Trust centre

Transparency about the security, privacy and data-protection controls we operate.

This page is maintained by MYHEALTHCHECKUP LTD to answer common security and privacy questions about myhealth checkup. It describes controls currently in place and is editable project content — it is not an independent certification or attestation. Lovable provides the underlying hosting platform; certain platform-level capabilities are noted below, but the controls described here remain the responsibility of MYHEALTHCHECKUP LTD.

Encryption in transit

All traffic to myhealthcheckup.co.uk is served over HTTPS using modern TLS. API calls to our backend use authenticated, TLS-encrypted connections.

Hosting & platform

The application is hosted on Lovable's managed platform with a Supabase (PostgreSQL) backend operating in EU data regions. Database and edge function access is restricted to authorised service credentials.

Authentication & access

User accounts use email/password or Google OAuth. Administrative actions require multi-factor authentication (AAL2). Role-based access is enforced server-side via PostgreSQL row-level security policies.

Data we collect

We collect the minimum data needed to run the comparison service: name, email, phone number (optional), and saved tests/providers. We do not store raw medical results or identifiable diagnostic data on behalf of users browsing the site.

Cookies & analytics

Non-essential cookies are loaded only after consent. See our Cookie policy for the full list of cookies and the providers behind them.

Your rights (UK GDPR)

You can request access, correction, deletion or export of your personal data at any time. See the Privacy policy for the full process and statutory response times.

Reporting a vulnerability

If you believe you have discovered a security vulnerability affecting myhealth checkup, please report it privately. Do not publicly disclose details until we have had a reasonable opportunity to investigate and remediate.

Security contact: security@myhealthcheckup.co.uk. Machine-readable details are published at /.well-known/security.txt.

Compliance & contact

We operate under UK GDPR and the Data Protection Act 2018. Provider listings are restricted to UKAS-accredited laboratories and CQC-regulated clinics where applicable — see How we rank for our editorial and inclusion standards.

Privacy queries: privacy@myhealthcheckup.co.uk

We do not claim certification under SOC 2, ISO 27001, HIPAA or any other standard unless explicitly stated on this page. Statements above reflect controls currently in operation and are reviewed periodically.