Skip to content

Legal

Your rights over health data under state consumer-privacy law.

Last updated: October 2, 2026

About this notice

Some states, including Washington (the My Health My Data Act), give you specific rights over your "consumer health data". This notice covers those rights, alongside the fuller Privacy Policy.

Categories collected, and their sources

The consumer health data we collect, and where it comes from:

  • Your genetic data and test results, from the sample you send us.
  • Your oral microbiome and viral test results, from the saliva sample you send us for Oral Health DNA.
  • Your contact and shipping details, from you at checkout.
  • For each test, the tested person’s legal name, date of birth and sex assigned at birth, and your statement that the test is for you and that you are 18 or older (for GeneBaby, your statement that you are the baby’s parent or guardian, and your baby’s name, date of birth and sex), for the lab’s test request, from you at checkout.
  • Your kit activation answers (sex assigned at birth, the date the sample was taken, the donor transplant and blood transfusion questions, and for a GeneBaby kit whether your baby had breast milk in the last hour), from you when you activate a kit.
  • For GenePGx and GeneCancer orders, your answer to whether you have Medicare, Medicaid, TRICARE or another government health plan (an order with one is not taken online).
  • For GenePGx orders, any request you make that we not share the test with your health plan.

We collect no other health insurance information: no plan, member number or insurance card. Every order is self-pay today.

Purposes

We use this data to run your test, deliver your results, and support the re-reads you have chosen. Once insurance billing opens, and only if you choose it for our pharmacogenomics (PGx) test, we will also use it to process that claim.

Categories of third parties and affiliates we share it with

The categories of third parties and affiliates your consumer health data goes to:

  • The laboratory that runs your tests.
  • For an order shipped to New York, the physician or reference laboratory that completes it.
  • Service providers under contract that store your data or prepare your report for us, including our laboratory-information and reporting software providers.
  • Once insurance billing opens, your health plan, only if you choose to bill our pharmacogenomics (PGx) test to it, and only what the claim requires. Nutrigenomics and oral microbe results are never sent to an insurer.

Never sold

Your genetic data is never sold, and never shared for marketing or research.

Your rights

You have the right to confirm whether we hold consumer health data about you, to access it, and to withdraw your consent to its collection or sharing. Deleting it, and destroying your sample, is confirmed:

  • We delete your data, and destroy your sample, on request.
  • If you ask us to destroy your data or your sample sooner, we complete that within 30 days, and confirm it to you in writing.

To use any of these rights, write to info@genematrix.io. How we confirm your identity before acting on a request is [To be confirmed] by counsel.

Appeals

How you may appeal a decision on one of these requests is [To be confirmed].

Back to the Privacy Promise.

Questions? info@genematrix.io