Privacy Policy

Last updated: January 15, 2024

Introduction

DNA001 ("we", "our", or "the Site") respects your privacy and is committed to protecting your personal information. This privacy policy explains how we collect, use, store, and protect your data, and what rights you have regarding your information.

By using our services, you agree to the data practices described in this policy. If you disagree with any part of this policy, please discontinue use of our services.

1. Information We Collect

1.1 Information You Provide

  • Account Information: Username, email address, and password (encrypted) provided during registration.
  • Profile Information: Optional details such as display name, avatar, and bio.
  • Community Content: Forum posts, comments, likes, and other interactions.
  • Membership Information: Payment-related data for membership subscriptions. Note: we do not store your full payment card number -- payment processing is handled by third-party providers.
  • Communications: Content of messages sent to us via email or support channels.

1.2 Automatically Collected Information

  • Log Data: IP address, browser type, operating system, pages visited, timestamps, referring URLs.
  • Cookies: Used for session management, preferences, and analytics. See Section 5 for details.
  • Device Information: Device model, screen resolution, network type (used for display optimization).

1.3 What We Do NOT Collect

We do not require or accept uploads of your raw genetic testing data. DNA001 is an education and information platform, not a genetic data storage or analysis service.

2. How We Use Your Information

  • Service Delivery: Account management, authentication, content recommendations, community features.
  • Improvements: Analyzing usage patterns to improve site layout and content.
  • Security: Detecting and preventing fraud, abuse, spam, and other violations.
  • Notifications: Account-related notices, service updates, membership reminders (no marketing unless you opt in).
  • Analytics: Anonymous, aggregated statistics for understanding audience and content popularity.
  • Legal Compliance: Complying with applicable laws and legitimate law enforcement requests.

3. Information Sharing

We do not sell your personal information. We may share data only in these circumstances:

  • Service Providers: Trusted third parties that help operate our site (cloud hosting, email delivery, analytics), under strict confidentiality.
  • Legal Requirements: When required by law, court order, or government request.
  • Rights Protection: To protect our legal rights, prevent harm, or investigate fraud.
  • Business Transfers: In case of merger, acquisition, or asset sale (with prominent notice).
  • With Your Consent: Any other sharing with your explicit permission.

4. Data Storage & Security

  • Storage: Your data is stored in Cloudflare's global data centers, certified to ISO 27001 and SOC 2 standards.
  • Encryption: All data transmission uses HTTPS/TLS encryption.
  • Password Security: Passwords are hashed using bcrypt. We cannot recover your plain-text password.
  • Access Control: Only authorized personnel access backend data, with full audit logging.
  • Retention: We keep personal data only as long as necessary. Account deletion triggers full data removal within 30 days.
  • Security Note: While we implement reasonable safeguards, no internet transmission is 100% secure. Please protect your password and avoid saving login credentials on shared devices.

5. Cookie Policy

5.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website, used to remember preferences and improve your browsing experience.

5.2 Types We Use

  • Essential Cookies: Required for core functions (login sessions, security). Cannot be disabled.
  • Functional Cookies: Remember language preferences, theme settings, and other choices.
  • Analytics Cookies: Help us understand page traffic and optimize content. We use our own tools and may use third-party services.
  • Advertising Cookies: If third-party ads are displayed, advertisers may set cookies for personalization.

5.3 Managing Cookies

You can manage or disable cookies in your browser settings. Note that disabling essential cookies may affect core functionality.

6. Your Rights

Depending on applicable data protection laws, you may have these rights:

  • Access: Request a copy of your personal data we hold.
  • Rectification: Correct inaccurate or incomplete personal data.
  • Erasure: Request deletion of your personal data in certain circumstances.
  • Restriction: Request limitation of how we process your data.
  • Portability: Receive your data in a structured, machine-readable format.
  • Withdraw Consent: Withdraw consent at any time for consent-based processing.
  • Account Deletion: Self-service account deletion via settings or contact support.

To exercise these rights, email privacy@dna001.com. We respond within 15 business days.

7. Children's Privacy

Our site is intended for adult users. We do not knowingly collect personal information from children under 14. If you are a guardian and discover your child has provided us with personal data without your consent, please contact us immediately so we can delete it.

8. Policy Updates

We may update this policy periodically. Material changes will be communicated via prominent site notices or email. Continued use of our services constitutes acceptance of the updated policy. We recommend checking this page regularly.

9. Contact

Questions about this privacy policy? Reach us at: