Ancestry Privacy Statement

This document is Ancestry's Privacy Statement governing the collection, use, sharing, and retention of personal information across Ancestry's genealogy, DNA testing, and related digital services, with stated legal bases including consent, contractual necessity, and legitimate interests depending on jurisdiction. The agreement states that Ancestry collects a broad range of data including name, contact information, payment details, family tree content, communications, device identifiers, browsing and clickstream activity, IP addresses, and genetic data submitted through AncestryDNA, and authorizes use of this data for product delivery, personalization, advertising, research, and sharing with third-party service providers, business partners, and affiliated companies. The collection and processing of genetic and health-related data represents an operationally distinct element of this policy relative to standard consumer digital services, as the agreement asserts rights to store, analyze, and share DNA data with research partners, subject to separate consent mechanisms described in the AncestryDNA Terms and Conditions; the agreement's asserted authority over such sensitive biological data may interact with state-level genetic privacy statutes and federal frameworks in ways that applicable law may constrain. The policy engages GDPR for EU and UK users, CCPA and California Genetic Information Privacy Act for California residents, and general FTC Act consumer protection principles applicable to US users; jurisdiction-specific rights including access, deletion, portability, correction, and opt-out of sale or sharing of personal information are disclosed with region-specific mechanisms, though the practical enforceability of certain cross-border data transfer provisions and research consent terms depends on evolving regulatory guidance.