142 of 142 cards
Legal Rights & Agreement Rules · Context
The statement names 12 May 2026 as its effective date. This analysis covers that version only; earlier or later versions are not described here.
Effective: 12 May 2026
Legal Rights & Agreement Rules · Context
Ancestry summarizes its most recent update: it clarified permitted and prohibited uses of the Services and user rights and obligations; it updated product language, including an option to group similar faces in your photo gallery, which happens only with your express consent; and it added references to SMS messaging to support future opt-in communications. Ancestry also encourages reading the full statement together with the Terms and Conditions. The summary is a reading aid; the operative rules are in the statement itself.
This summary is intended to help you better understand recent changes to Ancestry’s Privacy Statement and how the changes may impact you.
We clarified permitted and prohibited uses of the Services, as well as user rights and obligations.
including the option to group similar faces in your photo gallery with your express consent
We included references to SMS messaging to support future opt-in communications.
In our most recent update:
Summary of Changes
Security & Safeguards · Company commitment
Ancestry states that it is committed to handling your Personal Information responsibly and securing it with administrative, technical, organizational and physical safeguards. This is a general commitment; the Security section later describes the program in more detail and says Ancestry cannot guarantee that loss, misuse or alteration will not occur.
Ancestry is committed to being a good steward of your Personal Information (defined below), handling it in a responsible manner, and securing it with administrative, technical, organizational, and physical safeguards.
Account & Service Control · Company commitment
Among three guiding principles, Ancestry says it gives you control over the Personal Information you provide, including your DNA Data, and over how it is used, shared and retained. The other two principles are transparency and plain language. These are stated principles; the specific controls and their limits appear in the rights, retention and deletion sections.
Ancestry follows three guiding principles:
We give you control over the Personal Information you provide to us, including your DNA Data (defined below), and how it is used, shared, and retained.
We work hard to be transparent about the Personal Information we collect and process;
We try to use easy-to-understand language to describe our privacy practices to help you make informed choices; and
Retention & Deletion · User right or choice
When you use the Services, you keep control of your Biological Samples and DNA Data and can manage, delete or destroy them in the ways the Privacy Statement describes. The methods and their limits (for example, research already under way and backup latency) are set out in the deletion section.
You maintain control of your Biological Samples and DNA Data and you can manage, delete, or destroy them as described in this Privacy Statement.
When You Use Our Services
Inference & Profiling · Context
Ancestry warns that using its services may reveal unexpected facts about you or your family, and that once a discovery is made Ancestry cannot undo it. Deleting your data later does not reverse what you or others have already learned.
You may discover unexpected facts about yourself or your family when using our services. Once discoveries are made, we can’t undo them.
Legal Rights & Agreement Rules · Context
The statement applies to Ancestry websites, services and mobile apps that link to it, including Ancestry, AncestryDNA and the listed Related Brands (Fold3, Newspapers.com, Archives, We Remember, Forces War Records and Find a Grave); the statement calls all of these "Ancestry." Other services Ancestry manages that do not link to this statement are governed by their own privacy statements, which are not covered here.
This Privacy Statement covers the Ancestry websites, services, and mobile apps that link to this Privacy Statement.
Within this Privacy Statement, we refer to all of these websites, services, and mobile apps collectively as “Ancestry.”
Other services or websites managed by us that do not link to this Privacy Statement are governed by their own separate privacy statements.
Legal Rights & Agreement Rules · Context
For U.S. customers, the statement says a U.S. Resident Additional Privacy Statement and a Consumer Health Data Privacy Policy contain additional details for residents of certain states. The U.S. supplement appears later in this same document; the Consumer Health Data Privacy Policy is a separate linked document that is not supplied, so its terms are not described here.
U.S. Customers. The U.S. Resident Additional Privacy Statement and the
contain additional details for U.S. residents in certain states, as further outlined below.
Legal Rights & Agreement Rules · Context
For customers outside the United States, Ancestry Ireland Unlimited Company is the controller of your Personal Information, meaning the entity responsible for it. The statement points to its rights section (numbered Section 8, "Your Rights and Choices Regarding Your Personal Information") for your rights.
Non-U.S. Customers. Ancestry Ireland Unlimited Company is the controller of your Personal Information, and Section 8 contains information about your rights.
Legal Rights & Agreement Rules · Context
For Personal Information Ancestry processes about people who are not Ancestry users, the statement points to a separate linked page. That page is not supplied, so how non-users' information is handled is not described by this text.
For information on Personal Information processed by Ancestry relating to non-Ancestry users please click
Data Access & Collection · Context
Ancestry collects, stores and processes "Personal Information" to provide and improve the Services. Personal Information is information that can identify you directly or indirectly, including your name, address, email and any information that could reasonably be linked back to you, including your Genetic Information. Information about deceased people is not Personal Information under this statement, so the statement's protections and rights do not cover it. The statement separately says that your physical sample and the DNA extracted from it ("Biological Samples") are not Personal Information either, although it describes how they can be destroyed.
we collect, store, and otherwise process “Personal Information”, which is information that can identify you, directly or indirectly
Personal Information includes your name, address, email, and any information that could reasonably be linked back to you, including your Genetic Information.
Information about deceased people is not Personal Information under this Privacy Statement.
Legal Rights & Agreement Rules · Context
The statement says it includes Ancestry's Cookie Policy, which describes its use of browser cookies and similar tracking technologies. The Cookie Policy is a separate linked document that is not supplied, so its specific cookie practices and controls are not described in this analysis.
This Privacy Statement includes our
Data Access & Collection · Company practice
When you create an Ancestry account, Ancestry will collect, process and share your Personal Information as described in the statement. If you have taken an AncestryDNA test, this includes your Genetic Information. The limits on that sharing are set out in the sharing section.
When you create an Ancestry account, we will collect, process, and share your Personal Information (including your Genetic Information if you have taken an AncestryDNA test) as described in this Privacy Statement.
Data Access & Collection · Company practice
The types of Personal Information Ancestry collects depend on how you use the Services. Categories are described in this section or in additional notices given at the time of collection. Ancestry requires certain Account Information to deliver the Services under its Terms and Conditions; without it, Ancestry says it cannot provide the Services to you.
The types of Personal Information we receive and collect from you depend on how you use the Services, and these categories of information are described below or in additional notices we provide at the time of collection.
We require certain Account Information to deliver the Services in accordance with our
and without this we will not be able to provide our Services to you.
Account & Service Control · Company practice
To create an account, Ancestry collects your name, an email address or username, and a password you create. All three are marked as required.
Account Information
Your name (required);
An email address or username (required);
A password that you create (required);
Data Access & Collection · Company practice
Certain Ancestry brands let you sign in through third-party services such as Facebook, Google and Apple. If you use one, that service may provide Ancestry with Personal Information such as your name, email address and profile photo.
Certain Ancestry brands support third-party sign-in services such as Facebook, Google, and Apple. These services may provide to Ancestry Personal Information such as your name, email address, and profile photo; and
Data Access & Collection · Company practice
You may give Ancestry a phone number. It is used to notify you of AncestryDNA test result status, to help you when you contact Member Services, to let you turn on multi-factor authentication, and to send you SMS messages only if you have expressly opted in.
You may provide a phone number so we can (i) notify you of AncestryDNA test result status; (ii) assist you when you contact Ancestry Member Services (“Member Services”), (iii) allow you to enable multi-factor authentication; and/or (iv) send you SMS messages if you have expressly opted in.
Charges & Financial Obligations · Company practice
When you sign up for a free trial or make a purchase, such as an Ancestry subscription or an AncestryDNA test kit, Ancestry collects payment and billing information such as your credit card number, billing and shipping addresses, and a phone number if needed for delivery.
Order and Payment Information
Payment and billing information, such as your credit card number, your billing and shipping address(es), and phone number (if required for delivery) when you sign up for a free trial or make a purchase, such as an Ancestry subscription or an AncestryDNA test kit.
Data Access & Collection · Company practice
When you register an AncestryDNA test kit, Ancestry collects the kit's registration code (if applicable), your assigned sex at birth and your birthdate. The U.S. supplement later treats sex at birth and birthdate as protected-class characteristics and says they are disclosed to partner laboratories.
When you register an AncestryDNA test kit, we collect:
The registration code associated with your AncestryDNA test kit (if applicable);
Your assigned sex at birth; and
Your birthdate.
Sharing & Disclosure · Company practice
Ancestry collects what you put in a user profile: a profile image, your name, username, biography, age, location and linked account usernames. Your profile is visible to other users, so Ancestry suggests limiting this information and using a username different from your real name to protect your privacy.
This information includes a profile image, your name, username, biography, age, location, and linked account usernames.
Your Ancestry user profile information is visible to other users (defined in our
so consider limiting this information and using a username that is different from your real name to protect your privacy.
Profile Information
Content & IP Rights · Company practice
Ancestry collects information from content you voluntarily contribute to the Services, including "Your Content" as the Terms and Conditions define it. That definition is in a separate document that is not supplied.
Your Content
We collect information from content you voluntarily contribute to the Services, including Your Content as defined in our
Use & Processing · Company practice
When you take an AncestryDNA test, Ancestry's partner laboratories extract DNA from your sample and convert it into machine-readable "DNA Data." Ancestry processes DNA Data to give you an ethnicity estimate (ancestral regions and journeys), to tell you your degree of relatedness to other users in its DNA database, and to report some genetic markers associated with biological, physiological or behavioral traits, other characteristics such as hair thickness and eye color, or preferences and wellness. You may choose to share some of this with other Ancestry users, as the sharing section (numbered Section 7) describes.
When you take an AncestryDNA test, we extract DNA from your sample at our partner laboratories and convert it into machine-readable DNA data (“DNA Data”).
We process your DNA Data to provide you with an ethnicity estimate (ancestral regions and ancestral journeys).
We also process your DNA Data to provide you information about your degree of relatedness to other users in our DNA database and some genetic markers associated with certain biological, physiological, behavioral traits, other characteristics (such as hair thickness and eye color), or traits associated with preferences and wellness.
you may choose to share some of this information with other Ancestry users.
Use & Processing · Context
Your DNA Data and any information derived from it, such as ethnicity estimates, traits, genetic relative matches, inherited-DNA information and related insights, are Personal Information and are called "Genetic Information" throughout the statement.
Your DNA Data and any information derived from it, such as ethnicity estimates (ancestral regions and ancestral journeys), traits, genetic relative matches, inherited-DNA information, and related insights are Personal Information referred to as “Genetic Information”.
Retention & Deletion · Restriction or exception
Neither the sample you provide with an AncestryDNA kit nor the DNA extracted from it (together "Biological Samples") counts as Personal Information under this statement. As a result, statements in the policy about Personal Information do not automatically cover your physical sample; the statement gives separate rules for storing and destroying Biological Samples.
Neither the sample you provide using an AncestryDNA test kit nor the DNA extracted from your sample (together referred to as “Biological Samples”) are Personal Information under this Privacy Statement.
Retention & Deletion · User right or choice
You can consent to have your Biological Samples stored in Ancestry's biobank for future testing. Future testing and research on them may be done if you agree to the Informed Consent to Research or consent to other tests. If you do not consent to storage, Ancestry will destroy your Biological Samples.
You can consent to have your Biological Samples stored in our biobank for future testing at your option.
Future testing and research may be done if you agree to our
or if you consent to other tests of your Biological Samples. If you do not consent to the storage of your Biological Samples, we will destroy them.
Retention & Deletion · User right or choice
You may ask Ancestry to destroy your Biological Samples by contacting Member Services or by deleting your Ancestry account; the statement points to its rights and deletion sections (numbered Sections 8 and 10) for these controls. Ancestry may also destroy samples that do not meet its quality assurance requirements at its discretion. Note that the deletion section says that to request destruction you must contact Member Services, and it does not repeat account deletion as a route.
Sections 8 and 10 describe how you can control your Biological Samples. You may request that Ancestry destroy your Biological Samples by contacting Member Services or by deleting your Ancestry account.
We may destroy Biological Samples that do not meet our quality assurance requirements at our discretion.
Data Access & Collection · Company practice
If you agree to take DNA surveys, Ancestry collects your answers and uses them to develop and improve AncestryDNA features such as traits. Some answers may be "Consumer Health Data" under applicable laws, which a separate Consumer Health Data Privacy Policy covers. If you also agree to the Informed Consent to Research, your survey answers may be used for research.
If you agree to take DNA surveys, we will collect the information from the survey questions that you answer and use it for the continued development and improvement of AncestryDNA features, such as traits.
Some of this information may be considered “Consumer Health Data” under applicable laws; for more details, see our
your survey responses may also be used for research.
Legal Rights & Agreement Rules · Context
Ancestry states that it is not a covered entity under the U.S. Health Insurance Portability and Accountability Act (HIPAA) and that no data you provide is subject to or protected by HIPAA. Health-related information you share with Ancestry, including DNA and survey data, therefore does not get HIPAA's protections; other laws mentioned elsewhere in the statement may still apply.
Ancestry is not a covered entity under the Health Insurance Portability and Accountability Act (“HIPAA”), and no data provided by you is subject to or protected by HIPAA.
Data Access & Collection · Company practice
Ancestry hosts and keeps your communications with other users through its platform's communication features. It also collects information when you contact Member Services or other support teams, including call recordings, live chat transcripts, interactions with its AI-powered support or research assistants, and emails, as well as information you volunteer in consumer insights research.
We host and maintain your communications with other users through the communications features on our platform.
We also collect your information when you communicate with Member Services and support teams for our other Services, including through audio and written communications (such as recordings of calls with Member Services, transcripts of live agent chat, interactions with our AI-powered support or research assistants, and emails with Member Services), or information voluntarily shared when participating in consumer insights research.
Data Access & Collection · Company practice
If you voluntarily take part in contests or special promotions Ancestry runs or sponsors, it collects Personal Information; the details are provided when you enter.
We collect Personal Information when you voluntarily participate in contests and special promotions we run or sponsor, the details of which are provided upon entry.
Data Access & Collection · Company practice
On Find a Grave, Ancestry collects metadata from uploaded photos, including where, when and at what time each photo was taken. If you choose to be a Find a Grave photo volunteer, you give Ancestry your location, which you can change or remove at any time.
Through Find a Grave, we collect metadata associated with digital photographs uploaded to the Find a Grave service, including location, date, and time the photo was taken.
If you choose to be a photo volunteer for Find a Grave, you provide your location to us which you can change or remove at any time.
Inference & Profiling · Company practice
Depending on how you use the Services, Ancestry collects information about protected classifications such as gender or racial or ethnic origin; for example, AncestryDNA uses your DNA Data to estimate ethnicity. Other sensitive information may be inferred from content you voluntarily contribute.
Depending on how you use the Services, we collect information related to certain protected classifications such as gender or racial or ethnic origin.
Other sensitive information may be inferred by the content you voluntarily contribute to the Services.
Data Access & Collection · Company practice
Ancestry collects how you access the Services, including the website you visited before and after Ancestry's site. It also collects the IP address your computer, mobile device or proxy uses, your operating system, web browser, mobile-device identifier and mobile operating system, and the name of your internet service provider or mobile carrier.
Ancestry collects information about how you access our Services, including the website you visited before and after Ancestry’s site.
We also collect the IP address where your computer, mobile device, or the proxy server you use accesses the Internet, in addition to other technical information, such as:
Your computer operating system;
Your web browser;
Your mobile-device identifier provided by your mobile-device operating system and your mobile operating system; and
The name of your internet service provider or mobile carrier.
Computer and Mobile Device Information
Data Access & Collection · Company practice
Ancestry collects geolocation information from your device with your permission.
Ancestry collects geolocation information from your device with your permission.
Data Access & Collection · Company practice
Ancestry uses cookies and similar technologies, plus technical integrations with marketing and advertising partners, as described in its Cookie Policy, which the statement says forms part of the Privacy Statement. The Cookie Policy itself is not supplied, so the specific technologies, partners and controls are not described here.
Ancestry uses cookies and similar technologies as well as technical integrations with marketing and advertising partners as described in our
which forms a part of this Privacy Statement.
Linking & Identification · Company practice
If you interact with social media through the Services, for example "Share," "Post," "Pin" or "Follow Us" links to sites such as Facebook, X, Pinterest, Instagram and YouTube, Ancestry collects those interactions and whatever account information those services make available, depending on your privacy settings with them. Your interactions with these features are governed by the third party's privacy statement.
Ancestry will collect these interactions and whatever account information these services make available to us depending on your privacy settings with that third party.
Your interactions with these features are governed by the privacy statement of the applicable third-party.
Information Shared Through Social Media Features
Linking & Identification · Company practice
You may be able to sign in with a social networking account such as Google or Apple. When you grant the permissions, Ancestry receives information from that account, such as your name, email address and profile photo, and uses it to create your account and build your profile.
When you give appropriate permissions, we will receive information about you from your social networking account that Ancestry will use to create your account and build your profile, such as your name, email address, and profile photo.
Inference & Profiling · Company practice
Ancestry collects how you use the Services, for example your searches, the records or public family trees you access, pages viewed, links clicked and people you add to your tree. It uses this to infer details about you as a customer and your interests, for example to give search suggestions.
We collect information about your use of the Services, such as when you search or access records or public family trees, which pages you view, links you click, or when you add people to your tree, etc., which we use to infer details about you as a customer and your interests to provide a better experience through, for example, search suggestions.
Data Access & Collection · Company practice
Ancestry collects records from various sources, usually official record sources, including newspapers and birth, death, marriage and census records. These may contain Personal Information about you and about people who are not Ancestry users, and are usually made available to users as part of an Ancestry subscription.
Ancestry collects records from various sources, usually from official record sources, including newspapers, as well as birth, death, marriage, and census records, which may contain Personal Information relating to you.
Public and historical records may also contain Personal Information relating to non-Ancestry users. These records are usually made available to users as part of the Ancestry subscription Services.
Data Access & Collection · Company practice
Ancestry receives information about you from third parties. For example, it occasionally supplements its own data with information licensed from third parties to personalize the Services and its offers to you.
We also receive information about you from third parties. For example, occasionally we supplement the data we collect with information licensed from third parties to personalize the Services and our offers to you.
Information from Third Parties
Data Access & Collection · Company practice
If you buy a gift subscription or AncestryDNA test kit, Ancestry collects the recipient's name, shipping address and email address and the purchase information needed to complete the gift and notify the recipient.
If you purchase a gift subscription or AncestryDNA test kit as a gift, we will collect Personal Information, such as the recipient’s name, shipping address, email address, and the necessary purchase information to complete the gift and notify the recipient.
Use & Processing · Company practice
Ancestry uses your Personal Information to provide, personalize, improve, update and expand its Services. The listed uses begin with authenticating your access and improving information security, and processing your payments; the list continues with product development, content classification, research, business monitoring, fraud prevention and enforcement of the Terms and Conditions.
We use your Personal Information to provide, personalize, improve, update, and expand our Services. This includes:
Authenticating your access to the Services and improving Ancestry information security;
Processing your payments;
Use & Processing · Company practice
Beyond providing the Services, Ancestry uses your Personal Information to build new and improve existing Services (including Member Services), issue surveys and support product development and research, conduct scientific, statistical and historical research, monitor business performance and inform strategy and management decisions, detect and protect against error, fraud and criminal or malicious activity, and enforce its Terms and Conditions.
Building new and improving existing Services, including the service we provide through Member Services;
Issuing surveys and questionnaires for use in the Services, as well as facilitating product development and research initiatives;
Conducting scientific, statistical, and historical research;
Monitoring business performance, supporting strategic planning and informing management decisions;
Detecting and protecting against error, fraud, or other criminal or malicious activity; and
Enforcing our
Use & Processing · Company practice
Ancestry classifies, creates image models of and indexes Your Content, which may include Personal Information, to organize your media, keep the platform safe, and identify your ancestors, places of interest and other memories. It also combines Your Content with data in Ancestry's databases to provide insights that help users build their family trees.
Classifying, creating image models of, and indexing Your Content (which may include Personal Information) to organize your media, keep our platform safe, and identify your ancestors, places of interest, and other memories;
Combining Your Content with data in Ancestry’s databases to provide insights to help users build their family trees;
Use & Processing · Company practice
With your consent, Ancestry may create an abstract numerical representation of images to group similar faces in your photo gallery. Ancestry says it does not retain or store these representations, and notes they may count as biometric information in certain jurisdictions.
With your consent, to help you organize your photos, we may create an abstract numerical representation of images to group similar faces within your gallery.
Ancestry does not retain or store these representations, which may constitute biometric information in certain jurisdictions.
Use & Processing · Company practice
Ancestry uses your Personal Information to communicate with you about the Services: responding to Member Services inquiries; alerting you to "hints" such as records or potential ancestors, potential genetic relatives found by DNA matching, and updates to your DNA results; telling you about changes or new Services; asking you to take part in media productions, advertisements, consumer insights research or testimonials; and providing information or requesting action on technical, security and operational issues.
We use your Personal Information to communicate with you about the Services, such as when we:
Respond to your inquiries to Member Services;
Alert you to “hints” in Ancestry’s databases (such as records or potential ancestors in your family tree), potential genetic relatives identified by DNA matching, and updates to your DNA test results (including your ancestral regions and ancestral journeys);
Inform you of changes to Services or new Services;
Ask you to participate in Ancestry media productions, advertisements, consumer insights research, or testimonials; and
Provide you with information or request action in response to technical, security, and other operational issues.
Sharing & Disclosure · Company practice
Ancestry uses some Personal Information, for example demographic information from third-party sources or from parts of Ancestry such as your profile and trees, to market its own products and offers and those of its business partners. This marketing includes advertising based on your interests. Genetic Information is treated separately and is not used for marketing without your separate, explicit consent.
We use some Personal Information (for example, demographic information available from third-party sources or from parts of Ancestry (profile, trees, etc.)) to market our products and offers from us or our business partners. This marketing includes advertising based on your interests.
Market Products and Offers from Us or Our Business Partners
Sharing & Disclosure · Company commitment
Ancestry says it does not share your Genetic Information with third-party marketers, insurance companies or employers. Separately, it will not use your Genetic Information for marketing or personalized advertising unless you give separate, explicit consent. As worded, the consent exception attaches to Ancestry's own marketing use; the no-sharing statement for those three recipient types carries no consent exception in this sentence.
Ancestry does not share your Genetic Information with third-party marketers, insurance companies, or employers, and we will not use your Genetic Information for marketing or personalized advertising without your separate, explicit consent.
Account & Service Control · User right or choice
For email or SMS marketing you consented to, you can control it by using the unsubscribe link in a marketing email, replying STOP to text messages, changing your communication settings, or following instructions in the marketing message. SMS marketing is also subject to separate SMS Terms, which are not supplied. Ancestry says it does not share text-messaging originator opt-in data or consent with any third parties or affiliates.
For marketing that you may have consented to receive by email or SMS, you can control how we market to you by using the unsubscribe link in any marketing email you receive, replying STOP to text messages, by changing your
We do not share text messaging originator opt-in data or consent with any third parties or affiliates.
Sharing & Disclosure · Company practice
Marketing controls for Ancestry's Related Brands are in each brand's settings, listed on a linked page. For advertising on third-party platforms, Ancestry relies on its own legitimate interests as the legal basis and says you should control your marketing preferences directly on those platforms. The sentence cites "Section 7," which in the numbered contents is the sharing section; the detailed legal-bases list is on a separate linked page that is not supplied.
Controls for Ancestry’s Related Brands are available through their settings and are listed
For advertising on third-party platforms, we rely on our own legitimate interests as the legal basis (please see
and you should control your marketing preferences directly on those platforms.
Use & Processing · Company practice
Ancestry uses your Genetic Information to deliver your ethnicity estimate and DNA matches (close or extended family or others you may be related to) from its database, and other features that help you and other users learn about yourselves, each other, potential family members and genetic relatives. It also uses it for insights into traits and wellness, and to help you find common ancestors, build your family tree and connect with family.
Ancestry uses your Genetic Information for the following purposes:
Delivering your ethnicity estimate (ancestral regions and ancestral journeys), DNA matches (e.g., close or extended family or others to whom you may be related) from our database, and providing other features to help you and other users learn more about yourself, each other, potential family members, and your genetic relatives and family groups;
Providing you with other insights into what your DNA Data may reveal about traits and wellness;
Providing relevant results to assist you in discovering common ancestors and other details about your family history, as well as helping you build your family tree or connect with friends and family;
Use & Processing · Company practice
Ancestry uses Genetic Information to study aggregated data on population and ethnicity-related health, wellness, aging or physical conditions only if you agreed to its Informed Consent to Research. Separately, the same list says Genetic Information is used for scientific, statistical and historical research and to improve DNA products, the customer experience across the Services, laboratory processes and technology, and to build new products and services; those uses are listed without a research-consent condition. Sharing de-identified Genetic Information with outside research partners does require that consent (see the sharing section).
Studying aggregated Genetic Information to better understand population and ethnicity-related health, wellness, aging, or physical conditions if you have agreed to participate through our
Conducting scientific, statistical, and historical research; and
Improving features and functionality in our existing DNA-related products, enhancing the customer experience across the Services, improving the quality of our laboratory processes and technology, and building new products and services.
Sharing & Disclosure · Company commitment
Ancestry says it shares your Personal Information, including Genetic Information, with third parties only in the circumstances listed in its sharing table or with your specific consent. The table covers Ancestry group companies, other users, service providers, analytics and advertising partners, research partners, law enforcement, legal process, acquisitions, aggregated data and legacy contacts.
Ancestry shares your Personal Information (including your Genetic Information) with third parties only as detailed in the table below or with your specific consent.
Sharing & Disclosure · Company practice
Ancestry shares your information within its group of companies, including Ancestry.com Operations Inc. and the companies on a linked corporate-structure page (the "Ancestry Companies"), to provide and improve its Services. The linked list is not supplied. The next row adds that information, including Genetic Information, moves between the Irish and U.S. companies.
Ancestry Companies
We share your information within the Ancestry group of companies including Ancestry.com Operations Inc. and the companies listed
to provide and improve our Services.
Sharing & Disclosure · Company practice
Ancestry transfers your Personal Information, including Genetic Information, between its Ireland-based company and its U.S.-based companies. The international transfers section (numbered Section 12) says these transfers rely on mechanisms such as Standard Contractual Clauses or the Data Privacy Framework.
We transfer your Personal Information (including your Genetic Information) between Ancestry’s Ireland-based company and Ancestry’s U.S.-based companies. For more information on this see
Sharing & Disclosure · User right or choice
As part of using the Services, you can add or share information with all users, or through sharing features with particular Ancestry users and even people who are not Ancestry users. Some Services, such as AncestryDNA, offer additional sharing options.
As part of your use of the Services, you have the option to add or share information with all users of the Services or, through sharing features, with particular Ancestry users and even non-Ancestry users.
Additional sharing options may be available in some Services, for example AncestryDNA (see below).
Other Users or Others You May Choose to Share With
Sharing & Disclosure · Company practice
Your public profile and public family tree details are visible to all other users. By default, profiles of living people in your tree are visible only to you, to people you share the tree with as "editor," and to people you authorize to view living people. Other information about living people may become visible if it is in a public media gallery or if you publish it outside your tree.
Information in your public profile(s) will be seen by all other users, as will public family tree details.
By default, profiles of living people in your tree are visible only to you and people with whom you share your tree as “editor” or whom you authorize to view your tree’s living people.
Other information about living people may be visible if included in a public media gallery, or if you choose to publish the information outside your tree.
Sharing & Disclosure · Company practice
Your activity may be visible depending on how you interact with records or other users' content, for example if you contribute to another user's tree or comment on a record or content. If the Recent Viewers feature is turned on in your account settings, Ancestry may show tree owners that you visited their tree.
You may share your activity depending on how you interact with Ancestry records or another user’s content, for example, if you contribute to another user’s family tree, or comment on a record or another user’s content.
If the Recent Viewers feature is turned on in your account settings, we may show tree owners you have visited their tree.
Sharing & Disclosure · User right or choice
If you opt in to view and be seen by your DNA matches, you and your matches can see certain Personal Information about each other: usernames; how you might be related, including where you might fit in each other's trees; whether you have linked a tree to your DNA; either all or only in-common ancestral regions and journeys (your choice); and your traits unless you opt out of sharing traits.
If you opt-in to view and be seen by your DNA matches, you and your DNA matches can see certain Personal Information about each other, including:
Your usernames;
How you and your matches might be related including how you might fit within your respective family trees;
Whether you have linked a family tree to your DNA;
Either all or only in-common (at your option) ancestral regions and ancestral journeys; and
Your traits (unless you opt out of sharing traits).
Sharing & Disclosure · Restriction or exception
If you share details of your family history or DNA experience outside the Services, Ancestry says you do so at your own risk; its protections do not follow that information.
If you share details of your family history or DNA experience outside the Services, you do so at your own risk.
Sharing & Disclosure · Company practice
Ancestry works with other companies to provide and market the Services, and they access or process some of your Personal Information in their systems. Ancestry says they are bound by contractual privacy, security and confidentiality obligations consistent with applicable laws. They include laboratory partners (your Biological Samples), test-kit shippers (name, address, phone), payment processors (payment information), cloud infrastructure providers, vendors for marketing analytics, consumer research, fraud prevention and security (such as email address), communications providers (name, email, phone), and Member Services vendors for phone, chat and surveys (such as Account Information, name or email).
We work with other companies when providing and marketing the Services. As a result, these companies will have access to or otherwise process your data, including some of your Personal Information, in their systems.
These companies are subject to contractual obligations governing privacy, data security, and confidentiality consistent with applicable laws.
Laboratory partners (such as your Biological Samples);
AncestryDNA test kit shipping providers (such as name, shipping address, and phone number);
Payment processors (such as Payment Information);
Vendors that assist us in marketing analytics and consumer research, fraud prevention, and security (such as email address);
Communications infrastructure providers (such as name, email address, and phone number); and
Vendors that help us provide and improve our Member Services functions, including phone support, chat, or survey tools (such as Account Information, name, and/or email address).
Service Providers
Security & Safeguards · Company practice
Ancestry's web and mobile services are cloud-based, and the statement says all your data resides with its cloud service vendors. Those vendors are service providers subject to the contractual obligations described for service providers.
Cloud services infrastructure providers (Ancestry’s web and mobile services are cloud-based services; all your data resides with our cloud service vendors);
Sharing & Disclosure · Company practice
Ancestry works with third-party analytics and advertising partners. By collecting and sharing certain Personal Information, these vendors help personalize ads to your interests, measure ad campaign effectiveness, and serve you more relevant advertising. The U.S. supplement lists the categories shared for targeted advertising and the opt-out choices; Genetic Information is not used for this without separate, explicit consent.
We work with third-party partners for analytics and advertising purposes. By collecting and sharing certain Personal Information, these vendors help us to better personalize ads to match your interests.
They also help us to measure the effectiveness of ad campaigns and are used to serve you with advertising that is more relevant to you.
Sharing & Disclosure · Company commitment
Ancestry shares de-identified Genetic Information with research partners only when you give express consent through the Informed Consent to Research; otherwise your data is not included. Such shared de-identified genetic and phenotypic information is handled in accordance with a cited U.S. federal research regulation (45 C.F.R. Part 46); this analysis does not interpret that regulation. Research partners can be commercial or non-profit organizations, including those developing therapeutics, medical devices or materials to treat, diagnose or predict health conditions, and in some cases Ancestry or a partner may have a financial interest in the arrangement. A linked page lists the partners.
We share de-identified Genetic Information with research partners only when you provide us with your express consent to do so through our
Unless you agree to the Informed Consent to Research, your data will not be included in the data shared with these researchers.
Any such de-identified genetic information and phenotypic information we share with third parties for research purposes is done in accordance with Part 46 (beginning with Section 46.101) of Title 45 of the Code of Federal Regulations.
Research partners include commercial or non-profit organizations that conduct or support scientific research, the development of therapeutics, medical devices or related material to treat, diagnose or predict health conditions.
In some circumstances, a research partner or Ancestry may have a financial interest in the research arrangement.
Legal Rights & Agreement Rules · Company commitment
Ancestry says it does not voluntarily give user data to governmental or judicial bodies or law enforcement, and requires government agencies to follow valid legal process as set out in its Guide for Law Enforcement (not supplied). It does not allow law enforcement, or anyone acting for them, to use the Services to investigate crimes or identify human remains. If compelled to disclose, Ancestry will do its best to give you advance notice unless the law prohibits it. Separately, the statement allows sharing when Ancestry believes it is reasonably necessary to comply with laws or valid legal process, enforce its terms, or protect security or safety.
Ancestry does not voluntarily provide access to user data to governmental or judicial bodies or to law enforcement agencies.
we require all government agencies seeking access to Ancestry customers’ data to follow a valid legal process as detailed in
We do not allow law enforcement or anyone working on their behalf to use the Services to investigate crimes or to identify human remains.
If we are compelled to disclose your Personal Information to law enforcement, we will do our best to provide you with advance notice, unless we are prohibited under the law from doing so.
Law Enforcement
Legal Rights & Agreement Rules · Company commitment
Ancestry publishes a Transparency Report listing the number of valid law enforcement requests for user data across all its sites. The report itself is a separate page and is not supplied. This sits alongside Ancestry's commitment to try to give advance notice of compelled disclosures where the law allows.
Ancestry produces a
where we list the number of valid law enforcement requests for user data across all our sites.
Sharing & Disclosure · Permission or license
Ancestry may share your Personal Information if it believes doing so is reasonably necessary to comply with applicable laws or valid legal processes such as subpoenas or warrants, to enforce or apply its Terms and Conditions, to protect the security or integrity of the Services, or to protect the rights, property or safety of Ancestry, its employees or users. The test is Ancestry's own belief of reasonable necessity. This sits beside its statement that it does not voluntarily give data to law enforcement.
We may share your Personal Information if we believe it is reasonably necessary to:
Comply with applicable laws;
Comply with valid legal processes (e.g., subpoenas, warrants);
Enforce or apply our
Protect the security or integrity of the Services; or
Protect the rights, property, or safety of Ancestry, our employees, or users.
Sharing & Disclosure · Permission or license
If Ancestry or its businesses are acquired or transferred, including in bankruptcy or similar proceedings, Ancestry may share your Personal Information with the acquiring or receiving entity. The statement says its promises will continue to apply to your Personal Information transferred to the new entity.
If Ancestry or its businesses are acquired or transferred (including in connection with bankruptcy or similar proceedings), we may share your Personal Information with the acquiring or receiving entity.
The promises in this Privacy Statement will continue to apply to your Personal Information transferred to the new entity.
Sharing & Disclosure · Company commitment
Ancestry discloses user information in aggregated, de-identified form as part of the Services, its marketing, or scientific publications by Ancestry or its research partners, for example the share of immigrants in a state from a particular region. Ancestry says such disclosures never include Personal Information and that it will not re-identify the data.
Ancestry discloses user information in an aggregated, de-identified form as part of the Services or our marketing, or in scientific publications published by us or our research partners.
Such disclosure will never include Personal Information, and we will not re-identify it.
Account & Service Control · User right or choice
You can designate a "Legacy Contact" in Account Settings to receive access to your account if you can no longer use it. When a transfer is requested, Ancestry verifies the contact's identity and requires proof of the qualifying event, such as a death certificate. After verification, Ancestry shares your account access and Personal Information with that contact, who then takes ownership of the account.
you can designate a “Legacy Contact” in your Account Settings to receive access to your account if you can’t use it anymore.
If a transfer request is made, we will verify the Legacy Contact’s identity and require proof of the qualifying event (such as a death certificate) before granting access.
Upon verification, we will share your account access and Personal Information with your designated contact. They will then assume ownership of the account.
Account & Service Control · User right or choice
Every user, wherever located, can use Ancestry's online tools to request a report of the Personal Information they provided, download a copy of their DNA Data or family trees, and delete their family trees, DNA test results or account.
may use our online tools to 1) request a report of what Personal Information they have provided to us, 2) download a copy of their DNA Data or download a copy of their family trees, and 3) delete their family trees, DNA test results or account.
Account & Service Control · User right or choice
Some data privacy laws, such as the EU GDPR, UK GDPR and Brazil's LGPD, give people specific rights. Depending on the applicable law, you may have the right to access your Personal Information and receive a copy, including the categories collected and disclosed; to correct inaccurate information; and to receive certain information in a format that can be sent to another data controller.
Additionally, some data privacy laws, such as the EU GDPR, the UK GDPR and Brazil’s LGPD, provide people with specific rights regarding their Personal Information.
You may have a right to request access to your Personal Information and to be provided with a copy of certain information including the categories of your Personal Information we collect and disclose.
You may have the right to request that we rectify or correct inaccurate Personal Information about you.
You may have the right to receive certain of your Personal Information in a format that can be transmitted to another data controller.
Retention & Deletion · User right or choice
You have the right, in certain cases, to ask Ancestry to restrict (stop active processing of) or delete your Personal Information, provided there are valid grounds and subject to applicable law; the deletion section (numbered Section 10) explains how. You can also request restriction where, for example, you believe processing relies on inaccurate data or is unlawful. Ancestry still keeps certain information as reasonably necessary for legal obligations, disputes, security, fraud prevention and tax, payment, securities and clinical compliance, and backup deletion may lag.
You have the right, in certain cases, to request that we restrict (stop any active processing) or delete your Personal Information, provided there are valid grounds for doing so and subject to applicable law. See Section 10 for information on how to delete your Personal Information.
You have the right to request a restriction on our processing of your Personal Information, for example, where you believe that the processing is based on inaccurate data or not processed in a lawful manner.
Ancestry also retains certain information as reasonably necessary to comply with our legal obligations (including law enforcement requests), resolve disputes, maintain security, prevent fraud and abuse, as well as to comply with tax, payment industry, securities, and clinical regulatory compliance requirements.
Account & Service Control · User right or choice
You may have the right to object to processing Ancestry does on the basis of its legitimate interests where it affects your rights and freedoms. Where you consented to processing for a specific purpose, you can withdraw that consent at any time; Ancestry will then stop further processing for that purpose, but processing done before withdrawal remains lawful.
You may have the right to object to processing activities in our legitimate interests where such activities impact on your rights and freedoms as an individual.
when you consent to processing of your Personal Information for a specified purpose, you may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. We will stop any further processing of your data for that purpose.
Legal Rights & Agreement Rules · User right or choice
You have the right to complain to the Irish Data Protection Commission or any other competent supervisory authority in your country of residence.
You have the right to make a complaint to the Irish Data Protection Commission (
Account & Service Control · Procedure
You can exercise these rights using the tools Ancestry describes or by contacting it; the contact options are in the controller-details section (numbered Section 15).
You can exercise these rights by using the tools described below or by contacting Ancestry. Details and options for accessing this information are listed in Section 15.
Account & Service Control · User right or choice
You can access and update the Personal Information you provide to Ancestry, such as email address, username and profile information, at any time in the privacy settings sections for your Public Profile, Account Settings, Communications Settings and DNA Settings.
You can access and update the Personal Information (such as your email address, username, profile information, etc.) you provide to Ancestry at any time in the following sections of the privacy settings:
Public Profile
Account Settings
Communications Settings
Account & Service Control · User right or choice
Your DNA Settings are one of the privacy settings sections where you can manage your information. Privacy settings for family trees you created are managed in Tree Settings.
DNA Settings
To learn how to manage the privacy settings for any family trees you have created on Ancestry, you can visit your
Account & Service Control · User right or choice
Privacy settings for Ancestry's Related Brands are managed through a linked page (not supplied), and you can also control your information with settings in Ancestry's mobile apps, such as the Ancestry and Find a Grave apps.
Ancestry strives to make it simple for you to manage your privacy across the Services. You can manage privacy settings for our Related Brands
You can also control your information using the settings available in our mobile applications, such as the Ancestry and Find a Grave apps.
Sharing & Disclosure · Company practice
Ancestry uses cookies, similar tracking technologies and integrations with third-party marketing and advertising partners to collect data about your interests or behaviors and serve you targeted ads. You can change your settings as described in the Cookie Policy, which also covers "Do Not Track." The Cookie Policy is not supplied, so those settings and Ancestry's Do Not Track response are not described here. U.S. residents have separate opt-out routes, including Global Privacy Control.
We use cookies and similar tracking technologies and integrations with third party marketing and advertising partners to collect data about your interests or behaviors to serve you targeted ads.
For information on “Do Not Track” please see our Cookie Policy.
Account & Service Control · User right or choice
Ancestry lets you download your family tree information in the standard GEDCOM family tree file format from your Tree Settings.
Ancestry allows you to download your family tree information in the standard GEDCOM family tree file format in your
Security & Safeguards · User right or choice
You can download a file containing your DNA Data. If you do, Ancestry says you do so at your own risk; the downloaded file is outside Ancestry's protections.
You can download a file with your DNA Data. If you download your DNA Data, you do so at your own risk.
Retention & Deletion · Company practice
Ancestry says its Services are built around lifelong self-discovery and that its records and DNA features keep adding value over time. Its retention practice is therefore to keep user accounts until users tell it they want to delete their data or close their accounts. There is no fixed retention period; data stays unless you act.
our retention practices reflect this ongoing value by retaining user accounts on our system until our users inform us of their desire to delete their data or close their accounts.
Retention & Deletion · Company practice
Personal Information from creating your account and profile is kept until you delete your account. Family tree data is kept to give you continuous access and new features until you delete the tree or your account.
Ancestry will retain the Personal Information you provide while creating your account and your profile until such time as you delete your account.
Your family tree data is kept until you delete your family tree or your account.
Retention & Deletion · Company practice
Ancestry keeps your DNA Data to provide the features you bought or were gifted, including updated features, more granular ethnicity estimates and new DNA-based features. Your DNA Data is kept until you delete your DNA test results or your account.
Ancestry retains your DNA Data to provide you with the features and functionality you purchase (or are gifted)
Your DNA Data is kept until you delete your DNA test results or your account.
DNA
Retention & Deletion · Restriction or exception
If you were an AncestryHealth customer, AncestryHealth's laboratory partners are required to keep your DNA Data and test result for at least seven years, or as required by state law, the Clinical Laboratory Improvements Act (CLIA) and guidelines for College of American Pathologists (CAP) certified labs. Deleting data at Ancestry does not shorten this lab retention. The statement names these laws and guidelines without describing them; this analysis does not interpret them.
If you were a customer of AncestryHealth, our AncestryHealth laboratory partners are required to retain your DNA Data and test result for a period of at least seven years, or as required by state law and the Clinical Laboratory Improvements Act (CLIA) and the guidelines that apply to laboratories certified by the College of American Pathologists (CAP).
Retention & Deletion · Company practice
Some Related Brands have their own account logins and keep the Personal Information you gave when creating your account and profile, as needed for continuous service, until you ask Ancestry to delete it.
Some of our Related Brands have their own account logins and will retain the Personal Information you provide while creating your account and your profile as needed to provide you with continuous and updated Services until such time as you ask us to delete it.
Retention & Deletion · Restriction or exception
Ancestry keeps usage information, such as site visits, in depersonalized or aggregated form. Once aggregated, Ancestry treats it as no longer Personal Information, so it is not subject to user deletion requests.
We retain usage information (e.g., visits to sites) in a depersonalized or aggregated form. Once aggregated, this information ceases to be Personal Information and will not be subject to user deletion requests.
Retention & Deletion · User right or choice
You can delete your Personal Information from Ancestry, or request that Ancestry delete it, at any time, following Ancestry's instructions. The deletion section then lists limits: copies other users kept, archival records, record indexes, lab and legal retention, backups and completed research.
You can delete, or request that we delete, your Personal Information from Ancestry at any time.
You can delete your Personal Information from Ancestry by following these instructions.
Personal Information
Retention & Deletion · Restriction or exception
If you shared information with other users, for example through public family trees or by sharing DNA results directly, Ancestry cannot remove copies other users may have kept. Only you can ask those users to delete them.
If you have shared information with other users (for example, by making your family trees public or by sharing your DNA results directly with other users), Ancestry will not be able to remove any copies of information that other users may have retained, which can only be removed by your contacting the other user and asking them to delete it.
Retention & Deletion · Restriction or exception
Requests to remove information from linked archival records must go to the responsible archival entity. Ancestry will consider requests to remove Personal Information from the searchable indexes of records it holds case by case, in accordance with law; removal is not guaranteed.
Please direct any request to remove information from linked archival records to the responsible archival entity.
We will consider requests for removal of Personal Information from the searchable indexes of the records we hold on a case-by-case basis in accordance with law.
Retention & Deletion · Context
In the deletion section, Ancestry again points people who are not Ancestry users to a separate page about their Personal Information. That page is not supplied.
For information on Personal Information processed by Ancestry relating to non-Ancestry users please click
Retention & Deletion · Company commitment
If you ask Ancestry to delete your DNA Data, it will delete all Genetic Information from its production, development, analytics and research systems within 30 days. If you agreed to the Informed Consent to Research, your de-identified Genetic Information cannot be removed from active or completed research projects, though it will not be used in new ones. Backups may lag behind, and lab partners may keep data where laws require.
If you request that Ancestry delete your DNA Data, we will delete all Genetic Information from our production, development, analytics, and research systems within 30 days.
we will not be able to remove your de-identified Genetic Information from active or completed research projects, but we will not use it for any new research projects.
Genetic
Retention & Deletion · Procedure
The deletion section says that to request destruction of your Biological Samples you must contact Member Services. The earlier collection section also lists deleting your Ancestry account as a way to request destruction. Read together, contacting Member Services is the route both passages name; whether account deletion alone triggers destruction is stated only in the earlier passage.
To request the destruction of your Biological Samples, you must contact Member Services.
You may request that Ancestry destroy your Biological Samples by contacting Member Services or by deleting your Ancestry account.
Retention & Deletion · Restriction or exception
There may be some delay before deleted Personal Information is removed from backup systems after it leaves production, development, analytics and research systems. Ancestry's laboratory partners may keep information they received to meet laws requiring retention, such as U.S. clinical laboratory rules. Ancestry also keeps certain information as reasonably necessary to meet legal obligations (including law enforcement requests), resolve disputes, maintain security, prevent fraud and abuse, and comply with tax, payment-industry, securities and clinical regulatory requirements.
There may be some latency in deleting your Personal Information from our backup systems after it has been deleted from our production, development, analytics, and research systems.
Our laboratory partners may also retain information they receive from us to comply with laws or regulations requiring retention of certain data, such as the Clinical Laboratory Improvements Amendments regulations administered by the U.S. Food and Drug Administration.
Ancestry also retains certain information as reasonably necessary to comply with our legal obligations (including law enforcement requests), resolve disputes, maintain security, prevent fraud and abuse, as well as to comply with tax, payment industry, securities, and clinical regulatory compliance requirements.
Retention & Deletion · Procedure
To delete information held by an Ancestry Related Brand, contact Ancestry at that brand and request deletion from that service. Some services also offer an online request form in account settings, listed on a linked page that is not supplied.
To delete information from our Related Brands, you can contact us at the Related Brand and request that your Personal Information be deleted from that service.
Some Services may also have an online request form accessible from the account settings menu and viewable
Security & Safeguards · Company commitment
Ancestry maintains an information security program with administrative, physical and technical safeguards, scaled to the sensitivity of the information. It has measures against inappropriate access, loss, misuse or alteration of Personal Information, including Genetic Information; its security team regularly reviews practices; it encrypts Personal Information with secure server software; and it partners only with security companies that meet its standards. Ancestry says it cannot guarantee that loss, misuse or alteration will not occur.
Ancestry maintains a comprehensive information security program designed to protect our customers’ Personal Information using administrative, physical, and technical safeguards.
The specific security measures used are based on the sensitivity of the Personal Information collected. We have measures in place to protect against inappropriate access, loss, misuse, or alteration of Personal Information (including Genetic Information) under our control.
The Ancestry security team regularly reviews our security and privacy practices and enhances them as necessary to help ensure the integrity of our systems and your Personal Information.
We use secure server software to encrypt Personal Information (including Genetic Information), and we only partner with security companies that meet and commit to our security standards.
While we cannot guarantee that loss, misuse, or alteration of data will not occur, we use appropriate technical and organizational measures to prevent this.
Security & Safeguards · Context
Ancestry says it is important for you to guard against unauthorized access to your Personal Information by using strong passwords and protecting your own computer or device from unauthorized use.
It is also important for you to guard against unauthorized access to your Personal Information by maintaining strong passwords and protecting against the unauthorized use of your own computer or device.
Sharing & Disclosure · Company practice
Ancestry is a global business and will transfer your Personal Information to countries other than your own, including the United States, Ireland, the United Kingdom and France, which may not offer the same level of protection as your home country. The sentence describes these countries as outside the EEA, Switzerland or the United Kingdom, although Ireland, France and the United Kingdom are among the places it names; the practical point is that your data leaves your country. For transfers, including of Genetic Information, from Ancestry's Irish company to its U.S. companies, Ancestry relies on mechanisms such as Standard Contractual Clauses or the Data Privacy Framework, and it remains responsible for data it passes to third parties for processing on its behalf under the Framework's onward-transfer principle.
We are a global business and will transfer your Personal Information to countries other than your own country, including to the United States, Ireland, the United Kingdom, and France.
These countries, which are outside the EEA, Switzerland, or the United Kingdom may not offer the same level of data protection as in your home country.
When we transfer your Personal Information (including your Genetic Information) between Ancestry’s Ireland-based company and Ancestry’s U.S.-based companies for processing in the United States, we rely on established transfer mechanisms such as Standard Contractual Clauses or the Data Privacy Framework.
Ancestry remains responsible for any of your Personal Information that is shared with third parties for external processing on our behalf under the Accountability for Onward Transfer Principle of the Data Privacy Framework.
Legal Rights & Agreement Rules · Company commitment
Ancestry and named subsidiaries (Ancestry.com Operations Inc., Ancestry.com Operations L.P., Ancestry.com DNA LLC, Ancestry International DNA LLC, FindAGrave Inc. and iArchives Inc.) say they comply with the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. Data Privacy Framework, and have certified adherence to the Framework Principles for personal data received from the EU, the UK (and Gibraltar) and Switzerland. If this statement conflicts with those Principles, the Principles govern. The statement names these frameworks without describing their content.
Ancestry and its subsidiaries (namely Ancestry.com Operations Inc., Ancestry.com Operations L.P., Ancestry.com DNA LLC, Ancestry International DNA LLC, FindAGrave Inc., and iArchives Inc.) comply with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.
If there is any conflict between the terms in this Privacy Statement and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.
Legal Rights & Agreement Rules · Procedure
Ancestry commits to resolve complaints related to the Data Privacy Framework Principles about how it collects and uses your Personal Information. Individuals in the EU, UK and Switzerland with inquiries or complaints about data received under those frameworks should first contact Ancestry by email. Unresolved complaints can then go to the EU, UK, Gibraltar and Swiss data protection authorities and, in some cases, binding arbitration.
Ancestry commits to resolve DPF Principles-related complaints about our collection and use of your Personal Information.
EU, UK, and Swiss individuals with inquiries or complaints regarding our handling of Personal Information received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF should first contact Ancestry at:
Legal Rights & Agreement Rules · Procedure
For unresolved complaints about data received under the Data Privacy Frameworks, Ancestry commits to cooperate with and follow the advice of the EU data protection authorities' panel, the UK Information Commissioner's Office, the Gibraltar Regulatory Authority and the Swiss Federal Data Protection and Information Commissioner. In certain circumstances described in Annex I of the Framework Principles, you may invoke binding arbitration for complaints not resolved by other means. The U.S. Federal Trade Commission has jurisdiction over Ancestry's compliance with the frameworks.
Ancestry commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs), the UK Information Commissioner’s Office (ICO), the Gibraltar Regulatory Authority (GRA), and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints
As set forth in Annex I of the DPF Principles, in certain circumstances, an individual has the right to invoke binding arbitration to resolve complaints not resolved by other means.
The Federal Trade Commission has jurisdiction over Ancestry’s compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF.
Legal Rights & Agreement Rules · Company commitment
Ancestry may modify the Privacy Statement at any time. For material changes, it will give prominent advance notice, such as a notice in the Services, on its websites or by email, so you can review them and decide whether to keep using the Services. For non-material changes, it will notify you as of their effective date in the same ways.
We may modify this Privacy Statement at any time, but we will provide prominent advance notice of any material changes to this Privacy Statement, such as by posting a notice through the Services, on our websites, or sending you an email, to provide you the opportunity to review the changes and choose whether to continue using the Services.
We will also notify you of non-material changes to this Privacy Statement as of their effective date by posting a notice through the Services, on our websites, or sending you an email.
Account & Service Control · User right or choice
If you object to any change to the Privacy Statement, the statement's stated option is to delete your account as the deletion section (numbered Section 10) describes. No other way to opt out of a change is offered.
If you object to any changes, you may delete your account as described in Section 10.
Legal Rights & Agreement Rules · Context
Under EU/EEA and UK law Ancestry must state the purposes and legal bases for processing your Personal Information. It says it relies on several legal bases for Personal and Genetic Information and lists them on a separate linked page, which is not supplied; the specific basis for each use is therefore not described here.
Under EU/EEA and UK law, we are required to specify the purposes for which we process your Personal Information and the legal bases which we rely on to do this.
Ancestry relies on a number of legal bases to collect and process your Personal Information and Genetic Information. You can view the details of our legal bases
Legal Rights & Agreement Rules · Context
If you live in the United States, Ancestry.com Operations, L.P., Ancestry.com Operations Inc. and Ancestry.com DNA, LLC are responsible for the use of your data and for responding to requests about your Personal Information.
If you reside in the United States, Ancestry.com Operations, L.P., Ancestry.com Operations Inc., and Ancestry.com DNA, LLC, are responsible for the use of your data and for responding to any requests related to your Personal Information.
Customers in the United States
Legal Rights & Agreement Rules · Procedure
U.S. users can write to Ancestry.com Operations, L.P., Attn: Privacy Office, in Draper, Utah, or email. Separate email routes exist for U.S. state privacy requests and for authorized agents, with no postal address for those. The email addresses themselves are obscured in the saved copy of the page.
Ancestry.com Operations, L.P. Attn: Privacy Office 42 Future Way, Suite 400 Draper, UT 84020
U.S. State Privacy Requests
Authorized Agent Support
For Users Located in the United States
Legal Rights & Agreement Rules · Procedure
Users outside the United States may contact the Irish Data Protection Commission or their local supervisory authority (EU/EEA residents), the UK Information Commissioner's Office (UK residents), or their local data protection authority (others). Ancestry's own contact is Ancestry Ireland Unlimited Company, Attn: Privacy Office, in Dublin, Ireland, or by email.
Users outside the United States may contact the Irish Data Protection Commission or your local data protection supervisory authority (EU/EEA residents), the Information Commissioner’s Office (UK residents) or your local Data Protection Authority (Others).
Ancestry Ireland Unlimited Company Attn: Privacy Office 10th floor, EXO Building Point Square Plaza East Wall Road Dublin 1 Ireland
Customers Outside the United States
For Users Located Outside of the United States
Legal Rights & Agreement Rules · Procedure
Ancestry customers can find contact details through a link or ask questions by chat. Law enforcement requests for information should follow Ancestry's Guide for Law Enforcement, which is not supplied.
For Ancestry Customers. For details on how to contact us, you can click here, or you can submit questions via chat.
Law Enforcement Requests. Requests for information from law enforcement should follow
Legal Rights & Agreement Rules · Context
The U.S. Statement supplements the Privacy Statement with more detail on the Personal Information Ancestry collects, processes and shares, and explains how residents of U.S. states that provide the listed rights can exercise them. It covers Ancestry websites, services and apps that link to it, including Ancestry, AncestryDNA, Fold3, Forces War Records, Newspapers.com, Archives, We Remember and Find a Grave, and applies to Personal Information collected through the Services and any other way you engage with Ancestry. Consumer health data under certain state laws is covered by a separate Consumer Health Data Privacy Policy, which is not supplied.
This U.S. Resident Additional Privacy Statement (“U.S. Statement”), supplements our Privacy Statement and provides additional information about the Personal Information we collect, process, and share.
It also provides information on how residents of U.S. states that provide for the privacy rights outlined below may exercise those rights.
It applies to the Personal Information we collect from your use of our Services and through any other means by which you engage with us.
for additional information about “Consumer Health Data” as defined under certain state consumer health privacy laws.
Data Access & Collection · Company practice
The U.S. Statement lists the categories of Personal Information Ancestry collects. They begin with identifiers such as name, username, postal address, unique and online identifiers, IP address, mobile device identifier, email address and account name, plus a driver's license only if needed to verify your identity for an access or deletion request through Member Services. The list also includes personal information described in a cited California Civil Code provision (section 1798.80(e)) not covered elsewhere, such as physical characteristics or descriptions; this analysis does not interpret that provision.
Ancestry collects the following categories of Personal Information:
Identifiers, such as name, username, postal address, unique personal identifier, online identifier, IP address, your mobile device identifier, email address, account name, driver’s license (only if necessary to verify your identity when contacting Member Services to make an access or deletion request);
Personal information described in Section 1798.80(e) of the California Civil Code not covered by an existing category, such as physical characteristics or descriptions;
16.1 Categories of Personal Information
Data Access & Collection · Company practice
The U.S. Statement's list of collected categories continues with: characteristics of protected classifications, such as self-reported sex assigned at birth and birthdate if you register a DNA kit, and any of Your Content you disclose that counts as a legally protected class; commercial information such as purchases and purchasing tendencies; internet and usage information such as browsing and search history and interaction with Ancestry sites and ads; geolocation, including device location and Find a Grave photo metadata; audio, electronic and visual information such as uploaded images and recordings, Member Services call recordings and consumer research input; and inferences derived from Personal Information. Some categories are collected only if you use certain Services.
Characteristics of protected classifications under applicable state or federal law, such as self-reported assigned sex at birth and birthdate (if you register an AncestryDNA kit).
Commercial information, such as products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies;
Internet and other usage information, such as your browsing history, search history, and information regarding your interaction with our sites and advertisements;
Geolocation data, such as location of your device or computer and any metadata associated with digital photographs uploaded to Find a Grave, including the location, date, and time the photo was taken;
Audio, electronic, visual, and similar information, such as images, audio or video recordings you upload, recordings of calls with Ancestry Member Services or information you voluntarily disclose when doing consumer insights research with us);
Inferences derived from Personal Information; and
Some categories of information are collected only if you use certain of our Services.
Inference & Profiling · Company practice
In the U.S. Statement, Sensitive Personal Information includes a driver's license (only to verify identity for an access or deletion request), account login information, racial or ethnic origin, and genetic data, depending on how you use the Services. Ancestry says it does not use Sensitive Personal Information to infer characteristics about you beyond inferences inherent to the Services, such as ancestral regions, traits and ancestral journeys. It may disclose Sensitive Personal Information between the Ancestry Companies (for example between Ancestry and AncestryDNA) or if you agreed to the Informed Consent to Research.
Sensitive Personal Information, such as driver’s license (only if necessary to verify your identity when contacting Member Services to make an access or deletion request), account login information, racial or ethnic origin, and genetic data, depending on how you use the Services.
We do not use Sensitive Personal Information to infer characteristics about you, other than those inferences that are an inherent part of the Services, such as your ancestral regions, traits, and ancestral journeys.
We may disclose Sensitive Personal Information between the Ancestry Companies (e.g. between Ancestry and AncestryDNA) or if you have agreed to our
Use & Processing · Company practice
The U.S. Statement says Ancestry uses the listed categories to provide, personalize, improve, update and expand the Services; communicate with you; provide measurement, analytics and other business services, including creating consumer profiles for research, product development and marketing; help ensure security and integrity; and market new products and offers from Ancestry or business partners based on your interests.
16.2 Business Purposes
for the following business purposes:
Providing, personalizing, improving, updating, and expanding Ancestry’s Services;
Communicating to you about the Services;
Providing measurement, analytics, and other business services, including creation of consumer profiles for the purposes of research, product development, and marketing;
Helping to ensure security and integrity of the Services; and
Marketing new products and offers from us or our business partners based on your interests.
Data Access & Collection · Company practice
The U.S. Statement says Ancestry collects the listed categories from you (depending on how you use the Services, including Your Content), from the Ancestry Companies (defined in the sharing section, numbered Section 7), from public records, from historical records, and from third parties.
16.3 Categories of Sources of Personal Information
from the following categories of sources:
You, our user/visitor—this source of Personal Information depends on your use of the Services, including when you submit Your Content (as defined in our
The Ancestry Companies (defined in Section 7);
Public records;
Historical records; and
Third parties.
Sharing & Disclosure · Company practice
The U.S. Statement lists categories disclosed for business purposes. To other Ancestry users, where you disclosed it on Ancestry, Ancestry discloses identifiers, personal information described in a cited California Civil Code provision, and characteristics of protected classes.
16.4 Disclosure of Personal Information for Business Purposes
Ancestry discloses with the following categories of third parties the correlating categories of Personal Information for a business purpose:
Other Ancestry Users (if you disclosed your Personal Information on Ancestry)
Identifiers;
Categories of personal information described in Section 1798.80(e) of the California Civil Code; and
Characteristics of protected classes under applicable state or federal law.
Sharing & Disclosure · Company practice
All listed categories are disclosed to the Ancestry Companies: identifiers, California records-law data, protected-class characteristics, commercial information, internet and usage information, geolocation, audio and visual information, inferences, and Sensitive Personal Information. For sensitive information the row says DNA Data only, and only between Ancestry and AncestryDNA.
Ancestry Companies
Identifiers;
Categories of personal information described in Section 1798.80(e) of the California Civil Code;
Characteristics of protected classes under applicable state or federal law;
Commercial information;
Internet and other usage information;
Geolocation data;
Audio, electronic, visual, and similar information;
Inferences; and
Sensitive Personal Information (DNA Data, only between Ancestry and AncestryDNA).
Sharing & Disclosure · Company practice
To service providers Ancestry discloses identifiers and California records-law data such as email address and Ancestry-generated unique identifiers (such as the DNA kit tube code); protected-class characteristics (self-reported sex at birth and birthdate) to partner laboratories; commercial information; internet and usage information; geolocation; audio and visual information; and inferences.
Service Providers
Identifiers and categories of personal information described in Section 1798.80(e) of the California Civil Code such as email address and unique personal identifiers generated by Ancestry (tube code);
Characteristics of protected classes under applicable state or federal law (self-reported sex assigned at birth, birthdate) are disclosed to our partner laboratories;
Commercial information;
Internet and other usage information;
Geolocation data;
Audio, electronic, visual, and similar information; and
Inferences.
Sharing & Disclosure · Company practice
If you agree to the Informed Consent to Research, the U.S. Statement says certain information is disclosed to research partners, listing identifiers, California records-law data, protected-class characteristics, commercial information, internet usage, audio and visual information, inferences and Sensitive Personal Information. The main sharing section describes research sharing as de-identified Genetic Information; this U.S. table lists identifiers among the categories, and the statement does not reconcile the two descriptions.
Research Partners
certain information is disclosed to research partners, including:
Identifiers;
Categories of personal information described in Section 1798.80(e) of the California Civil Code;
Characteristics of protected classes under applicable state or federal law;
Sharing & Disclosure · Company practice
Continuing the U.S. list of what is disclosed to research partners when you agree to the Informed Consent to Research: commercial information, internet and usage information, audio, electronic and visual information, inferences, and Sensitive Personal Information.
Commercial information;
Internet and other usage information;
Audio, electronic, visual, and similar information;
Inferences; and
Sensitive Personal Information.
Legal Rights & Agreement Rules · Company commitment
The U.S. Statement repeats that Ancestry does not voluntarily disclose your Personal Information to law enforcement or regulatory bodies and requires valid legal process, as described in the sharing section (numbered Section 7), before giving data to law enforcement. Its Transparency Report shows what has been disclosed.
We do not voluntarily disclose your Personal Information to law enforcement or regulatory bodies. We require a valid legal process as described in Section 7 before we would provide any data to law enforcement.
Sharing & Disclosure · Company practice
Subject to your preferences, Ancestry shares some Personal Information with marketing and advertising partners for targeted advertising: identifiers, commercial information, internet usage information and inferences. U.S. residents can opt out, including through Global Privacy Control.
16.5 Disclosure of Personal Information for Targeted Advertising
Subject to your preferences, Ancestry shares some Personal Information with third parties for targeted advertising:
Marketing and Advertising Partners
Identifiers;
Commercial information;
Internet usage information;
Inferences.
Account & Service Control · User right or choice
Depending on your state, you may have the right to know the categories of Personal Information collected about you, their sources, the business purposes, the categories of third parties receiving it, and the specific pieces collected. You can request this online through Ancestry's account data download; that report does not include your DNA Data or family trees, which you download separately, and a DNA download is at your own risk. Related Brand requests go to that brand. You can also email a request; you may need to provide a government-issued ID, which Ancestry says it uses solely to verify your identity and address. Authorized agents follow a separate process.
16.6.1 Right to Know. You may have the right to request access to your Personal Information.
This includes the right to request the categories of Personal Information we have collected about you, the categories of sources of Personal Information, the business purpose for collecting, disclosing, or sharing Personal Information, the categories of third parties with whom we disclose or share categories of Personal Information, and the specific pieces of Personal Information we have collected about you.
This report will not include a copy of your DNA Data or family trees.
Please note that if you download your DNA Data, you do so at your own risk.
To submit your request to know for our Related Brands, contact us at the Related Brand.
You may be required to provide a copy of your government-issued ID, which will be used solely to verify your identity and address.
If you are an “Authorized Agent” and are submitting a request to know on behalf of one of our users, see Section 16.6.3.
16.6 Exercising Your Rights
Retention & Deletion · User right or choice
Depending on your state, you may have the right to request deletion of your Personal Information. Under the U.S. Statement, to delete your Personal Information you must delete your account; once the deletion is completed it is irreversible, and your information, including family trees, records, photos and DNA Data, is permanently deleted. You can do this online, through a Related Brand, or by email; an emailed request may require a government-issued ID used solely for verification. The general deletion section separately describes deleting trees or DNA results on their own, and retention exceptions still apply.
16.6.2 Right to Delete. You may have the right to request that we delete your Personal Information.
To delete your Personal Information, you must delete your account and, once an account deletion request is completed, this process is irreversible. Your information (including family trees, records, photos, and DNA Data) will be permanently deleted.
To submit your request for deletion from our Related Brands, contact us at the Related Brand.
You may be required to provide a copy of your government-issued ID, which will be used solely to verify your identity and address.
If you are an “Authorized Agent” and are submitting a request to delete on behalf of one of our users, see Section 16.6.3.
Account & Service Control · Procedure
In applicable jurisdictions, U.S. residents can have an authorized agent make requests for them. Even then, you may still need to work with Ancestry directly to provide signed permission for the agent and verification of your identity, such as a government-issued ID used solely for verification. Agents contact Ancestry by email.
16.6.3 Authorized Agents. In applicable jurisdictions, U.S. residents can use authorized agents to make requests on your behalf. Even if you choose to use an authorized agent for a request, you may still need to work directly with us to provide:
Signed permission allowing the authorized agent to act on your behalf.
Verification of your identity (e.g., a copy of your government-issued ID, which will be used solely to verify your identity and address).
If you are an authorized agent, email us at
Sharing & Disclosure · User right or choice
Ancestry recognizes valid opt-out preference signals, such as Global Privacy Control, as a valid request from an authorized agent to opt out of targeted advertising and sale or sharing. The signed-permission and ID verification requirements do not apply to these automated signals.
Opt-Out Preference Signals. We recognize valid opt-out preference signals (such as the Global Privacy Control) as a valid request from an authorized agent to opt out of targeted advertising and sale/sharing. The verification requirements above (such as signed permission or ID) do not apply to these automated signals.
Account & Service Control · User right or choice
Depending on where you live, if Ancestry denies your request to know or delete your data, you may have the right to appeal by contacting Ancestry by email and following the instructions given with the denial.
16.6.4 Right to Appeal. Depending on where you live, if your request to know or delete your data is denied, you may have the right to appeal.
and following the instructions provided to you when the denial was made.
Account & Service Control · User right or choice
You have the right to correct inaccurate Personal Information Ancestry keeps about you, through Account Settings or by contacting Ancestry by email.
16.6.5 Right to Correct. You have the right to correct inaccurate Personal Information that we maintain about you. You can do so by visiting Account Settings or contacting us at
Sharing & Disclosure · Company practice
Under the right to opt out of sharing and selling, the U.S. Statement explains that Ancestry uses cookies, similar tracking technologies and integrations with third-party marketing and advertising partners to measure, target and serve advertisements. The opt-out mechanics follow.
16.6.6 Right to Opt Out of Sharing and Selling. We use cookies and similar tracking technologies and integrations with third party marketing and advertising partners to measure, target, and serve advertisements as further described in this Privacy Statement.
Sharing & Disclosure · Company commitment
Under some U.S. state laws you have the right to opt out of sharing your Personal Information for online targeted advertising. Ancestry says that, other than for targeted (cross-context behavioral) advertising as described in a cited California Civil Code provision, it does not share your Personal Information and does not sell Personal Information. This statement uses the U.S. legal sense of "share"; it sits alongside the disclosures to service providers, Ancestry Companies and others listed for business purposes. This analysis does not interpret the cited provision.
Under the laws in some U.S. jurisdictions, you have the right to opt out of our sharing of your Personal Information for online targeted advertising.
Other than in the context of targeting advertising (cross context behavioral advertising), as described in California Civil Code Section 1798.140(ah), Ancestry does not share your Personal Information and does not sell Personal Information.
Sharing & Disclosure · Company commitment
The U.S. Statement repeats that Ancestry does not sell or share your Genetic Information to or with third-party marketers, insurance companies or employers, and will not use it for marketing or personalized advertising without your explicit consent. The main statement words the consent as "separate, explicit consent."
Further, Ancestry does not sell or share your Genetic Information to or with third-party marketers, insurance companies, or employers, and we will not use your Genetic Information for marketing or personalized advertising without your explicit consent.
Sharing & Disclosure · Procedure
To opt out of processing for targeted advertising, use Ancestry's "Do Not Sell or Share my Personal Information/Opt Out of Targeted Advertising" page, linked in the footer of some sites; the Cookie Policy (not supplied) describes other sharing choices. If you are logged out, choices apply only to that browser and device: you must set them on each device, and clearing cookies erases your choice. If you are logged in, Ancestry stores the choice on the device and centrally in your account and syncs it; a choice made while logged out is uploaded when you log in, and if choices conflict the most recent one wins.
To opt out of the processing of your Personal Information for targeted advertising, please visit our
This page is also linked in the footer of some of our sites.
For logged-out users, these choices are browser and device-specific.
If you clear cookies from the cache in your browser, your “Do Not Sell or Share” preference will be erased, and you’ll need to specify your choice again.
For logged-in users, Ancestry will store your choices both locally on the device and centrally within the Services via your account.
If you are logged out and then log in later, the choice you made while logged out will be uploaded to the Ancestry service and will apply across your account. In the event of a conflict between choices, the most recent choice will prevail.
Sharing & Disclosure · User right or choice
If Ancestry's site detects a Global Privacy Control signal from your browser or plug-in, it treats it as a request to opt out of selling or sharing your Personal Information and of targeted advertising. After opting out through GPC or the opt-out page, you may still see advertising that is not tailored to your Personal Information.
If our site detects a GPC signal from your device, we will interpret it as a request to opt out of selling or sharing your Personal Information and to opt out of targeted advertising.
we may still deliver advertising to you that is not tailored based on your Personal Information.
Account & Service Control · Company commitment
Ancestry says it will not discriminate against you for exercising any of your rights under applicable U.S. privacy regulations.
16.6.7 Non-discrimination. We will not discriminate against you for exercising any of your rights under applicable U.S. privacy regulations.
Use & Processing · Restriction or exception
Ancestry says it processes sensitive personal information only to provide the Services, including to maintain quality and safety, improve the Services, detect security incidents, resist and prosecute malicious, deceptive, fraudulent or illegal actions against Ancestry, and maintain accounts, provide customer service, fulfill orders, verify information, process payments, provide analytic services and provide storage. It may also process it as needed to help ensure people's physical safety and as required by law. "Improve the Services" and "analytic services" are broad purposes within this limit.
16.7 Sensitive Personal Information. We process sensitive personal information collected about you only to provide the Services, including to:
Maintain the quality and safety of the Services;
Improve the Services;
Detect security incidents;
Resist and prosecute malicious, deceptive, fraudulent, or illegal actions directed at Ancestry; and
Maintain or service accounts, provide customer service, process or fulfill orders and transactions, verify customer information, process payments, provide analytic services, and provide storage.
We may also process this sensitive personal information as needed to help ensure people’s physical safety and as required by applicable law.
Sharing & Disclosure · User right or choice
California's "Shine the Light" law (Civil Code section 1798.83) lets California residents request, once a year and free of charge, a list of Personal Information disclosed to third parties for their own direct marketing in the preceding calendar year and the names and addresses of those third parties. Ancestry says it currently does not share any Personal Information with third parties for their own direct marketing purposes. The statement names the law; this analysis does not interpret it.
permits users who are California residents to request and obtain from us a list of what Personal Information (if any) we disclosed to third parties for their direct marketing purposes in the preceding calendar year and the names and addresses of those third parties. Requests may be made only once a year and are free of charge.
Under Section 1798.83, Ancestry currently does not share any Personal Information with third parties for their own direct marketing purposes.
Legal Rights & Agreement Rules · Context
Ancestry links to annual, global metrics on requests received from users (not supplied). Questions about U.S. privacy policies or practices can go to usprivacyrequests@ancestry.com.
to see our annual, global requests received from users.
16.10 Contact Us. If you have questions about our U.S.-related privacy policies or practices, please contact us at usprivacyrequests@ancestry.com.
Legal Rights & Agreement Rules · Procedure
Alabama residents alleging a violation of the Alabama Genetic Data Privacy Act of 2024 may complain to the Alabama Attorney General. California residents alleging a violation of the California Genetic Information Privacy Act may complain to the California Attorney General or their district attorney; residents of cities over 750,000 people may go to their city attorney, and residents of cities with full-time city prosecutors to their city prosecutor. California residents who believe their Personal Information was used improperly may complain to the California Attorney General or the California Privacy Protection Agency. The statement names these laws without describing them; this analysis does not interpret them.
Alabama residents who wish to allege a violation of the Alabama Genetic Data Privacy Act of 2024 may file a complaint with the
California residents who wish to allege a violation of the California Genetic Information Privacy Act (GIPA)
Residents of cities with more than 750,000 residents may file a complaint with their city attorney, and residents of cities with full-time city prosecutors may file a complaint with their city prosecutor.
California residents who believe that their Personal Information was used improperly
16.11 Actions for Relief.
Legal Rights & Agreement Rules · Procedure
Minnesota residents alleging a violation of the Minnesota Genetic Information Privacy Act may complain to the Minnesota Department of Commerce, under a cited Minnesota statute. Virginia residents alleging a violation of Virginia's 2023 genetic data privacy provisions (Va. Code Ann. sections 59.1-593 through 59.1-602) may complain to the Virginia Attorney General. The statement names these laws without describing them; this analysis does not interpret them.
Minnesota residents who wish to allege a violation of the Minnesota Genetic Information Privacy Act (GIPA)
Virginia residents who wish to allege a violation of Va. Code Ann. §59.1-593 through §59.1-602 of 2023 (relative to genetic data privacy) may file a complaint with the
Legal Rights & Agreement Rules · Company commitment
If the Australian Privacy Act 1988 applies to how your Personal Information is handled, additional clauses apply. Genetic Information is treated as "Sensitive Information" under that Act, and Ancestry says it will collect, use or disclose sensitive information about you only as the law permits, for example with your consent or where collection is required or authorized by law. The statement names the Act without describing it; this analysis does not interpret it.
If the Australian Privacy Act 1988 (Cth) (Privacy Act) applies to the handling of your Personal Information, the following clauses will also apply.
Genetic Information is considered “Sensitive Information” as set out under the Privacy Act. We will collect, use or disclose sensitive information about you only as permitted by law, for example where we have received your consent to do so or the collection is required or authorized by law.
Legal Rights & Agreement Rules · Procedure
In connection with your rights, you may have the right to complain to the privacy or data protection regulator in your jurisdiction. If you have questions or concerns, or believe Ancestry has not complied with this statement or the relevant privacy law, Ancestry asks that you first contact it using the controller contact details (numbered Section 15); it will investigate and decide what action, if any, to take. Contacting Ancestry first is a request, not a precondition to complaining to a regulator.
In relation to Section 8 (Your Rights and Choices Regarding Your Personal Information), you may have the right to make a complaint to the relevant privacy or data protection regulator in your jurisdiction.
we would appreciate it if you contact us in the first instance using the details in Section 15. We will investigate the complaint and determine what action, if any, to take.
Account & Service Control · User right or choice
If you live in Brazil or your Personal Information is collected there, you have the rights in the general rights section (numbered Section 8) plus these under the Brazilian General Data Protection Law (LGPD): to ask Ancestry about sharing of your Personal Information with third parties; to request anonymization, blocking or deletion of unnecessary, excessive or unlawfully processed data; to revoke consent at any time; and to object to improper processing. You exercise them as the rights section describes. The statement names the LGPD without describing it; this analysis does not interpret it.
If you are a resident of Brazil or your Personal Information is collected in Brazil, in addition to the rights provided in
the following rights and protections apply to you under the Brazilian General Data Protection Law (LGPD):
You may ask Ancestry to provide information regarding sharing of Personal Information with third parties;
you may request that Ancestry anonymize, block or delete unnecessary, unreasonable, or unlawfully processed Personal Information;
You may request the revocation of the consent given to Ancestry to process Personal Information at any time; and
You may object to improper processing of Personal Information.
To exercise any of these rights, please see Section 8.