Privacy Policy

UMMUHUB LTD

PRIVACY POLICY

Title

Last Updated: 22 March 2026

Company No. 16624424 | Registered in England & Wales 3rd Floor, 2 Harley Street, London, England, W1G 9PA

Quick-Reference Summary

This layered summary is for convenience only. The full policy below is the binding document.

TOPIC	Key Point
Who we are	UMMU HUB LTD (Co. No. 16624424), the World's First Female Only Epigenetic Platform. Our Services are primarily designed for women's health and biology. Parents and guardians may also use the platform to manage health tracking for their children, including male children, under their account.
Services covered	(1) DNA + Epigenetic Test Kits (saliva sample), (2) Personalised supplements, Pre Natal, 1st/2nd/3rd Trimester, Post Natal, Fertility, Longevity, and stage specific formulations, (3) UMMU AI Health Coach, (4) Re Test Kits, (5) Wellness subscription.
Testing categories	Fitness, Fertility, Pregnancy, Post Partum, and Longevity, analysed through DNA (fixed genetic traits) and Epigenetics (biological age, methylation, lifestyle impact on gene expression).
Genetic & epigenetic data	This is special category data under UK/EU GDPR (Art. 9). We process it only with your explicit consent. Your raw data is encrypted and pseudonymised in our laboratory systems.
Female specific data	We collect and process menstrual cycle data, fertility indicators, pregnancy stage, hormonal pattern data, and reproductive biological age. This is sensitive health data processed only with your explicit consent.
Family implications	Your DNA reveals information about your biological relatives. We do not contact or share data with relatives. We do not use your genetic data to infer information about third parties.
UMMU AI Coach	Our AI analyses your DNA results, epigenetic scores, cycle patterns, and life stage to provide personalised wellness guidance. This is general wellness information only, not medical advice.
Saliva samples	Your physical saliva sample is processed by our laboratory partner and destroyed after analysis per their protocols. We do not retain your raw biological material.
Legal basis	Explicit consent (UK GDPR Art. 6(1)(a) + Art. 9(2)(a)) for all genetic, epigenetic, reproductive, and hormonal data. Contract performance for account and order data.
Sharing	Laboratory processing partner (under strict DPA). Cloud/IT providers. No sale of data. No sharing with insurers, employers, or advertisers.
Not medical advice	Nothing on our platform, including DNA results, epigenetic scores, biological age, supplement recommendations, or AI coaching, is medical advice, diagnosis, or treatment.
Your rights	Access, rectification, erasure, portability, consent withdrawal, right to object. Contact privacy@ummuhub.com.
Retention	Genetic and epigenetic data held while your account is active, deleted within 30 days of account closure. Saliva samples destroyed after analysis.
International	We serve customers internationally. EU GDPR applies to EEA users. EU representative in process of appointment, see Section 11.
Sub processors	Full list: www.ummuhub.com/sub-processors

1. Who We Are

UMMU HUB LTD ("UMMU HUB", "we", "us", "our") is a private limited company incorporated in England and Wales, company number 16624424. Our registered office is at 3rd Floor, 2 Harley Street, London, England, W1G 9PA.

We operate www.ummuhub.com and a mobile application (the "App") trading as "UmmuHub" — the World's First Female-Only Epigenetic Platform. We are a personalised wellness platform for women, combining DNA and epigenetic testing, life-stage specific supplement formulations, and an AI health coach to deliver biology-led, personalised wellness insights.

UMMU HUB is not a medical device, does not provide medical advice, and is not a regulated healthcare service. Nothing on our platform constitutes medical advice, clinical assessment, diagnosis, or treatment. If you have health concerns — including concerns about fertility, pregnancy, hormonal health, or any medical condition — always consult a qualified healthcare professional.

We are the data controller of your personal information under:

the UK General Data Protection Regulation ("UK GDPR") and Data Protection Act 2018 ("DPA 2018"), as amended by the Data (Use and Access) Act 2025 ("DUAA 2025");
the EU General Data Protection Regulation ("EU GDPR") where applicable to users in the European Economic Area; and
the Privacy and Electronic Communications Regulations 2003 ("PECR"), as amended.

Data protection lead: privacy@ummuhub.com

We are not required to appoint a Data Protection Officer (DPO) under UK GDPR Article 37. We have designated our Head of Legal as our data protection lead, responsible for oversight of this policy and our data protection compliance programme.

2. Changes to This Privacy Policy

We review this Privacy Policy at least annually and whenever our practices or applicable law materially change. We will notify you of significant changes by updating the "Last Updated" date, displaying a notice on our website or App, and/or emailing you if the change materially affects your rights. Where a change requires fresh consent (for example, a new use of genetic or epigenetic data), we will obtain that separately before proceeding.

3. Personal Information We Collect and How We Collect It

The personal information we collect depends on how you interact with us. The most sensitive data we handle — genetic and epigenetic data — is generated from your saliva sample and processed by our laboratory partner. We explain each category in full below.

3.1 Information You Provide Directly

Contact details: name, email address, telephone number, and postal address.
Account credentials: username, password, and security settings.
Order and billing details: billing/shipping address and payment confirmation. Full card numbers are processed by our PCI DSS-compliant payment processor and never stored by us.
Health and lifestyle profile: information you voluntarily provide when setting up your account or completing our wellness quiz, including your current life stage (e.g. pre-conception, pregnant, post-natal, perimenopause), age, health goals, and lifestyle factors.
Menstrual cycle data: cycle length, last period date, cycle regularity, and related hormonal symptoms, where you choose to provide this.
Pregnancy stage: trimester, estimated due date, or post-natal status, where applicable.
Support communications: any information you include when contacting us for help.

3.2 Saliva Sample and DNA / Epigenetic Data

This is the most sensitive category of data we process. Your saliva sample contains your DNA and is collected via a physical test kit we send to you. The sample is analysed by our laboratory partner. What we receive back is digital genetic and epigenetic data — not the physical sample itself.

From your saliva sample, our laboratory partner generates:

DNA / Genetic data: your fixed genetic profile, analysed across traits relevant to the testing categories you have selected (Fitness, Fertility, Pregnancy, Post-Partum, Longevity). This includes genetic markers relating to muscle power, bone density, nutrient metabolism, hormonal response, injury risk, cardiovascular health, reproductive traits, and more.
Epigenetic data: analysis of your DNA methylation patterns, which reflect how your lifestyle and environment are influencing your gene expression. This includes your Biological Age score, Reproductive Biological Age, Heart Age, Wellness & Inflammation Score, MethylGuard score, Epi Vitality score, and Longevity Pathways assessment.

Both genetic data and epigenetic data are special category data under UK/EU GDPR. We process this data only on the basis of your explicit consent (Article 9(2)(a)). See Section 5 for details of your rights to withdraw that consent.

Important: Your saliva sample is a physical biological specimen. After analysis by the laboratory, the sample is destroyed in accordance with the laboratory's protocols and applicable biological waste regulations. We do not retain your physical sample. You may request details of our laboratory partner's sample retention and destruction policy by contacting us.

3.3 Female-Specific Health Data

Because UmmuHub is specifically designed for women's health, we collect and process certain categories of health data that relate specifically to female biology. All of the following is treated as special category health data and processed only with your explicit consent:

Menstrual cycle patterns and regularity.
Fertility indicators and Reproductive Biological Age scores derived from epigenetic analysis.
Pregnancy stage and trimester information.
Post-natal status and recovery metrics.
Perimenopausal and menopausal indicators, where relevant to your life stage.
Hormonal pattern data, where inferred from genetic markers or provided by you.

This data is used solely to personalise your wellness insights, supplement recommendations, and AI coaching to your specific life stage. It is never used for advertising and is never shared with third parties for commercial purposes.

3.4 UMMU AI Health Coach Data

Our AI health coach ("UMMU AI") is trained specifically on female genetics, epigenetics, and hormonal patterns. When you interact with UMMU AI, we process:

Your DNA and epigenetic results (as described above).
Your stated life stage, cycle data, and any health goals or concerns you share in conversation.
Your conversation history with UMMU AI, to enable personalised and contextually relevant responses.

UMMU AI provides wellness-oriented guidance. It does not provide medical diagnoses, clinical recommendations, or treatment plans. See Section 13 for our full disclaimer.

Explicit Consent Screen: Before UMMU AI accesses your genetic or epigenetic results, you are presented with a specific consent screen clearly explaining: (a) that your genetic and epigenetic data will be used by the AI to generate wellness guidance; (b) the categories of data involved; (c) that this is not medical advice; and (d) that you may withdraw consent at any time. This consent is separate from your agreement to our general Terms of Service and is required before AI coaching features are activated.

3.5 Supplement and Order Data

When you purchase supplements — including our Pre-Natal, 1st/2nd/3rd Trimester, Post-Natal, Fertility, and Longevity formulations — we process:

Order details: products purchased, quantities, and order history.
Delivery information: shipping address and delivery preferences.
Payment confirmation: transaction reference (not full card numbers — these are handled by our payment processor).
Supplement usage data: if you log supplement use within the App, we use this to track consistency and adjust recommendations over time.

3.6 Re-Test and Subscription Data

If you purchase a Re-Test Kit to track changes in your biological age over time, or if you hold a subscription (including our Free DNA & Epigenetics test with subscription offer), we process data about your testing history to enable comparison between test results and track progress over time.

3.7 Usage and Technical Data

When you use our website or App, we automatically collect limited technical data including IP address and approximate location, browser/device type, pages visited, App feature interactions, and crash diagnostics. See Section 17 for our cookie policy.

3.8 Third-Party Data

Payment processors (e.g. Stripe): transaction confirmation and fraud signals. Full card data never reaches our servers.
Shipping partners: delivery status updates for physical kit and supplement orders.
Analytics providers: aggregated, pseudonymised usage data.

4. Special Category Data — Genetic, Epigenetic, and Health Data

The following categories of data we process are classified as special category data under UK/EU GDPR and receive the highest level of legal protection:

Genetic data (Article 4(13) UK/EU GDPR): data resulting from specific technical processing of biological characteristics, uniquely identifying you.
Biometric data used for unique identification (Article 4(14)).
Health data (Article 4(15)): data concerning physical or mental health, including all reproductive, hormonal, fertility, pregnancy, and epigenetic data we process.

We process all special category data only on the basis of your explicit consent under Article 9(2)(a) UK/EU GDPR. This means:

We present a clear, granular, plain-language consent request before activating each data processing purpose.
Consent is freely given and specific — you can consent to some purposes but not others.
You can withdraw consent at any time without detriment. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.
On withdrawal, we stop processing the relevant data and, absent another legal basis, delete it within 30 days.

UMMU HUB is not a medical device, does not provide medical advice, and is not a regulated healthcare service. Nothing on our platform constitutes medical advice, clinical assessment, diagnosis, or treatment. If you have health concerns — including concerns about fertility, pregnancy, hormonal health, or any medical condition — always consult a qualified healthcare professional.

5. Legal Bases for Processing

We process your personal information only where a lawful basis exists under UK/EU GDPR:

Processing Activity	Legal Basis
Creating and managing your account	Art. 6(1)(b), performance of a contract
Processing orders for test kits and supplements	Art. 6(1)(b), performance of a contract
Providing shipping and fulfilment of physical kits and supplements	Art. 6(1)(b), performance of a contract
Processing saliva samples and generating DNA / epigenetic results	Art. 6(1)(a) + Art. 9(2)(a), explicit consent
Processing female specific health data (cycle, fertility, pregnancy, hormonal)	Art. 6(1)(a) + Art. 9(2)(a), explicit consent
Personalising supplement recommendations based on DNA/epigenetic results	Art. 6(1)(a) + Art. 9(2)(a), explicit consent
Providing UMMU AI coaching based on your genetic and health profile	Art. 6(1)(a) + Art. 9(2)(a), explicit consent
Sending transactional communications (order confirmations, test result notifications)	Art. 6(1)(b), performance of a contract
Sending marketing emails (existing customers, similar products)	Art. 6(1)(f), legitimate interests, with opt out
Sending marketing emails (all others)	Art. 6(1)(a), consent
Fraud detection and platform security	Art. 6(1)(f), legitimate interests
Analytics using pseudonymised/aggregated data only	Art. 6(1)(f), legitimate interests
Complying with legal obligations (tax records, court orders)	Art. 6(1)(c), legal obligation
Handling your data rights requests	Art. 6(1)(c), legal obligation

Where we rely on legitimate interests, we have completed a balancing test confirming our interests are not overridden by your rights. You may request a copy by contacting us.

6. How We Use Your Personal Information

6.1 Providing DNA and Epigenetic Testing

Sending you a test kit containing a saliva collection tube and instructions.
Arranging for the return of your sample to our laboratory partner for processing.
Receiving your genetic and epigenetic results from the laboratory and displaying them in your account.
Generating your personalised reports across your selected testing categories (Fitness, Fertility, Pregnancy, Post-Partum, Longevity).
Enabling Re-Test functionality: comparing new epigenetic results against your baseline to track biological age change over time.

6.2 Personalising Supplement Recommendations

Using your DNA results and epigenetic data to recommend the supplement formulation best matched to your biology and life stage.
Adjusting supplement recommendations as you progress through life stages (e.g. from Pre-Natal to 1st Trimester to Post-Natal).
Identifying specific nutrient deficiencies or sensitivities indicated by your genetic profile to inform dosing and ingredient selection.

6.3 UMMU AI Health Coach

Providing personalised wellness guidance via our AI coach, trained specifically on female genetics, epigenetics, and hormonal patterns.
Enabling contextually relevant responses by using your genetic results, epigenetic scores, life stage, and cycle data.
Answering questions about your DNA results, supplement protocols, cycle patterns, and wellness goals.

UMMU AI guidance is for general wellness and informational purposes only. See Section 13 for our full disclaimer on the limits of AI-generated wellness guidance.

6.4 Managing Your Account and Orders

Creating and maintaining your account.
Processing and fulfilling orders for test kits and supplements.
Sending shipping confirmations, test result notifications, and account alerts.
Providing customer support.

6.5 Research and Service Improvement (Anonymised Only)

We may use fully anonymised, aggregated data — which cannot identify any individual — to improve the accuracy of our genetic algorithms, enhance our epigenetic models, and develop new wellness insights. This data cannot be linked back to you. We do not use identifiable genetic or epigenetic data for research without separate, specific consent.

6.6 Marketing

We may send marketing emails about our products and services. Opt out at any time via the unsubscribe link or by emailing privacy@ummuhub.com.
We never use your genetic, epigenetic, fertility, pregnancy, or hormonal data for marketing targeting.

7. Family Member Implications of Genetic Data

Genetic data is unique in that it is partially shared with your biological relatives. Your DNA results may reveal information about traits, health predispositions, or characteristics that are also present in your family members who have not consented to testing.

We take the following approach to this inherent characteristic of genetic data:

We do not use your genetic data to infer or generate information about third parties, including your relatives.
We do not contact your relatives on the basis of your data.
We do not share your genetic data with your relatives or with any party who could use it to identify your relatives.
We do not use your genetic data for ancestry or familial matching services.
We do not sell or license your genetic data to any third party.

If you have concerns about the family implications of genetic testing, please contact us at privacy@ummuhub.com before submitting your sample. We are happy to discuss this with you.

8. How We Share Your Personal Information

We do not sell your personal information. We do not share your genetic, epigenetic, fertility, pregnancy, hormonal, or health data with advertisers, insurers, employers, or data brokers under any circumstances.

8.1 Laboratory Partner (Sample Processing)

Your saliva sample is sent to our specialist laboratory partner for DNA and epigenetic analysis. This is a data processing relationship under Article 28 UK GDPR. Our laboratory partner:

Processes your sample solely for the purpose of generating your test results.
Is bound by a written Data Processing Agreement prohibiting any other use of your data.
Destroys your physical sample after analysis in accordance with applicable protocols.
Operates under appropriate accreditation standards for genetic testing laboratories.

You may request the name and accreditation details of our laboratory partner by contacting us at privacy@ummuhub.com.

8.2 Other Service Providers (Data Processors)

We share personal information with carefully selected service providers who process data strictly on our behalf, under written Article 28-compliant Data Processing Agreements. Categories include:

Cloud hosting and infrastructure providers.
Payment processors (PCI DSS compliant; full card data never reaches us).
Shipping and logistics providers (for physical kit and supplement delivery).
Customer support software providers.
Email delivery providers.
Analytics and crash-reporting providers (pseudonymised data only).
IT security and fraud prevention services.

Full list: www.ummuhub.com/sub-processors

8.3 Legal and Regulatory Disclosure

We may disclose personal information where required by applicable law, court order, or regulatory authority. We notify you where legally permitted and disclose only the minimum information necessary.

8.4 Business Transfers

If UMMU HUB undergoes a merger, acquisition, or sale of assets, personal information may transfer as part of that transaction. We will notify you before your data becomes subject to a materially different privacy policy, and will honour your rights throughout. Genetic and epigenetic data will only transfer to a successor who agrees to be bound by obligations no less protective than those in this policy.

8.5 With Your Explicit Consent

We share your personal information with any other third party only where you have given clear, specific, informed, and freely given consent for that specific purpose.

9. Security of Your Data

Given the sensitivity of genetic, epigenetic, and health data we process, we implement robust technical and organisational security measures, including:

Encryption of all data in transit using TLS 1.2 or higher.
Encryption of genetic, epigenetic, and health data at rest using AES-256 or equivalent.
Pseudonymisation of genetic data at laboratory level — your sample is identified by a unique ID, not your name, during laboratory processing.
Strict, role-based access controls — staff and contractors access only the data necessary for their specific role.
Regular security testing and vulnerability assessments.
A documented incident response plan tested regularly.

In the event of a personal data breach likely to result in high risk to your rights and freedoms, we will notify you without undue delay (Article 34 UK GDPR) and notify the ICO within 72 hours (Article 33 UK GDPR).

10. Data Retention

Data Category	Retention Period
Account and profile data	Duration of your account. Deleted within 30 days of account closure.
DNA / Genetic results data	Duration of your account. You may request deletion at any time. Deleted within 30 days of account closure.
Epigenetic results and biological age data	Duration of your account, retained to enable Re Test comparison. Deleted within 30 days of account closure, unless you request earlier deletion.
Female specific health data (cycle, fertility, pregnancy, hormonal)	Duration of your account. Deleted within 30 days of account closure or immediately on withdrawal of consent.
Physical saliva sample	Destroyed by the laboratory after analysis per their protocols. We do not hold your physical sample.
UMMU AI conversation history	Retained while your account is active to provide contextual coaching. Deleted within 30 days of account closure.
Order and payment records	7 years from end of the relevant tax year (Companies Act 2006 s.390; Taxes Management Act 1970).
Customer support communications	3 years from resolution of the support interaction.
Marketing consent records	Until consent withdrawn, then 3 further years as evidence of consent.
Data rights request records	3 years from the date of the request.
Security and fraud logs	12 months, unless extended by active investigation or legal obligation.

When data is no longer needed, it is securely deleted or irreversibly anonymised. Anonymised data (which cannot identify you) may be retained indefinitely for statistical and service improvement purposes.

11. International Transfers and EEA Users

11.1 Transfers Outside the UK / EEA

We ship test kits and supplements to customers worldwide and our laboratory partner and some service providers may operate outside the UK or EEA. Where personal data is transferred outside these regions, we ensure appropriate safeguards, which may include: UK International Data Transfer Agreements (IDTAs), the UK Addendum to EU Standard Contractual Clauses, EU Standard Contractual Clauses, or transfer to a country covered by an adequacy decision. The EU-UK adequacy decision was renewed on 19 December 2025 and runs to 27 December 2031.

11.2 EU GDPR Representative (Article 27)

UMMU HUB is established in the United Kingdom and offers Services to users across the EEA. We are therefore subject to the EU GDPR in addition to the UK GDPR for EEA-based users.

In accordance with Article 27 of the EU GDPR, we are in the process of appointing a designated EU representative. Until that appointment is formalised, EEA-based users may direct any EU GDPR-related enquiries directly to us at privacy@ummuhub.com. We will update this section with our representative's contact details when the appointment is complete.

12. Automated Decision-Making

Our platform uses algorithms and AI to generate wellness insights, biological age scores, supplement recommendations, and coaching guidance from your genetic, epigenetic, and health data. We are transparent about how this works:

DNA results are generated by our laboratory partner using validated genetic analysis methodology applied to your saliva sample.
Epigenetic scores (including Biological Age, Reproductive Biological Age, Heart Age, MethylGuard, Epi Vitality, Wellness & Inflammation Score) are generated by applying validated epigenetic algorithms — including established biological clock models — to your methylation data.
Supplement recommendations are generated by matching your genetic markers and epigenetic profile to our formulation database.
UMMU AI responses are generated by a large language model trained on female genetics, epigenetics, and hormonal health data, using your results as context.

All of these outputs are for wellness and informational purposes only. They do not produce legal or similarly significant effects on you. They are not medical diagnoses and must not be used as such.

Under Article 22A UK GDPR (as amended by DUAA 2025), where automated processing involves special category data (which includes all genetic, epigenetic, and health data we process), explicit consent is required and safeguards must be in place. You provide this consent when you purchase a test kit and create an account. You may request human review of any automated output by contacting privacy@ummuhub.com. We will respond within one month.

13. Important — Not Medical Advice

UMMU HUB is not a medical device, is not regulated by the MHRA or any healthcare regulator, and does not provide medical advice, clinical assessment, diagnosis, or treatment. Our DNA results, epigenetic scores, biological age assessments, supplement recommendations, and AI coaching are for general wellness and informational purposes only and have no clinical diagnostic validity. Nothing on our platform should be used as a substitute for professional medical advice. If you have health concerns — including concerns about fertility, pregnancy, hormonal health, or any medical condition — always consult your GP or a qualified healthcare professional. In a medical emergency, call 999.

This applies specifically to:

Fertility category test results: Our Fertility epigenetic category — including Reproductive Biological Age, Epi Vitality, and related scores — is a wellness metric derived from methylation analysis calibrated against our female-specific dataset. It is not a fertility test. It does not predict your ability to conceive, assess your ovarian reserve, or provide any clinical measure of fertility. If you have concerns about your fertility, consult a gynaecologist or fertility specialist.
Heart Age score: Our Heart Age epigenetic score reflects methylation patterns associated with cardiovascular ageing in our female-specific dataset. It is not a diagnosis of heart disease, a cardiovascular risk assessment, or a clinical cardiac evaluation. It must not be used to make decisions about cardiac treatment or medication.
These scores are wellness insights. They are not equivalent to, and must not be used as substitutes for, clinical testing, blood tests, or assessments carried out by a qualified healthcare professional.
Biological age and Reproductive Biological Age scores — these are wellness metrics derived from epigenetic algorithms and do not constitute a clinical assessment of your fertility or health status.
Fertility and pregnancy-related insights — these are informational only and must not be used to make decisions about conception, contraception, or obstetric care without consulting a healthcare professional.
Supplement recommendations — our recommendations are based on your genetic profile and are intended to support general wellness. They are not prescriptions and do not replace medical dietary advice.
UMMU AI coaching — our AI is a wellness tool, not a clinician. It does not have access to your full medical history and cannot assess your individual clinical circumstances.

14. Formal Data Protection Complaints Process

Implemented in compliance with the Data (Use and Access) Act 2025 (effective June 2026). We have adopted this process now.

Step 1 — Contact Us:

Email privacy@ummuhub.com with subject "Data Protection Complaint". Include your name, account email, and a description of your concern. We acknowledge within 5 working days.

Step 2 — Investigation:

We investigate and provide a written response within 30 calendar days. Complex matters may extend to 60 days with advance notice to you.

Step 3 — Internal Review:

If unsatisfied, reply requesting escalation to a senior team member. We escalate within 10 working days.

Step 4 — Supervisory Authority:

If still unsatisfied, you may complain to the ICO: ico.org.uk/make-a-complaint | 0303 123 1113 | Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. EEA users may contact their local supervisory authority at edpb.europa.eu.

15. Your Data Protection Rights

These rights apply to personal information we control as data controller. All rights below apply equally to your genetic, epigenetic, and health data.

Right	Details
Access (Subject Access Request)	Request a copy of all personal information we hold about you, including your genetic and epigenetic results data. Response within one month. No fee in most cases.
Rectification	Ask us to correct inaccurate or incomplete personal information.
Erasure	Ask us to delete your data, including DNA results, epigenetic scores, AI conversation history, and all health data, in certain circumstances, including where consent is withdrawn.
Restrict Processing	Ask us to restrict processing of your data while a dispute is resolved.
Data Portability	Receive your personal data, including your test results, in a structured, machine readable format to transfer to another provider.
Object	Object to processing based on legitimate interests or for direct marketing.
Withdraw Consent	Withdraw consent at any time for any processing based on consent, including all genetic and health data processing. Does not affect lawfulness of prior processing.
Human Review of Automated Outputs	Request human review of any biological age score, DNA result, supplement recommendation, or AI output. See Section 12.
No Discrimination	We will never treat you adversely for exercising any right.
Lodge a Complaint	Complain to the ICO or another supervisory authority. See Section 14.

To exercise any right: email privacy@ummuhub.com. We may verify your identity before responding. You may designate an authorised agent.

16. Children's Privacy

Our Services are primarily designed for adult women aged 18 and over. However, parents and guardians may use the platform to manage health and wellness tracking for their children, including male children, under their own account. Where a parent or guardian does so, they are the account holder and are responsible for ensuring use of the Services is appropriate for the child. Note that many of our testing algorithms, epigenetic models, and AI coaching features are calibrated specifically for female biology — results and recommendations generated for male users may have limited applicability for those features. We do not permit children under 13 to hold their own independent accounts. If you believe a child has created an account independently without parental consent, contact privacy@ummuhub.com and we will promptly delete any such data.

17. Cookies and Tracking Technologies

Cookie Type	Purpose and Consent Basis
Strictly necessary	Required for the website and account to function. No consent required under PECR/DUAA 2025.
First party analytics	Statistical data to improve our service. Exempt from consent under DUAA 2025 where notice is provided and an opt out is available.
Functionality	Remembering preferences. Exempt under DUAA 2025 where used solely to adapt the service to your device.
Marketing / third party tracking	Personalised advertising. Require explicit opt in consent before placement.

For marketing cookies and third-party trackers, we use a PECR/DUAA 2025-compliant consent banner with granular opt-in controls at the point of first visit. You can update preferences at any time via the cookie settings link in the website footer. We honour the Global Privacy Control (GPC) signal — a GPC signal is treated as a valid opt-out of all non-essential cookies for that browser/device.

18. Contact us


Company	UMMU HUB LTD
Company Number	16624424
Registered Address	3rd Floor, 2 Harley Street, London, England, W1G 9PA
Data Protection Email	privacy@ummuhub.com
Website	www.ummuhub.com
Sub Processor List	www.ummuhub.com/sub-processors
Subject Access Requests	Email privacy@ummuhub.com with subject "Subject Access Request". Include your name, account email, and enough information to verify your identity.

For marketing cookies and third-party trackers, we use a PECR/DUAA 2025-compliant consent banner with granular opt-in controls at the point of first visit. You can update preferences at any time via the cookie settings link in the website footer. We honour the Global Privacy Control (GPC) signal — a GPC signal is treated as a valid opt-out of all non-essential cookies for that browser/device.

Title