DNA Consultants, operated by DNA Testing Systems, L.L.C., a Colorado limited liability company (“DNA Consultants,” “we,” “us,” or “our”), is committed to protecting your privacy and the security of your personal information and genetic data. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have regarding your data.
This Privacy Policy applies to all information collected through our website at www.dnaconsultants.com, our DNA testing services, genealogy services, and any related communications (collectively, the “Services”). By using our Services, you acknowledge that you have read and understood this Privacy Policy.
For information about the rules governing your use of our Services, please refer to our Terms of Use.
1. Information We Collect
We collect the following categories of information:
1.1 Account and Order Information
When you create an account, place an order, or submit a DNA test kit form, we collect:
Full name
Email address
Mailing address
Phone number
Date of birth
Gender
Account login credentials (username and password)
Order number and date of sample collection
1.2 Payment Information
When you make a purchase, we collect payment details necessary to process your transaction. Payment processing is handled by Authorize.net (for standard website purchases) and, in some cases, by Stripe (for payment links used primarily with genealogy services). DNA Consultants does not store your full credit card number, CVV, or other sensitive payment credentials on our servers. Please refer to the privacy policies of Authorize.net and Stripe for information about how they handle your payment data.
1.3 DNA Sample and Genetic Data
When you purchase and use a DNA test kit, we collect:
DNA Sample: A buccal (inner cheek) swab collected by you using the kit we provide. This is the only method of DNA collection we accept. We do not accept hair, blood, saliva spit tubes, nail clippings, or any other biological material.
Genetic Data: The results of the laboratory analysis of your DNA sample, including your DNA profile, allele data, population matches, ethnicity estimates, and any related analytical results.
Self-Reported Information: Any genealogical, demographic, or family history information you voluntarily provide to assist our analysts in preparing your report.
When you visit our website, we automatically collect:
IP address
Browser type and version
Operating system
Pages visited and time spent on each page
Referring website or source
Device type (desktop, mobile, tablet)
Date and time of visit
This information is collected through cookies, pixel tags, and similar technologies. For more details, please see our Cookie Policy.
1.5 Communications
When you contact us by email, phone, or through our website contact forms, we collect the content of your communications and any information you choose to provide.
1.6 Kit Form and Consent
When you return your DNA test kit, you submit a physical form that includes your personal information (name, date of birth, gender, email, phone, address), your signature, and your consent to testing. This signed form serves as your authorization for DNA Consultants and its laboratory partner to collect and process your DNA sample. The kit form is retained as part of your order record.
2. How We Use Your Information
2.1 To Provide Our Services
Process and fulfill your DNA test orders
Transmit your DNA sample to our laboratory partner for analysis
Generate and deliver your ancestry report
Provide custom genealogy research services
Manage your account and communicate about your orders
2.2 To Communicate With You
Send order confirmations, shipping notifications, and test result notifications
Respond to your inquiries and provide customer support
Send important notices about changes to our Terms of Use, Privacy Policy, or Services
Send our newsletter, Lineages, if you have opted in to receive it
2.3 To Improve Our Services
Analyze website usage patterns to improve site functionality and user experience
Monitor the performance and effectiveness of our Services
Develop new products and features
2.4 To Comply With Legal Obligations
Comply with applicable federal and state laws and regulations
Respond to valid court orders, subpoenas, or other binding legal process
Protect the rights, property, or safety of DNA Consultants, our customers, or the public
DNA Consultants does not sell your personal information or genetic data. We share your information only in the following limited circumstances:
3.1 Laboratory Partner
We share your DNA sample and necessary identifying information with the independent third-party laboratory for the sole purpose of processing and analyzing your DNA test. Our laboratory partner is contractually required to use your sample and data only for the purpose of providing testing services to DNA Consultants and to maintain appropriate security measures.
3.2 Payment Processors
We share necessary transaction information with Authorize.net and/or Stripe for the purpose of processing your payment. We do not share your genetic data with our payment processors.
3.3 Shipping Carrier
We share your name and mailing address with FedEx for the purpose of delivering your DNA test kit and related materials.
3.4 Law Enforcement
We may disclose your personal information or genetic data to law enforcement agencies, government authorities, or courts only in response to a valid court order, subpoena, warrant, or other binding legal process. We will make reasonable efforts to notify you before complying, unless we are legally prohibited from doing so. For full details, see Section 8 of our Terms of Use.
3.5 Business Transfers
In the event that DNA Consultants or DNA Testing Systems, L.L.C. is involved in a merger, acquisition, sale of assets, bankruptcy, or other business transition, your personal information and genetic data may be transferred as part of that transaction. In such an event, we will notify you by email and/or a prominent notice on our website, and the acquiring entity will be required to honor the commitments made in this Privacy Policy regarding your genetic data.
3.6 What We Do NOT Share
DNA Consultants does not:
Sell your genetic data or personal information to any third party
Share your genetic data with insurance companies
Share your genetic data with employers
Share your genetic data with pharmaceutical companies or third-party marketers
Allow law enforcement to voluntarily access, search, or upload profiles to our customer database
Share your data with data brokers or advertising networks for the purpose of targeted advertising based on your genetic information
Use your genetic data for research without your separate, informed consent.
4.1 Technical Safeguards
SSL/TLS encryption for all data transmitted between your browser and our website
Secure, encrypted storage of customer account data
Access controls limiting employee access to personal information and genetic data on a need-to-know basis
Secure hosting through SiteGround with server-level security protections
4.2 Operational Safeguards
Restricted access to customer genetic data to authorized personnel only
Contractual obligations requiring our laboratory partner and service providers to maintain appropriate data security measures
Regular review of our security practices
4.3 DNA Sample Storage
Your DNA sample is stored at the independent third-party laboratory during processing. Samples are stored without your name attached to them; they are identified by an internal kit number only. After processing, samples are automatically destroyed within six (6) months as described in Section 5.1.
4.4 Limitations
While we take reasonable measures to protect your information, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security of your data. If you become aware of any unauthorized access to your account, please contact us immediately at dna@dnaconsultants.com.
5.1 DNA Samples. DNA samples (buccal swabs) are automatically destroyed within six (6) months of processing by our laboratory partner. You may request early destruction of your sample at any time by contacting us at dna@dnaconsultants.com.
5.2 Genetic Data. Your genetic data (test results, DNA profile, ancestry report) is retained in your account for as long as your account remains active, so that you may access your results and receive ongoing support. Upon account deletion, all genetic data is permanently removed from our systems within 24 hours.
5.3 Account and Personal Information. Your account information (name, email, address) is retained for as long as your account is active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce our agreements. Upon account deletion, personal information is permanently removed within 24 hours except where retention is required by law (e.g., financial transaction records required for tax or accounting purposes).
5.4 Website Usage Data. Aggregated, non-personally-identifiable website usage data may be retained indefinitely for analytical purposes. This data cannot be used to identify you personally.
5.5 Account Deletion
You may request deletion of your account and all associated data at any time by emailing dna@dnaconsultants.com. Deletion will be completed within 24 hours of a verified request. Upon deletion:
All personal information is permanently removed
All genetic data and test results are permanently removed
Any remaining DNA sample is destroyed
This action is irreversible
5.6 Limitations on Deletion. Please note that if you have previously shared your test results or personal information outside of our Services (for example, by emailing your report to a third party or posting information publicly), DNA Consultants cannot retrieve, delete, or control copies of information that are no longer in our possession. Additionally, we may retain limited records as required by law, such as financial transaction records for tax or accounting purposes.
Regardless of where you reside, DNA Consultants provides all customers with the following rights:
6.1 Right to Correction. You may request correction of any inaccurate or incomplete personal information by contacting us at dna@dnaconsultants.com.
6.2 Right to Deletion. You may request deletion of your account and all associated personal information and genetic data at any time. See Section 5.5 above for details.
6.3 Right to Opt Out of Marketing Communications. You may opt out of receiving marketing communications from us at any time by using the unsubscribe link in our emails or by contacting us at dna@dnaconsultants.com. Opting out of marketing communications does not affect transactional communications related to your orders or account.
6.7 Verification and Response Timing. To protect your privacy, we may need to verify your identity before processing certain requests. Verification typically requires you to confirm your identity using the email address associated with your account. We will confirm receipt of your request within ten (10) business days. We will provide a substantive response within forty-five (45) days of receipt. If we require additional time, we will notify you of the reason and may extend the response period by an additional forty-five (45) days.
7. State-Specific Privacy Rights
7.1 General Information Rights. Depending on your place of residence, you may have certain rights regarding your personal information. DNA Consultants is committed to respecting these rights in accordance with applicable laws. These rights include:
Right of Access: The right to access the personal information we maintain about you and to receive a copy of your final reports and test results. Please note that access to information refers to the interpreted profiles and ancestry reports provided by us. DNA Consultants does not provide “raw DNA data” files (such as TXT or CSV formats used in mass genotyping), as we utilize specific marker-based analysis.
Right of Deletion: The right to request the deletion of your personal information and result records, subject to our retention policies and legal requirements.
Right of Correction: The right to request the update of inaccurate biographical information.
7.2 State Law Applicability. We acknowledge that various U.S. states (including, but not limited to, California, Virginia, Colorado, Florida, and Connecticut) have enacted specific privacy and genetic data protection laws. DNA Consultants complies with such regulations to the extent they apply to our business operations and volume of processing in those jurisdictions.
7.3 Exercise of Rights and Technical Feasibility. To exercise any of these rights, please contact us at dna@dnaconsultants.com. We will respond to verified requests within legal timeframes, always subject to the technical feasibility of our systems at the time of the request and our ability to verify your identity.
7.4 Cookies and Privacy Control. Our website strives to align with evolving privacy standards, such as Global Privacy Control (GPC). However, your ability to opt-out of certain cookies may depend on your browser settings and the current technical limitations of our platform.
8. International Customers
DNA Consultants is based in the United States and all data is stored and processed in the United States. If you are located outside the United States and choose to use our Services, you understand and consent to the transfer, storage, and processing of your personal information and genetic data in the United States, which may provide different data protection standards than your country of residence. We do not currently participate in the EU-U.S. Data Privacy Framework. If you have questions about international data transfers, please contact us at dna@dnaconsultants.com.
9. GINA (Genetic Information Nondiscrimination Act)
DNA Consultants respect the Genetic Information Nondiscrimination Act (GINA). Your genetic information will not be shared with employers or health insurers without your explicit consent. Please be aware that GINA protections do not extend to life insurance, disability insurance, or long-term care insurance. Some states, including Florida, offer additional genetic nondiscrimination protections beyond federal law. For more information about GINA, visit the U.S. Equal Employment Opportunity Commission at www.eeoc.gov/genetic-information-discrimination.
Our website uses cookies and similar technologies to improve your browsing experience, analyze website traffic, and support our marketing efforts. The types of cookies we use include:
Necessary Cookies: Essential for website functionality and security. These cannot be disabled.
Analytics Cookies: Used to understand how visitors interact with our website (e.g., Google Analytics).
Advertising Cookies: Used to measure the effectiveness of our advertising campaigns (e.g., Facebook Pixel).
Functional Cookies: Used to remember your preferences and enhance your experience.
You can manage your cookie preferences through your browser settings or through the cookie consent banner on our website. Our cookie consent banner provides equal options to accept or reject non-essential cookies. Your cookie preferences are saved and respected on subsequent visits. We maintain records of cookie consent preferences for compliance verification purposes. For full details about the cookies we use and how to control them, please see our Cookie Policy.
Do Not Track: Our website does not respond to legacy "Do Not Track" (DNT) browser signals. However, DNA Consultants honors Global Privacy Control (GPC) signals as required by applicable state laws, including California, Colorado, Connecticut, Texas, and other states. When we detect a GPC signal from your browser, we will treat it as a valid opt-out request for the sale or sharing of your personal information and for targeted advertising. You can enable GPC in browsers such as Firefox, Brave, and DuckDuckGo, or through browser extensions for Chrome and other browsers. For more information, visit globalprivacycontrol.org.
11. Children’s Privacy
DNA Consultants does not knowingly collect personal information or genetic data from individuals under the age of 18. Our Services are available only to individuals who are 18 years of age or older. If we become aware that we have collected data from a person under 18, we will take prompt steps to delete that information from our systems. If you believe we have inadvertently collected information from a minor, please contact us immediately at dna@dnaconsultants.com.
12. Third-Party Websites
Our website may contain links to third-party websites. This Privacy Policy does not apply to those websites. We encourage you to read the privacy policies of any third-party websites you visit. DNA Consultants is not responsible for the privacy practices or content of third-party websites.
13. Changes to This Privacy Policy
13.1 Right to Update. We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will revise the “Last Updated” date at the top of this page.
13.2 Notice of Material Changes. For material changes that affect how we collect, use, share, or retain your genetic data, we will provide at least thirty (30) days’ advance notice by email (to the address associated with your account, where available) or by posting a prominent notice on our website.
13.3 No Retroactive Changes. Material changes regarding the use, sharing, or retention of genetic data will not be applied retroactively to data collected before the change without your affirmative express consent. This is in accordance with FTC guidance on genetic data privacy.
13.4 Regulatory Oversight. DNA Consultants is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC) with respect to its privacy and data security practices.
14. Contact Us
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have concerns about how your data is being handled, please contact us:
DNA Consultants
(a division of DNA Testing Systems, L.L.C.)
P.O. Box 2477
Longmont, CO 80502
Email: dna@dnaconsultants.com
Phone: 888-806-2588
Hours: Monday through Thursday, 10:00 AM – 5:00 PM Mountain Time
For privacy-related requests, please include your full name and the email address associated with your account.
We will respond within 45 days.
This Privacy Policy was last revised on April 10, 2026.
This privacy Policy was last revised on April 13, 2026