This policy explains what we collect when you buy and use a RootCause Health test, how we handle your sample and results, and the choices you have. If anything here is unclear, contact us.
Information we collect
We collect only what we need to ship your kit, run your test, and deliver your results:
- Account and order details — name, email, mobile phone number if you provide one, shipping and billing address, and order history. Payment card details are processed by our payment provider; we never store full card numbers.
- Kit registration details — the kit code on your collection card, your date of birth and sex assigned at birth (needed to apply the correct reference ranges), and the collection date.
- Sample and laboratory data — the dried blood spot sample you mail back and the biomarker results our clinical laboratory produces from it.
- Information you volunteer — messages you send us, and any context you provide about diet, supplements, or medications.
- Device and usage data — basic technical information about how you use our site and portal.
How we use it
We use your information to fulfil and ship your order, register and process your sample, generate and deliver your report, show your results over time in your portal, answer your questions, and meet our legal and laboratory record-keeping obligations. We also use aggregated, de-identified data to improve our tests and reports.
We do not sell your personal information, and we do not sell or rent your health data to advertisers, data brokers, insurers, or employers.
Health data and lab results
Your results belong to you. They are visible in your secure portal, and you can download or delete them. We will never share an individual result with a third party for marketing purposes. Your physical sample is analysed and then destroyed by the laboratory in line with its standard procedures; we do not perform genetic sequencing on your sample.
Text messages
If you give us your mobile number and tick the consent box at checkout or on our signup form, we use it to send automated text messages about your order, including order confirmations, shipping and delivery updates, notification that a report is ready to view in your portal, and replies to support questions you send us. Consent is not a condition of purchase.
We do not sell, rent, share, or otherwise disclose mobile phone numbers or text message consent to any third party or affiliate for their own marketing or promotional purposes. Mobile information is shared only with the service provider that delivers messages on our behalf, and that provider is prohibited from using it for any other purpose. Text message consent is never included in any transfer of information to a successor entity for marketing use.
We do not send promotional or marketing text messages. Message frequency varies with your order activity and is expected to be no more than four messages per month. Message and data rates may apply depending on your mobile plan.
Your results are never sent by text message. Any message about results tells you only that a report is available in your secure portal. Reply STOP to any message to unsubscribe, or HELP for assistance.
Security and retention
We protect your information with encryption in transit and at rest, access controls limiting staff access to those who need it, and regular review of our providers. No system is perfectly secure, but we treat health data as our most sensitive category and design around that.
We keep your results for as long as you hold an account, so your trend lines remain intact, and retain laboratory records for the period required by applicable regulations. When you delete your account we remove your personal data except what we must legally retain.
Your rights and choices
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to withdraw consent, and to opt out of marketing email at any time via the unsubscribe link or of text messages by replying STOP. To exercise any of these, contact us and we will respond within the timeframe the law requires. We will not discriminate against you for exercising these rights.
Cookies and analytics
Our store uses cookies to keep your cart and session working and to understand, in aggregate, how people use the site. You can control cookies in your browser settings; blocking them may affect checkout and portal functionality. We do not place advertising trackers on the pages where your results are displayed.
Children's privacy
Our tests and this site are intended for adults aged 18 and over. We do not knowingly collect information from children. If you believe a child has provided us information, contact us and we will delete it.
Changes and contact
If we make material changes to this policy we will update the date above and notify account holders by email. Questions, requests, or concerns about privacy can be sent to us through our contact page.
This page is provided as a starting draft for RootCause Health and is not legal advice. Have counsel review and finalise it before launch, including the specific state and international privacy regimes that apply to your customers.