TampaDNA Data Protection and Privacy Policy

TampaDNA ("we", "us", "our") is committed to protecting your privacy rights and ensuring that your personal and genetic information is handled appropriately. Our Date Protection and Privacy Policy explains in great detail the types of information we collect, how we safeguard information, how we use information, and the rights you have regarding your information. Using our services is your agreement to the terms outlined in this policy.

 

Scope/Purpose

This policy applies to all personal and genetic information collected, processed, and stored by TampDNA mobile DNA collection services. This purpose of this policy is to ensure compliance with all applicable privacy laws, include the California Consumer Privacy Act (CCPA), the General Data Protection Rights (GDPR), and the Health Insurance Portability and Accountability Act (HIPAA).

Information We Collect

Personal Information: We collect various types of personal information that you provide to us, including but not limited to:

• Full name: to ensure accurate identification
• Contact information: including email address, phone number, and mailing address to ensure correct communication
• Payment information: credit/debit card details for processing payment
• Health information: any relevant medical history that may be required for accurate DNA testing
• Appointment details: date, time, and location address of appointments for sample collection

Genetic Information: Genetic information refers to the biological material collected for DNA testing. This includes, but is not limited to- saliva, blood, or other bodily fluids or tissues.

Automatic Collected Information: We may also collect information automatically when you interact with our services, including:

• Usage data: information about how you use our website and services, such as pages you visit and links you click
• Device information: your IP address, browser type, and operating system

Third-Party Information: We may receive information about you from third parties, such as healthcare providers or legal representatives. This information is used to enhance our services and ensure accurate DNA results.

Legal Basis for Processing

Consent: We obtain your explicit consent before collecting or processing your genetic information. By providing your genetic sample, you consent to the use of your genetic information solely for the purposes outlined in this policy.

Contractual Necessity: Processing your personal information is necessary to fulfill our contractual obligations to you, such as providing DNA testing services and delivering results.

Legal Obligations: We may process your personal information to comply with legal obligations, such as reporting requirements or responding to lawful requests from government authorities.

How We Use Your Information

Service Provision: Your personal and genetic information is used to:

• Schedule and manage appointments
• Process payments and issue receipts
• Conduct DNA testing and analysis
• Communicate test results and provide support
• Ensure compliance with legal and regulatory requirements

Date Retention: We retain your personal and genetic information for as long as necessary to fulfill the purposes for which it was collected, as well as to comply with legal obligations. Genetic samples are transferred to our accredited laboratory and are not retained by TampaDNA.

Data Aggregation and Anonymization: We may aggregate and anonymize data for research and statistical purposes. This data can NOT be traced back to an individual and is used to improve our services and advance scientific knowledge.

Sharing and Disclosure of Information

Third-Party Laboratories: Your genetic samples are processed by third-party laboratories that are accredited by the American Association of Blood Banks (AABB) and are Clinical Laboratory Improvement Amendments (CLIA) certified. These laboratories are contractually obligated to maintain the confidentiality and security of your information.

Service Providers: We may share your personal information with trusted service providers who assist us in operating our business such as payment processors, IT service providers, and customer support. These providers are required to adhere to strict confidentiality and data protection standards.

Legal and Regulatory Compliance: We may disclose your personal and genetic information if required by law, such as in response to a subpoena, court order, or other legal process. We will take steps to ensure that any disclosure is limited to the minimum amount of information necessary.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal and genetic information may be transferred to the acquiring entity. We will notify you of any such transfer and ensure that your information remains protected under this policy.

Security Measures

Data Encryption:   All personal and genetic information is encrypted both in transit and at rest using industry-standard encryption protocols. This ensures that your information is protected from unauthorized access.

Access Controls: Access to your personal and genetic information is restricted to authorized personnel only. These individuals are required to follow strict data protection policies and undergo regular training on privacy and security.

Physical Security: Our facilities and systems are protected by advanced and physical security measures, including controlled access, surveillance, and secure storage. Genetic samples are securely transferred to our partner laboratories and are not retained on-site.

Incident Response: In the event of a data breach or security incident, we have a comprehensive incident response plan in place. We will notify affected individuals and regulatory authorities in accordance with applicable laws and take immediate steps to mitigate any potential harm.

Client Rights and Responsibilities

Right to Access: You have the right to access the personal and genetic information we hold about you. To request access, please contact us using the information provided in the "Contact Us" section of this policy.

Right to Rectification: If you believe that any of your information is inaccurate or incomplete, you have the right to request corrections. We will promptly update your information upon verification of your request.

Right to Deletion: You may request the deletion of your personal and genetic information, subject to certain legal and contractual limitations. Please note that genetic samples already processed by our laboratories cannot be retrieved or deleted.

Right to Restrict Processing: You have the right to request the restriction of processing of your information under certain circumstances, such as if you contest the accuracy of the information or object to the processing.

Right to Object: You have the right to object to the processing of your information for certain purposes, such as direct marketing or automated decision-making. We will cease processing your information unless we have a legitimate reason to continue.

Right to Data Portability: You have the right to request a copy of your personal and genetic information in a structured, commonly used, and machine-readable format. This allows you to transfer your information to another service provider.

Client Responsibilities: As a client, you are responsible for:

• Providing accurate and complete information
• Safeguarding your account credentials and communication channels
• Promptly notifying us of any changes to your contact information
• Understanding the terms and implications of DNA testing, including the potential impact on privacy

Informed Consent for Genetic Testing

Explicit Consent: Before collecting your genetic sample, we will obtain your explicit informed consent. This content includes a clear explanation of the purpose of the testing, the procedures involved, and your rights concerning your genetic information.

Withdrawal of Consent: You have the right to withdraw your consent at any time before your sample is processed. Once the testing process has begun, withdrawal of consent may not be possible.

Use of Genetic Information: Your genetic information will be used solely for the specific test you have requested. We do not use your genetic information for any other purposes, such as research or marketing, without your explicit consent.

No Retention or Sale of Genetic Material: TampaDNA does not retain, store, or sell your genetic material under any circumstances. Your genetic information is used only for the purpose of providing the testing services you have requested.

International Data Transfers

Compliance with International Laws: TampaDNA operates in compliance with international data protection laws, including the GDPR. If your information is transferred outside of your home country, we will take steps to ensure that it is protected in accordance with this policy.

Standard Contractual Clauses: For international data transfers, we use standard contractual clauses approved by regulatory authorities to ensure that your information is adequately protected.

Data Retention and Destruction

Retention Periods: We retain personal and genetic information for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations. This includes retaining records of consent, testing results, and transaction details.

Destruction of Records: After the retention period has expired, we will securely destroy all personal and genetic information using methods that ensure it cannot be reconstructed or retrieved. This includes the use of shredding, degaussing, and other secure disposal methods.

Dispute Resolution and Arbitration

Binding Arbitration: Any disputes arising out of or relating to this policy or the services provided by TampaDNA shall be resolved through binding arbitration. Arbitration will be conducted in accordance with the rules of the American Arbitration Association (AAA).

Confidentiality Proceedings: Arbitration proceedings will be confidential, and neither party may disclose the existence, content, or results of the arbitration without prior written consent from the other party.

Choice of Law: This policy and any disputes arising out of or relating to it shall be governed by and construed in accordance with the laws of Florida, without regard to its conflict of laws principles.

Policy Updates and Client Notifications

Periodic Review and Update: We regularly review and update this policy to reflect changes in our practices, legal requirements, and industry standards. The "Last Updated" date at the top of this policy indicates when the most recent changes were made.

Client Notification of Changes: Significant changes to this policy will be communicated to clients through email notifications, website announcements, or other appropriate means. We encourage you to review this policy periodically to stay informed about how we protect your information.

Client Acceptance of Policy Changes: Continued use of our services following the implementation of changes to this policy will constitute your acceptance of the updated terms.

Children's Privacy

Protection of Minors: TampaDNA does not knowingly collect or process personal or genetic information from individuals under the age of 18 without parental or guardian consent. If we become aware that we have inadvertently collected information from a minor without proper consent, we will promptly delete the information from our records.

Parental Rights: Parents or guardians have the right to review, correct, and request the deletion of their child's information. If you believe that your child's information has been collected without your consent, please contact us immediately.

Third-Party Links and Services

Third-Party Websites: Our website may contain links to third-party websites or services that are not operated by TampaDNA. We are not responsible for the privacy practices or content of these third-party sites.

Client Responsibility: We encourage you to review the privacy policies of any third-party websites or services before providing any personal or genetic information. Your use of third-party sites is at your own risk.

Contact Information

If you have any questions or concerns about this policy or how your information is handled, please contact us at: tampdna@outlook.com