Privacy

Your consent before upload

Before your file or optional background details are sent, we ask you to tick an unchecked consent box. It covers collecting and using that information to produce and deliver your report, including processing by the necessary service providers described below. The consent wording, versions and time are recorded with the upload. Selecting a file or paying alone is not this consent.

Submit your own data, or data for which you have the person's explicit written consent and authority to request this analysis. Consent to your report does not include marketing, model training, adding your data to a reference panel or other research. Those uses require a separate, explicit agreement.

You can withdraw consent or request deletion through Contact. If you withdraw before the report is produced, we delete your file and refund you, as stated in the checkout privacy policy. A report already delivered cannot be recalled.

What we collect

Your genetic data

the raw file you upload, and the analysis records and report derived from it.

Optional profile text

anything you type into the free-text fields at upload, if you use them. Your ethnic background and family region are asked at upload and may be left blank.

Your testing service

which company produced the file, as you report it at upload. Compared against what the file itself indicates.

Your email address

asked at upload so we can reach you about that upload, and collected again at checkout and stored with your order so we can send the status link and report.

Order records

reference, status, amount and dates. The order page shows nothing that identifies you.

Upload consent

the wording you accepted, its version, the privacy version and the time you accepted, linked to your upload and any resulting order.

We set one cookie, ia_dl, and only at the moment you unlock a report with your access code. It is an HttpOnly session cookie scoped to that single order's download route, expires after 45 minutes, and is not used for tracking, analytics or advertising. The checkout provider sets what it needs to complete a payment.

How it is used

Your file is uploaded over an encrypted connection, storedencrypted at rest, and used only to produce your report. It is never sold, licensed, published or added to any reference panel. It is disclosed only to the service providers needed to run the service, and never to advertisers or data brokers. Cloudflare provides storage, hosting, bot protection and email delivery. Shopify handles checkout and payment; your raw genotype file is not sent to Shopify. Its checkout records are linked to the upload by an opaque reference.

Providers may process information outside your country. For the full list of providers and cross-border processing details, read the checkout privacy policy.

How long we keep your data

Raw genotype files are kept for at least seven years from the date of the order (see the terms of service), so that a completed analysis can be reproduced, checked, or re-run against improved reference datasets. Reports are available for secure download for 90 days after delivery. Order and payment records are kept as required for accounting.

Completed uploads that never become orders are eligible for cleanup after 30 days; expired or aborted reservations after 7 days. Their optional background details and consent record are removed with the upload. A paid upload's consent record remains linked to it until that upload is erased; it is not an independent marketing record. Earlier orders keep the retention terms that applied when purchased.

Deletion on request

Write to us via the contact page quoting your order reference. We erase:

• the raw file
• the report and its download grants
• the profile text, the reported testing service and the email given at upload
• the analysis records
• the upload consent record associated with the deleted upload

and anonymise the order record, keeping only what accounting rules require. We confirm by email when it is done.

If you die or can no longer act for yourself

A person legally authorised to act for you, such as the executor of your estate or someone holding your power of attorney, can ask us to delete your genetic data and report, or ask what we hold about you, as the law allows. They write through the contact page with your order reference and proof of their authority, which we check before acting. We never release your raw file to anyone else.