Privacy policy

Last Updated: November 1, 2025

Omics One values and is committed to protecting user privacy. This privacy statement applies to all data collected by Omics One through its websites, blood or saliva analysis, and mobile applications (collectively, the “Services”).

This Privacy Statement applies to all users globally, including those in the European Economic Area (EEA), the United Kingdom, Canada and California, USA By using the Omics One website, Omics One Services, or interacting with Omics One, you agree to this Privacy Statement. Please read carefully to understand how we collect, use, and maintain your personal information, and to learn about your choices for use, access, and correction.

Contents

I. What information do we collect?
II. How do we use your information?
III. Will your information be shared with anyone?
IV. How do we keep your information safe?
V. Your access and choices
VI. Sample Collection and Data Usage
VII. How long do we keep your information?
VIII. What are your rights?
IX. Use by children/minors
X. Changes to our privacy policy
XI. Enforcement of this privacy policy
XII. How to contact us

I. What information do we collect?

The personal information we collect depends on your interactions with us, the choices you make, and the products and features you use. It may include personal details such as name, date of birth, email address, address, shipping address, postal code, phone number, gender, country or region, contact preferences, authentication data, billing addresses, and debit or credit card information. We also collect health-related and self-reported information such as disease conditions, traits, ethnicity, or family history, as well as RNA or DNA information derived from the analysis of your blood or saliva samples. Information about the samples you submit for processing is included as part of this data.We may also collect user content such as text, photos, or other materials you provide through our Services, as well as information on how you use our website and applications, such as IP address, browser type, and device information. Additionally, we may receive limited data from third parties such as marketing partners or social media platforms, consistent with your privacy settings. Omics One and our service providers may use cookies, web beacons, and similar tracking technologies to collect information about your use of our websites and applications. This may include IP address, device information, browser type, pages visited, and session activity. These technologies help us operate and improve our Services, analyze trends, and provide a more personalized user experience. You can manage or disable cookies through your browser settings; however, some features of the Services may not function properly if cookies are disabled.

II. How do we use your information?

We use personal information collected through the Services to provide, improve, and manage our operations. This includes creating and maintaining your account, processing orders, delivering results, and communicating with you about updates, reports, and important notices. We use your information to maintain the security of our systems, comply with legal requirements, prevent fraud, and enforce our terms and policies. For sensitive information such as genetic data derived from your blood or saliva samples, Omics One relies on explicit user consent as the legal basis for processing. PHI is processed in compliance with HIPAA; we are a covered entity/business associate. This consent covers both the analysis needed to provide our Services and the optional use of anonymized or de-identified data for research and development purposes. You may choose to opt out of sharing anonymized data at any time without affecting your access to our Services. We take additional safeguards to protect this data, including strict access controls, encryption, and limiting processing to authorized personnel and qualified research partners. We may also use anonymized and aggregated information for research and development purposes, including studies conducted by Omics One or qualified research partners. These studies help improve our understanding of health and disease and may support scientific publications or future product development. We may send marketing or promotional materials only if you have opted in to receive them. Omics One does not sell personal information or disclose identifiable user data for advertising purposes.

III. Will your information be shared with anyone?

We only share information when necessary and in accordance with the law. We may share your information with laboratories, vendors, and contractors that perform services such as sample analysis, payment processing, or technical support. **With HIPAA-covered entities via BAAs.** These third parties may use your data only as required to perform their contracted services and must protect it under this Privacy Statement. We may also disclose information when legally required, such as to comply with a subpoena, court order, or government request, or when necessary to prevent harm or fraud. If Omics One undergoes a business transaction such as a merger or acquisition, user data may be transferred in connection with that event. We may share anonymized and aggregated data with affiliates or research partners, but we will not share personal information in a way that could identify an individual without consent. If you are located outside the United States, your personal information may be transferred to and processed in the United States or other countries where we or our service providers operate. When we transfer data from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (SCCs) or other approved transfer mechanisms to ensure your data remains protected.

IV. How do we keep your information safe?

We use administrative, technical, and physical safeguards to protect your personal information against loss, misuse, unauthorized access, or disclosure. **HIPAA-compliant safeguards.** This includes the use of encryption during transmission and secure storage systems. Although we take reasonable measures to secure your data, no system is completely secure, and we cannot guarantee absolute protection from unauthorized access or data breaches. You should access our website and Services only within a secure environment. In the event of a data breach involving your personal information, Omics One will notify affected individuals and data protection authorities as required by applicable law.

V. Your access and choices

You can view, update, or delete certain information about your account through the Omics One platform or by contacting us directly. You may choose not to provide certain information, though this may limit your ability to fully use the Services. You can update or delete your account data, opt out of promotional emails, or withdraw consent for data processing at any time by contacting us using the information provided in Section XII. We will process requests as permitted by law and retain records as needed to comply with legal or operational requirements.

VI. Sample Collection and Data Usage

Omics One collects and analyzes RNA or DNA data from blood or saliva samples to deliver the results and insights associated with our Services. Blood samples are collected using a third-party system provided by partners, and Omics One remains responsible for sequencing and analysis. Omics One may retain anonymized genetic data indefinitely for research and development purposes and may share de-identified, aggregated data with qualified research institutions or partners. Anonymized data” means information that has been permanently stripped of personal identifiers such that it cannot reasonably be used to reidentify an individual. Omics One does not attempt to reidentify anonymized or aggregated data. You may opt out of anonymized data sharing at any time by contacting us at team@caucell.com.

VII. How long do we keep your information?

We retain personal information for as long as necessary to provide Services, comply with legal obligations, and protect our business interests. We promptly delete identifiable data upon account closure, retaining only anonymized data for research and development. In some cases, we may retain certain data for longer periods if required by law or to resolve disputes. Data retained for research purposes will be anonymized or aggregated whenever possible.

VIII. What are your rights?

You have the right to review, correct, or delete your personal information at any time. **US users have HIPAA rights to access and amend PHI.** Residents of the European Economic Area, the United Kingdom, and Switzerland have rights under the General Data Protection Regulation (GDPR). These rights include the ability to access your personal data, correct inaccuracies, request deletion of your information (the right to be forgotten), restrict the processing of your data, and receive your data in a structured, commonly used, and machine-readable format for transfer to another entity (data portability). You also have the right to object to processing, including for direct marketing or research purposes, and to withdraw your consent at any time without affecting processing carried out before the withdrawal. To exercise these rights, contact us at team@caucell.com. You may also file a complaint with your local supervisory authority.

California residents have rights under the California Consumer Privacy Act (CCPA). These include the right to know what categories of personal information we collect, the sources of that information, the purposes for which it is used, and the third parties with whom it is shared. You also have the right to access specific pieces of personal information we hold about you, request the deletion of your personal information, and opt out of any data sharing that may be considered a sale. Omics One does not sell personal information. You are entitled to exercise your rights without discrimination. The categories of personal information collected include identifiers, health and genetic data, and commercial information. To exercise your rights, contact us at team@caucell.com

IX. Use by children/minors

We do not knowingly allow individuals under the age of 18 to create accounts or submit samples. If we become aware that personal information has been collected from a minor, we will deactivate the account and delete the data. Parents or guardians who believe their child has provided information should contact us at team@caucell.com.

X. Changes to our privacy policy

We may update this Privacy Statement as needed. When we do, we will revise the “last updated” date at the top of this page and notify users of material changes via our website or by email. Continued use of the Services constitutes acceptance of any updates.

XI. Enforcement of this privacy policy

Any dispute is governed by Idaho law (excluding conflicts). Venue in Teton County, Idaho, unless prohibited by mandatory local law. EEA/UK/Switzerland users may enforce GDPR rights via local courts/authorities. California users may pursue CCPA claims in California. Optional arbitration under AAA rules.

XII. How to contact us

If you have any questions about this Privacy Statement or wish to exercise your privacy rights, please contact us by email at team@caucell.com or by mail at:

Omics One
PO Box 1540
Driggs, ID 83422