Privacy policy

Who we are

Microbiome Ireland is a trading name of GutMap Diagnostics Limited, 4 Innovation Close, York Science Park, York YO10 5ZF, United Kingdom. Our website address is https://microbiomeireland.com.

GutMap Diagnostics Limited is the controller of the personal data described in this policy. You can reach us about anything in it at info@gutmapdx.com.

What we collect

When you order a test, we collect your name, email address, phone number and delivery address, including your Eircode. We need these to deliver your kit, to contact you about your order and to send your results.

Card payments go through Stripe. You type your card details into Stripe’s secure fields, and they go straight to Stripe. We receive a payment reference and the last four digits of the card, never the full card number.

When you register your kit and complete the health questionnaire, we collect the details you give us about your health and symptoms. Your sample and the laboratory results from it are health data and genetic data. The law treats these as special category data, and we only process them with your explicit consent, which you give when you register the kit and send your sample.

If you use the practitioner form, we collect your name, email address, phone number, address and message so that our team can reply and set up your practitioner account.

Our web server keeps short technical logs, including IP addresses, to keep the site secure and to investigate faults. We count visits with Cloudflare Web Analytics, which sets no cookies and does not identify you; it records which pages are viewed, the referring site, and the browser and country. We do not use advertising trackers on this site.

How we use your data

We use your data to:

• take payment and send your kit to you
• process and analyse your sample in our laboratory
• prepare your report and nutrition plan and make them available on the results portal (portal.gutmapdx.com)
• answer your questions and practitioner enquiries
• keep the records that tax, accounting and laboratory rules require

The legal bases are the contract with you (orders, delivery, results), your explicit consent (health and genetic data), our legal obligations (financial and laboratory records) and our legitimate interests (keeping the site secure, replying to enquiries).

You need to give us your contact and delivery details so that we can fulfil your order. Without them we cannot send your kit or your results.

We do not make decisions about you by automated means, including profiling. We do not sell your data, and we do not use your health or genetic data for marketing.

Who we share your data with

We share only what each service needs to do its job:

• Stripe, which processes card payments
• the postal and courier services that deliver your kit and return your sample
• the laboratories that analyse your sample
• the companies that host our website, results portal and email
• Cloudflare, which checks that the practitioner form is sent by a person and not a bot, and counts visits to the site without cookies

Each of these acts on our instructions or under its own privacy terms for its own service. We share data with anyone else only with your consent or where the law requires it.

Where your data is stored

GutMap Diagnostics Limited is based in the United Kingdom, so your data is processed there. The European Commission has issued an adequacy decision for the United Kingdom, which allows personal data to move from Ireland to the UK. Where a service provider stores data outside the UK or the European Economic Area, we rely on the safeguards the GDPR requires, such as the European Commission’s standard contractual clauses.

How long we keep your data

We keep your personal data only as long as we need it to provide your results and meet our legal obligations. You can ask us to delete it at any time.

Samples are kept only as long as testing and laboratory quality control need them, or as long as the law requires.

Your rights

Under the GDPR you can ask us to:

• give you a copy of the personal data we hold about you
• correct data that is wrong or incomplete
• delete your data, except data we must keep for legal, administrative or security reasons
• restrict or object to how we use your data
• send your data to you or to another organisation in a common format

Where we rely on your consent, you can withdraw it at any time. This does not affect processing we carried out before you withdrew it.

To use any of these rights, email info@gutmapdx.com. We reply within one month.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can try to put it right. You also have the right to complain to the Data Protection Commission, the supervisory authority in Ireland: www.dataprotection.ie, 21 Fitzwilliam Square South, Dublin 2, D02 RD28.

Cookies

This site sets no cookies of its own. The cookies page explains the few that other services set.

Changes to this policy

We will post any change to this policy on this page and update the date at the top.