PREORDER NOW IN THE U.K. ON
Healf.com
Last Revised: October 23, 2025
The Ultimate Human Wellness (“The Ultimate Human Wellness”, “we”, or “us”) are committed to protecting and respecting your privacy. This is our main privacy notice, which explains when, how and why we collect personal information about you. It also explains how we may share your information, how we secure it, and what rights and choices you have as an individual. The information in this privacy notice relates to our processing of your personal information when you purchase ‘The Ultimate Human Wellness Genetic Test Kit’, or interact with our websites , , or , (“our websites”, or “the websites”), our pages across social media platforms, or in other way.
The Ultimate Human Wellness is committed to upholding the principles of data protection as set out under the UK data protection legislation, including the UK GDPR, the Data Protection Act 2018, and the Data (Use and Access) Act 2025, and related guidance issued by the Information Commission. We ensure that all personal data is processed lawfully, fairly, and in a transparent manner, and only for specified, explicit, and legitimate purposes. We take care to collect and retain only the minimum amount of personal data necessary for our business activities, and to keep such data accurate and up to date. Our practices are designed to reflect the accountability principle, demonstrating our ongoing commitment to protecting the rights and freedoms of individuals and maintaining your trust in how we handle your personal data.
We are committed to ensuring the highest standards of privacy, by adequately protecting your personal information, and supporting your privacy rights. If you have any questions about this notice, or how we handle your personal data, don’t hesitate to get in touch with us. We’ll be more than happy to help.
The Ultimate Human Wellness LLC is a registered company with our registered address at 2669 S Bayshore Dr Unit 2101 Miami, FL, 33133-5489 United States. As per our requirements under Article 27 of the UK GDPR, relevant to data controllers based outside the United Kingdom, we have appointed RGDP LLP as our UK Representative, and also our Data Protection Officer.
If you have any concerns about how we collect, use, share or keep your personal data, you think there has been a breach of your personal data, you wish to make a complaint regarding the processing of your personal data, or you have a question or concern about anything in this notice, you may contact our Data Protection Officer using the details below:
RGDP LLP Edinburgh, One Edinburgh Quay, EH3 9QG
We will use your personal data whenever you request or purchase our products and services, interact with us online, or to establish and / or manage a business relationship with you. We also need your personal data where you have obligations under a contract with us to provide us with the necessary personal data, and not providing this information may prevent our ability to maintain that contract with you.
We may collect your personal data directly from you, or we may receive it indirectly.
When you purchase our products or services, you are required to provide your card payment information, as well as basic contact information, so that we can manage and fulfil your order, register and maintain your account, provide you with regular updates on delivery timescales or where we are in the testing process, or to otherwise provide an excellent level of customer service to you.
Specifically, when you purchase a ‘The Ultimate Human Wellness Genetic Test Kit’, we will also collect your data via the below:
When you scan the provided QR code on your test kit, you are taken to our account registration page, which requires basic contact information, as well as your date of birth, sex, and the sample ID of your purchased test kit. We collect and use this information so that we can accurately carry out our services, and ensure we match your results back to you. Where possible, we pseudonymise your personal data, meaning that rather than sharing your name and other identifiers, we share a pseudonymised ID with our trusted partners, so as to provide a high level of data security. See ‘How we secure your personal data’ for more information.
When you post your kit to us, we will process your pseudonymised ID and your DNA sample, including sharing it with our trusted partners, in order to analyse methylation pathways, helping reveal how your body manages nutrients, energy, and ageing markers. These trusted partners include our UK and Denmark-based labs, and our US data analysis team.
When you provide us with your consent, so that we may undertake certain data processing activities, and provide you with the related services you have requested, we will store that consent, along with a date and time stamp, to ensure that should you ever change your mind or wish to revoke that consent, or if there is ever a need for us to demonstrate that consent, we can easily assist you with that request. We may also request your consent to contact you with regards to our promotional materials, special offers, and more.
When you make an enquiry via our website, various social media platforms, or otherwise, we will process your contact information, your social media handle, any personal data you have elected to share with us, in order to appropriately manage and respond to your enquiry.
When attend an online virtual meeting in platforms such as Zoom or Microsoft Teams, we will process your basic identification in order to correspond with you, and we will process your respective platform username (or other shared contact information within the platform), so that we may set-up any respective meetings, interact with you accordingly, and provide any expected follow-up.
When you engage with us as a prospective or current business partner, supplier, affiliate, etc, we may process your personal data in order to facilitate any contractual agreement, including contractual negotiations, we have with you, so that we can begin our maintain our relationship with you.
When you visit our websites, we may place Cookies on your device for a variety of purposes, including functional, performance, analytical, or marketing purposes. For more information on how we use Cookies, see our Cookie Notice.
When you interact with us on social media platforms such as Facebook, Instagram, and Twitter, we may obtain information about you (for example, when you like, otherwise react, or post on any of these social media pages). The information we receive will depend on the privacy preferences you have set on those types of platforms. As a best practice, you should check any privacy notice provided to you where you give your data to a third party.
When you interact or otherwise engage with our trusted partners or service providers, your personal data may be shared with us, from them. This may include when we receive data from our lab partners, our product distribution partners, payment providers, or any other partner who act on our behalf to provide services to you.
If we are contacted by any local authority or law enforcement, in relation to any ongoing investigation, we may receive your personal data relevant to us, you, and that investigation.
Under UK data protection laws, where we process your personal data, we need to have a valid lawful basis under Article 6 of the UK GDPR. Additionally, where we will be processing your special category data, for example, your health data in the form of your DNA sample, we will also require an additional lawful basis under Article 9 of the UK GDPR.
See the breakdown of our lawful basis below:
For processing your card payment information in order to take payment for any purchase of ‘The Ultimate Human Wellness Genetic Test Kit’, as well as the processing of your contact information so that we can fulfil the service you have requested from us, including managing your account, we will rely on Article 6 (1) (b) processing is necessary for the performance of a contract. This lawful basis is also used when we process your personal data for business engagement purposes, either when we have a contract of services with you, or where the processing is necessary within the context of establishing a potential contract. We call this pre-contract negotiations.
Please note that we may collect your business contact details, such as your name, business address and business e-mail, and your company’s bank account details. If you are a sole trader, this may be your personal details.
We will rely on Article 6 (1) (a) consent for processing your personal data, when we use it for our marketing purposes, or for any information shared with us indirectly, where that consent is obtained by a third-party. Non-essential website Cookies will also be used only where we have your consent. Additionally, when we process your DNA sample, which are classified as Special Category Data, we rely on Article 9 (2) (a) explicit consent as the separate lawful basis required under Article 9 of the UK GDPR, so that we may lawfully process this data.
We may rely on Article 6 (1) (f) legitimate interests for processing your personal data. We will only do this in instances where we consider and balance any potential impact on you (both positive and negative), and your rights under data protection laws. This processing will only take place where we conclude that our interest in the use of your personal information is not overridden by the impact on you, for example, where the data processing would be excessively intrusive (unless, for instance, we are otherwise required or permitted to by law).
We rely on this lawful basis when you make an enquiry via the website, social media, or otherwise, that is not in relation to an existing contract, or the establishment of a potential contract with us. For example, when you make a general enquiry about the products or services we offer.
We will rely on Article 6 (1) (c) where there exists a legal obligation for us to process your personal data.
Lastly, we may also rely on the new lawful basis implemented as part of the Data (Use and Access) Act 2025, under Article 6 (1) (ea), Recognised Legitimate Interests. This will include if or when we process your data for any of the following purposes:
National Security, public security and defence;
Emergencies;
Crime; and
Safeguarding vulnerable individuals.
As per UK data protection laws, we will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason, and that reason is compatible with the original purpose. Where this is the case, we will ensure that our privacy information accurately reflects this additional processing purpose and provides you with transparency as to how we use that personal data.
Our website may contain links to other websites run by other organisations. This privacy notice applies only to our website‚ so we encourage you to read the privacy statements on any other websites you visit. The Ultimate Human Wellness is not responsible for the privacy information and practices of other websites, even if you access those using links from our website.
In addition, if you are linked to our website from a third-party site, we cannot be responsible for the privacy information and practices of the owners and operators of that third party site, and we recommend that you check the privacy information of that third party site also.
We will only share your personal data with third parties where it is necessary for the provision of the services that you have requested from us, where we have your consent to do so, or in the limited circumstances detailed below:
We will share your personal data when required by law, regulation, or litigation, and as necessary for purposes of national security, law enforcement, or other issues of public importance.
If we sell assets, or are acquired by or merged with, another entity, we may provide such entity your personal data that we hold. We may provide to you notice of such asset sales, acquisitions, or mergers.
During the provision of our services, and our other data processing activities described above, there may be instances where we may transfer your personal data to countries outside the UK. This includes when sending your personal data to our non-UK-based labs, or to our US data analytics partners, to provide you with the results of your test.
When working with our trusted partners and/or transferring personal data to countries outside the UK, we take appropriate steps to ensure that there is adequate protection and / or appropriate safeguards in place, and that UK data protection legislation is complied with, including obtaining your explicit consent where this is necessary.
Rest assured, your personal data will only be processed within the UK, except, where these international transfers are authorised by law.
We retain your personal data only for as long as we need to in order to manage your relationship with us, and to ensure compliance with legal and regulatory requirements. Where your data is no longer necessary for this relationship, we will ensure it is anonymised or disposed of appropriately. For example, following the analysis by our labs of your DNA sample, as part of ‘The Ultimate Human Wellness Genetic Test Kit’, your DNA sample will be securely disposed of.
We use a variety of security measures to help prevent personal data from being accidentally or unlawfully accessed, shared or lost, or otherwise processed. When you provide us with your personal data, we take steps to make sure that data is kept secure and safe. We utilise Amazon Web Services for our cloud-storage purposes, providing client and server-side encryption both at rest and in transit, various logging and monitoring functionality to detect incidents and access attempts, and a number of access-management controls to ensure we protect against unauthorised access, and adhere to the principle of least privilege.
As mentioned earlier in this notice, where possible, we will pseudonymise your personal identifiers, sharing only a pseudonymised ID with our trusted partners, to reduce the risk involved during the provision of our services. We ensure that any third parties we involve in our processing follow our safety-first approach to handling your personal data.
We also ensure our staff and our customer service team receive suitable training on data protection, including how to adequately protect data during their day-to-day activities, recognising data subject rights requests, and carrying out best practices in order to prevent data breaches from occurring.
You have a number of rights in relation to the personal data we hold about you, and we will ensure that you can exercise these rights accordingly. In order to do so, please contact our Data Protection Officer using the contact details found at the bottom of this notice.
Please note, these rights are not always absolute and certain conditions may apply. Where applicable under UK data protection law, and subject to these conditions, you are entitled to:
If you have any questions regarding this privacy notice, you can contact us using the details below:
The Ultimate Human Wellness LLC 2669 S Bayshore Dr Unit 2101 Miami, FL, 33133-5489 United States
If you have any concerns about how we collect, use, share or keep your personal data, you think there has been a breach of your personal data, you wish to make a complaint regarding the processing of your personal data, or you have a question or concern about anything in this notice, you may contact our Data Protection Officer using the details below:
RGDP LLP Edinburgh, One Edinburgh Quay, EH3 9QG
RGDP LLP are also designated as our UK Representative, as required by Article 27 of the UK GDPR for data controllers based outside the United Kingdom.
If you have already made a complaint to us or our Data Protection Officer, and you are not satisfied with the outcome, you then have the right to complain to the Information Commission regarding any concerns about how we collect, use, share or keep your personal data. You may contact them at:
Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Telephone: 0303 123 1113 Web:
We regularly review and, where necessary, update our privacy information contained within this notice. This was last updated on 22nd October 2025.
RightDescriptionRight to be informed about how we process your personal data.You have the right to be informed about the collection and use of your personal data.Right to access your personal data, commonly known as a “Subject Access request” (‘SAR’).You have the right to request a copy of the personal data that we hold about you.Right to rectification of the personal data that we hold about you.You have the right to ask us to rectify personal data that you believe is inaccurate or incorrect. This includes the right to have information completed which you believe to be incomplete.Right to be forgotten / right to erasure of your personal data.You have the right to ask us to erase your personal information in certain circumstances.Right to object to processing of your personal data.You have the right to object to the processing of your personal data in certain circumstances.Right to the restriction of processing of your personal data.You have the right to ask us to restrict the processing of your personal information in certain circumstances.Right to data portability.You have the right to ask that we transfer the personal data that you provided us with to another organisation, or to you, in certain circumstances.Right not to be subject to an automated decision.When a decision is based on automated processing, and produces an adverse legal or similarly significant effect, you have a number of rights in relation to that decision.
