reDNA Health ("reDNA", "we") provides lab-test ordering, results aggregation, and informational health tools. This policy explains what we collect, why, and your rights. Health data is treated as sensitive/special-category data everywhere we operate.
1. Data we collect
- Account & identity: name, email, phone, date of birth, region.
- Health data (PHI): test orders, lab results, uploaded records, symptoms you share with the assistant.
- Transactional: orders, payments (processed by Stripe — we never store full card numbers).
- Technical: device/usage data, and cookies per your consent choices.
2. How we use it
- To deliver the service you requested (order tests, return results, book collection).
- To power your personal dashboard and informational AI grounded only in your own records.
- To communicate with you (verification, result alerts, support).
- We do not sell your health data.
3. Region-specific rights
United States
Where reDNA handles PHI as a covered entity or business associate, HIPAA safeguards apply (encryption, access controls, audit logs, breach procedures, BAAs with vendors). Depending on your state (e.g., TDPSA, CCPA/CPRA), you may have rights to access, delete, correct, and to opt out of sale/sharing ("Do Not Sell or Share My Personal Information").
India
Under the DPDP Act 2023 and SPDI Rules, we process personal and health data on the basis of your consent, honor withdrawal, and provide access/correction. Data is stored in-region where required.
UAE (Dubai)
Under the UAE Health Data Law and PDPL, health data is generally stored and processed inside the UAE, and prior consent is required for any use beyond service delivery.
4. Sharing
We share data only with: the accredited lab fulfilling your order (NABL / CLIA / DHA), payment and messaging processors under contract, and licensed clinicians you choose to consult. Every PHI-touching vendor operates under a data-processing agreement / BAA.
5. Security & retention
Encryption in transit and at rest, role-based access, and audit logging. We retain records only as long as needed for care continuity and legal obligations.
6. Your controls
Manage cookies via Cookie Preferences. For access, correction, deletion, or opt-out requests, contact our privacy team (contact details to be finalized before launch).