Identity, Contact & Account Information
This may include your name, email, telephone number, billing or shipping address, account information, communication preferences, and customer-support correspondence.
Privacy in Plain Language
Privacy & Data: What Happens From Order to Report
Microbiome testing can involve contact details, order records, a biological sample, laboratory information, test results, and report-access data. This page explains the current MicrobiomeTest.ca privacy framework in practical language—without replacing the formal Privacy Policy.
biotech
Sample and test information
manage_accounts
Access and deletion requests
public
Cross-border processing disclosed
shield_lock
Quick Answer
What should you know before sending a microbiome sample? The current Privacy Policy describes what information may be collected and used, which service providers may receive information, how retention and deletion requests work, general security safeguards, and the possibility of processing outside Canada. It does not publish one fixed retention period for every data category or a specific physical-sample destruction schedule.
What Information Can Exist
Your “Microbiome Data” Is More Than One File
The current policy separates several kinds of information. Understanding the categories makes retention, access, sharing, and deletion questions much easier to ask before you order.
Order & Transaction Information
Order number, product purchased, purchase date, payment status, shipping method, tracking information, kit registration status, refund or replacement history, and order-related communications may be processed.
Sample & Testing Information
Depending on the service, this may include kit-registration details, sample identifiers, collection information, consent forms, submission documents, relevant health or lifestyle information, laboratory status, results, and reports.
Website & Technical Information
The policy says technical information may include IP address, browser or device type, operating system, pages viewed, referring website, session identifiers, interactions, and general location derived from technical information.
Payment Information
Payments may be handled by an independent payment provider. The policy says MicrobiomeTest.ca generally receives approval or decline confirmation and may not receive the complete payment-card number.
Report & Support Records
Test results, reports, report-access details, sample-status information, and support correspondence can become part of the service record associated with your order.
Follow the Lifecycle
What Happens to Information From Checkout to Report
This is a simplified consumer view of the current process. It explains why a privacy question about an order is different from a question about the physical sample, laboratory information, or final report.
01
Order
Contact, billing, shipping, product, payment-status, and order information may be created or processed to fulfil the purchase.
02
Kit & Registration
Kit-registration, sample-identification, consent, submission, and related order information may be used to connect the test with the correct service request.
03
Laboratory
Information needed to complete testing may be shared with an independent laboratory or testing provider. The policy notes that laboratories can have their own privacy, security, quality-control, and retention practices.
04
Report
Results are returned through the reseller process. Customers should follow the order instructions for receiving or accessing the completed report.
05
Retention or Deletion
Different information categories may be retained for different periods. Eligible information may later be deleted, while some records may need to remain for laboratory, transaction, legal, accounting, fraud-prevention, or dispute purposes.
Transparency Check
What the Current Policy States—and What It Does Not Specify
This distinction matters. A trust page should not turn broad policy language into promises that the company has not actually published.
Currently Stated in the Privacy Policy
- check_circle Categories of personal, order, sample, testing, and technical information that may be collected.
- check_circle Purposes connected with ordering, shipping, kit registration, laboratory analysis, reporting, support, records, and security.
- check_circle Use of independent laboratories and other service providers where needed to operate the service.
- check_circle Requests for access, correction, eligible deletion, or consent withdrawal where applicable.
- check_circle Reasonable administrative, organizational, and technical safeguards.
- check_circle Possible processing outside a customer's province or outside Canada.
Not Published as a Fixed Public Promise
- help A single retention period that applies to every category of information.
- help A fixed public destruction schedule for every physical microbiome sample.
- help A guarantee that every system, provider, or laboratory stores information only in Canada.
- help A public guarantee that deletion of an online account would erase every laboratory, transaction, or legally required record.
- help A specific public claim that every relevant system uses encryption, multifactor authentication, or another named security control.
If one of these details affects whether you are comfortable ordering, ask the company before submitting a biological sample rather than assuming a practice that is not stated.
Third-Party Involvement
Who May Be Involved in the Service
The Privacy Policy says information may be shared with organizations that help operate the website or deliver the ordered service. This does not mean every provider receives every category of information.
| Provider Type | Why It May Be Involved | Consumer Privacy Question to Ask |
|---|---|---|
| Independent laboratory or testing provider | Testing, sample processing, analysis, quality-control, and information needed to prepare the report. | Which identifiers or order details are needed, and what retention practices apply after testing? |
| Shipping carrier | Delivery of the kit or movement of materials where applicable. | What contact and delivery information is needed for the shipment? |
| Payment processor | Payment authorization, transaction processing, and fraud screening. | Which payment details are handled by the processor rather than MicrobiomeTest.ca? |
| Hosting, email, and customer-service systems | Website operation, communications, customer support, and service delivery. | Could information be stored or processed outside Canada? |
| Analytics, fraud-prevention, or security providers | Website performance, misuse detection, fraud prevention, and information security. | What information is reasonably necessary for those functions? |
| Accounting or professional advisers | Business records, accounting, legal, or professional obligations where applicable. | What records may need to remain even after a deletion request? |
The policy says service providers should receive only the information reasonably necessary to perform their assigned functions. Independent providers may have separate privacy and security practices.
Retention, Access & Deletion
Your Choices Depend on the Type of Information and Why It Is Kept
The current policy does not promise that every piece of data disappears at the same time. Personal information, transaction records, laboratory records, reports, and third-party records can have different purposes and retention requirements.
The policy says you may contact MicrobiomeTest.ca to request access to personal information under its control, ask for correction of inaccurate information, request deletion of eligible personal information, or withdraw consent where applicable.
Identity verification may be required. Some access or deletion requests can also be limited where legal, security, investigation, third-party, transaction, laboratory, or other permitted requirements apply.
visibility
Access
You may request access to personal information under the company's control, subject to applicable limits.
edit
Correction
You may ask that inaccurate personal information be corrected.
delete
Eligible Deletion
You may request deletion of eligible personal information, but some records may need to be retained for stated operational or legal reasons.
cancel
Consent Withdrawal
Consent may be withdrawn where applicable, but withdrawal can prevent an order, sample, or report process from continuing.
schedule
No Single Public Retention Period
Different categories may be kept for different periods, and independent laboratories or providers may apply their own schedules.
Security Expectations
What the Current Policy Says About Protecting Information
Security matters because microbiome testing can involve personal, health-related, order, sample, and report information. The page should explain the verified security language without promising that any system is risk-free.
Safeguards the Policy Describes
- check_circle Reasonable administrative safeguards.
- check_circle Reasonable organizational safeguards.
- check_circle Reasonable technical safeguards.
- check_circle Protection goals covering unauthorized access, loss, misuse, alteration, disclosure, or destruction.
What Customers Should Not Assume
- block No website, database, electronic transmission, or email system can be guaranteed completely secure.
- block The policy does not publicly name every specific security technology used across every provider.
- block Customers still need to protect passwords, order numbers, account details, and report-access information.
Canadian Privacy Context
Processing Outside Canada Does Not Automatically Mean the Service Is Outside Canadian Privacy Rules
The current policy states that some providers, systems, or laboratories may store or process information outside the customer's province or outside Canada. Information processed elsewhere may also be subject to that jurisdiction's laws and lawful-access requirements.
The Office of the Privacy Commissioner of Canada describes privacy principles that include accountability, identifying purposes, consent, limiting collection, limiting use/disclosure/retention, safeguards, openness, and individual access. Which privacy law applies can depend on the organization, province, and how personal information moves across borders.
This section is general consumer information, not legal advice. For the company's current contractual privacy terms, use the formal Privacy Policy and ask for clarification before ordering if data location is important to you.
Continue With the Right Page
Privacy Answers Are One Part of the Testing Decision
Use this page for data-handling questions. Use the dedicated product and report pages when your next question is about the test itself or what the report may show.
Privacy Is Not Medical Interpretation
Your Privacy Choices and Your Healthcare Choices Are Separate
The Privacy Policy states that microbiome results do not replace medical advice, diagnosis, or treatment from a qualified healthcare professional. A privacy or support request can help with access, records, consent, or account questions, but it is not a route for diagnosing symptoms or choosing treatment.
If you are using testing because of persistent, severe, worsening, or otherwise concerning symptoms, speak with a regulated healthcare professional. Use customer support for practical order, kit, data, or report-access questions.
Editorial & Policy Transparency
How This Plain-Language Privacy Page Was Built
This page summarizes current public privacy information for consumers. It does not replace or amend the formal Privacy Policy, and it avoids adding sample-retention, laboratory-ownership, accreditation, security, or data-location promises that the current policy does not make.
If this support page and the formal Privacy Policy ever differ, the formal policy and current service documentation should be reviewed for the latest details.
Written by
[Author Name], [Role / relevant credentials]
Reviewed by
[Reviewer Name], [Privacy / compliance role if applicable]
Last reviewed
August 19, 2026
Replace the placeholders above with real, verified information before publication. Do not imply legal, privacy-officer, or compliance review unless that review actually occurred.
policy
MicrobiomeTest.ca Privacy Policy
Current public source for collection, use, sharing, retention, security,
cross-border processing, access, correction, deletion, and consent-withdrawal practices.
account_balance
Office of the Privacy Commissioner of Canada: PIPEDA requirements
Federal private-sector privacy context covering personal information and
core accountability principles.
verified_user
OPC guidance on meaningful consent
Canadian guidance emphasizing that people should understand the consequences
of collection, use, and disclosure when consent is obtained.
Privacy & Data FAQs
Common Questions Before Sending a Microbiome Sample
Direct answers based on the current public Privacy Policy, with uncertainty stated where the policy does not publish a fixed operational detail.
What information may MicrobiomeTest.ca collect? expand_more
Depending on how you use the service, the current Privacy Policy says information may include contact and account details, order and shipping records, kit registration, sample identifiers, consent or submission documents, relevant health or lifestyle information supplied for testing, laboratory status updates, microbiome results, reports, support correspondence, and certain website or device information.
Who may receive my sample or testing information? expand_more
Information needed to complete the service may be shared with an independent laboratory or testing provider. Other service providers may also support shipping, payments, hosting, email, customer service, analytics, fraud prevention, information security, accounting, or professional services. The policy says providers should receive only information reasonably necessary for their assigned functions.
How long is my microbiome information kept? expand_more
The current Privacy Policy does not publish one universal retention period. It says different information categories may be kept for different periods where needed for the service, support, laboratory requirements, disputes, fraud prevention, accounting, contractual, tax, or legal obligations. Independent laboratories and other providers may also apply their own retention schedules.
Can I ask MicrobiomeTest.ca to delete my data? expand_more
You may request deletion of eligible personal information or withdraw consent where applicable. Some information may still need to be retained for an active order, laboratory or transaction records, disputes, fraud prevention, legal or accounting duties, or legal claims. The policy also allows requests to access personal information or correct inaccurate information, subject to applicable limits.
Is my information guaranteed to stay in Canada? expand_more
No. The current Privacy Policy says some service providers, systems, or laboratories may store or process information outside your province or outside Canada. Information handled in another jurisdiction may be subject to that jurisdiction's laws and lawful-access requirements. This is an important point to review if data location affects your decision to order.
What security protections are described? expand_more
The current policy says reasonable administrative, organizational, and technical safeguards are intended to protect information against unauthorized access, loss, misuse, alteration, disclosure, or destruction. It also states that no website or electronic system can be guaranteed completely secure and asks customers to protect passwords, order numbers, account details, and report-access information.
Resolve Privacy Questions Before You Send a Sample
Review the formal policy, check the sample and data lifecycle, and ask for clarification if a retention, deletion, provider, security, or data-location detail affects your decision. Privacy should be understood before collection, not discovered after the report is produced.