Privacy policy

SANTE SALUD BARCELONA BRAND SL ("Santé Labs", "Santé", "we") is the controller of the personal data described in this policy. You can contact us at contact@santeclinics.com.

This policy applies to sante.co, the Santé patient account, and the Santé applications for iOS and Android. A laboratory, clinician, payment provider, or other partner may also act as an independent controller for information it processes under its own legal duties.

The information we process depends on the services you choose and the permissions you grant.

• Account and contact data, such as your name, email address, mobile number, authentication records, language, and communication preferences.
• Identity and patient-matching data, such as date of birth, document type and number, and your Santé patient record number when needed to identify you safely at the laboratory.
• Health and clinical data, including orders, appointments, samples, biomarkers, results, reports, questionnaires, referrals, care-team messages, and information you choose to upload.
• Connected health data that you choose to share. The iOS app may read steps, heart rate, resting heart rate, active energy, and weight from Apple Health. The Android app may read steps, heart rate, active energy, and weight from Health Connect. Santé does not write data to those services.
• Transaction data, such as the service purchased, price, payment status, invoice details, membership, credits, refunds, and referral benefits. Complete card details are handled by the payment provider and are not stored by Santé.
• Device and technical data needed to run and secure the service, such as device type, app version, IP address, request logs, crash information, notification token, and essential language or session storage.

We use personal data only for defined purposes and on an appropriate legal basis under applicable data-protection law.

• To create and protect your account, process purchases, schedule visits, deliver requested laboratory services, and provide results and support. This is generally necessary to perform our contract with you.
• To identify you correctly, maintain clinical and laboratory records, issue invoices, manage safety and quality, and comply with health, tax, accounting, fraud-prevention, and other legal obligations.
• To process health information for healthcare, laboratory diagnostics, and related care by professionals and systems subject to confidentiality safeguards, or with your explicit consent where consent is required.
• To connect Apple Health or Health Connect only after you make that choice and grant the relevant device permission. You can withdraw that permission in your device settings.
• To send service messages and notifications about your account, appointments, orders, or results. Optional marketing is sent only where permitted and can be stopped at any time.
• To keep the service secure, diagnose faults, prevent misuse, and improve reliability based on our legitimate interests, balanced against your rights.

We do not sell personal or health information. Access is limited to people and providers who need it for the purposes above.

• Santé laboratory and care-team personnel involved in your service, subject to professional or contractual confidentiality.
• Vetted service providers for secure hosting, communications, payments, customer support, document handling, notifications, and technical operations, acting under contract and only on our instructions where they are processors.
• Other laboratories or healthcare professionals when needed to perform a requested test, coordinate care, or meet a legal or quality obligation.
• Authorities, courts, insurers, advisers, or counterparties where disclosure is required by law, needed to protect rights and safety, or connected with a legitimate corporate transaction under suitable safeguards.

We prefer providers and storage in the European Economic Area where practical. If information is transferred outside the EEA, we use a lawful transfer mechanism, such as an adequacy decision or approved standard contractual clauses, together with appropriate safeguards.

We keep information only for as long as needed for the purpose for which it was collected and for applicable clinical, laboratory, quality, tax, accounting, limitation, and legal retention periods. Retention therefore varies by record type.

Closing an account removes access and deletes or anonymises information that is no longer required. Records that must be retained by law are isolated from ordinary product use, access-restricted, and deleted or anonymised when the applicable period ends.

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or objection; withdraw consent without affecting earlier lawful processing; and complain to the Spanish Data Protection Agency or another competent authority.

To exercise a right, email contact@santeclinics.com from the address registered to your account. We may ask for proportionate verification. Do not send health information or identity documents by ordinary email unless we give you a secure way to do so.

We use technical and organisational measures intended to protect personal data, including access controls, authentication, encryption in transit, auditability, and staff confidentiality. No system can be guaranteed completely secure.

Keep your password and device secure, do not share sign-in codes, and contact us promptly if you think someone has accessed your account without permission.

The self-service account and apps are intended for adults. A minor's laboratory service must be arranged by a parent, guardian, or authorised healthcare professional through an appropriate Santé channel.

We may update this policy when the service or law changes. The current version and its date will remain available on this page. For privacy questions or requests, contact contact@santeclinics.com.