🔒 Privacy Policy

1. Information We Collect

We collect the following types of information:

Personal Information

• Name: To personalize your reports
• Email Address: To send order confirmations and deliver your reports
• Payment Information: Processed securely through Stripe or PayPal (we do not store credit card details)

Genetic Data

• Raw DNA data files uploaded from 23andMe, AncestryDNA, MyHeritage, FTDNA, LivingDNA, or other testing companies
• G25 coordinates if provided directly

Technical Data

• IP address (anonymized)
• Browser type and version
• Pages visited and time spent

2. How We Handle Genetic Data

When you upload a DNA file or provide G25 coordinates:

1. Your file is uploaded via encrypted connection (HTTPS/TLS)
2. The file is processed on our secure servers
3. Your ancestry report is generated
4. The original DNA file is permanently deleted
5. Only the generated report (PDF) is stored temporarily for delivery

We never:

• Allow human review or access to your genetic data
• Share your genetic data with third parties
• Sell your genetic information
• Use your DNA data for research without explicit consent
• Store your raw DNA files after processing
• Create genetic databases from user data

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: To process your DNA data and generate ancestry reports
• Communication: To send order confirmations, reports, and respond to inquiries
• Payment Processing: To process transactions via our payment partners
• Service Improvement: To improve our calculators and analysis methods (using anonymized, aggregated data only)
• Legal Compliance: To comply with applicable laws and regulations

4. Data Sharing

We share your information only with:

• Payment Processors: Stripe and PayPal for secure payment processing
• Email Services: To deliver your reports and communications
• Hosting Providers: Secure cloud infrastructure providers

These service providers are contractually obligated to protect your data and only use it for the purposes we specify.

We will never sell your personal or genetic information to third parties.

5. Data Security

We implement industry-standard security measures:

• SSL/TLS encryption for all data transmission
• Encrypted storage for any temporarily stored data
• Regular security audits and updates
• Access controls limiting who can access data
• Secure deletion protocols for genetic data

6. Data Retention

• Genetic Data (DNA Files): Deleted immediately after report generation
• Generated Reports: Available for download for 30 days, then deleted
• Order Records: Retained for 7 years for accounting/legal purposes
• Email Communications: Retained as needed for customer support

7. Your Rights

Under GDPR and other privacy laws, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a portable format
• Objection: Object to processing of your data
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@exploreyourdna.com

8. Cookies

We use essential cookies for:

• Session management
• Security (CSRF protection)
• Basic analytics (anonymized)

We do not use tracking cookies for advertising purposes.

9. Contact Us

For privacy-related questions or to exercise your rights:

Email: privacy@exploreyourdna.com
Website: www.exploreyourdna.com/contact