Privacy Policy
At Helixline, we believe your genetic data is among the most personal information you can share. Here's how we protect it.
Last Updated: January 5, 2026
Overview & Privacy Principles
Helixline Data Science Private Limited ("we," "us," or "our") operates the helixline.in website and provides DNA ancestry testing and genetic analysis services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.
Our Core Privacy Principles
Transparency: We clearly explain what data we collect and why.
Control: You decide how your data is used and can delete it anytime.
Security: We use industry-leading encryption and security measures.
Locality: Your genetic data is processed and stored exclusively in India.
No Selling: We never sell your personal or genetic data to third parties.
By using our services, you consent to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access our services.
Information We Collect
We collect information in several categories:
| Category | Examples | Purpose |
|---|---|---|
| Personal Information | Name, email, phone number, shipping address | Account creation, order fulfillment, customer support |
| Payment Information | Payment method details (processed by secure payment providers) | Transaction processing |
| Biological Sample | Saliva sample containing your DNA | Genetic analysis and ancestry reporting |
| Genetic Data | Genotype data, ancestry percentages, haplogroups | Generating your ancestry and health reports |
| Self-Reported Information | Ethnicity, family history, health information (optional) | Improving report accuracy, research (with consent) |
| Technical Data | IP address, browser type, device information, cookies | Website functionality, analytics, security |
Genetic Data Handling
We understand that genetic data is uniquely sensitive. Unlike other personal information, your DNA is immutable and can reveal information about you and your biological relatives. We treat this data with the highest level of care.
Sample Processing
Your saliva sample is processed at our partner laboratory in India. After DNA extraction and genotyping, your physical sample is destroyed within 30 days unless you explicitly opt-in to sample storage for potential future testing.
What happens to your sample:
- Collection: You provide a saliva sample using our home collection kit
- Transport: Sample is shipped to our certified laboratory via secure courier
- Processing: DNA is extracted and analyzed using genotyping technology
- Analysis: Your genetic data is compared against our reference database
- Reporting: Results are securely delivered to your online account
- Destruction: Physical sample is destroyed (unless you opt for storage)
Important Consideration
Because DNA is shared among biological relatives, your genetic information may reveal information about family members who have not used our service. We recommend discussing this with your family before taking a DNA test.
How We Use Your Information
We use your information for the following purposes:
- Service Delivery: To process your DNA sample and provide ancestry reports, health insights, and other genetic analyses you have requested
- Account Management: To create and manage your account, authenticate your identity, and provide customer support
- Communication: To send you order updates, result notifications, and service-related announcements
- DNA Relative Matching: To connect you with genetic relatives who have also opted into this feature
- Product Improvement: To improve our algorithms, reference databases, and user experience
- Research (Optional): With your explicit consent, to contribute to scientific research that advances the understanding of human genetics
- Legal Compliance: To comply with applicable laws, regulations, and legal processes
We Will Never:
• Sell your personal or genetic data to third parties
• Share your data with insurance companies or employers
• Use your genetic data for purposes other than those you've consented to
• Provide your data to law enforcement without a valid court order
Data Sharing & Third Parties
We may share your information in limited circumstances:
| Recipient | Purpose | Data Shared |
|---|---|---|
| Laboratory Partners | DNA sample processing and genotyping | Saliva sample (de-identified with unique code) |
| Payment Processors | Secure payment processing | Payment details (we don't store card numbers) |
| Shipping Providers | Kit delivery and sample collection | Name and shipping address only |
| Cloud Infrastructure | Secure data storage (India-based servers) | Encrypted data |
| Research Partners | Scientific research (only with explicit consent) | De-identified, aggregated genetic data |
All third-party service providers are contractually obligated to maintain the confidentiality and security of your data and may only use it for the specific purposes we've authorized.
Research Use of Data
Helixline conducts research to improve its services and advance understanding of human genetics. Participation in research beyond core service improvement is voluntary and based on explicit user consent.
Internal Service Improvement
We use de-identified and aggregated genetic data internally to improve ancestry algorithms, enhance regional accuracy, and develop new features. This processing is considered part of providing and improving our services and does not involve sharing identifiable data outside Helixline.
- Improving Ancestry Algorithms: We use aggregated genetic data to refine our ancestry composition models, improve regional specificity, and enhance the accuracy of our reports for all users.
- Reference Panel Development: Your genetic data contributes to building and expanding our proprietary Indian reference panel, enabling more precise ancestry breakdowns for South Asian populations.
- Product Development: Research insights help us develop new features, health reports, and services that benefit our user community.
Optional Research Participation
With your explicit opt-in consent, Helixline may use your de-identified genetic data and self-reported information for broader scientific research, including collaborations with academic or research institutions.
- Population Genetics Studies: We conduct research to understand migration patterns, genetic diversity, and historical population movements across the Indian subcontinent.
- Scientific Publications: We may publish aggregated, de-identified findings in peer-reviewed journals to contribute to the broader scientific community's understanding of human genetics.
You can manage your research participation preferences at any time through your account settings.
Helixline's Rights to Use Data for Research
When you opt in to research participation, you grant Helixline a non-exclusive right to use your de-identified data for the purposes described above.
Research Partnerships:
Helixline may collaborate with academic institutions, research organizations, and pharmaceutical companies for scientific research. In such cases:
- Data shared with research partners is always de-identified and aggregated
- Individual users cannot be re-identified from shared research data
- Research partners are bound by strict data use agreements
- All research collaborations undergo ethical review
Important Notice
By using our services, you understand that while you may request deletion of your personal account and identifiable data, de-identified data that has already been incorporated into aggregated research datasets or published findings cannot be removed, as it is no longer linked to your identity. This does not affect your right to delete your personal account data.
Intellectual Property:
All research findings, algorithms, databases, and derivative works created using aggregated user data are the exclusive intellectual property of Helixline. Users do not retain ownership over aggregated research findings or proprietary algorithms developed by Helixline.
Opting Out of Research:
While basic research for service improvement is part of our core service, you may opt out of participation in external research collaborations through your account settings. Note that opting out:
- Will not affect data already used in completed research
- Does not apply to internal service improvement research
- May limit certain features that depend on community participation
Security Measures
We implement comprehensive security measures to protect your data:
Additional security measures include: secure coding practices, intrusion detection systems, regular security training for employees, two-factor authentication for account access, and comprehensive logging and monitoring.
Your Rights & Choices
You have extensive control over your personal and genetic data:
To exercise any of these rights, please contact us at privacy@helixline.in or through your account settings. We will respond to all requests within 30 days.
Data Retention & Deletion
We retain your data according to the following schedule:
| Data Type | Retention Period | After Account Deletion |
|---|---|---|
| Physical Sample | Destroyed within 30 days of processing (unless storage opted) | Already destroyed |
| Genetic Data | Until you request deletion | Permanently deleted within 30 days |
| Account Information | Duration of account | Deleted within 30 days |
| Transaction Records | As required by Indian tax law (typically 7 years) | Retained for legal compliance |
| Research Contributions | Per research consent terms | De-identified data may be retained |
How to Delete Your Data
You can request complete data deletion through your account settings or by emailing privacy@helixline.in. Upon receiving your request, we will permanently delete all your personal and genetic data from our systems within 30 days, except where retention is required by law.
Children's Privacy
Our services are intended for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under 18.
For minors between 13-17 years of age, a parent or legal guardian must create an account and provide consent for genetic testing. The parent/guardian maintains control over the minor's data and can request deletion at any time.
If we learn that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information as quickly as possible.
International Users & Data Transfers
Helixline is based in India, and all data processing and storage occurs within India. Our services are primarily offered to residents of India.
If you access our services from outside India, please be aware that your information will be transferred to, stored, and processed in India. By using our services, you consent to this transfer.
We comply with applicable Indian data protection laws, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDPA). For users in the European Union, we also strive to meet GDPR standards for data protection.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons.
When we make material changes, we will:
- Update the "Last Updated" date at the top of this policy
- Notify you via email if you have an account with us
- Display a prominent notice on our website
- For significant changes affecting genetic data, request renewed consent where appropriate
We encourage you to review this policy periodically to stay informed about how we protect your information.
Questions About Your Privacy?
Our Team is available to answer any questions about how we handle your data.
privacy@helixline.in