DNA VUE
Last updated: 13 October 2026
At DNA Vue Ltd ("DNA Vue", "we", "us" or "our"), we recognise the highly sensitive and personal nature of genetic information. We are committed to protecting the privacy, confidentiality and security of all individuals who use or participate in our DNA testing services.
Genetic information is classified as special-category personal data under the UK General Data Protection Regulation (UK GDPR) and is subject to additional legal protections.
This policy explains how we collect, use, process, share, store and protect genetic information and associated biological samples in accordance with applicable UK data protection legislation, including:
This policy applies to our DNA testing services, including paternity, maternity, relationship, prenatal paternity, immigration, legal, post-mortem and other specialist DNA testing services.
It should be read alongside our Privacy Policy.
DNA Vue Ltd is responsible for determining how and why it processes personal information in connection with its own services.
Business: DNA Vue Ltd
Address: Admirals Park, Victory Way, Dartford, DA2 6QD, United Kingdom
Email: contact@dnavue.com
Telephone: 020 8059 5620
Website: https://www.dnavue.com
Our contracted laboratories and other service providers may process information on our behalf or act as independent data controllers for certain activities, depending on their responsibilities and the applicable arrangements.
For questions concerning your genetic information or your data protection rights, please contact us using the details above.
We collect and process information that is reasonably necessary to arrange, administer and complete the requested DNA testing service.
Depending on the nature of the test, this may include:
Personal and identification information
Genetic and biological information
Case and administrative information
We seek to collect only the information necessary for the specific testing service, identity verification, lawful recordkeeping and associated administrative requirements.
Information may be obtained directly from participants, customers, authorised representatives, healthcare professionals, sample collectors or contracted laboratories, as appropriate.
DNA Vue processes genetic information for specified and legitimate purposes connected with the delivery and administration of DNA testing services.
These purposes include:
We do not sell genetic information or use identifiable genetic information for advertising, marketing profiling or unrelated commercial research.
Any materially different purpose requiring additional consent or another legal justification will be assessed before processing takes place.
Under the UK GDPR, DNA Vue must identify an appropriate lawful basis under Article 6 for processing personal information.
Because genetic information is special-category data, we must also satisfy a separate condition under Article 9 before processing it.
Depending on the processing activity and the individual's circumstances, the applicable lawful bases may include:
Performance of a Contract — Article 6(1)(b)
Where processing is necessary to perform a contract with the individual concerned or to take steps at their request before entering into a contract.
Legal Obligation — Article 6(1)(c)
Where processing is necessary to comply with an applicable legal obligation, including relevant statutory recordkeeping requirements.
Legitimate Interests — Article 6(1)(f)
Where necessary for legitimate business interests, such as maintaining appropriate case records, protecting our services against misuse or establishing and defending legal claims, provided those interests are not overridden by individuals' rights and freedoms.
Consent — Article 6(1)(a)
Where we rely on an individual's freely given, specific, informed and unambiguous consent for a particular processing activity.
Not every lawful basis applies to every participant or processing activity. The applicable basis depends on the purpose and circumstances of the processing.
Genetic information receives additional protection under Article 9 of the UK GDPR.
Where appropriate, DNA Vue relies on:
Explicit Consent — Article 9(2)(a)
Where the individual has provided valid explicit consent for the specified processing of their genetic information.
Legal Claims — Article 9(2)(f)
Where processing is necessary for the establishment, exercise or defence of legal claims, or where courts are acting in their judicial capacity.
We assess the applicable lawful basis and special-category processing condition before processing genetic information.
Where a particular condition cannot lawfully be satisfied, the relevant processing will not proceed.
DNA testing involves highly personal information and may affect more than one individual.
Before testing, we require the appropriate consent or other legally recognised authority necessary for the particular testing service.
Where explicit consent is relied upon for processing genetic information, it must be informed, specific and clearly documented.
Participants should understand:
The individual purchasing or arranging a test is not automatically entitled to provide consent on behalf of every other adult participant.
Where a participant lacks capacity or is under the age of 18, DNA Vue will assess the applicable requirements for valid consent or other lawful authority before proceeding.
Where we rely on consent as a lawful basis or explicit consent as an Article 9 condition, individuals have the right to withdraw that consent at any time.
Requests can be submitted to contact@dnavue.com.
Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
If consent is withdrawn before testing is completed, we will assess whether processing must stop and whether any information or samples must be deleted or destroyed.
Where another lawful basis and applicable special-category condition permits or requires continued processing, certain information may be retained for specified purposes.
Withdrawing consent may prevent us from completing the requested DNA testing service.
DNA Vue recognises that children's genetic information requires particular care and protection.
Where DNA testing involves a child, we will assess the applicable legal requirements for consent and authority, including the child's circumstances, capacity and the rights of individuals with parental responsibility.
We may request supporting identification or documentation to verify the authority of the person providing consent.
We do not assume that arranging or paying for a test automatically provides legal authority to authorise the testing of a child.
Children's genetic information is processed only where an appropriate lawful basis, special-category condition and necessary testing authority have been established.
Access to children's information is restricted to authorised individuals and organisations with a legitimate need to process it.
DNA Vue coordinates the collection and transfer of biological samples to laboratories responsible for performing the requested analysis.
Depending on the test, samples may be collected at our facilities, by authorised collection professionals or through an approved collection arrangement.
For legal and immigration testing, additional identity-verification and chain-of-custody procedures may apply.
We take appropriate steps to ensure that samples are:
Our contracted laboratories are responsible for the analytical processes they undertake and for managing samples in accordance with their applicable legal, contractual and quality-management obligations.
DNA Vue does not sell personal information, genetic information or biological samples.
However, the delivery of DNA testing services requires certain information to be shared with relevant third parties.
Depending on the testing service, recipients may include:
We limit disclosures to information reasonably necessary for the relevant purpose.
The recipient's responsibilities may vary depending on whether it acts as a data processor, independent controller or joint controller.
Where required, appropriate data-processing agreements or other lawful data-sharing arrangements will be maintained.
DNA testing results and case details are confidential.
We take reasonable steps to verify the identity and authority of anyone requesting information about a test.
Knowledge of a participant's name, booking date or appointment details does not, by itself, establish authority to receive confidential information.
Results are disclosed only to appropriately authorised recipients or where another lawful basis permits or requires disclosure.
We do not automatically disclose results to every person involved in a test. Disclosure depends on the applicable consent, legal rights, testing arrangements and other relevant circumstances.
Certain DNA testing services, particularly immigration and international relationship testing, may involve participants, laboratories or collection partners located outside the United Kingdom.
Where applicable, personal information may need to be shared internationally to arrange sample collection, verify identity, coordinate laboratory analysis or deliver results.
Before making a restricted international transfer of personal information, we assess the applicable UK data protection requirements.
Where required, transfers must be supported by an appropriate legal mechanism, such as:
The safeguards applicable to a particular transfer depend on the destination, recipient and circumstances.
Individuals may contact us for further information about relevant international transfers and the safeguards that apply to their case.
We retain personal and genetic information only for as long as necessary for the purposes for which it was collected, subject to applicable legal, regulatory, contractual and legitimate recordkeeping requirements.
Our retention arrangements distinguish between different types of information.
Enquiries and quotations
Generally retained for up to 12 months after the last relevant contact, unless the enquiry develops into an active case or another lawful retention reason applies.
Identity, contact and case documentation
Generally retained for six years after case closure where justified by relevant legal claims and business requirements.
For cases involving children, longer retention may be necessary. The applicable period is assessed according to the circumstances, including relevant limitation periods and the purpose of the records.
Legal and immigration chain-of-custody documentation
Retained according to applicable legal requirements and relevant laboratory quality-management obligations.
Genetic testing information and results
Retained for the period necessary to issue and support results, address relevant enquiries or disputes and meet applicable legal or laboratory obligations.
Payment and transaction records
Generally retained for six years where required or justified for accounting, taxation and associated legal purposes.
Photographs and identity-verification information
Retained for the period necessary for identity verification, case administration, chain-of-custody requirements or other applicable lawful purposes.
Biological samples
Retention and destruction are managed according to the testing laboratory's applicable procedures, contractual arrangements and legal requirements.
Samples may need to be retained for a defined period following analysis for quality assurance, verification, additional authorised testing or relevant legal requirements.
We review our retention arrangements periodically and seek to avoid keeping information longer than necessary.
When information is no longer required and no lawful retention reason applies, we arrange for its secure deletion or destruction.
Depending on the information and its location, this may involve:
Where another organisation controls relevant information or samples, its applicable retention and destruction responsibilities will also need to be considered.
Requests for deletion are assessed individually, including whether legal obligations or other lawful grounds require particular records to be retained.
DNA Vue applies appropriate technical and organisational safeguards designed to protect personal information against unauthorised access, accidental loss, alteration, disclosure or destruction.
These safeguards may include, as appropriate:
No electronic or physical security system can eliminate every risk. We therefore review our arrangements and take appropriate measures according to the sensitivity of the information being processed.
Where processing is likely to result in a high risk to individuals' rights and freedoms, a Data Protection Impact Assessment (DPIA) is required before that processing begins.
We recognise the importance of responding appropriately to any suspected or confirmed personal-data breach.
Where a breach occurs, we will assess its nature, scope and potential impact on affected individuals.
We will take appropriate steps to contain and investigate the incident and reduce the risk of further harm.
Where required by applicable data protection legislation, we will notify the Information Commissioner's Office and affected individuals within the relevant statutory timeframes.
Under the UK GDPR, individuals have rights relating to their personal information.
Depending on the circumstances and applicable legal exemptions, these may include:
Right of Access
You may request confirmation of whether we process your personal information and obtain access to information to which you are legally entitled.
Right to Rectification
You may request correction of inaccurate personal information or completion of incomplete information.
Right to Erasure
You may request deletion of your personal information in circumstances where the law provides this right.
Right to Restrict Processing
You may request restrictions on certain processing activities where the applicable legal conditions are met.
Right to Object
You may object to certain processing activities, including processing based on legitimate interests, subject to applicable legal conditions.
Right to Data Portability
Where applicable, you may request personal information in a structured, commonly used and machine-readable format or request its transfer to another controller.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time, without affecting earlier lawful processing.
Rights Relating to Automated Decision-Making
You have rights relating to certain decisions made solely through automated processing that produce legal or similarly significant effects.
These rights are subject to the conditions and exemptions provided by data protection law. In particular, a request for deletion does not automatically override lawful requirements to retain information.
Please submit requests to:
Email: contact@dnavue.com
Telephone: 020 8059 5620
We may need to verify your identity or authority before responding to a request, particularly where genetic information or another person's rights are involved.
We aim to respond within the timeframes required by UK data protection law, normally within one calendar month, subject to any legally permitted extensions.
If you have concerns about how DNA Vue handles your personal or genetic information, we encourage you to contact us so that we can investigate and respond.
Email: contact@dnavue.com
Address: Admirals Park, Victory Way, Dartford, DA2 6QD, United Kingdom
You also have the right to raise a complaint with the UK's independent data protection regulator:
Information Commissioner's Office (ICO)
Website: https://ico.org.uk
Telephone: 0303 123 1113
You do not have to contact DNA Vue before exercising your right to complain to the ICO.
We may update this policy to reflect changes in legislation, regulatory guidance, laboratory arrangements or our information-processing practices.
When changes are made, we will update the revision date displayed on this page.
Where a change requires additional notification or consent under applicable law, we will take the necessary steps.
The latest version of this policy will be available on our website.
For questions about this policy, the handling of biological samples or the processing of genetic information, please contact us:
DNA Vue Ltd
Admirals Park, Victory Way
Dartford, DA2 6QD
United Kingdom
Email: contact@dnavue.com
Telephone: 020 8059 5620
Website: https://www.dnavue.com
Our Commitment
At DNA Vue, we understand that genetic information is deeply personal. We are committed to handling every DNA testing case with appropriate confidentiality, transparency, security and respect for the rights of everyone involved.