Ancestry India DNA Privacy Statement
Effective: 21 August 2024
Introduction
Ancestry India DNA (“we”, “our”, or “us”) is an independent Indian health-technology service providing DNA-informed health and wellness reports. Our services are designed to provide personalised wellness insights based on genetic information.
We do not provide genealogy, family-tree research, historical-record searches, ethnicity estimates, family-origin reports or relative matching services.
We are committed to protecting your privacy and handling your personal and genetic information responsibly, transparently and securely. This Privacy Policy explains how we collect, use, store, share and protect your information when you use our website or purchase our services.
Our Privacy Principles
We believe your genetic information deserves the highest level of protection.
Our privacy practices are guided by these principles:
- We collect only the information necessary to provide our services.
- You do not transfer ownership of your DNA, biological sample or personal information to us.
- We process your information only for the purposes described in this Privacy Policy.
- We do not sell or rent identifiable personal or genetic information.
- We explain our data practices in clear language so you can make informed decisions.
Data Collection
Ancestry India DNA, through its services and operations, systematically collects two primary categories of data, with full recognition of their sensitivity:
- Personal Information: Includes, but is not limited to, identifying data such as names, addresses, email addresses, telephone numbers, and financial information (e.g., payment methods, billing addresses).
- Sensitive Personal Information: Defined under Indian law as data relating to genetic sequences, health data, and ancestry-related information. This includes genetic data extracted through DNA samples.
The collection of such data is executed strictly for the purposes of providing genetic insights, DNA-informed health and wellness reports, and related services, in full accordance with the prevailing laws and standards governing data protection and privacy.
Consent and Data Usage
Upon utilizing Ancestry India DNA’s services, you provide explicit, informed consent to the collection, processing, and analysis of your personal and genetic data. This data may be utilized for, but is not limited to, the following purposes:
- Delivering personalized ancestry and health-related reports derived from genetic analysis.
- Enhancing service offerings through research and data analytics aimed at improving genetic and ancestry services.
- Facilitating participation in research initiatives, subject to separate and specific consent where applicable.
The user further acknowledges that, notwithstanding the scope of their control over personal data, We collect and process personal and genetic information only to provide the services you request, improve our services where permitted, comply with legal obligations, and where you have provided appropriate consent.
Retention of Biological Samples
Biological samples, including but not limited to saliva or other bodily materials provided by the user, shall be retained by Ancestry India DNA in a secure biorepository, subject to the user’s explicit consent. Users may choose, through formal written request, to opt for the destruction of their biological samples post-analysis. Absent such a request, Ancestry India DNA Biological samples are retained only for as long as necessary to provide the requested services or as required by law. You may request destruction of your sample where applicable and subject to legal or laboratory requirements. for potential future testing, research, or commercial purposes, in compliance with applicable regulatory frameworks.
The destruction of samples, once authorized by the user, will be irrevocable, and the company shall bear no responsibility for any data or insights that may have otherwise been derived from future analyses of the destroyed samples.
Protection and Security
The protection of personal and genetic data is undertaken with the utmost rigor through a combination of advanced technical, physical, and administrative safeguards. Ancestry India DNA employs encryption protocols, restricted access systems, and secure storage solutions to mitigate unauthorized access or breaches.
Data will be stored exclusively within India, in compliance with local laws, including the IT Act, 2000, and any further amendments thereto. Ancestry India DNA continuously reviews its data security policies to ensure adherence to industry standards, comparable to the leading practices of domestic companies such as MapMyGenome and MedGenome.
Sharing, Leasing, and Selling of Data
The customer is strictly prohibited from engaging in any form of sale, lease, transfer, or sharing of personal or genetic data obtained through Ancestry India DNA’s services, whether directly or indirectly, without express written authorization from Ancestry India DNA. Any contravention of this prohibition shall be deemed a breach of contract, subjecting the customer to legal and financial penalties, including but not limited to immediate termination of services.
Notwithstanding this restriction, commercial transactions involving said data sharing of anonymized or identifiable personal and genetic data with third parties. Such parties may include research institutions, commercial entities, or healthcare providers, provided that such actions are undertaken in compliance with Indian law and any applicable international regulations.
Ancestry India DNA retains full ownership and control over the data collected, and reserves the right to engage in commercial transactions involving said data. The transfer, sale, or lease of data may occur for purposes deemed beneficial to scientific research, market expansion, or other legitimate business interests, subject to notification requirements as stipulated by law.
User Rights
In accordance with the applicable Indian data protection regulations, users are afforded certain rights with respect to their personal and genetic data, including but not limited to:
- Right to Access: Users may request access to their personal data and genetic reports at any time, subject to the company’s verification of identity.
- Right to Rectification: Users may request corrections or updates to any inaccuracies in their data.
- Right to Erasure: request deletion where legally permitted of their personal or genetic data; however, such deletions shall not apply retroactively to data already shared or sold under the terms of this Privacy Statement.
- Right to Withdraw Consent: Users may withdraw consent for data processing at any time, except where such withdrawal contravenes legal or contractual obligations.
Cookies and Tracking
Ancestry India DNA employs cookies and similar tracking mechanisms to enhance the user experience. These technologies are used to collect non-personalized information regarding user behavior, site navigation, and preferences. Users may control or restrict the use of cookies via their browser settings, but doing so may impact the full functionality of the services provided.
International Data Transfers
Although data processing currently occurs solely within India, Ancestry India DNA Personal and genetic information is primarily processed and stored within India. If international processing becomes necessary, appropriate legal safeguards will be implemented and users will be informed where required by law. should business needs dictate. In such cases, all reasonable safeguards will be implemented to ensure compliance with Indian data protection laws, and users will be notified of any significant changes to data processing locations.
Amendments to the Privacy Statement
Ancestry India DNA reserves the right to modify or update this Privacy Statement at its discretion, with or without prior notice to users. Any material changes will be communicated to users through appropriate channels, and continued use of the services following such updates will constitute acceptance of the revised terms.retains exclusive ownershi