EU-U.S. – DATA PRIVACY FRAMEWORK

EU-U.S. Data Privacy Framework 
Endeavor DNA, Inc. complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF as set forth by the U.S. Department of Commerce. Endeavor DNA, Inc. has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

The United States Department of Commerce is the enforcement authority with jurisdiction over this compliance with the EU-U.S. Data Privacy Framework.

In compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, Endeavor DNA, Inc. commits to resolve complaints about our collection or use of your personal information transferred to the U.S. pursuant to the EU-U.S. DPF. EU and UK individuals with inquiries or complaints should first contact:
Endeavor DNA, Inc.
[Re: Privacy Compliance Officer]
6955 North Mesa Street, Suite 109, El Paso, TX, USA 79912
privacy@endeavordna.com
(915) 519-1600

Endeavor DNA, Inc. has further committed to refer unresolved DPF Principles-related complaints to a U.S.-based independent dispute resolution mechanism, BBB NATIONAL PROGRAMS. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit www.bbbprograms.org/dpf-complaints for more information and to file a complaint. This service is provided free of charge to you.

If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See https://www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf/.

There are 3 ways we collect information from you:
Direct – If you contact Endeavor DNA, Inc. directly and purchase our testing services.
Website – If you contact Endeavor DNA, Inc. via our website and purchase our testing services.
Resellers – If you contact one of Endeavor DNA, Inc.’s resellers and purchase our testing services.

We may collect information from you, including, but not limited to your first and last name, e-mail, phone number, mailing address, gender, race and signature when you submit our DNA testing consent form. If you provide us feedback or contact us via email, we will collect your name and email address, as well as any other content included in the email, in order to send you a reply, and any information that you submit to us, such as a resume.

Information you submit to us is used either to respond to requests that you make, or to aid us in serving you better. Endeavor DNA, Inc. will only use your information in order to provide you the services, process your order, and respond to customer service or billing related questions.

Notice – When Endeavor DNA, Inc. collects personal information directly from individuals in the EU and the United Kingdom, it will inform them about the purposes for which it collects their personal information and the choices and means, if any, that Endeavor DNA, Inc. offers individuals for limiting the use and disclosure of their personal information. Notice will be provided in clear and conspicuous language when individuals are first asked to provide personal information to Endeavor DNA, Inc., or as soon as practicable thereafter, and in any event before Endeavor DNA, Inc. uses or discloses the information for a purpose other than that for which it was originally collected. If Endeavor DNA, Inc. receives personal information from its Endeavor Reseller Program resellers in the EU and the United Kingdom, it will use such information in accordance with the notices such entities provided and the consents or choices made by the individual about whom such personal information relates.

Choice – Endeavor DNA, Inc. will offer individuals the opportunity to choose whether their personal information is (a) to be disclosed to a third party (unless allowed or required by contract), or (b) to be used for a purpose other than the purpose for which it was originally collected or subsequently authorized by the individual. For sensitive personal information, Endeavor DNA, Inc. will give individuals the opportunity to affirmatively and explicitly consent (e.g., through a signature) to the disclosure of the information to a third party or the use of the information for a purpose other than the purpose for which it was originally collected or subsequently authorized by the individual. When you provide us with personal information to enroll as a reseller, verify your method of payment, place an order or arrange for a delivery, you imply that you consent to our collecting it and using it for that specific reason only. If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.

How do I withdraw my consent?
If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at any time, by contacting us at privacy@endeavordna.com or mailing us at:
Endeavor DNA, Inc.
6955 North Mesa Street, Suite 109
El Paso Texas US 79912

Accountability for Onward Transfer – Endeavor DNA, Inc. will obtain assurances from its resellers that they will safeguard personal information consistent with this Policy. If Endeavor DNA, Inc. has knowledge that a reseller is using or disclosing personal information in a manner contrary to this Policy, Endeavor DNA, Inc. will take reasonable steps to prevent or stop the use or disclosure. Endeavor DNA, Inc. may be liable for appropriate transfer of personal information to third parties.

Security – Endeavor DNA, Inc. will take reasonable precautions to protect personal information in its possession from loss, misuse and unauthorized access, disclosure, alteration, and destruction.

Data Integrity and Purpose Limitation –

Access – Endeavor DNA, Inc. acknowledges the right of individuals to access their personal data. Upon request, Endeavor DNA, Inc. will grant individuals reasonable access to personal information that it holds about them. In addition, Endeavor DNA, Inc. will take reasonable steps to permit individuals to correct, amend, or delete information that is demonstrated to be inaccurate or incomplete. Individuals requesting access to their personal information may do so by contacting us at privacy@endeavordna.com or mailing us at:
Endeavor DNA, Inc.
6955 North Mesa Street, Suite 109
El Paso Texas US 79912

Recourse, Enforcement & Liability – Endeavor DNA, Inc. will conduct compliance reviews of its relevant privacy practices to verify adherence to this Policy. Any employee that Endeavor DNA, Inc. determines is in violation of this Policy will be subject to disciplinary action up to and including termination of employment. Changes to this Policy may be made from time to time, consistent with the requirements of the EU-U.S. Data Privacy Framework. Endeavor DNA, Inc. will post appropriate notice about such changes and amendments.

SECURITY
To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

DISCLOSURE
Please be aware that Endeavor DNA, Inc. may be required to disclose an individual’s personal information in response to a lawful request by public authorities, including to meet national security or law enforcement requirements.

THIRD-PARTY SERVICES
We use payment gateways as third-party service providers to process your service payments. We only transmit what is required to process your method of payment.

LINKS
When you click on links on our website, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

SECURITY
To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

COOKIES
Cookies are small files which are stored on a user’s computer. We may use both session cookies and persistent cookies on our website. Persistent cookies can be removed by following Internet browser help file directions. If you choose to disable cookies, some areas of our website or service may not work properly. We use Google Analytics on our site. Google Analytics is a web analytics service provided by Google. Google Analytics uses cookies to collect anonymous traffic data to help use analyze how users use the website. The information generated by a cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the site, compiling reports on site activity for us and providing other services relating to site activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. By using the website, you consent to the processing of data about you by Google in the manner and for the purposes described in this Privacy Policy.

AGE OF CONSENT
By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.

CHANGES TO THIS PRIVACY POLICY
We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it. If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.

QUESTIONS AND CONTACT INFORMATION
Any questions or comments regarding this privacy policy may be directed to our Privacy Compliance Officer at:
Endeavor DNA, Inc.
[Re: Privacy Compliance Officer]
6955 North Mesa Street, Suite 109, El Paso, TX, USA 79912
privacy@endeavordna.com
(915) 519-1600

Effective Date: Sept 29, 2023