EEA, UK and Switzerland Privacy Notice
Last Updated: April 14, 2026
This EEA, UK and Switzerland Privacy Notice (“Notice”) explains how 23andMe complies with certain privacy rights specifically available to individuals located in the European Economic Area (inclusive of the European Union) (“EEA”), United Kingdom (“UK”), or Switzerland.
To make it simple, we use the same terms as defined in our Privacy Statement and Terms of Service. Any new terms will be defined below. This Notice should be read together with our Privacy Statement, Cookie Policy, and our Terms of Service.
1. Our relationship with you
We are the “controller” of your Personal Information because we determine the means and purposes of processing your information when using our Services.
2. Legal bases for processing Personal Information
The laws of your country require us to rely on certain conditions to process your information. When we process your information, we rely on the following conditions or “legal bases”:
- Your consent
- Legal obligations
- Contracts we entered with you or to take steps at your request prior to entering into a contract with you
- Legitimate interests to protect our property, rights or safety of 23andMe, our customers or others.
3. Privacy Rights
Residents of the EEA, UK, and Switzerland have the right to access, delete, correct, withdraw their consent, and have portability of their information. We believe all our customers should have strong privacy controls, which is why our Privacy Statement outlines how you can access, download, and delete your personal information and you can contact customercare@23andme.com for further assistance. In addition, you have the right to object or restrict the processing of your Personal Information. To exercise such rights, please contact us at privacy@23andMe.com. We will handle your request under applicable law, and, in some cases, your ability to access or control your Personal Information will be limited as required or permitted by applicable law.
4. International Transfers
We are a global business, meaning your Personal Information will likely be transferred to, stored, and processed in the U.S. and other countries outside of where you live. When we conduct such transfers, we rely on various legal bases to lawfully transfer Personal Information around the world, including fulfillment of our agreements with you, your prior consent, adequacy decisions for relevant countries, or other transfer mechanisms as may be available under applicable law, such as the European Union Commission approved standard contractual clauses.
In cases where Personal Information may be transferred to or processed in locations outside of the European Economic Area (EEA), UK, and Switzerland, which have not been determined by the European Commission, UK ICO, or Swiss FDPIC to have an adequate level of data protection, 23andMe takes measures designed to provide the level of data protection required in the EU, UK, or Switzerland including ensuring transfers are governed by the requirements of the Standard Contractual Clauses adopted by the European Commission or another adequate transfer mechanism. 23andMe has entered into transfer agreements based on the Standard Contractual Clauses which allows for the processing and transfer of personal data.
5. Complaints or Questions
If you have any questions about our privacy practices or believe that we have infringed your rights, we encourage you to contact us directly at:
Privacy Administrator
23andMe Research Institute
2555 Park Blvd,
Palo Alto, CA 94306
1.800.239.5230
privacy@23andMe.com
You also have a right to lodge a complaint with a competent supervisory authority situated in the country of your habitual residence, place of work, or place of alleged infringement. You can find the relevant supervisory authority name and contact details for the EEA here, the UK here, and Switzerland here.
Click here to view the older version of this notice.