These "Privacy Highlights" provide an overview of some core components of our data handling practices. Please be sure to review the Full Privacy Statement.
Information We Collect
We generally collect the following information:
Information you share directly with us. We collect and process your information when you place an order, create an account, register your Circle DNA Collection Kit, complete surveys, post on our platform or use other messaging features, and contact Customer Care. This information can generally be categorized as Registration Information, Self-Reported Information, and/or User Content as defined in our full Privacy Statement.
Information from our DNA testing services. With your consent, we extract your DNA from your DNA sample and analyze it to produce your Genetic Information (the As, Ts, Cs, and Gs at particular locations in your genome) in order to provide you with Circle reports.
How We Use Information
We generally process Personal Information for the following reasons:
Control: Your Choices
Circle gives you the ability to share information in a variety of ways. You choose:
Access To Your Information
Your Personal Information may be shared in the following ways:
How We Secure Information
Circle implements measures and systems to ensure confidentiality, integrity, and availability of Circle data.
Full Privacy Statement
We treat your information with the importance it deserves. We are committed to protecting your information, handling it responsibly and securing it with administrative, technical and physical measures and safeguards. All genetic test results and any Personal Information are maintained under a strict policy of confidentiality.
Our Privacy Statement is designed to help you better understand how we collect, use, store, process, and transfer your information when using our Services. Our Privacy Statement is applicable to all new and existing Users of our Services, and applies to all websites owned and operated by Prenetics Limited and its subsidiaries and/or affiliates (collectively referred "Prenetics", “we”, “us” and “our”), including www.circledna.com, and any other websites, pages, features, or content we own or operate, and to your use of the Circle mobile app and any related Services.
Please carefully review this Privacy Statement and our Terms of Service. By using our Services, you acknowledge all of the policies and procedures described in the foregoing documents. If you do not agree with or you are not comfortable with any aspect of this Privacy Statement or our Terms of Service you should immediately discontinue use of our Services.
1. Key Definitions
2. Information we collect
a. Information you provide directly to us:
b. Information related to our genetic testing services
c. Web-Behavior Information collected through tracking technology (e.g. from cookies and similar technologies)
If you reject cookies, you may still use our site, but your ability to use some features or areas of our site may be limited. We may receive reports based on the use of these technologies from third party service providers as anonymised, Individual-level Information or as Aggregate Information (as described in section 4.c). We and our third party service providers do not use your Sensitive Information, such as Genetic Information and Self-Reported Information, for targeted advertising.
Google Analytics. Google Analytics is used to perform many of the tasks listed above. We use the User-ID feature of Google Analytics to combine behavioral information across devices and sessions (including authenticated and unauthenticated sessions). We have enabled the following Google Analytics Advertising features: Remarketing, Google Display Network Impression Reporting, Google Analytics Demographics and Interest Reporting, and DoubleClick Campaign Manager integration. We do not merge information collected through any Google advertising product with individual-level information collected elsewhere by our Service. Learn more about how Google collects and uses data here. To opt out of Google Analytics Advertising Features please use Google Ad Settings. To opt out of Google Analytics entirely please use this link.
d. Other Types of Information
We continuously work to enhance our Services with new products, applications and features that may result in the collection of new and different types of information. We will update our Privacy Statement and/or obtain your prior consent to new processing, as needed.
3. How we use your information
Circle will use and share your Personal Information with third parties only in the ways that are described in this Privacy Statement.
a. To provide you with Services and analyze and improve our Services
We use the information described above in Section 2 to operate, provide, analyze and improve our Services. These activities may include, among other things, using your information in a manner consistent with this Privacy Statement to:
b. To process, analyze and deliver your genetic testing results
As described above, to receive results through the Personal Genetic Service, you must create a Circle account, register your kit, and submit your DNA sample to our laboratory, which processes and analyzes your sample to provide us with your raw Genetic Information. Once we have your raw Genetic Information, we further analyze it to provide you with our reports, dependent on the Service purchased. Circle continuously works to improve our Services based on our research and product development, and genetic associations identified in scientific literature. If you are eligible to receive additional reports or updates in the future, you may be notified of or may directly access these updates.
We process your Personal Information in this way is to provide our Services to you in accordance with our Terms of Service.
c. To allow you to share your Personal Information with others
Circle gives you the ability to share information, including Personal Information, through the Services. You have the option to share directly with individuals with Circle accounts through (i) our platform, (ii) other sharing features and tools. You may also have the ability to share information directly with individuals who have not participated in our Service via a unique, shareable URL or through a social media platform (such information is "User Content"). Some sharing features, including receiving sharing invitations, may require that you opt-out, however you will always be required to take a positive action, such as opting in, to share sensitive data.
Our legal basis for processing your Personal Information for the purpose described above is based on your consent. You may withdraw your consent at any time, however, the withdrawal of your consent will not affect the lawfulness of processing based on consent before its withdrawal.
d. To allow you to share your Personal Information for Circle Research purposes
You have the choice to participate in Circle Research by providing your consent. "Circle Research" refers to research and development projects, including but not limited to those aimed at publication in peer-reviewed journals and other research funded by the federal government (such as the National Institutes of Health - NIH) conducted by Circle.
Circle Research may be sponsored by, conducted on behalf of, or in collaboration with third parties, such as non-profit foundations, academic institutions or for healthcare companies. Circle Research may study a specific group or population, identify potential areas or targets for therapeutics development, conduct or support the development of drugs, diagnostics or devices to diagnose, predict or treat medical or other health conditions, work with public, private and/or non-profit entities on genetic research initiatives, or otherwise create, commercialize, and apply this new knowledge to improve health care. Circle Research uses Aggregate and/or Individual-level Genetic Information and Self-Reported Information as specified in the appropriate Consent form, as explained in greater detail below.
Your anonymised Genetic and Self-Reported Information may be used for Circle Research only if you have consented to this use by providing consent. If you have provided consent”:
If you have completed the Informed Consent, or additional consent agreement, in addition to the uses above under the Consent form, Circle may share anonymised Individual-level Genetic Information and Self-Reported Information with select third party research collaborators for Circle partners for Research purposes.
Withdrawing your Consent. You may withdraw your consent to participate in Circle Research at any time by changing your consent status within your Account Settings. If you experience difficulties changing your consent status, contact email@example.com. Circle will not include your Genetic Information or Self-Reported Information in studies that start more than 30 days after you withdraw (it may take up to 30 days to withdraw your information after you withdraw your consent). Any research involving your data that has already been performed or published prior to your withdrawal from Circle Research will not be reversed, undone, or withdrawn. You may also discontinue your participation in Circle Research by deleting your Circle account (as described in section 5.d).
What happens if you do NOT consent to Circle Research?
If you choose not to provide consent to us or complete any additional agreement with Circle, your Personal Information will not be used for Circle Research. However, your Genetic Information and Self-Reported Information may still be used by us and shared with our third party service providers in order for us to provide our Services to you to as outlined in this Privacy Statement.
Our legal basis for processing your Sensitive Information for the purpose described above is based on your consent. You may withdraw your consent at any time, however, the withdrawal of your consent will not affect the lawfulness of processing based on consent before its withdrawal.
e. To recruit you for external research
Research is an important aspect of Circle’s Services and we want to ensure interested participants are aware of additional opportunities to contribute to interesting, novel scientific research conducted by academic institutions, healthcare organizations, pharmaceutical companies, and other groups. If you have chosen to participate in Circle Research, from time to time we may inform you of third party research opportunities for which you may be eligible. For example, if a university tells us about a new cancer research project, we may send an email to Circle research participants who potentially fit the relevant eligibility criteria based on their Self-Reported Information to make them aware of the research project and provide a link to participate with the research organization conducting the study. However we will not share Individual-level Genetic Information or Self-Reported Information with any third party without your consent. If you do not wish to receive these notifications, you can manage them by editing your preferences in your Account Settings.
f. To provide customer support
When you contact Customer Care, we may use or request Personal Information, including Sensitive Information, as necessary to answer your questions, resolve disputes, and/or investigate and troubleshoot problems or complaints. In some instances, we may be required to process one customer’s Personal Information to resolve another customer’s dispute or request. For example, if a customer reports behavior that violates our Terms of Service, we will separately process both customers’ Personal Information and respond separately to each individual as appropriate. We will not share your Personal Information with another customer without your consent.
g. To conduct surveys or polls, and obtain testimonials
We value your feedback and may send you surveys, polls, or requests for testimonials to improve and optimize our Services. You are in control of the information you would like to share with us. If you do not wish to receive these requests, you can manage them in your Account Settings.
Our legal basis for processing your Personal Information for the purpose described above is based on our legitimate interest. We think it is important to continue improving our Services to ensure your continued enjoyment.
h. To provide you with marketing communications
By creating a Circle account, you are agreeing that we may send you product and promotional emails or notifications about our Services, and offers on new products, services, promotions or contests. You can unsubscribe from receiving these marketing communications at any time. To unsubscribe, click the email footer “unsubscribe” link or go to the “Preferences” section of your Account Settings to edit your email notification preferences. You may not opt-out of receiving non-promotional messages regarding your account, such as technical notices, purchase confirmations, or Service-related emails.
Individuals located in Designated Countries should review Section 9.d. to understand our marketing practices in relation to the Designated Countries.
4. Information we share with third parties
a. General service providers.
We share the information described above in Section 2 with our third party service providers, as necessary for them to provide their services to us and help us perform our contract with you. Service providers are third parties (other companies or individuals) that help us to provide, analyze and improve our Services. While Circle directly conducts the majority of data processing activities required to provide our Services to you, we engage some third party service providers to assist in supporting our Services, including in the following areas:
b. "Targeted advertising" service providers
c. Aggregate information
We may share Aggregate Information, which is information that has been stripped of your name and contact information and combined with information of others so that you cannot reasonably be identified as an individual, with third parties. This Information is different from "Individual-level" information and is not Personal Information because it does not identify any particular individual or disclose any particular individual’s data. For example, Aggregate Information may include a statement that "30% of our female users share a particular genetic trait," without providing any data or testing results specific to any individual user. In contrast, Individual-level Genetic Information or Self-Reported Information consists of data about a single individual's genotypes, diseases or other traits/characteristics information and could reveal whether a specific user has a particular genetic trait, or consist of all of the Genetic Information about that user. Circle will ask for your consent to share Individual-level Genetic Information or Self-Reported Information with any third party, other than our service providers as necessary for us to provide the Services to you.
d. Information we share with commonly owned entities
We may share some or all of your Personal Information with other companies under common ownership or control of us, which may include our subsidiaries, our corporate parent, or any other subsidiaries owned by our corporate parent in order to provide you better service and improve user experience. Generally, sharing such information is necessary for us to perform on our contract with you. We may provide additional notice and ask for your prior consent if we wish to share your Personal Information with our commonly owned entities in a materially different way than discussed in this Privacy Statement.
e. As required by law
Under certain circumstances your Personal Information may be subject to processing pursuant to laws, regulations, judicial or other government subpoenas, warrants, or orders. For example, we may be required to disclose Personal Information in coordination with regulatory authorities in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. Circle will preserve and disclose any and all information to law enforcement agencies or others if required to do so by law or in the good faith belief that such preservation or disclosure is reasonably necessary to: (a) comply with legal or regulatory process (such as a judicial proceeding, court order, or government inquiry) or obligations that Circle may owe pursuant to ethical and other professional rules, laws, and regulations; (b) enforce our Terms of Service and other policies; (c) respond to claims that any content violates the rights of third parties; or (d) protect the rights, property, or personal safety of us, its employees, its users, its clients, and the public. View our Transparency Report for more information.
f. Business transactions
In the event that we go through a business transition such as a restructuring, merger, acquisition by another company, or sale of all or a portion of its assets your Personal Information will likely be among the assets transferred. In such a case, your information would remain subject to the promises made in any pre-existing Privacy Statement.
5. Your choices
a. Access to your account
We provide access to your Circle data within your Circle account. You can access and download certain data processed by Circle within your Account Settings and within applicable Reports, Tools, and features. If you lose access to your Circle account or account email address, please contact Customer Care for assistance. If you lose access to your Circle account, in certain circumstances, we may require that you submit additional information sufficient to verify your identity before providing access or otherwise releasing information to you. If you choose not to submit the required documentation, or the information provided is not sufficient for the purposes sought, Circle will not be able to sufficiently verify your identity in order to complete your request.
You may access, correct or update most of your Registration Information on your own within your Account Settings. You may also review and update your consent to Circle Research. Please note that you may not be able to delete User Content that has been shared with others through the Service and that you may not be able to delete information that has been shared with third parties.
b. Marketing communications
As noted in Section 3.h. you may be asked to opt-in to receive product and promotional emails or notifications when creating your Circle account. Otherwise, you may view or update your email notification preferences by contacting our Privacy Administrator at care@circleDNA.com. You can also click the "unsubscribe" button at the bottom of promotional email communications.
c. Sharing outside of the Circle Services
You may decide to share your Personal Information with friends and/or family members, doctors or other health care professionals, and/or other individuals outside of our Services, including through third party services such as social networks and third party apps that connect to our website and mobile apps through our application programming interface ("API"). These third parties may use your Personal Information differently than we do under this Privacy Statement. Please make such choices carefully and review the privacy statements of all other third parties involved in the transaction. We do not endorse or sponsor any API applications, and does not affirm the accuracy or validity of any interpretations made by third party API applications.
In general, it can be difficult to contain or retrieve Personal Information once it has been shared or disclosed. Circle will have no responsibility or liability for any consequences that may result because you have released or shared Personal Information with others.
d. Account deletion
If you no longer wish to participate in our Services, or no longer wish to have your Personal Information be processed, you may delete your Circle account and Personal Information by contacting our Customer Care team. Once you confirm your request, this process cannot be cancelled, undone, withdrawn, or reversed. When your account is deleted, all associated Personal Information is deleted and any stored samples are discarded, subject to the following limitations:
6. Security measures
Your privacy is important to us. . We comply with the applicable requirements of the Personal Data (Privacy) Ordinance in Hong Kong SAR and other applicable regulations specific to Hong Kong SAR. Circle implements physical, technical, and administrative measures to prevent unauthorized access to or disclosure of your information, to maintain data accuracy, to ensure the appropriate use of information, and otherwise safeguard your Personal Information.
Your Responsibility. Please recognize that protecting your Personal Information is also your responsibility. We ask you to be responsible for safeguarding your password, secret questions and answers, and other authentication information you use to access our Services. You should not disclose your authentication information to any third party and should immediately notify Circle of any unauthorized use of your password. Circle cannot secure Personal Information that you release on your own or that you request us to release.
Your information collected through the Service may be stored and processed in countries in which Circle or its subsidiaries, affiliates or service providers maintain facilities and, therefore, your information may be subject to the laws of those other jurisdictions which may be different from the laws of Hong Kong SAR and your country of residence.
7. Children's privacy
Circle is committed to protecting the privacy of children as well as adults. Neither Circle nor any of its Services are designed for, intended to attract, or directed toward children under the age of 18. A parent or guardian, however, may collect a DNA sample from, create an account for, and provide information related to, his or her child who is under the age of 18. The parent or guardian assumes full responsibility for ensuring that the information that he/she provides to Circle about his or her child is kept secure and that the information submitted is accurate.
8. Linked websites
Circle provides links to third party websites operated by organizations not affiliated with Circle. Wedo not disclose your information to organizations operating such linked third party websites. We do not review or endorse, and is not responsible for, the privacy practices of these organizations. We encourage you to read the privacy statements of each and every website that you visit. This Privacy Statement applies solely to information collected by us and our service providers on our behalf.
9. Changes to this Privacy Statement
Whenever this Privacy Statement is changed in a material way, a notice will be posted as part of this Privacy Statement and on our website for 30 days. After 30 days the changes will become effective. In addition, all customers will receive an email with notification of the changes prior to the change becoming effective. Circle may provide additional "just-in-time" disclosures or additional information about the data collection, use and sharing practices of specific Services. Such notices may supplement or clarify our privacy practices or may provide you with additional choices about how we process your Personal Information.
10. Contact Information
If you have questions about this Privacy Statement, or wish to submit a complaint, please email Circle Privacy Administrator at care@circleDNA.com, or send a letter to:
c/o Prenetics Limited
7/F, Prosperity Millennia Plaza,
663 King’s Road, Quarry Bay
+852 2210 9588