01What this policy covers
This policy covers your biological samples (blood, stool and saliva), test results and the genetic data produced from DNA tests. Under UK GDPR, health and genetic data are special category data and need an additional legal condition and stronger safeguards.
02Consent to testing
Before we analyse your sample, we ask for your explicit consent to the specific tests you've ordered, in line with UK GDPR and the Human Tissue Act 2004 (which makes it an offence to analyse a person's DNA without their consent). You must be 18 or over and may only submit your own sample.
03Our commitments
- We never sell your health or genetic data.
- We never share it with insurers, employers, data brokers or advertisers.
- We only analyse your sample for the tests you ordered.
- We only use your data or sample for research if you give separate, optional consent, which you can withdraw at any time.
- We never use health or genetic data to personalise advertising.
04Genetic results and insurance
Under the Code on Genetic Testing and Insurance, agreed between the UK Government and the Association of British Insurers, insurers can't ask for or take into account the results of predictive genetic tests you've taken, with limited exceptions (currently Huntington's disease for life insurance over £500,000). We never share your results with insurers. You can find the Code on gov.uk.
05Research (optional)
If you opt in, we may use de-identified data to improve our tests or support ethically approved research. We'll tell you about any research partner in advance. Opting out doesn't affect your service in any way.
06Storage and destruction of samples
- Blood and stool samples are destroyed after testing, normally within [30] days.
- DNA samples are destroyed within [60] days of your report, unless you consent to longer storage for re-analysis.
- You can ask us to destroy your sample and delete your genetic data at any time.
- Where samples are stored, this is done in line with the Human Tissue Act 2004 and the laboratory's accreditation requirements.
07Your relatives
Genetic results can say something about blood relatives. We'll never contact or share your results with relatives. If you're worried about an inherited condition, your GP can refer you to an NHS clinical genetics service.
08Security
Genetic data is stored encrypted and separately from your identity details, with access limited to the staff who need it. [Confirm hosting location and certifications.]
09Your rights
You have all the rights described in our Privacy Policy. To delete your genetic data or destroy your sample, email [privacy@biohealthcarehub.co.uk] or use the privacy settings in your Hub.