Privacy Policy

1. Introduction

This Privacy Policy explains how HRU collects, uses, stores, and protects your personal data in compliance with: • UK GDPR • EU GDPR • Data Protection Act 2018 We take privacy seriously. No shortcuts.

2. Data Controller

HRU is the data controller. Contact: office@hru-health.com

3. What Data We Collect

a) Personal Data • Name • Email address • Date of birth • Sex (if relevant to analysis) b) Health & Physiological Data (Special Category) • Bioimpedance metrics • Stress and autonomic markers • Symptom questionnaires • Performance and recovery indicators c) Technical Data • IP address • Browser type • Device information • Usage analytics

4. Lawful Basis for Processing

We process data based on: • Explicit consent (health data) • Contractual necessity • Legitimate interest (platform improvement, security) • Legal obligation You may withdraw consent at any time.

5. How We Use Your Data

• •Deliver HRU assessments and reports
• •Provide personalised insights
• •Improve platform performance
• •Ensure safety, security, and compliance
• •Communicate service-related information
• •We do not sell your data.

6. Data Storage & Security

• •Data is stored securely using industry-standard encryption
• •Access is limited to authorised personnel
• •We apply technical, organisational, and procedural safeguards
• •No system is 100% immune — but we operate at best-practice security standards.

7. Data Retention

We retain data only as long as necessary for: • Service delivery • Legal compliance • Legitimate operational purposes You may request deletion unless retention is legally required.

8. Sharing of Data

We may share data only with: • Trusted processors (hosting, analytics, security) • Regulatory authorities if legally required All processors are contractually bound to GDPR standards.

9. International Transfers

If data is transferred outside the UK/EU: • Adequate safeguards (SCCs or equivalent) are applied

10. Your Rights

• •Access your data
• •Request deletion
• •Restrict processing
• •Data portability
• •Withdraw consent
• •Lodge a complaint with a supervisory authority
• •Requests can be made to: office@hru-health.com

11. Cookies

HRU uses cookies for: • Functionality • Analytics • Performance optimisation You can manage cookie preferences via your browser.

12. Children's Data

HRU does not knowingly collect data from children under 18 without explicit guardian consent.

13. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted on the website.