At Genavli Lifesciences Private Limited, we understand that your genetic information is among the most sensitive personal data you can share. This Privacy Policy explains how we collect, use, protect, and handle your personal information and genetic data.
Genavli Lifesciences Private Limited
3A Suvidyanagar, Vijapur Road
Solapur 413004, Maharashtra, India
By using our services, you agree to the terms outlined in this Privacy Policy. Please read this document carefully. If you do not agree with our practices, please do not use our website or services.
Effective Date: October 23, 2025
Last Updated: February 14, 2026
1. Information We Collect
Personal Information: When you create an account or place an order, we collect:
- Name, email address, phone number
- Shipping and billing address
- Date of birth and gender
- Payment information (processed securely through third-party payment processors)
Genetic Information: From your saliva sample, we extract and analyze:
- DNA sequence data from genetic markers (up to 300 crore markers depending on the test)
- Genetic variants associated with ancestry, health predispositions, and pharmacogenomics
- Raw genetic data files
Self-Reported Information: You may optionally provide:
- Family health history
- Lifestyle and dietary preferences
- Survey responses for research (with separate consent)
Technical Information: We automatically collect:
- IP address, browser type, and device information
- Website usage data and analytics
- Cookies and similar tracking technologies
2. How We Use Your Information
To Provide Our Services:
- Process your DNA sample and generate genetic reports
- Deliver results through your secure online account
- Provide customer support and respond to inquiries
- Send service updates and lifetime report updates as new discoveries are made
- Facilitate genetic counseling sessions
To Improve Our Services:
- Analyze website usage to enhance user experience
- Develop new features and testing capabilities
- Conduct quality control and ensure testing accuracy
For Research (Only with Your Consent):
- Contribute to scientific research using de-identified genetic data
- Advance understanding of genetic conditions relevant to Indian populations
- Improve genomic sequencing methodologies
Legal and Security Purposes:
- Comply with legal obligations and respond to lawful requests
- Protect our rights and prevent fraud or security threats
- Enforce our Terms of Service
3. Genetic Data Protection and Security
Our Commitment: Your genetic data is never shared, sold, or disclosed to third parties (including insurance companies, employers, or marketers) without your explicit written consent, except as required by law.
Laboratory Standards: All genomic sequencing and analysis is performed in a NABL (National Accreditation Board for Testing and Calibration Laboratories) and CAP (College of American Pathologists) accredited laboratory, ensuring the highest standards of quality, accuracy, and data integrity.
Security Measures:
- Encryption: All genetic data is encrypted both in transit (using SSL/TLS) and at rest
- Access Controls: Strict role-based access limited to authorized personnel only
- De-identification: Research data is anonymized and cannot be traced back to you
- Physical Security: Laboratory facilities are secured with restricted access and monitoring
- Regular Audits: We conduct periodic security assessments and penetration testing
Sample Storage: Physical saliva samples are destroyed after analysis is complete (typically within 30 days). We retain only the extracted genetic data in secure, encrypted databases.
Data Breach Protocol: In the unlikely event of a data breach affecting your genetic information, we will notify you promptly as required by applicable law and take immediate steps to mitigate harm.
4. Research and Data Sharing
Voluntary Research Participation: You may choose to contribute your de-identified genetic data to research. This is entirely optional and not required to use our testing services.
Research Consent: If you opt in to research:
- Your data will be de-identified (personal identifiers removed)
- Data may be used for internal research or shared with qualified research institutions
- You may withdraw consent at any time, though data already shared cannot be retrieved
- You will not receive compensation for research participation
- Research findings may be published, but you will not be identifiable
Aggregate Data: We may publish aggregate statistics (e.g., "30% of our users have a specific genetic variant") that cannot identify individual users.
Third-Party Service Providers: We work with trusted partners for specific services (e.g., laboratory analysis, payment processing, cloud storage). These providers:
- Are contractually obligated to protect your data
- May only use data for the specific services they provide to us
- Cannot use your data for their own purposes
5. Your Rights and Choices
You have the following rights regarding your personal and genetic data:
Access: You can access your genetic data and reports anytime through your account. You may also request a copy of your raw genetic data.
Correction: You can update your personal information (name, email, address) in your account settings.
Deletion: You may request deletion of your account and genetic data at any time by emailing info@genavli.in. Upon verification of your identity:
- Your account will be closed
- Your genetic data will be permanently deleted from our systems (within 30 days)
- Data already shared for research cannot be retrieved but is de-identified
- We may retain certain information as required by law or for legitimate business purposes
Download: You can download your raw genetic data file and reports from your account.
Consent Withdrawal: You may withdraw consent for research participation at any time, preventing future use of your data for research.
Marketing Communications: You can opt out of promotional emails by clicking "unsubscribe" in any marketing email. You will still receive essential service-related communications.
6. Cookies and Tracking Technologies
What Are Cookies: Cookies are small text files stored on your device that help us provide and improve our services.
Types of Cookies We Use:
- Essential Cookies: Required for website functionality (login, shopping cart)
- Analytics Cookies: Help us understand how visitors use our site (Google Analytics)
- Preference Cookies: Remember your settings and preferences
- Marketing Cookies: Used for targeted advertising (if you consent)
Managing Cookies: You can control cookies through your browser settings. Disabling cookies may limit some website functionality.
Do Not Track: We currently do not respond to "Do Not Track" browser signals, but you can manage cookies through your browser settings. We are committed to aligning our tracking practices with the Digital Personal Data Protection Act, 2023 as its provisions are notified.
7. Children's Privacy
Our services are intended for individuals 18 years of age or older. We do not knowingly collect genetic data from children under 18 without parental consent.
Testing for Minors: Parents or legal guardians may order tests for children under 18. In such cases:
- The parent/guardian must provide consent and create the account
- The parent/guardian controls access to the child's genetic data
- When the child turns 18, they may request transfer of account ownership
If we discover we have inadvertently collected data from a child without proper consent, we will delete it immediately.
8. International Data Transfers
Our operations are primarily based in India. However, we may use cloud service providers with servers located outside India for data storage and processing.
Data Protection: When your data is transferred internationally:
- We ensure appropriate safeguards are in place through contractual agreements
- Service providers must comply with data protection standards equivalent to Indian law, including the Digital Personal Data Protection Act, 2023
- Your data remains encrypted during transfer and storage
By using our services, you consent to the transfer of your data to countries outside India under these protections.
9. Legal Disclosures
We may disclose your personal or genetic information without your consent in the following circumstances:
- Legal Obligation: When required by law, regulation, court order, or government request
- Law Enforcement: In response to valid legal process from law enforcement agencies
- Safety: To protect the safety, rights, or property of Genavli, our users, or the public
- Fraud Prevention: To detect, prevent, or address fraud or security issues
- Business Transfers: In connection with a merger, acquisition, or sale of assets (with continued privacy protection)
We will notify you of such disclosures when legally permitted and will limit disclosure to the minimum necessary.
10. Data Retention
Genetic Data: We retain your genetic data indefinitely to provide lifetime report updates as new scientific discoveries are made. You may request deletion at any time.
Personal Information: We retain personal information for as long as your account is active or as needed to provide services.
After Account Deletion: Following your request to delete your account:
- Genetic data is permanently deleted within 30 days
- Personal information is deleted within 90 days
- Some information may be retained for legal compliance (e.g., transaction records for tax purposes)
- De-identified research data cannot be retrieved but contains no personal identifiers
Backup Systems: Deleted data may remain in backup systems for up to 90 days before permanent removal.
11. Third-Party Links and Services
Our website may contain links to third-party websites or services (e.g., genetic counseling providers, research publications).
Important: We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.
This Privacy Policy applies only to information collected by Genavli, not to any third-party sites or services.
12. Compliance with Indian Data Protection Laws
Digital Personal Data Protection Act, 2023 (DPDP Act): We are committed to complying with the provisions of the DPDP Act as they are notified and come into effect. Under this Act:
- Data Principal Rights: As a Data Principal, you have the right to access, correct, and erase your personal data, the right to grievance redressal, and the right to nominate another person to exercise your rights
- Consent: We collect and process your personal and genetic data only with your free, specific, informed, and unambiguous consent. You may withdraw consent at any time
- Purpose Limitation: Your data is collected and processed only for the specific purposes disclosed to you at the time of collection
- Data Fiduciary Obligations: As a Data Fiduciary, Genavli implements appropriate technical and organizational measures to protect your personal data, ensures data accuracy, and deletes data when it is no longer needed for the stated purpose
- Grievance Redressal: You may raise any grievance regarding the processing of your personal data by contacting our Grievance Officer at privacy@genavli.in. We will acknowledge your grievance and resolve it within the timeframe prescribed by the DPDP Act
Indian Council of Medical Research (ICMR) Guidelines: Our genomic sequencing services are conducted in accordance with applicable ICMR guidelines relating to genetic testing, bioethics, and human genetic research, including guidelines on informed consent for genetic testing and ethical standards for genomic research.
Information Technology Act, 2000: We comply with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, with respect to the handling of sensitive personal data including genetic data.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
Notification of Changes:
- We will post the updated policy on our website with a new "Last Updated" date
- For material changes affecting genetic data handling, we will notify you via email
- Your continued use of our services after changes constitutes acceptance
Review Regularly: We encourage you to periodically review this Privacy Policy to stay informed about how we protect your information.
14. Contact Us About Privacy
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Privacy Officer:
Genavli Lifesciences Private Limited
3A Suvidyanagar, Vijapur Road
Solapur 413004, Maharashtra, India
Email: privacy@genavli.in
General Inquiries: info@genavli.in
We will respond to your privacy-related inquiries within 30 days.