Privacy Policy for use with order of Genetic Testing 隐私政策（适用于同时订购基因检测服务的用户）

Privacy Policy Highlights

Last Updated: 16 Jan, 2022

These "Privacy Highlights" provide an overview of some core components of our data handling practices. Please be sure to review the Full Privacy Statement.

Information We Collect

We generally collect the following information:

• Information we receive when you use our Services.  We collect Web-Behavior Information via cookies and other similar tracking technologies when you use and access our Services (our website, mobile apps, products, software and other services). See our Cookie Policy for more information.
• Information you share with us.  We collect and process your information when you place an order, create an account, register your CHONPS Health Tech kit, complete research surveys, post on our Forums or use other messaging features, and contact Customer Care. This information can generally be categorized as Registration Information, Self-Reported Information, and/or User Content as defined in our full Privacy Statement.
• Information from our DNA testing services.  With your consent, we extract your DNA from your saliva sample and analyze it to produce your Genetic Information (the As, Ts, Cs, and Gs at particular locations in your genome) in order to provide you with CHONPS Health Tech reports.

How We Use Information

We generally process Personal Information for the following reasons:

• To provide our Services. We process Personal Information in order to provide our Service, which includes processing payments, shipping kits to customers, creating customer accounts and authenticating logins, analyzing saliva samples and DNA, and delivering results and powering tools like DNA Relatives.
• To analyze and improve our Services.  We constantly work to improve and provide new reports, tools, and Services. For example, we are constantly working to improve our ability to assign specific ancestries to your DNA segments and maximize the granularity of our results. We may also need to fix bugs or issues, analyze the use of our website to improve the customer experience or assess our marketing campaigns.
• For CHONPS Health Tech Research, with your consent. If you choose to consent to participate in CHONPS Health Tech Research, CHONPS Health Tech researchers can include your de-identified Genetic Information and Self-Reported Information in a large pool of customer data for analyses aimed at making scientific discoveries.

Control: Your Choices

You have the ability to make decisions about how your data is shared and used. You choose:

• To store or discard your saliva sample  after it has been analyzed.
• Which health report(s)  you view and/or opt-in to view.
• When and with whom you share your information , including friends, family members, health care professionals, or others outside our Services, including through third party services that accept CHONPS Health Tech data and social networks.
• To give or decline consent for CHONPS Health Tech Research. By agreeing to the Research Consent Document, Individual Data Sharing Consent Document, or participating in a CHONPS Health Tech Research Community you can consent to the use of your de-identified data for scientific research purposes.
• To delete your CHONPS Health Tech account and data, at any time.

Access To Your Information

Your Personal Information may be shared in the following ways:

• With our service providers, as necessary for them to provide their services to us.
• With qualified research collaborators , only if you provide your explicit consent.

CHONPS Health Tech will not sell, lease, or rent your individual-level information to a third party for research purposes without your explicit consent.

• We will not  share your data with any public databases .
• We will not  provide any person’s data (genetic or non-genetic) to an insurance company  or  employer .
• We will not provide information to law enforcement or  regulatory authorities unless required by law to comply with a valid court order, subpoena, or search warrant for genetic or Personal Information (visit our Transparency Report).

How We Secure Information

CHONPS Health Tech implements measures and systems to ensure confidentiality, integrity, and availability of CHONPS Health Tech data. Our team regularly reviews and improves our security practices to help ensure the integrity of our systems and your information. These practices include, but are not limited to, the following areas:

• Independent security certification and audit. Our information security management system, which protects CHONPS Health Tech information assets supporting our Services, has been certified under the internationally recognized ISO/IEC 27001:2013 standard. Some of those controls are described below.
• Encryption.  CHONPS Health Tech uses industry standard security measures to encrypt Sensitive Information both when it is stored and when it is being transmitted.
• Limited access to essential personnel.  We limit access of information to authorized personnel, based on job function and role. CHONPS Health Tech access controls include multi-factor authentication, single sign-on, and a strict least-privileged authorization policy.

Risks and Considerations

There may be some consequences of using our Services that you haven't considered.

• You may discover things about yourself and/or your family members that may be upsetting or cause anxiety and that you may not have the ability to control or change.
• You may discover relatives who were previously unknown to you, or may learn that someone you thought you were related to is not your biological relative.
• In the event of a data breach it is possible that your data could be associated with your identity, which could be used against your interests.

Full Privacy Statement

Last Updated: 16 Jan, 2022

This Privacy Statement applies to all websites owned and operated by CHONPS Health Tech, Inc ("CHONPS Health Tech"), including www.gene2h.com, and any other websites, pages, features, or content we own or operate, and to your use of the CHONPS Health Tech mobile app and any related Services. Our Privacy Statement is designed to help you better understand how we collect, use, store, process, and transfer your information when using our Services.

Please carefully review this Privacy Statement and our Terms of Service. Unless otherwise defined in this Privacy Statement, terms used in this Privacy Statement have the same meanings as terms defined in our Terms of Service. By using our Services, you acknowledge all of the policies and procedures described in the foregoing documents. If you do not agree with or you are not comfortable with any aspect of this Privacy Statement or our Terms of Service, you should immediately discontinue use of our Services.

Contents

1. Key Definitions
2. Information we collect
• Information you provide directly to us
• Information related to our genetic testing services
• Information collected through tracking technology
• Other types of information
3. How we use your information
• To provide you with Services and analyze and improve our Services
• To process, analyze and deliver your genetic testing results
• To allow you to share your Personal Information with others
• To allow you to share your Personal Information for research purposes
• To recruit you for external research
• To provide customer support
• To conduct surveys or polls, and obtain testimonials
• To provide you with marketing communications
4. Information we share with third parties
• General Service Providers
• "Targeted advertising" service providers
• Aggregate Information
• Information we share with commonly owned entities
• As required by law
• Business Transactions
5. Your choices
• Access to your account
• Marketing communications
• Sharing outside of the CHONPS Health Tech Services
• Account Deletion
6. Security Measures
7. Children's Privacy
8. Linked Websites
9. Information for Customers in Designated Countries
• International Transfers
• Our relationship with you
• Legal bases for processing Personal Information from the EU
• Direct Marketing
• Privacy Rights
• Complaints
10. California Residents
11. Nevada Residents
12. Do-Not-Track Statement
13. Changes to this Privacy Statement
14. Contact information

1. Key Definitions

1. Aggregate Information: information that has been combined with that of other users and analyzed or evaluated as a whole, such that no specific individual may be reasonably identified.
2. De-identified Information: information that has been stripped of your Registration Information (e.g., your name and contact information) and other identifying data such that you cannot reasonably be identified as an individual, also known as pseudonymized information.
3. Individual-level Information: information about a single individual's genotypes, diseases or other traits/characteristics, but which is not necessarily tied to Registration Information.
4. Personal Information: information that can be used to identify you, either alone or in combination with other information. CHONPS Health Tech collects and stores the following types of Personal Information:

a.       Registration Information: information you provide about yourself when registering for and/or purchasing our Services (e.g. name, email, address, user ID and password, and payment information).

b.       Genetic Information: information regarding your genotypes (i.e. the As, Ts, Cs, and Gs at particular locations in your genome), generated through processing of your saliva by CHONPS Health Tech or by its contractors, successors, or assignees; or otherwise processed by and/or contributed to CHONPS Health Tech.

c.       Self-Reported Information : information you provide directly to us, either through the Services or through a third party, including your disease conditions, other health-related information, personal traits, ethnicity, family history, and other information that you enter into surveys, forms, or features while signed in to your CHONPS Health Tech account.

d.       Sensitive Information: information about your health, Genetic Information, and certain Self-Reported Information such as racial and ethnic origin, sexual orientation, and political affiliation.

e.       User Content: information, data, text, software, music, audio, photographs, graphics, video, messages, or other materials - other than Genetic Information and Self-Reported Information-generated by users of CHONPS Health Tech Services and transmitted, whether publicly or privately, to or through CHONPS Health Tech.

f.        Inferences and Derived Data: information, data, assumptions, or conclusions that are derived directly or indirectly from another source of Personal Information. For example, we may use statistical techniques to infer additional genetic information based on genetic information generated directly through the processing of your saliva sample.

g.       Web-Behavior Information: information on how you use our Services collected through log files, cookies, web beacons, and similar technologies, (e.g., device information (device identifiers), IP address, browser type, domains, page views).

2. Information we collect

a.       Information you provide directly to us or through a third party

i. Registration Information. When you purchase our Services or create a CHONPS Health Tech account, we collect Personal Information, which may include your name, date of birth, billing and shipping address, payment information (e.g., credit card) and contact information (e.g. email, phone number and license number).

ii. Self-Reported Information. You have the option to provide us with additional information about yourself through surveys, forms, features and applications. For example, you may provide us with information about your personal traits (e.g., eye color, height), ethnicity, disease conditions (e.g., Type 2 Diabetes), other health-related information (e.g., pulse rate, cholesterol levels, visual acuity), and family history information (e.g., information similar to the foregoing about your family members). Before you disclose information about a family member, you should make sure you have permission from the family member to do so.

iii. User Content. Some of our Services allow you to create and post or upload content, such as data, text, software, music, audio, photographs, graphics, video, messages, or other materials that you create or provide to us through either a public or private transmission (" User Content"). For example, User Content includes any discussions, posts, or messages you send on our Forums.

iv. Blogs and Forums. Our website offers publicly accessible blogs. Additionally, CHONPS Health Tech customers may participate in our online Forums. You should be aware that any information you provide or post in these areas may be read, collected, and used by others who access them. To request that we remove or de-identify your Personal Information from our blog or Forums, contact us at privacy@gene2h.com. Please note that whenever you post something publicly, it may sometimes be impossible to remove all instances of the posted information, for example, if someone has taken a screenshot of your posting. Please exercise caution before choosing to share Personal Information publicly on our blogs, Forums or in any other posting. You may be required to register with a third party application to post a comment. To learn how the third party application uses your information, please review the third party's terms of use and privacy statement.

v. Social media features and widgets. Our Services include Social Media Features, such as the Facebook "Like" or "Share" button and widgets ("Features"). These Features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the Feature to function properly. They may also allow third party social media services to provide us information about you, including your name, email address, and other contact information. The information we receive is dependent upon your privacy settings with the third party social media service. Features are either hosted by a third party or hosted directly on our site. Your interactions with these Features are governed by the privacy statements of the third party companies providing them. You should always review and, if necessary, adjust your privacy settings on third party websites and services before linking or connecting them to our website or Service.

vi. Third party services (e.g., social media). If you use a third party site, such as Facebook or Twitter, in connection with our Services to communicate with another person (e.g., to make or post referrals or to request that we communicate with another person), then in addition to that person's name and contact information, we may also collect other information (e.g., your profile picture, network, gender, username, user ID, age range, language, country, friends lists or followers) depending on your privacy settings on the third party site. We do not control the third party site's information practices, so please review the third party’s privacy statement and your settings on the third party’s site carefully.

vii. Third party sign in. You may create a CHONPS Health Tech account and/or sign in to our Services using an account you created with a third party service, such as Google. If you provide authorization to CHONPS Health Tech, we will collect and use the information you share with us via that third party service (such as your email address, name, and date of birth as specified in your third party service account) in accordance with this Privacy Statement. You are responsible for managing your credentials for your third party service account, and for maintaining the security of your third party service account. CHONPS Health Tech does not have access to the credentials for your third party service account. If you choose to use third party sign in and you lose access to your credentials for your third party service account, you may not be able to access your CHONPS Health Tech account. You may manage authorization for third party sign in through your CHONPS Health Tech Account Settings or through your third party service account.

viii. Referral information and sharing. When you refer a person to CHONPS Health Tech or choose to share your CHONPS Health Tech results with another person, we will ask for that person's email address. We will use their email address solely, as applicable, to make the referral or to communicate your sharing request to them, and we will let your contact know that you requested the communication. By participating in a referral program or by choosing to share information with another person, you confirm that the person has given you consent for CHONPS Health Tech to communicate (e.g., via email) with him or her. The person you referred may contact us at privacy@gene2h.com to request that we remove this information from our database. For more information on our referral program, see here.

ix. Gifts. If you provide us with Personal Information about others, if others give us your information, or if you authorize another individual to share or send your Personal Information to our third party service provider(s) for the purpose of ordering the Service or other personalized gift(s), we will only use that information for the purpose for which it was provided to us. These purposes may include, for example, where you provide us with a friend’s shipping address when placing an order or where you authorize a family member to order personalized merchandise based on your ancestry report results. Once a gift recipient registers for our Services and agrees to our Privacy Statement, our Terms of Service, and if applicable, certain Consent Documents, his or her Personal Information will be used in manners consistent with this Privacy Statement, and will not be shared with the purchaser, unless they independently choose to share their own Personal Information through the Services with the purchaser. Information shared directly with our third party service provider(s) for personalized gifts are subject to such third party’s terms of service and privacy policies.

x. Customer service. When you contact Customer Care or correspond with us about our Service, we collect information to: track and respond to your inquiry; investigate any breach of our Terms of Service, Privacy Statement or applicable laws or regulations; and analyze and improve our Services.

b.       Information related to our genetic testing services

 . Saliva sample and biobanking. To use our genetic testing services, you must purchase, or receive as a gift, a CHONPS Health Tech Personal Genetic Service testing kit, create an online account and register your kit, and ship your saliva sample to us or our third party laboratory. Your DNA will be extracted from your saliva sample for analysis. During kit registration you are asked to review our Consent Document for Sample Storage and Additional Genetic Analyses. Unless you consent to sample storage (“Biobanking”) and additional analyses, your saliva sample and DNA are destroyed after the laboratory completes its work, subject to laboratory legal and regulatory requirements. You can update your Biobanking preference to discard a stored sample within your CHONPS Health Tech Account Settings once your sample has completed processing.

i. Genetic Information. Information regarding your genotype (e.g. the As, Ts, Cs, and Gs at particular locations in your genome), your Genetic Information, is generated when we analyze and process your saliva sample, or when you otherwise contribute or access your Genetic Information through our Services. Genetic Information includes the CHONPS Health Tech results reported to you as part of our Services, and may be used for other purposes, as outlined in Section 3 below.

c.       Web-Behavior Information collected through tracking technology (e.g. from cookies and similar technologies)

We and our third party service providers use cookies and similar technologies (such as web beacons, tags, scripts and device identifiers) to:

 .help us recognize you when you use our Services;

i.customize and improve your experience;

ii.provide security;

iii.analyze usage of our Services (such as to analyze your interactions with the results, reports, and other features of the Service);

iv.gather demographic information about our user base;

v.offer our Services to you;

vi.monitor the success of marketing programs; and

vii.serve targeted advertising on our site and on other sites around the Internet.

If you reject cookies, you may still use our site, but your ability to use some features or areas of our site may be limited. For more information, including the types of cookies found on CHONPS Health Tech and how to control cookies, please read our Cookie Policy.

We may receive reports based on the use of these technologies from third party service providers as de-identified, Individual-level Information or as Aggregate Information (as described in Section 4.c).

Google Analytics. Google Analytics is used to perform many of the tasks listed above. We use the User-ID feature of Google Analytics to combine behavioral information across devices and sessions (including authenticated and unauthenticated sessions). We have enabled the following Google Analytics Advertising features: Remarketing, Google Display Network Impression Reporting, Google Analytics Demographics and Interest Reporting, and DoubleClick Campaign Manager integration. We do not merge information collected through any Google advertising product with individual-level information collected elsewhere by our Service.  Learn more about how Google collects and uses data here. To opt out of Google Analytics Advertising Features please use Google Ad Settings. To opt out of Google Analytics entirely please use this link.

d.       Other Types of Information

We continuously work to enhance our Services with new products, applications and features that may result in the collection of new and different types of information. We will update our Privacy Statement and/or obtain your prior consent to new processing, as needed.

3. How we use your information

CHONPS Health Tech will use and share your Personal Information with third parties only in the ways that are described in this Privacy Statement.

a.       To provide you with Services and to analyze and improve our Services

We use the information described above in Section 2 to operate, provide, analyze and improve our Services. These activities may include, among other things, using your information in a manner consistent with this Privacy Statement to:

i.open your account, enable purchases and process payments, communicate with you, and implement your requests (e.g., referrals);

ii.enable and enhance your use of our website and mobile application(s), including authenticating your visits, providing personalized content and information, and tracking your usage of our Services;

iii.contact you about your account, and any relevant information about our Services (e.g. policy changes, security updates or issues, etc.);

iv.enforce our Terms of Service and other agreements;

v.monitor, detect, investigate and prevent prohibited or illegal behaviors on our Services, to combat spam and other security risks; and

vi.perform research & development activities, which may include, for example, conducting data analysis in order to develop new or improve existing products and services, and performing quality control activities.

For individuals located in the European Economic Area (“EEA”), United Kingdom, or Switzerland (collectively the “Designated Countries”): We process your Personal Information in this way to provide our Services to you in accordance with our Terms of Service.

b.       To process, analyze and deliver your genetic testing results

As described above, to receive results through the Personal Genetic Service, you must create a CHONPS Health Tech account, register your kit, and submit your saliva sample to be genotyped by us or our contracted laboratory. Once genotyped, we further analyze your Genetic Information to provide you with our health and/or ancestry reports, depending on the Service purchased. CHONPS Health Tech continuously works to improve our Services based on our research and product development, and genetic associations identified in scientific literature. If you are eligible to receive additional reports or updates in the future, you may be notified of or may directly access these updates.

For individuals located in the Designated Countries: Our legal basis for processing your Sensitive Information for the purposes described above is based on your consent. You may withdraw your consent at any time by deleting your Account via your CHONPS Health Tech Account Settings, however, the withdrawal of your consent will not affect the lawfulness of processing based on consent before its withdrawal.

c.       To allow you to share your Personal Information with others

CHONPS Health Tech gives you the ability to share information, including Personal Information, through the Services. You have the option to share directly with individuals with CHONPS Health Tech accounts through (i) our Forums, (ii) relative finding features (e.g., "DNA Relatives"), and (iii) other sharing features and tools. You may also have the ability to share information directly with individuals who have not participated in our Service via a unique, shareable URL or through a social media platform (such information is "User Content"). Some sharing features, including receiving sharing invitations, may require that you opt-out, however you will always be required to take a positive action, such as opting in, to share Sensitive Information.

You should be thoughtful about your sharing choices. Once you have chosen to share any Personal Information, the individuals with whom you share this information, may also use or share your Personal Information, including any Sensitive Information you choose to share.

For individuals located in the Designated Countries: Our legal basis for processing your Personal Information for the purpose described above is based on your consent. You may withdraw your consent at any time, however, the withdrawal of your consent will not affect the lawfulness of processing based on consent before its withdrawal.

d.       To allow you to share your Personal Information for CHONPS Health Tech Research purposes

You have the choice to participate in CHONPS Health Tech Research by providing your consent. "CHONPS Health Tech Research" refers to research aimed at publication in peer-reviewed journals and other research funded by the federal government (such as the National Institutes of Health (“NIH”)) conducted by CHONPS Health Tech.

CHONPS Health Tech Research may be sponsored by, conducted on behalf of, or in collaboration with third parties, such as non-profit foundations, academic institutions or pharmaceutical companies. CHONPS Health Tech Research may study a specific group or population, identify potential areas or targets for therapeutics development, conduct or support the development of drugs, diagnostics or devices to diagnose, predict or treat medical or other health conditions, work with public, private and/or non-profit entities on genetic research initiatives, or otherwise create, commercialize, and apply this new knowledge to improve health care. CHONPS Health Tech Research uses Aggregate and/or Individual-level Genetic Information and Self-Reported Information as specified in the appropriate Consent Document(s), as explained in greater detail below.

Your De-identified Genetic and Self-Reported Information may be used for CHONPS Health Tech Research only if you have consented to this use by completing a Consent Document. If you have completed the main Research Consent Document:

 .Your Genetic Information and/or Self-Reported Information will be used for research purposes, but it will be de-identified and will not be linked to your Registration Information.

i.CHONPS Health Tech may use individual-level Genetic Information and Self-Reported Information internally at CHONPS Health Tech for research purposes.

ii.CHONPS Health Tech may share summary statistics, which do not identify any particular individual or contain individual-level information, with our qualified research collaborators.

If you have completed the Individual Level Data Sharing Consent, or additional consent agreement, in addition to the uses above under the main Research Consent Document, CHONPS Health Tech may share De-identified Individual-level Genetic Information and Self-Reported Information with select third party research collaborators for CHONPS Health Tech Research purposes.

Withdrawing your Consent. You may withdraw your consent to participate in CHONPS Health Tech Research at any time by changing your consent status within your CHONPS Health Tech Account Settings. If you experience difficulties changing your consent status, contact the Human Protections Administrator at hpa@CHONPS Health Tech.com. CHONPS Health Tech will not include your Genetic Information or Self-Reported Information in studies that start more than 30 days after you withdraw (it may take up to 30 days to withdraw your information after you withdraw your consent). Any research involving your data that has already been performed or published prior to your withdrawal from CHONPS Health Tech Research will not be reversed, undone, or withdrawn. You may also discontinue your participation in CHONPS Health Tech Research by deleting your CHONPS Health Tech account (as described in Section 5.d.).

For individuals located in the Designated Countries: Our legal basis for processing your Sensitive Information for the purpose described above is based on your consent. You may withdraw your consent at any time, however, the withdrawal of your consent will not affect the lawfulness of processing based on consent before its withdrawal.

e.       To recruit you for external research

Research is an important aspect of our Services and we want to ensure interested participants are aware of additional opportunities to contribute to interesting, novel scientific research conducted by academic institutions, healthcare organizations, pharmaceutical companies, and other groups. If you have chosen to participate in CHONPS Health Tech Research, from time to time we may inform you of third party research opportunities for which you may be eligible. For example, if a university tells us about a new cancer research project, we may send an email to CHONPS Health Tech research participants who potentially fit the relevant eligibility criteria to make them aware of the research project and provide a link to participate with the research organization conducting the study. We will not share Individual-level Genetic Information or Self-Reported Information with any third party without your explicit consent. If you do not wish to receive these notifications, you can manage them by editing your preferences in your CHONPS Health Tech Account Settings.

For individuals located in the Designated Countries: Our legal basis for processing your Sensitive Information for the purpose described above is based on your consent. You may withdraw your consent at any time, however, the withdrawal of your consent will not affect the lawfulness of processing based on consent before its withdrawal.

f.        To provide customer support

When you contact Customer Care, we may use or request Personal Information, including Sensitive Information, as necessary to answer your questions, resolve disputes, and/or investigate and troubleshoot problems or complaints. In some instances, we may be required to process one customer’s Personal Information to resolve another customer’s dispute or request. For example, if a customer reports behavior that violates our Terms of Service, we will separately process both customers’ Personal Information and respond separately to each individual as appropriate. We will not share your Personal Information with another customer without your consent.

For individuals located in the Designated Countries: Our legal basis for processing your Personal Information for the purpose described above depends on the nature of the customer support request. Our legal basis can be to satisfy our contractual or legal obligations and/or our legitimate interest to improve our Services.

g.       To conduct surveys or polls, and obtain testimonials

We value your feedback and may send you surveys, polls, or requests for testimonials to improve and optimize our Services. You are in control of the information you would like to share with us. If you do not wish to receive these requests, you can manage them in your CHONPS Health Tech Account Settings.

For individuals located in the Designated Countries: Our legal basis for processing your Personal Information for the purpose described above is based on our legitimate interest. We think it is important to continue improving our Services to ensure your continued enjoyment.

h.       To provide you with marketing communications

By creating a CHONPS Health Tech account, you are agreeing that we may send you product and promotional emails or notifications about our Services, and offers on new products, services, promotions or contests. You may also opt-in to receiving similar notifications on the website or mobile application(s). You can unsubscribe from receiving these marketing communications at any time. To unsubscribe, click the email footer “unsubscribe” link or go to the “Preferences” section of your CHONPS Health Tech Account Settings to edit your email notification preferences. To opt-out of receiving website and mobile notifications, you may do so within your browser or device settings. Please note, the opt-out process differs between web browsers and mobile devices. You may not opt-out of receiving non-promotional messages regarding your account, such as technical notices, purchase confirmations, or Service-related emails.

Individuals located in Designated Countries should review Section 9.d. to understand our marketing practices in relation to the Designated Countries.

4. Information we share with third parties

a.       General service providers.

We share the information described above in Section 2 with our third party service providers, as necessary for them to provide their services to us and help us perform our contract with you. Service providers are third parties (other companies or individuals) that help us to provide, analyze and improve our Services. While CHONPS Health Tech directly conducts the majority of data processing activities required to provide our Services to you, we engage some third party service providers to assist in supporting our Services, including in the following areas:

i. Order fulfillment and shipping.  Our payment processor processes certain Registration Information, such as your billing address and credit card information, as necessary to enable you to purchase a CHONPS Health Tech kit from the CHONPS Health Tech.com online store. Our distribution centers ship your kit(s) to you, and in some cases help return your kit safely to us or to our third party laboratory so your sample can be processed.

ii. Our CLIA-certified genotyping lab.  To use our genetic testing services, you must purchase, or receive as a gift, a CHONPS Health Tech Personal Genetic Service testing kit, and ship your saliva sample to us or our third party laboratory. Once delivered, receiving personnel at the laboratory remove and discard kit packaging, which in some cases may contain "sender information" (e.g., name, address), before testing personnel receive the samples for processing. Receiving personnel do not perform testing, and testing personnel handle saliva samples that are only identified by a unique barcode. For samples processed by our third party genotyping laboratory, when the laboratory has completed their analysis, they securely send the resulting Genetic Information to us identified by your unique barcode.

During kit registration, you are asked to review our Consent Document for Sample Storage and Additional Genetic Analyses. Unless you consent to Biobanking and additional analyses, your saliva sample and DNA are destroyed after the laboratory completes its work, subject to the legal and regulatory requirements. Should you wish to update your sample storage preference to discard a stored sample, you can do so within your CHONPS Health Tech Account Settings once your sample has completed processing. As detailed further in Section 5.d. (Account Deletion), our genotyping laboratory or contracted genotyping laboratory will retain certain information as necessary to comply with applicable regulatory and legal obligations.

iii. Customer Care support. Our Customer Care team uses a number of tools to help organize and manage the requests we receive. These tools help to ensure we provide timely, high quality support.

iv. Cloud storage, IT, and Security. Our cloud storage providers provide secure storage for information in CHONPS Health Tech databases, ensure that our infrastructure can support continued use of our Services by CHONPS Health Tech customers, and protect data in the event of a natural disaster or other disruption to our Service. Our IT and security service providers assist with intrusion detection and prevention measures to stop any potential attacks against our networks. We have these third party experts perform regular penetration tests and periodically audit CHONPS Health Tech’s security controls.

v. Marketing and analytics. When you use our Services, including our website or mobile app(s), our third party service providers may collect Web-Behavior Information about your visit, such as the links you clicked on, the duration of your visit, and the URLs you visited. This information can help us improve site navigability and assess our Marketing campaigns. Per applicable data protection regulations, our EU, UK, and International websites present visitors with a cookie opt in to allow the processing described above via Functionality and Advertising Cookies.

NOTE: Our service providers act on CHONPS Health Tech's behalf. We implement procedures and maintain contractual terms with each service provider to protect the confidentiality and security of your information. However, we cannot guarantee the confidentiality and security of your information due to the inherent risks associated with storing and transmitting data electronically.

For individuals located in the European Economic Area (“EEA”), United Kingdom, or Switzerland (collectively the “Designated Countries”): Where Personal Information are transferred to a third country or to an international organisation, CHONPS Health Tech implements appropriate safeguards, such as contractual obligations, relating to the transfer.

b.       "Targeted advertising" service providers

We permit third party advertising networks and providers to collect Web-Behavior Information regarding the use of our Services to help us to deliver targeted online advertisements ("ads") to you. They use cookies and similar technologies, to gather information about your browser's or device's visits and usage patterns on our Services and on other websites over time, which helps to better personalize ads to match your interests, and to measure the effectiveness of ad campaigns. We and our third party service providers will not use your Sensitive Information, such as Genetic Information and Self-Reported Information, for targeted marketing without asking for and receiving your explicit consent.

For more information about our marketing practices, please review our Cookie Policy.

c.       Aggregate information

We may share Aggregate Information, which is information that has been stripped of your name and contact information and combined with information of others so that you cannot reasonably be identified as an individual, with third parties. This Information is different from "Individual-level" information and is not Personal Information because it does not identify any particular individual or disclose any particular individual’s data. For example, Aggregate Information may include a statement that "30% of our female users share a particular genetic trait," without providing any data or testing results specific to any individual user. In contrast, Individual-level Genetic Information or Self-Reported Information consists of data about a single individual's genotypes, diseases or other traits/characteristics information and could reveal whether a specific user has a particular genetic trait, or consist of all of the Genetic Information about that user. CHONPS Health Tech will ask for your consent to share Individual-level Genetic Information or Self-Reported Information with any third party, other than our service providers as necessary for us to provide the Services to you.

d.       Information we share with commonly owned entities

We may share some or all of your Personal Information with other companies under common ownership or control of CHONPS Health Tech, which may include our subsidiaries, our corporate parent, or any other subsidiaries owned by our corporate parent in order to provide you better service and improve user experience. Generally, sharing such information is necessary for us to perform on our contract with you. We may provide additional notice and ask for your prior consent if we wish to share your Personal Information with our commonly owned entities in a materially different way than discussed in this Privacy Statement.

e.       As required by law

Under certain circumstances your Personal Information may be subject to processing pursuant to laws, regulations, judicial or other government subpoenas, warrants, or orders. For example, we may be required to disclose Personal Information in coordination with regulatory authorities in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. CHONPS Health Tech will preserve and disclose any and all information to law enforcement agencies or others if required to do so by law or in the good faith belief that such preservation or disclosure is reasonably necessary to: (a) comply with legal or regulatory process (such as a judicial proceeding, court order, or government inquiry) or obligations that CHONPS Health Tech may owe pursuant to ethical and other professional rules, laws, and regulations; (b) enforce the CHONPS Health Tech Terms of Service and other policies; (c) respond to claims that any content violates the rights of third parties; or (d) protect the rights, property, or personal safety of CHONPS Health Tech, its employees, its users, its clients, and the public. View our Transparency Report for more information.

NOTE: If you are participating in CHONPS Health Tech Research, CHONPS Health Tech will withhold disclosure of your Personal Information involved in such Research in response to judicial or other government subpoenas, warrants or orders in accordance with any applicable Certificate of Confidentiality that CHONPS Health Tech has obtained from the National Institutes of Health (NIH). There are limits to what the Certificate of Confidentiality covers so please visit the Certificates of Confidentiality Kiosk.

f.        Business transactions

In the event that CHONPS Health Tech goes through a business transition such as a merger, acquisition by another company, or sale of all or a portion of its assets your Personal Information will likely be among the assets transferred. In such a case, your information would remain subject to the promises made in any pre-existing Privacy Statement.

5. Your choices

a.       Access to your account

We provide access to your CHONPS Health Tech data within your CHONPS Health Tech account. You can access and download data processed by CHONPS Health Tech within your CHONPS Health Tech Account Settings and within applicable Reports, Tools, and features. If you lose access to your CHONPS Health Tech account or account email address, please contact Customer Care for assistance. If you lose access to your CHONPS Health Tech account, in certain circumstances, we may require that you submit additional information sufficient to verify your identity before providing access or otherwise releasing information to you. If you choose not to submit the required documentation, or the information provided is not sufficient for the purposes sought, CHONPS Health Tech will not be able to sufficiently verify your identity in order to complete your request.

You may access, correct or update most of your Registration Information on your own within your CHONPS Health Tech Account Settings. You may also review and update your consent to CHONPS Health Tech Research and Biobanking. You may be able to correct Self-Reported Information entered into a survey, form, or feature within your account, such as on the surveys page, by clicking “Edit your answers here.” Please note that you may not be able to delete User Content that has been shared with others through the Service and that you may not be able to delete information that has been shared with third parties.

Individuals located in Designated Countries should review Section 9.e. to understand their rights to access Personal Information.

b.       Marketing communications

As noted in Section 3.h. you may be asked to opt-in to receive product and promotional emails or notifications when creating your CHONPS Health Tech account or when using our Services. You may view or update your notification preferences for marketing communications by visiting your CHONPS Health Tech Account Settings, opting out at the browser or device level, or by contacting our Privacy Administrator at privacy@gene2h.com. You can also click the "unsubscribe" button at the bottom of promotional email communications, as applicable.

c.       Sharing outside of the CHONPS Health Tech Services

You may decide to share your Personal Information with friends and/or family members, doctors or other health care professionals, and/or other individuals outside of our Services, including through third party services such as social networks and third party apps that connect to our website and mobile apps through our application programming interface ("API"). These third parties may use your Personal Information differently than we do under this Privacy Statement. Please make such choices carefully and review the privacy statements of all other third parties involved in the transaction. CHONPS Health Tech does not endorse or sponsor any API applications, and does not affirm the accuracy or validity of any interpretations made by third party API applications.

In general, it can be difficult to contain or retrieve Personal Information once it has been shared or disclosed. CHONPS Health Tech will have no responsibility or liability for any consequences that may result because you have released or shared Personal Information with others. Likewise, if you are reading this because you have access to the Personal Information of a CHONPS Health Tech customer through a multi-profile account, we urge you to recognize your responsibility to protect the privacy of each person within that account. Users with multi-profile accounts (i.e., where multiple family members register their kits to one account) should use caution in setting profile-level privacy settings.

d.       Account deletion

If you no longer wish to participate in our Services, or no longer wish to have your Personal Information be processed, you may delete your CHONPS Health Tech account and Personal Information within your CHONPS Health Tech Account Settings. Once you submit your request, we will send an email to the email address linked to your CHONPS Health Tech account detailing our account deletion policy and requesting that you confirm your deletion request. Once you confirm your request to delete your account and data, your account will no longer be accessible while we process your request. Once you confirm your request, this process cannot be cancelled, undone, withdrawn, or reversed. When your account is deleted, all associated Personal Information is deleted and any stored samples are discarded, subject to the following limitations:

i.Information previously included in CHONPS Health Tech Research. As stated in any applicable Consent Document, Genetic Information and/or Self-Reported Information that you have previously provided and for which you have given consent to use in CHONPS Health Tech Research cannot be removed from completed studies that use that information. Your data will not be included in studies that start more than 30 days after your account is closed (it may take up to 30 days to withdraw your information after your account is closed).

ii.Legal Retention Requirements. CHONPS Health Tech and/or our contracted genotyping laboratory will retain your Genetic Information, date of birth, and sex as required for compliance with applicable legal obligations, including the federal Clinical Laboratory Improvement Amendments of 1988 (CLIA), California Business and Professions Code Section 1265 and College of American Pathologists (CAP) accreditation requirements. CHONPS Health Tech will also retain limited information related to your account and data deletion request, including but not limited to, your email address, account deletion request identifier, communications related to inquiries or complaints and legal agreements for a limited period of time as required by law, contractual obligations, and/or as necessary for the establishment, exercise or defense of legal claims and for audit and compliance purposes.

6. Security measures

CHONPS Health Tech takes seriously the trust you place in us. CHONPS Health Tech implements physical, technical, and administrative measures to prevent unauthorized access to or disclo