclose identifiable Health Information for research purposes without an appropriate legal basis and, where required, your explicit consent.

11.9 Who We Never Share Your Information With

We think it is equally important to explain who does not receive your information.

Unless required by law, Myelin Health will never sell your Personal Information to third parties.
We do not allow advertisers to access your identifiable Health Information.
We do not share your identifiable Health Information with data brokers.
We do not permit service providers to use your Personal Information for their own marketing or commercial purposes.

12. International Transfers

We are committed to storing and processing Personal Information in a way that protects your privacy and complies with applicable data protection laws.

UK users

Where Myelin Health provides services to individuals in the United Kingdom, Personal Information will ordinarily be stored and processed within the United Kingdom. Our preference is to use service providers that support UK-based data hosting where appropriate.

International services

As Myelin Health expands internationally, Personal Information relating to users in other countries may be stored either within the country in which the service is provided, or within the United Kingdom, depending on the service model, technical infrastructure and applicable legal requirements.

Transfers between countries

Where Personal Information is transferred outside the country in which it was originally collected, we will ensure that appropriate safeguards are in place to protect your information. These safeguards may include:

adequacy regulations;
International Data Transfer Agreements (IDTAs);
Standard Contractual Clauses (SCCs); or
other legally recognised transfer mechanisms.

We will not transfer Personal Information internationally unless we are satisfied that appropriate protections are in place.

13. Information Security

Protecting Personal Information is fundamental to the way Myelin Health is designed and operated.

We maintain appropriate technical and organisational measures to protect Personal Information against accidental loss, unauthorised access, misuse, alteration, disclosure or destruction.

No method of transmitting or storing information electronically can be guaranteed to be completely secure. However, we continually review and improve our security practices to maintain an appropriate level of protection for the information entrusted to us.

Our security measures may include:

encryption of data during transmission using industry-standard encryption protocols;
encryption of Personal Information stored within our systems where appropriate;
secure cloud infrastructure;
role-based access controls that limit access to authorised users;
authentication and account security measures;
audit logging of important system activity;
regular software updates and security patching;
monitoring for security threats and unauthorised access; and
regular review of our security controls and operational practices.

Access to Personal Information is restricted to individuals who require it to perform their role and who are subject to appropriate confidentiality obligations.

If we become aware of a Personal Data Breach that is likely to result in a risk to your rights and freedoms, we will respond in accordance with applicable law, including notifying the appropriate supervisory authority and affected individuals where required.

14. Data Retention

We retain Personal Information only for as long as it is reasonably necessary to fulfil the purposes described in this Privacy Policy, including providing our services, complying with legal obligations, resolving disputes and protecting our legal rights.

The length of time we retain information depends on the type of information and the reason it was collected.

When determining appropriate retention periods, we consider factors including:

the nature and sensitivity of the information;
the purposes for which it is processed;
legal and regulatory requirements;
contractual obligations;
clinical record-keeping requirements where applicable; and
our legitimate business needs.

When Personal Information is no longer required, we will securely delete, anonymise or otherwise dispose of it in accordance with our retention policies and applicable law.

Where you request deletion of your account, we will delete or anonymise your Personal Information unless we are required or permitted by law to retain certain information. Examples may include retaining information:

to comply with legal obligations;
for taxation or accounting purposes;
to establish, exercise or defend legal claims; or
where retention is otherwise required by applicable law.

15. Your Rights

Depending on where you live and the applicable data protection laws, you may have a number of rights regarding your Personal Information. These may include the right to:

Access your information

You may request a copy of the Personal Information we hold about you.

Correct inaccurate information

You may ask us to correct information that is inaccurate or incomplete.

Request deletion

You may request that we delete your Personal Information in certain circumstances. This right is not absolute and may be limited where we are legally required or otherwise permitted to retain information.

Restrict processing

You may ask us to restrict the way we process your Personal Information in certain circumstances.

Object to processing

Where we rely on legitimate interests as our lawful basis, you may object to that processing where applicable.

Data portability

Where applicable, you may request a copy of certain Personal Information in a structured, commonly used and machine-readable format.

Withdraw consent

Where processing is based on your consent, you may withdraw that consent at any time. This will not affect processing carried out before your consent was withdrawn.

Marketing preferences

You may opt out of receiving marketing communications from us at any time by using the unsubscribe link included in our communications or by contacting us directly. Service-related communications relating to your account or healthcare services may still be sent where necessary.

Exercising your rights

If you wish to exercise any of these rights, please contact us using the details provided at the end of this Privacy Policy. To protect your privacy and security, we may ask you to verify your identity before responding to your request. We aim to respond to requests within the timeframes required by applicable law.

16. Cookies and Similar Technologies

Myelin Health uses cookies and similar technologies to operate our website, improve user experience, maintain security and better understand how our website is used.

Cookies are small text files placed on your device when you visit a website. They help us:

remember your preferences;
maintain secure sessions;
understand website performance;
identify technical issues; and
improve the usability of our website.

Where required by law, we will ask for your consent before placing non-essential cookies on your device.

You can manage your cookie preferences through your browser settings or our cookie management tools where available.

Further information about the cookies we use and how to manage them will be available in our Cookie Policy.

17. Contact Us

If you have any questions about this Privacy Policy, how Myelin Health processes your Personal Information, or if you wish to exercise any of your privacy rights, please contact us.

Myelin Health

Email: myelinhealthlabs@gmail.com

Website: www.mymyelin.co.uk

If we have appointed a Data Protection Officer (or another individual responsible for data protection), their contact details will be made available here.

We will make every reasonable effort to respond to your enquiry promptly and in accordance with applicable data protection laws.

18. Complaints

We are committed to resolving any questions or concerns you may have about how we collect, use or protect your Personal Information.

If you have a concern, we encourage you to contact us first so that we have the opportunity to investigate and respond.

If you are not satisfied with our response, or you believe your Personal Information has been processed unlawfully, you have the right to lodge a complaint with the relevant data protection authority.

For individuals in the United Kingdom, this is the:

Information Commissioner’s Office (ICO)

Website: ico.org.uk

The ICO provides independent guidance on data protection rights and how to make a complaint.

19. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or the way we process Personal Information.

When we make material changes, we will update the “Last updated” date at the beginning of this Privacy Policy and, where appropriate, notify you through the Platform or by other appropriate means.

We encourage you to review this Privacy Policy periodically to remain informed about how we protect your information.