Data Privacy

We take the protection of your sensitive data seriously. Your report, your data, and your DNA sample will never be shared with or sold to any third party — and that will never change.

How data is stored and protected

• Data is encrypted at rest and in transit
• We apply the principle of least privilege for internal access
• Data is segregated — reports, genetic data, and order information are stored separately
• We collect minimal personal data
• Returned samples are identifiable only by barcode. The ISO-certified UK lab receives no identifiable personal information
• The physical sample is held frozen in a secure facility at the lab and destroyed after three months
• Genetic data is deleted six months after processing

GDPR and European compatibility

Lifecode Gx operates under UK GDPR, which closely mirrors the EU GDPR. The UK holds adequacy decisions from the EU, so personal data can flow freely between the UK and EU without additional safeguards. Our servers and data are hosted in the UK or EU wherever possible.