General Enquiries+44(0)1904 428 550

Privacy Policy

Lorisian, a brand of YorkTest Laboratories is committed to protecting and respecting your privacy. We never collect and store data unnecessarily or sell your data to third parties.

We have a variety of security measures to help maintain the safety of any personal information Lorisian receives. We have processes that provide enough guarantees to implement appropriate technical and organisational measures in such a manner that processing meets the requirements of the UK data protection legislation and ensure the protection of the rights of the data subject.

Controllers are the main decision-makers – they exercise overall control over the purposes and means of the processing of personal data.

If two or more controllers jointly determine the purposes and means of the processing of the same personal data, they are joint controllers.

Joint controllers are both responsible for complying with GDPR obligations, transparency obligations and individuals’ rights in. Both parties agree to collect, store and process personal data in accordance with this policy. It is the responsibility of both parties to inform their data subjects.

Processor a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Your Consent and Agreement

By providing your personal information to Lorisian, you consent to the collection and use of it and any other information provided to Lorisian in accordance with this Privacy Policy.

Why we need to use your personal information

Your personal information will be collected and stored by Lorisian for the following purposes:

  • To provide you with the services you expect us to.
  • To respond to your request or questions when you contact us.
  • We may also use your contact data for direct marketing to inform you about services/products/events etc that might be of interest to you.
  • To send other information including upcoming events or newsletters.
  • To help us create, publish, and improve content.
  • To perform analytical research on our prospective client base, including the content, and the services/products they are interested in
  • To comply with any legal obligation
  • We may also process your information to:
  1. investigate or respond to incidents and complaints
    b. comply with obligations and rights and cooperate with investigations carried out by the police, government or regulators.

Data we collect

Website and cookie data


Certain parts of our Site use “cookies” to keep track of your visit and to help you navigate between sections. A cookie is a small data file that certain websites store on your computer’s hard-drive when you visit such websites. Cookies can contain information such as your user ID and the pages you have visited. The only personal information a cookie contains is information that you have personally supplied.

Please note that providers of third-party content may also use cookies over which we have no control, for further information please visit our cookie policy.

Personal information we collect from customers


Personal data including but not limited to:

  • Your full name
  • Date of Birth
  • Address Details

Special Category data including but not limited to:

  • Health Details
  • Data gathered for and from testing

(Please refer to the processing of test data for further information)

Personal information we collect from Sole Traders/ Sub-contractors


Personal data including but not limited to:

  • Your full name
  • Date of Birth
  • Address Details
  • Contact information
  • Information regarding your business
  • Financial information (e.g. bank details, credit history etc.)

Personal information we collect from you for recruitment and selection purposes

Data from Application forms/CVs including but not limited to:

  • Full Name
  • Address details
  • Employment history
  • Email address
  • Data gathered from testing including psychometric testing

Personal information we collect and store from Employees

Personal data including but not limited to:

  • Your full name
  • Date of Birth
  • Address Details
  • Job Title
  • Salary Information
  • Emergency Contact Details
  • Financial information (e.g. bank details)

Special Category data including but not limited to:

  • Ethnic Origin
  • Nationality
  • Health details

Lawful Basis for the processing of personal data

The lawful bases we rely on for processing your personal information are;

  • Your Consent
  • The processing is necessary for the performance of a contract
  • The processing is necessary for the purposes of legitimate interests pursued by the controller/or Joint controllers
  • The processing is necessary for the compliance with a legal obligation.
  • We have a VITAL interest
  • Processing is necessary for the performance of a task carried out in the public interest

If at any time you wish to change the uses of your personal information to which you have consented, please contact us at

  1. Legitimate Interests as a legal basis for data processing:

The following table documents where we use legitimate interests and why. Internally we have conducted a balancing test to make sure that the privacy rights of individuals have been given due consideration and where required we have implemented suitable safeguards.

Data Processing

Legitimate Interest

*Live Chat

Expanding the range of communication methods to our customers

Email address and name

To engage with our customers to provide a service

Email marketing

Communicating with current and previous customers who have proactively interacted with the company

Non-Conformity Reporting

To improve our products and services for customers

Complaints System

To improve our products and services for customers

*Dot Mailer

Communicating through marketing with current and previous customers who have proactively interacted with the company previously

Call Recording o/b and i/b

To improve our products and services for customers. Help resolve complaints and the training of employees

Notes and Action

To provide a record of our engagement with our customers

* Involves Third Party Processing

Marketing communications

We will only send marketing communications to you via email or other communication means where you have consented that we may do so by our positive ‘opt in’ process or we have a legitimate reason to do so. You can ‘opt out’ at any time by emailing email address

Processing of data for testing purposes

For our testing services we will process your sample as agreed through the signing of a client details form and on the subsequent basis;


Full Test Programmes: Lorisian, trading as YorkTest, will use the defined and CE marked YorkTest Laboratories’ IgG food intolerance test which uses the enzyme linked immunosorbent assay (ELISA) method to detect IgG antibodies in the blood sample which recognise and bind to purified food antigens. The processing will provide a qualitative result with results for each IgG food reaction categorised into ‘no reaction’, ‘borderline’ or ‘reaction’.


Testing: Lorisian will process the sample to determine the alanine transaminase and aspartate transaminase levels. The processing will subsequently provide a colour coded result of green, amber, dark amber or red.

Homocysteine Testing: Lorisian will use High Performance Liquid Chromatography (HPLC) to process a sample to detect Homocysteine levels in the blood, the measurement will be in μmol/L. The processing will provide a result in one of the following bands: Less than 10, 10 to 15,16 to 20, over 20

Allergy check Testing: Lorisian will process samples to determine the level of IgE mediated environmental allergens in the blood. The processing will provide a class score of 0, 1 or 2.

Data Retention

We will always retain your personal information in accordance with the current data protection laws Lorisian never retain your information for longer than is necessary.

Sharing data with 3rd parties

We may share some of your data with 3rd parties which will include but is not limited to specific companies and organisations as required in accordance with company policy, compliance to UK legislation and to comply with site regulations in line with GDPR.

NOTE: Data is only shared with 3rd parties to facilitate delivery of the required service.

On occasion we may be required to share your data outside of the UK. We will ensure that any such company will collate, use and sort your data in full compliance with GDPR.

Rights to Access and Control of Your Personal Data

You can access, request to amend or delete your personal data at any time by emailing

  • Delete Data: You can ask us to erase or delete all or some of your personal data if it is no longer necessary to provide Services to you. We have the right to refuse if the retention of that data is covered by other UK legislation or we have a legitimate reason to continue to store that data.
  • Change or Correct Data: You can request that we edit your personal data if that data is inaccurate.
  • Object to, or Limit or Restrict, Use of Data: You can ask us to stop using all or some of your personal data if we have no legal right to keep using it or to limit our use of it if your personal data is inaccurate or unlawfully held.
  • Right to Access and/or Take Your Data: You can ask us for a copy of your personal data and can ask for a copy of personal data you provided in machine readable form.

Additional Changes to our Privacy Policy

We hold the full right to change or amend our privacy statement and/or policy at any time.

Our Contact Details

Data Protection Officer


Units 2 & 3,

Triune Court,

Monks Cross Drive,


YO32 9GZ

+44 (0)1904 428 550


You have the right to complain to the supervisory authority (ICO) if you feel that we are not complying with the Data Protection Regulation at the following address;

Information Commissioner’s Office (ICO)

Wycliffe House

Water Lane





This website uses cookies to give you the best experience. Agree by clicking the 'Accept' button.