General Privacy Policy

What we process

Account data: name, email address, password (stored only as a hash).

Order data: products ordered, order number, delivery address, order and kit status.

Payment data: payment status and transaction reference. Card details are entered directly with our payment provider and are never stored by us.

Technical data: IP address, browser and device information, and log data required to operate and secure the website.

Support data: the content of messages you send us.

Purposes and legal bases

Performing the contract: account creation, order processing, kit dispatch and return, report delivery and customer support.

Legal obligations: retention of commercial and tax records.

Legitimate interests: security, fraud prevention, and technical operation of the website.

Consent: where you have given it, in particular for the processing of genetic data.

Recipients

ATLAS BIOLABS LIFE SC. GMBH — laboratory analysis, kit production and logistics, sample handling and genetic data processing.

Logistics providers, for shipping the collection kit and returning your sample.

Payment service provider, for processing your payment.

Hosting, database, storage and email delivery providers acting on our instructions.

Data is not sold, and it is not shared with insurers, employers or advertisers.

Retention

Account and report data is retained while your account exists. Commercial and tax records are retained for the statutory retention periods. Genetic data follows the retention rules set out in Protection of Genetic Data.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent at any time with effect for the future. You also have the right to complain to a data protection supervisory authority.

To exercise any right, contact performance@sportsdna360.com.