Privacy Policy

We collect only the data we need to operate the service:

• Account details. Your name and email address, provided when you create an account or activate a kit.

• Activation details. The information you provide when activating your kit — such as date of birth and sex at birth — which the lab needs to process your sample and reference your results correctly.

• DNA and epigenetic data. When your sample is processed, we receive your genetic and epigenetic analysis results from our accredited lab partner so we can display them in your account.

• Sample status data. Kit activation, dispatch, lab receipt, and processing status events, so we can show you where your sample is and when to expect results.

• Usage data. Standard analytics — page views, activation completion rates, referral sources. We do not track your activity across other websites.

Your data is used for the following purposes and nothing else:

• Activating your kit and linking it to your private account.

• Receiving your results from the lab and presenting them to you in your account.

• Sending you status updates — sample received, results ready — and sign-in links.

• Routing you to the correct partner-branded experience when a kit came through one of our partners.

• Improving the service through aggregated, anonymised analysis.

• Complying with legal obligations where required.

We do not sell your personal data. Ever. To anyone.

We share data only with the service providers we rely on to operate:

• Lab partners. Your registration details and sample information are shared with our accredited laboratory partner solely to process your test kit and return your results.

• Retail partners. If your kit was purchased through one of our retail or brand partners, the partner relationship determines which branded experience you see. Partners do not receive access to your results.

• Infrastructure providers. Our hosting, database, and email services process data on our behalf under strict data-processing agreements.

We may disclose data if required by law — for example, in response to a valid court order or regulatory request.

Your data is stored on encrypted, access-controlled infrastructure. We use industry-standard security practices including:

• Encryption in transit (TLS) and at rest (AES-256).

• Role-based access controls — only staff who need your data can see it.

• Regular security audits and dependency updates.

DNA and epigenetic data is treated with particular care. It is stored separately from your account credentials and is never used for any purpose beyond delivering your results to you. You can request its deletion at any time.

No system is impenetrable. If a breach occurs that affects your data, we will notify you promptly and take immediate steps to contain it.

You have the right to:

• Access. Request a copy of the personal data we hold about you.

• Correct. Ask us to fix any inaccurate or incomplete data.

• Delete. Request deletion of your personal data, including your DNA results and account profile. We will comply within 30 days.

• Port. Receive your data in a structured, machine-readable format.

• Withdraw consent. Unsubscribe from non-essential emails at any time. Every marketing email includes an unsubscribe link.

To exercise any of these rights, email hello@mylabresults.co. We will respond within 30 days.

We use a small number of cookies that are strictly necessary for the service to function:

• Authentication. A session cookie that keeps you signed in.

• Activation progress. Temporary storage that remembers your progress through kit activation so you do not lose it if you close the browser.

• Analytics. Anonymous, aggregated usage data — page views, referral sources, and conversion events. No personally identifiable information is included in analytics.

• Partner attribution. If you arrived via a partner kit or link, a record of the referring partner so you see the correct branded experience.

We do not use third-party advertising cookies or tracking pixels on this site.

We keep your data for as long as your account is active. If you delete your account, we will permanently delete:

• Your account profile — within 7 days.

• Your DNA and epigenetic data — within 7 days.

• Your kit activation history — within 7 days.

Purchase records may be retained for longer where required for tax, accounting, or legal purposes.

We operate primarily in the United Kingdom and the United States. If you are located outside these countries, your data may be transferred to, stored, and processed in a jurisdiction different from your own. We ensure that any such transfers are protected by appropriate safeguards in accordance with applicable data protection law, including UK GDPR.

We may update this policy from time to time. If the changes are material, we will notify you by email before they take effect. The date at the top of this page will always reflect the most recent revision.