Legal
Privacy
This page explains, in plain English, how GeneMap Research handles personal data. It is a product privacy summary — not a substitute for formal counsel if you need a signed DPA.
Controller
Forward People BV (Netherlands) operates GeneMap Research (genemap.io). For privacy questions, email hello@genemap.io.
What we collect
- Email address — so we can deliver your report link and support you if checkout or map generation needs a fix.
- DNA file for map build — you upload a raw genotype file you downloaded yourself. The flow is built so we do not write your full raw file into ordinary application logs; the file is used to compute which panel markers are present and to build your report.
- Payment metadata — handled by Stripe (card details stay with Stripe). GeneMap receives payment status needed to unlock your report.
- Optional partner opt-in — only if you later choose to be introduced to a partner; that choice is yours.
- Basic technical data — ordinary web/server logs (for example IP, user agent) as needed to run and secure the site.
Purpose
- Deliver your informational GeneMap report (€19.99 product).
- Confirm payment and prevent fraud / abuse.
- Answer support requests you send us.
- Improve reliability of the upload → map pipeline (aggregate / technical fixes — not marketing dossiers built from your genotypes).
Legal bases we rely on in the EU/EEA context typically include contract (delivering the report you bought) and, where needed, legitimate interests (security, abuse prevention) or consent (optional partner intros). Exact basis can depend on the processing step.
Cookies & ad measurement
We may use a Meta (Facebook) marketing cookie to measure whether our ads lead to visits and purchases. It is off unless you tap “Accept” on our cookie banner; you can change your choice any time via “Cookie settings” on the upload page. If you accepted and then buy a report, we may also tell Meta directly from our server that a purchase happened, with the amount (€19.99), an order reference and your email address in hashed (scrambled) form. We never send Meta your DNA file, genotypes, marker names, report contents or report link. If you did not accept, we send nothing to Meta.
We also count anonymous steps in the upload flow (for example “file checked” or “checkout opened”) with a random session number so we can fix where people get stuck. That count does not include your email, your DNA data or your report.
Retention
We keep personal data as needed to deliver your report and support, then delete or minimize it. We are not publishing a fake fixed “30-day” clock here. If you want erasure sooner, email us — see Rights below.
Your rights (GDPR / NL)
If EU/EEA data protection law applies to you, you typically have rights to:
- Access the personal data we hold about you
- Rectification of inaccurate data
- Erasure (“right to be forgotten”) where applicable
- Restriction of processing in certain cases
- Data portability where applicable
- Object to certain processing based on legitimate interests
- Withdraw consent where processing was consent-based (for example optional intros)
- Lodge a complaint with the Dutch Autoriteit Persoonsgegevens (or your local supervisory authority)
To exercise rights, contact hello@genemap.io. We may need to verify you control the email used at checkout.
Processors & transfers
We use service providers to run the product (for example hosting and Stripe for payments). Where data leaves the EEA, we expect appropriate safeguards from those providers. Details can be confirmed on request.
Not medical data theater
GeneMap is an informational map of public literature against markers in a consumer DNA file. It is not a clinical genetic test and not medical advice. Still: genotype-related data is sensitive — treat your report like something you share only with people you trust, including clinicians you choose.