25442.json

{
    "CertifiedThroughLabel": "",
    "Fax": "650-938-6302",
    "OrgName": "23andMe, Inc.",
    "PPLoc": "https:/ www.23andme.com/about/privacy/ ",
    "Phone": "650-938-6300",
    "activities": "Background of 23andMe: 23andMe is a personal genomics company providing the 23andMe Personal Genome Service (\u201cPGS\u201d) testing kit & related services since Nov. 2007. PGS is a direct-to-consumer personal genomic testing service offered via the 23andme website, where consumers can order a PGS testing kit to get access to a non-invasive genetic information service that combines qualitative genotyping data for an individual with descriptive information derived from genetic research studies. PGS is intended to detect genetic variations using a genotyping array & genomic DNA from saliva collected using the PGS testing kit.  The results of the PGS test provide information about a person\u2019s inherited genetic mutations and/or variants, & provide individuals with the opportunity to explore genetic genealogy & ancestry. Customers who purchased & registered its PGS testing kit before November 2013, new customers based in Canada (acquiring PGS kits via 23andme.ca only), & new customers based in United Kingdom or Ireland (acquiring PGS kits via 23andme.co.uk only) also receive information regarding genetic variants associated with health & non-health related traits through personalized reports that provide information about an individual\u2019s genetic data in the context of publicly available studies from the scientific literature. Customers may also download their raw genetic data.  \r\n1.\tHow 23andMe Collects User Information: 23andMe collects the following information from its consumers (whether based on the United States, EU or Switzerland or other geographies) as part of providing its products & services:\r\n(i)\tInformation directly provided by a customer to, or collected by, 23andMe, as a result of such user becoming a 23andMe customer:\r\na.\tInformation required for opening an account & registering a PGS DNA Kit (i.e., name, billing & shipping address, payment information);\r\nb.\tSelf-reported user information (i.e., personal traits, ethnicity, etc.);\r\nc.\tContent created, provided, posted or uploaded by a user to 23andMe.com (23andMe\u2019s website, blogs & community forum);\r\nd.\tUser\u2019s IP address & cookies (depending on user\u2019s cookie settings) collected as a result of users\u2019 use of social media features & widgets;\r\ne.\tInformation provided when referring a person to 23andMe by providing such referred person\u2019s email address, direct referral to 23andMe or third-party services such as Facebook/Twitter; and\r\nf.\tInformation provided for customer service inquiries.\r\n(ii)\tInformation related to 23andMe\u2019s genetic testing services:  customers\u2019 saliva samples, bio-banking & genetic information.  To use 23andMe\u2019s genetic testing services, customers must open an online account, register its specific PGS testing kit & ship a saliva sample to 23andMe\u2019s third-party CLIA certified laboratory.  Once received, each saliva sample is identified by its unique barcode (as opposed to using personal names or addresses), along with the associated gender & date of birth.  The barcode label identifies individuals to 23andMe but not to 23andMe\u2019s third-party laboratory.  Unless a customer chooses to store a DNA sample with 23andMe (called \u201cbio-banking\u201d), each saliva sample & DNA are destroyed after the laboratory completes its work, unless the laboratory\u2019s legal & regulatory requirements require it to maintain physical samples. \r\n23andMe generates genetic information when it analyzes & processes a customer\u2019s saliva sample, or when a customer agrees to contribute or access his/her genetic information through the 23andMe\u2019s services.  This genetic information may be used for other purposes, as outlined in Section 2 below.\r\n(iii)\tInformation collected through tracking technology. 23andMe uses tracking technology to collect user information such as user profile ID, IP addresses, browser types & Internet service providers. 23andMe\u2019s third-party partners use cookies & similar technologies to recognize users to customize/enhance user experience, provide security, analyze usage of 23andMe\u2019s Services, gather demographic information about 23andMe\u2019s user base, to market services & programs to users & to target advertising.  Neither 23andMe, nor its third-party partners, utilize a user\u2019s sensitive information such as genetic information & self-reported user information for targeting advertising. \r\n2.\tHow 23andMe Uses & Shares User Information: 23andMe will use & share customer\u2019s personal information with third parties only as follows:\r\n(i)\t23andMe will use information outlined above to: \r\na.\tOperate, provide, analyze & improve 23andMe\u2019s services;\r\nb.\tOpen a user account & enable purchases, process payments & communicate with the user; \r\nc.\tHost 23andMe\u2019s website, run mobile application(s), authenticate a user\u2019s visit & provide personalized content & track usage of services; \r\nd.\tOffer new products or services to a user via email or promotions; \r\ne.\tImplement online marketing campaigns & targeted advertising;\r\nf.\tConduct surveys or polls & obtain testimonials;\r\ng.\tProcess & deliver genetic testing results to a user; and\r\nh.\tPerform research & development activities.\r\n(ii)\t23andMe will share User information with general service providers such as third-party laboratories & contractors to process & analyze a user\u2019s saliva sample for the purposes of generating such user\u2019s genetic information.  When a user purchases a PGS testing kit, he/she is instructed to send a saliva sample to our third-party laboratory labeled with a unique barcode label.  The unique barcode identifies the user to 23andMe but not to the laboratory.  23andMe is also required to provide to the laboratory, a user\u2019s sex/gender & date of birth or age pursuant to clinical laboratory requirements such as the Clinical Laboratory Improvement Amendments (CLIA).  No other registration information is required or provided to the laboratory.  The receiving personnel at the laboratory will remove & discard a user\u2019s \u201csender information\u201d from the packaging before testing personnel receive the samples for processing.  Receiving personnel do not perform testing, & testing personnel handle saliva samples that are labeled only with the unique barcode.  Unless a user chooses to store a sample, DNA & saliva samples are destroyed after the laboratory completes its work, provided that laboratory legal & regulatory requirements no longer require the actual samples to be maintained.  The laboratory securely sends the resulting genetic information to 23andMe along with the corresponding unique barcode. Genetic information is stored securely on 23andMe\u2019s servers; the laboratory also stores a user\u2019s genetic information, but again, labeled only with the barcode.\r\n(iii)\t23andMe will share user information with \u201ctargeted advertising\u201d service providers to collect web behavior information on 23andMe\u2019s service to aid in delivering targeted online ads to a user.  The third-party uses cookies & similar technologies to compile information about a user\u2019s browser or device usage patterns & visits on 23andMe\u2019s services & on other websites, which also aids in personalizing ads to match a user\u2019s interests & to measure the effectiveness of ad campaigns.  We do not share registration information, genetic information or self-reported information with these third-party advertising partners.\r\n(iv)\t23andMe may also share aggregate information with third-parties.  A user\u2019s registration information (e.g., name & contact information) will not be shared & it will be aggregated with information of others so that a user cannot be reasonably identified.\r\n(v)\t23andMe may share some or all of user information with other companies under common ownership or control of 23andMe, which may include 23andMe\u2019s subsidiaries, corporate parent or any other subsidiaries owned by the corporate parent.\r\n(vi)\t23andMe conducts research & works with public, private & government partnership to develop research & genetic understanding.  User information will only be shared if a user consents to such research & works.",
    "address": "1390 Shorebird Way",
    "asp_index": "25442",
    "city": "Mountain View",
    "contactemail1": "privacy@23andme.com",
    "contactfax1": "650-938-6302",
    "contactname1": "kathy L. Hibbs",
    "contactoff1": "23andMe, Inc., 1390 Shorebird Way, Mountain View, CA 94043",
    "contactphone1": "650-938-6300",
    "contacttitle1": "chief Legal & Regulatory Officer",
    "corpoffemail1": "privacy@23andme.com",
    "corpofffax1": "650-938-6302",
    "corpoffname1": "Kathy L. Hibbs",
    "corpoffphone1": "650-938-6300",
    "corpofftitle1": "Chief Legal & Regulatory Officer",
    "eucountries": "Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Liechtenstein, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, United Kingdom",
    "eucountries_parsed": [
        "AUT",
        "BEL",
        "BGR",
        "HRV",
        "CYP",
        "CZE",
        "DNK",
        "EST",
        "FIN",
        "FRA",
        "DEU",
        "GRC",
        "HUN",
        "ISL",
        "IRL",
        "ITA",
        "LVA",
        "LIE",
        "LTU",
        "LUX",
        "MLT",
        "NLD",
        "NOR",
        "POL",
        "PRT",
        "ROU",
        "SVK",
        "SVN",
        "ESP",
        "SWE",
        "CHE",
        "GBR"
    ],
    "euprotection": "true",
    "hrdata": "false",
    "industrysector": "General Services - (GSV)General Consumer Goods - (GCG)",
    "industrysector_parsed": [
        "General Consumer Goods - (GCG)",
        "General Services - (GSV)"
    ],
    "latest": "false",
    "nextcertification": "2015-11-18",
    "orgverification": "Third-Party TRUSTe",
    "personaldata": "On-line data, offline data, manually processed data",
    "ppdate": "2014-11-13",
    "previous": "",
    "privacyprograms": "TRUSTe",
    "recoursemech": "TRUSTe",
    "signupdate": "2014-11-18",
    "state": "California",
    "statutorybody": "FTC",
    "zip": "94043"
}