Privacy Policy

We are committed to protecting your privacy and handling your personal and health-related information with care, discretion, and transparency.

This Privacy Policy explains how we collect, use, store, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using this website and our services, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described below.

1. Who we are

KhadiHealth & Sleep provides online sleep health screening services designed to support informed decision-making and access to appropriate care.

For the purposes of UK data protection law, KhadiHealth & Sleep is the data controller responsible for the personal data collected through this website.

Contact details:

Email: sleepteam@khadihealthsleep.com

Location: United Kingdom

2. Information we collect

We collect only the information necessary to provide our services responsibly and securely.

a) Information you provide

When you use our services, you may provide:

Personal details (such as name and email address)
Health-related information submitted through screening questionnaires
Notes or summaries generated in connection with review calls or coaching sessions
Information you provide when contacting us

Some of this information is classified as special category (health) data under UK GDPR.

b) Automatically collected information

When you visit our website, we may automatically collect limited technical information, such as:

IP address
Browser type and device information
General usage and interaction data

This information is used solely to maintain website security and improve functionality.

3. How we use your information

We use your information only for the following purposes:

To generate personalised sleep screening reports
To communicate with you regarding your results or services
To operate, maintain, and improve our website and services
To meet legal and regulatory obligations

We do not sell, rent, or trade your personal data.

4. Lawful basis for processing

Under UK GDPR, we process your personal data on the following lawful bases:

Explicit consent, particularly for health-related information
Performance of a contract, to deliver the service you request
Legal obligations, where applicable

You may withdraw consent at any time, subject to legal or contractual limitations.

5. Data security and retention

Your information is stored securely using appropriate technical and organisational measures. Access is restricted to authorised individuals only.

We retain personal and health-related data only for as long as necessary to provide the service, meet legal obligations, or support future care if you choose to engage further with us.

You may request deletion of your data at any time, subject to any legal or regulatory obligations that require us to retain certain information.

6. Sharing of information

We share personal data only where necessary and only with trusted third-party service providers, such as:

Secure payment processors
Website hosting and IT service providers

These providers are contractually required to process your data securely and in accordance with UK GDPR.

We do not share your information with healthcare providers or other third parties unless you choose to do so.

7. International data transfers

Where personal data is transferred outside the United Kingdom or European Economic Area, appropriate safeguards are in place to ensure continued protection in line with UK GDPR.

8. Your rights

Under UK data protection law, you have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion of your data
Withdraw consent
Object to or restrict processing

If you have concerns about how your data is handled, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.

Website: https://www.ico.org.uk

9. Age restrictions

Our services are intended for adults aged 18 years and over.

We do not knowingly collect or process personal data from individuals under 18.

10. Updates to this policy

We may update this Privacy Policy from time to time. The most current version will always be available on our website.

Continued use of the service after updates indicates acceptance of the revised policy.

11. Contact us

If you have any questions about this Privacy Policy or how your personal data is handled, please contact us at: