Health data policy
Ziro has not launched and holds no health data for anyone. This page sets out the approach we are building to, so it can be read before you decide to join the waitlist. It will be replaced by a full policy before we open.
Health data is treated differently
Blood test results are special category personal data under GDPR. That is a higher bar than ordinary personal data: it narrows the grounds on which we may hold your results at all, and it strengthens your rights over them.
What we intend to hold
Your results, the dates they were taken, and the account details needed to send you a kit. Samples are labelled with a code rather than your name in transit.
Where it will be processed
Analysis takes place in Europe, at an accredited partner laboratory. Results are stored on European infrastructure. We do not intend to transfer health data outside the region.
The full list of processors will be published here before launch.
What we will never do with it
We will not sell your results. We will not share them with advertisers, insurers or employers. We will not use them to train anything, and we will not pass them to anyone without your explicit instruction.
Your rights over it
You will be able to download everything we hold, correct it, and have it erased. Erasure means the results as well as the account.
Questions about this page can go to hello@thezirocompany.com.
Last updated August 2026.