Legal and privacy

Your data, your choice.

Our policies, in one place. Read how we look after your information, how long we keep it, and how to delete it.

Privacy policy

This Privacy Policy describes how Muhdohub ("the Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from muhdohub.com (the "Site") or otherwise communicate with us regarding the Site (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully.

1. DATA CONTROLLER AND REGULATORY INFORMATION
Muhdo Health Ltd is the data controller of your personal information for the purposes of applicable data protection laws, including UK GDPR and EU GDPR.

• Company Registration Number: 10673236
• Registered Office: Columba House, Adastral Park, Martlesham Heath, Ipswich, IP5 3RE, UK
• ICO Registration Reference: ZA482119
• Data Protection Contact: info@muhdo.com

2. SPECIAL CATEGORY DATA — GENETIC AND HEALTH INFORMATION
Where you purchase genetic or epigenetic testing Services, muhdohub processes your Genetic Information and health-related Self-Reported Information. This constitutes "Special Category" personal data under UK GDPR Article 9 and EU GDPR Article 9.

The lawful basis for processing this data is your explicit consent, provided at the point of purchase and registration. You have the right to withdraw this consent at any time by contacting us at info@muhdo.com, subject to the limitations set out in our Terms of Service regarding data already processed or transferred.

We process Special Category data for the following purposes only:
• To provide the genetic and epigenetic wellness Services you have purchased.
• To generate wellness insights, biological age estimates, and lifestyle recommendations.
• For anonymised, aggregated research purposes where you have provided separate consent.
• To comply with our legal obligations.

We do not use Special Category data for clinical diagnostic purposes, and the Services do not constitute medical advice or diagnosis.

3. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date, and take any other steps required by applicable law.

4. HOW WE COLLECT AND USE YOUR PERSONAL INFORMATION
To provide the Services, we collect and have collected over the past 12 months personal information about you from a variety of sources. The information that we collect and use varies depending on how you interact with us. In addition to the specific uses set out below, we may use information we collect to communicate with you, provide or improve the Services, comply with legal obligations, enforce applicable terms of service, and to protect or defend the Services and our rights.

Information We Collect Directly from You
Information that you directly submit to us through our Services may include:
• Contact details including your name, address, phone number, and email.
• Order information including your name, billing address, shipping address, payment confirmation, email address, and phone number.
• Account information including your username, password, security questions, and other information used for account security.
• Health and wellness data including date of birth, height, weight, sex at birth, and Self-Reported Information such as lifestyle habits, subjective health ratings, and questionnaire responses.
• Genetic Information generated from your saliva sample.
• Shopping information including items viewed, placed in your cart, loyalty points, reviews, referrals, or gift cards.
• Customer support information including communications you send us.

Information We Collect about Your Usage
We may automatically collect certain information about your interaction with the Services ("Usage Data"). To do this, we may use cookies, pixels, and similar technologies ("Cookies"). Usage Data may include information about how you access and use our Site and your account, including device information, browser information, network connection details, IP address, and other interaction data.

Information We Obtain from Third Parties
We may obtain information about you from third parties, including vendors and service providers who collect information on our behalf, such as companies who support our Site and Services (such as Shopify), our payment processors, and advertising partners. Any information we obtain from third parties will be treated in accordance with this Privacy Policy.

5. HOW WE USE YOUR PERSONAL INFORMATION
• Providing Products and Services: to process your payments, fulfil your orders, send account notifications, create and manage your account, arrange shipping, facilitate returns and exchanges, and deliver wellness insights based on your Genetic Information.
• Marketing and Advertising: to send marketing, advertising, and promotional communications by email, text message, or postal mail, and to show you advertisements for products or services. For EEA residents, the lawful basis is our legitimate interest in selling our products under Art. 6(1)(f) GDPR.
• Security and Fraud Prevention: to detect, investigate, or take action regarding possible fraudulent, illegal, or malicious activity. For EEA residents, the lawful basis is our legitimate interest in keeping our website secure under Art. 6(1)(f) GDPR.
• Communicating with You and Service Improvement: to provide customer support and improve our Services. Lawful basis: legitimate interest under Art. 6(1)(f) GDPR.
• Research: to conduct anonymised, aggregated wellness and genomic research, where you have provided separate explicit consent.

6. DATA RETENTION
We retain your personal data for as long as your account is active or as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. The following retention periods apply:

• Account and Registration Information: retained for the duration of your account and for up to 7 years following closure for legal compliance purposes.
• Genetic Information (digital): retained for the duration of your account. Upon account closure, digital Genetic Information is deleted or anonymised within 90 days, unless you have separately consented to its use in anonymised research.
• Physical saliva samples and extracted DNA: destroyed within 3 months of sequencing completion.
• Self-Reported Information: deleted or anonymised within 90 days of account closure.
• Anonymised, aggregated research data: may be retained indefinitely as it cannot be linked to any individual.
• Transaction and payment records: retained for 7 years for tax and legal compliance.

To request deletion of your data, please use the Account Deletion process at muhdohub.com/pages/app-delete-account-process or contact us at info@muhdo.com.

7. COOKIES
Like many websites, we use Cookies on our Site. We use Cookies to power and improve our Site and Services, to run analytics and better understand user interaction, and to permit third parties and service providers to better tailor services and advertising. Most browsers automatically accept Cookies by default, but you can choose to remove or reject Cookies through your browser controls. For specific information about the Cookies used related to powering our store with Shopify, see https://www.shopify.com/legal/cookies.

Our website recognises the Global Privacy Control (GPC) signal, which enables you to opt out of certain uses or disclosures of your information for targeted advertising. We do not otherwise recognise "Do Not Track" signals from web browsers or devices.

8. HOW WE DISCLOSE PERSONAL INFORMATION
In certain circumstances, we may disclose your personal information to third parties for contract fulfilment purposes, legitimate purposes, and other reasons subject to this Privacy Policy:
• With vendors or third parties who perform services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping).
• With business and marketing partners to provide services and advertise to you. Our partners will use your information in accordance with their own privacy notices.
• When you direct, request, or consent to our disclosure of certain information to third parties.
• With our affiliates or otherwise within our corporate group, in our legitimate interests to run a successful business.
• In connection with a business transaction such as a merger or bankruptcy, to comply with legal obligations, to enforce applicable terms of service, or to protect or defend the Services, our rights, and the rights of our users.

We will never release your individual-level Genetic Information to any third party without your explicit consent, unless required by law.

We have in the past 12 months disclosed the following categories of personal information about users for the purposes set out above:

Category Categories of Recipients
Identifiers such as basic contact details and certain order and account information; personal information such as basic contact details and certain order and account information; commercial information such as order information and shopping information; internet or other network activity such as Usage Data; geolocation data such as locations determined by an IP address. Vendors and third parties who perform services on our behalf (such as internet service providers, payment processors, fulfilment partners, customer support partners, and data analytics providers); business and marketing partners; affiliates.
Identifiers such as name, email address, and phone number; commercial information such as records of products or services purchased; Usage Data. Business and marketing partners (with consent, for advertising and marketing activities).

9. THIRD PARTY WEBSITES AND LINKS
Our Site may include links to websites or online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites. Our inclusion of such links does not imply any endorsement of the content on such platforms or of their owners or operators.

10. INTERNATIONAL DATA TRANSFERS
We may transfer, store, and process your personal information outside the country you live in. If we transfer your personal information out of the UK or Europe, we will rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses or UK International Data Transfer Agreements, unless the destination country has been determined to provide an adequate level of protection.

11. CHILDREN'S DATA
The full genetic and epigenetic testing Services are not available to individuals under 18 years of age. Account-only access (without genetic testing) requires users to be at least 13 years of age. We do not knowingly collect personal information from children under 13. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us at info@muhdo.com to request that it be deleted.

12. SECURITY AND RETENTION OF YOUR INFORMATION
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee absolute security. We recommend that you do not use insecure channels to communicate sensitive or confidential information to us.

13. YOUR RIGHTS
Depending on where you live, you may have some or all of the rights listed below in relation to your personal information:
• Right to Access / Know: request access to personal information we hold about you, including details of how we use and share it.
• Right to Delete: request deletion of personal information we hold about you.
• Right to Correct: request correction of inaccurate personal information.
• Right of Portability: receive a copy of your personal information and request that we transfer it to a third party, in certain circumstances.
• Right to Opt Out of Sale or Sharing / Targeted Advertising: direct us not to sell or share your personal information or to opt out of targeted advertising processing.
• Restriction of Processing: ask us to stop or restrict our processing of personal information.
• Withdrawal of Consent: where we rely on consent to process your personal information, withdraw that consent at any time.
• Right to Lodge a Complaint with your local data protection supervisory authority.

To exercise any of these rights, please contact us at info@muhdo.com. We will not discriminate against you for exercising these rights. We may need to verify your identity before responding to your request.

14. COMPLAINTS
If you have complaints about how we process your personal information, please contact us at info@muhdo.com. If you are not satisfied with our response, you may lodge a complaint with the ICO (UK residents) at ico.org.uk. For EEA residents, you can find your local supervisory authority at edpb.europa.eu.

15. CONTACT
Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact us:
• Email: info@muhdo.com
• Address: Muhdo Health Ltd, Columba House, Adastral Park, Martlesham Heath, Ipswich, IP5 3RE, UK
• ICO Registration Reference: ZA482119 | Company Registration Number: 10673236

Data retention policy

Data Retention Policy 23rd October 2025

1. Introduction

This Policy sets out the obligations of Muhdo Health Ltd, a company registered in England under number 10673236, whose registered office is at Columba House, Adastral Park,
Martlesham Health, Suffolk, IP5 3RE (“the Company”) regarding retention of personal data collected, held, and processed by the Company in accordance with EU Regulation 2016/679 General Data Protection Regulation (“GDPR”).

The GDPR defines “personal data” as any information relating to an identified or identifiable natural person (a “data subject”). An identifiable natural person is one who
can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

The GDPR also addresses “special category” personal data (also known as “sensitive” personal data).
Such data includes, but is not necessarily limited to data concerning the data
subject’s diet, activity, location, race and ethnicity, family history, genetics, epigenetics, biometrics (if used for ID purposes), current and historic health information. Under the GDPR, personal data shall be kept in a form which permits the identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed. In certain
cases, personal data may be stored for longer periods where that data is to be
processed for archiving purposes that are for scientific or historical research, or for statistical purposes (subject to the implementation of the appropriate technical and organisational measures required by the GDPR to protect that data). In addition, the GDPR includes the right to erasure or “the
right to be forgotten”. Data subjects have the right to have their personal data erased (and to prevent the processing of that personal data) in the following circumstances:

Where the personal data is no longer required for the purpose for which it was originally collected or processed (see above);
When the data subject withdraws their consent;
When the data subject objects to the processing of their personal data and the Company has no overriding legitimate interest;
When the personal data is processed unlawfully (i.e. in breach of the GDPR);
When the personal data has to be erased to comply with a legal obligation

This Policy sets out the type(s) of personal data held by the Company, the period(s) for which that personal data is to be retained, the criteria for establishing and reviewing such period(s), and when and how it is to be deleted or otherwise disposed of.
For further information on other aspects of data protection and compliance with
the GDPR, please refer to the Company’s Data Privacy Policy.

2. Aims and Objectives

The primary aim of this Policy is to set out limits for the retention of personal data and to ensure that those limits, as well as further data subject rights to erasure, are complied with. By extension, this Policy aims to ensure that the Company complies fully with its obligations and the rights of data subjects under the GDPR.
In addition to safeguarding the rights of data subjects under the GDPR, by ensuring that excessive amounts of data are not retained by the Company, this Policy also aims to improve the speed and efficiency of managing data.

3. Scope

This Policy applies to all personal data held by the Company and by third-party data processors processing personal data on the Company’s behalf.
Personal data, as held by the Company is stored on third-party servers, operated by Amazon AWS, located in the UK and Ireland.

4. Data Subject Rights and Data Integrity

All personal data held by the Company is held in accordance with the requirements of the GDPR and data subjects’ rights thereunder, as set out in the Company’s Data Protection Policy.

Data subjects are kept fully informed of their rights, of what personal data the Company holds about them, how that personal data is used and how long the Company will hold that personal data (or, if no fixed retention period can be determined, the criteria by which the retention of the data will be determined).
Data subjects are given control over their personal data held by the Company including the right to have incorrect data rectified, the right to request that their personal data be deleted or otherwise disposed of (notwithstanding the retention periods otherwise set by this Data Retention Policy), the right to restrict the Company’s use of their personal data and further rights relating to automated decision-making and profiling.

5. Technical and Organisational Data Security Measures

The following technical measures are in place within the Company to protect
the security of personal data:
All emails containing personal data must be encrypted;

All emails containing personal data must be marked “confidential”;
Personal data may only be transmitted over secure networks;
Personal data may not be transmitted over a wireless network if there is a reasonable wired alternative;
Personal data contained in the body of an email, whether sent or received, should be copied from the body of that email and stored securely. The email itself and associated temporary files should be deleted;
Where personal data is to be sent by facsimile transmission the recipient should be informed in advance and should be waiting to receive it;
Where personal data is to be transferred in hardcopy form, it should be passed
directly to the recipient;
All personal data transferred physically should be transferred in a suitable
container marked “confidential”;
No personal data may be shared informally and if access is required to any personal data, such access should be formally requested from James Florence, Muhdo Chief Technology Officer;
All hard copies of personal data, along with any electronic copies stored on physical media should be stored securely;
No personal data may be transferred to any employees, agents, contractors, or other parties, whether such parties are working on behalf of the Company or not, without authorisation;
Personal data must be handled with care at all times and should not be left unattended or on view;
Computers used to view personal data must always be locked before being left unattended;
No personal data should be stored on any mobile device, whether such device belongs to the Company or otherwise without the formal written approval of James Florence, Muhdo Chief Technology Officer and then strictly in accordance with all instructions and limitations described at the time the approval is given, and for no longer than is absolutely necessary;
All personal data stored electronically should be backed up daily with backups stored. All backups should be encrypted;
All electronic copies of personal data should be stored securely using passwords and encryption;
All passwords used to protect personal data should be changed regularly and should must be secure;
Under no circumstances should any passwords be written down or shared. If a password is forgotten, it must be reset using the applicable method. IT staff do not have access to passwords;
All software should be kept up-to-date. Security-related updates should be installed as soon as reasonably possible after becoming available;
No software may be installed on any Company-owned computer or device without approval; and
Where personal data held by the Company is used for marketing purposes, it shall be the responsibility of James Florence, Muhdo Chief Technology Officer to ensure that the appropriate consent is obtained and that no data subjects have opted out, whether directly or via a third-party service such as the TPS.

The following organisational measures are in place within the Company to protect the security of personal data:

All employees and other parties working on behalf of the Company shall be made fully aware of both their individual responsibilities and the Company’s responsibilities under the GDPR and under the Company’s Data Protection Policy;
Only employees and other parties working on behalf of the Company that need access to, and use of, personal data in order to perform their work shall have access to personal data held by the Company;
All employees and other parties working on behalf of the Company handling personal data will be appropriately trained to do so;
All employees and other parties working on behalf of the Company handling personal data will be appropriately supervised;
All employees and other parties working on behalf of the Company handling personal data should exercise care and caution when discussing any work relating to personal data at all times;
Methods of collecting, holding, and processing personal data shall be regularly evaluated and reviewed;
The performance of those employees and other parties working on behalf of the Company handling personal data shall be regularly evaluated and reviewed;
All employees and other parties working on behalf of the Company handling personal data will be bound by contract to comply with the GDPR and the Company’s Data Protection Policy;
All agents, contractors, or other parties working on behalf of the Company handling personal data must ensure that any and all relevant employees are held to the same conditions as those relevant employees of the Company arising out of the GDPR and the Company’s Data Protection Policy;
Where any agent, contractor or other party working on behalf of the Company handling personal data fails in their obligations under the GDPR and/or the Company’s Data Protection Policy, that party shall indemnify and hold harmless the Company against any costs, liability, damages, loss, claims or proceedings which may arise out of that failure.

6. Data Disposal

Upon the expiry of the data retention periods set out below in Part 7 of this Policy, or when a data subject exercises their right to have their personal data erased, personal data
shall be deleted, destroyed, or otherwise disposed of as follows:

Personal data stored electronically (including any and all backups thereof) shall be deleted securely;
Special category personal data stored electronically (including any and all backups thereof) shall be deleted;
Personal data stored in hardcopy form shall be shredded;
Special category personal data stored in hardcopy form shall be shredded.

7. Data Retention

As stated above, and as required by law, the Company shall not retain any personal data for any longer than is necessary in light of the purpose(s) for which that data is collected, held, and processed.
Different types of personal data, used for different purposes, will necessarily be retained for different periods (and its retention periodically reviewed), as set out below.
When establishing and/or reviewing retention periods, the following shall be taken into account:

The objectives and requirements of the Company;
The type of personal data in question;
The purpose(s) for which the data in question is collected, held, and processed;
The Company’s legal basis for collecting, holding, and processing that data;
The category or categories of data subject to whom the data relates;
If a precise retention period cannot be fixed for a particular type of data, criteria shall be established by which the retention of the data will be determined, thereby ensuring that the data in question, and the retention of that data, can be regularly reviewed against those criteria.
Notwithstanding the following defined retention periods, certain personal data may be deleted or otherwise disposed of prior to the expiry of its defined retention period where a decision is made within the Company to do so (whether in response to a request by a data subject or otherwise).
In limited circumstances, it may also be necessary to retain personal data for longer periods where such retention is for archiving purposes that are for scientific or research purposes, or for statistical purposes.
All such retention will be subject to the implementation of appropriate technical and organisational measures to protect the rights and freedoms of data subjects, as required by the GDPR.

Type of Data

Purpose of Data

Review Period

Retention Period or Criteria

Personal data including:Name, address, phone number, email, gender, weight, height, date of birth, bank and/or payment card details

To identify a person

Annually

Information held until the person requests for the information to be deleted or within five years of the person discontinuing access to our nutrition, health and fitness recommendations.

Special category / sensitive personal data including:DNA and epigenetic profile, medical information, demographic and lifestyle data

To provide nutrition, health and fitness recommendations to a person

Annually

Information held until
the person requests for the information about themselves to be deleted.
Special category/ sensitive personal information is anomalised, encrypted and
used in our ongoing epigenetic and DNA medical research projects.

8. Roles and Responsibilities

The Company’s Data Protection Officer is Richard Layton
The Data Protection Officer shall be responsible for overseeing the implementation of this Policy and for monitoring compliance with this Policy, the Company’s other Data Protection-related policies (including, but not limited to, its Data Protection Policy), and with the GDPR and other applicable data protection legislation.
The Data Protection Officer shall be directly responsible for ensuring compliance with the above data retention periods.
Any questions regarding this Policy, the retention of personal data, or any other aspect of GDPR compliance should be referred to the Data Protection Officer.

9. Implementation of Policy

This Policy has been
reviewed and shall be deemed effective as of 23rd October 2023. No
part of this Policy shall have retroactive effect and shall thus apply only to
matters occurring on or after this date. This Policy has been approved and
authorised by:

Name: Richard Layton

Position: Chief Financial Officer

Date: 23rd October 2025

App account deletion process

Muhdo Health Ltd | Company Registration No. 10673236

Effective: 16 March 2025 | Last updated: 13 May 2026

Implementation of Process

1. HOW TO DELETE YOUR ACCOUNT

If you have registered on the Muhdo app and would like to delete your account, please follow the instructions below:

1. Login to the app using your email address and password.

2. Tap on your initials in the top right-hand corner of the screen.

3. Select "Delete Account" from the options available.

4. You will be asked to confirm that you want to delete your account. Confirm to proceed.

Please note: account deletion will remove all of your personal information from our databases. This process cannot be undone.

2. WHAT HAPPENS TO YOUR DATA

Upon account deletion, the following actions will be taken in accordance with UK GDPR and our Privacy Policy:

• Personal Information (name, email, address, account details): deleted from active databases within 30 days of confirmed deletion request.

• Genetic Information (digital): deleted or fully anonymised within 90 days of account closure.

• Self-Reported Information: deleted within 90 days of account closure.

• Physical saliva samples and extracted DNA: if already destroyed per our standard 3-month retention period, no further action is required. If not yet destroyed at the time of the deletion request, samples will be destroyed as a priority.

• Anonymised, aggregated research data: may be retained indefinitely where it cannot be linked to any individual, in accordance with applicable research ethics and data protection law.

• Transaction and payment records: retained for up to 7 years for tax and legal compliance purposes, even after account deletion.

Genetic Information that has already been transferred to Partners (third-party DNA Product providers) may not be removable from Partners' databases by muhdohub. We will endeavour to notify Partners of your deletion request, but cannot guarantee removal from third-party systems.

3. YOUR RIGHTS

You have the right under UK GDPR to request erasure of your personal data (the "Right to be Forgotten"). Account deletion via the app fulfils this right for the data categories set out above.

If you have concerns about data held by third-party Partners, please contact us at info@muhdo.com and we will assist in facilitating your request to the extent possible.

You also have the right to:

• Request a copy of your data before deletion (Right of Portability).

• Request correction of any inaccurate data held about you prior to deletion.

• Lodge a complaint with the ICO (ico.org.uk) if you believe your data rights have not been respected.

4. ALTERNATIVE DELETION METHOD

If you are unable to delete your account via the app, you may request account deletion by emailing info@muhdo.com with the subject line "Account Deletion Request" and your registered email address. We will process your request within 30 days and confirm deletion by email.

5. CONTACT

• Data Protection queries: info@muhdo.com

• Muhdo Health Ltd, Columba House, Adastral Park, Martlesham Heath, Ipswich, IP5 3RE, UK

• ICO Registration Reference: ZA482119 | Company Registration Number: 10673236

This process shall be deemed effective as of 16 March 2025, and was last reviewed on 13 May 2026.

No part of this process shall have retroactive effect and shall apply only to matters occurring on or after the effective date.

This process has been approved and authorised by:

Name: Richard Layton

Position: Chief Financial Officer

Date: 16 March 2025

Your privacy choices

Terms of service

MUHDO HEALTH LTD

TERMS OF SERVICE

Company No. 10673236 | Registered in England & Wales

Columba House, Adastral Park, Martlesham Heath, Ipswich, IP5 3RE

Last Updated: 13 May 2026

Quick-Reference Summary

This summary is for convenience only. The full terms below are legally binding.

Key Point

Who we are

Muhdo Health Ltd (Company No. 10673236). We provide DNA and epigenetic testing, wellness insights, biological age analysis, and MAISIE, our AI wellness coach.

What you agree to

By purchasing a test kit or subscription, or by using our App, you agree to these Terms.

Not medical advice

Nothing on our platform is medical advice, diagnosis, or treatment. DNA results, epigenetic scores, and AI coaching are for general wellness and research purposes only. See Section 4.

Test kits

Physical saliva collection kits. Follow instructions carefully. Samples cannot be returned to you once you have submitted it for laboratory analysis. See Section 7.

MAISIE AI Coach

An AI wellness coach trained on genetics and epigenetics. Not a clinician. Not medical advice. See Section 11.

Eligibility

You must be 18 or over to submit a genetic sample. Account-only access requires age 13 or over.

Subscriptions

14-day statutory cooling-off right. App Store and Play Store subscriptions managed via Apple and Google. See Section 13.

Liability

We limit liability as permitted by UK law. We cannot limit liability for death or personal injury from our negligence, fraud, or your consumer statutory rights. See Section 17.

Disputes

Centre for Effective Dispute Resolution (CEDR): cedr.com | 020 7536 6000. See Section 20.

Governing law

English law. Courts of England and Wales.

Changes

30 days' notice of material changes. Cancel without penalty if you do not accept.

1. ABOUT US AND THESE TERMS

MUHDO HEALTH LTD ("Muhdo Health", "we", "us", "our") is a private limited company incorporated in England and Wales, company number 10673236, registered office at Columba House, Adastral Park, Martlesham Heath, Ipswich, IP5 3RE, UK.

We operate muhdohub.com, helix-portal.com and a mobile application (the "App"). Our Services comprise:

• DNA and Epigenetic Test Kits — saliva-based testing analysing genetic traits and epigenetic markers relevant to health and wellness, across categories including Fitness, Longevity, Nutrition, and Performance.

• Re-Test Kits — repeat epigenetic testing to track changes in your biological age and epigenetic profile over time.

• MAISIE — our AI Wellness Coach, trained on genetics and epigenetics to deliver personalised wellness guidance.

• Wellness Subscription — ongoing access to testing, insights, and wellness guidance.

• Subscription-based services including Face Analysis and Cognitive Brain Assessments.

These Terms of Service ("Terms") govern your use of our website, App, and all Services. By purchasing a product, creating an account, or using any part of our Services, you agree to these Terms. If you do not agree, you must not use the Services.

The following documents form part of our agreement with you:

• Our Privacy Policy (muhdohub.com/privacy-policy), incorporated by reference.

• Any specific subscription plan or product terms presented at the point of purchase.

IMPORTANT: Muhdo Health is not a medical device, does not provide medical advice, and is not a regulated healthcare service. DNA results, epigenetic scores, biological age assessments, and AI coaching are for general wellness and informational purposes only. Always consult a qualified healthcare professional about any health concern.

Definitions

• "Personal Information" means information that can be used to identify you, either alone or in combination with other information. Muhdo Health collects and stores Registration Information, Genetic Information, Self-Reported Information, User Content, Web Behaviour Information, and Aggregated Genetic and Self-Reported Information.

• "Registration Information" means the information you provide when registering for and/or purchasing our Services (e.g. name, email, address, user ID and password, and payment information).

• "Genetic Information" means information regarding your genotype generated through processing of your saliva by Muhdo Health or its contractors, successors, and assignees.

• "Self-Reported Information" means all information about yourself, including your personal traits, ethnicity, family history, and other information entered into surveys, forms, or features while signed in to your Muhdo Health account.

• "User Content" means all information, data, text, software, or other materials — other than Genetic Information and Self-Reported Information — generated by users and transmitted to or through Muhdo Health.

• "Web Behaviour Information" means information on how you use the muhdohub website collected through log files, cookies, and web beacon technology.

• "Aggregated Genetic and Self-Reported Information" means Genetic and Self-Reported Information combined with that of other users and analysed as a whole such that no specific individual may be reasonably identified.

• "Research" means research that Muhdo Health performs on de-identified, aggregated genetic and self-reported user data for new product development or for publication in peer-reviewed scientific journals.

• "Service" or "Services" means Muhdo Health's products, software, services, and website as accessed from time to time by the user.

2. ELIGIBILITY AND ACCOUNT REGISTRATION

2.1 Who Can Use Our Services

You may use our Services if:

• You are at least 18 years old and contributing Genetic Information, or at least 13 years old for account-only access.

• You are legally capable of entering into binding contracts under English law.

• You are accessing the Services from a jurisdiction where their use is lawful.

• You have not previously been suspended or removed from our Services.

2.2 Creating an Account

When registering, you agree to provide accurate, current, and complete information; keep your account information up to date; keep your password confidential; not share your account; and notify us at info@muhdo.com immediately if you suspect unauthorised account use. You are responsible for all activity under your account. Muhdo Health cannot be liable for any loss arising from your failure to comply with these obligations.

2.3 One Account Per Person

You may hold only one active account. Creating multiple accounts to circumvent restrictions or subscription limits is a breach of these Terms.

3. DESCRIPTION OF THE SERVICES

The Services include genomic sequencing, epigenetic analysis, the muhdohub App, and subscription-based services including Face Analysis and Cognitive Brain Assessments. Muhdo Health collects, analyses, and stores data from your saliva sample to generate your Genetic Information and epigenetic markers. The muhdohub App allows you to receive insights and recommendations based on your Genetic Information and to purchase DNA and epigenetic Products.

4. NOT MEDICAL ADVICE — CRITICAL DISCLAIMER

READ THIS SECTION CAREFULLY. It describes a fundamental limitation on how you may use our Services.

4.1 Wellness and Research Purpose

The Muhdo Health Services — including all DNA, epigenetic, biological age, and wellness results — are provided exclusively for general wellness, lifestyle education, and research purposes. They are not intended to be used as a medical device and do not constitute, and must not be relied upon as, medical advice, clinical diagnosis, medical treatment, or the prevention or cure of any disease or medical condition.

All outputs, including but not limited to biological age estimates (MethylPace), body age metrics, inflammation profiles, genetic predisposition scores, and nutritional recommendations, are probabilistic wellness indicators derived from population-level research. They reflect tendencies and associations observed across large cohorts and do not constitute a clinical finding about any individual user.

4.2 What Our Services Are Not

Nothing on our platform constitutes or should be relied upon as:

• Medical advice of any kind.

• A medical diagnosis of any condition, disease, or disorder.

• A clinical assessment of your biological age or health status for medical purposes.

• A recommendation for or against any medical treatment, medication, or procedure.

• A substitute for consultation with a qualified healthcare professional, specialist, or clinician.

4.3 Biological Age and Epigenetic Scores

Our Biological Age scores are wellness metrics derived from epigenetic algorithms. They are not clinical assessments and must not be used to make decisions about medical treatment or clinical care. Our Heart Age score is not a diagnosis of heart disease and must not be used to inform decisions about cardiac medication or treatment. Our epigenetic wellness scores are not equivalent to, and must not be treated as substitutes for, clinical blood tests or assessments by a qualified healthcare professional.

4.4 Supplement and Nutritional Guidance

Our nutritional and supplement recommendations are based on your genetic profile and are intended to support general wellness. They are not prescriptions, do not replace medical dietary advice, and must not replace prescription medication or clinical supplementation advice. Always consult a healthcare professional before starting any new supplement, particularly if you are taking prescribed medication.

4.5 MAISIE AI Wellness Coach

MAISIE, our AI Wellness Coach, is a wellness tool. It does not have access to your full medical history and cannot assess your individual clinical circumstances. It is not a substitute for clinical consultation.

4.6 Medical Emergencies

If you are experiencing a medical emergency, call your local emergency services immediately (999 in the UK; 112 in the EU and internationally; 911 in the USA). If you have health concerns, consult your GP or a qualified healthcare professional.

4.7 Regulatory Status

Muhdo Health is not regulated by the Medicines and Healthcare products Regulatory Agency (MHRA), the Care Quality Commission (CQC), or any other healthcare regulator as a medical service or medical device provider. See also Section 5 (Nature of the Services) for further detail on our non-medical-device status.

5. NATURE OF THE SERVICES — WELLNESS AND RESEARCH ONLY

Not a Medical Device. The muhdohub platform and any white-label applications are not classified as medical devices under the UK Medical Devices Regulations 2002 (as amended), EU Medical Devices Regulation (EU) 2017/745, or any equivalent international regulatory framework. The platform has not been submitted for, and does not hold, regulatory clearance as a medical device from the MHRA, FDA, or any equivalent authority. Users acknowledge this distinction and accept that the Services are consumer wellness products only.

Scientific Methodology. The analytical methodology employed by Muhdo Health — including polygenic algorithms, DNA methylation profiling via the Illumina MethylationEPIC array, and combined polymethyl/environmental algorithms — is grounded in peer-reviewed, published academic science. Research underpinning the platform has been conducted in collaboration with institutions including Kings College London and Stavanger University, and published in peer-reviewed journals. Full details of the scientific validation of the methodology are available on request.

Users are strongly encouraged to consult a qualified healthcare professional — including a physician or genetic counsellor — before making any health-related decisions based on results received through Muhdo Health Services.

6. PRIVACY AND DATA PROTECTION

The collection, use, and protection of your personal information — including your genetic data, epigenetic data, and all other health-related data — is governed by our Privacy Policy at muhdohub.com/privacy-policy, incorporated into these Terms by reference. In summary:

• We process genetic and epigenetic data only with your explicit consent.

• We never use your genetic or epigenetic data for advertising targeting.

• We never sell your personal data.

• Your physical saliva sample is destroyed by our laboratory partner after analysis.

• You can withdraw consent, request deletion of your data, and exercise all rights described in the Privacy Policy at any time.

Muhdo Health is registered with the UK Information Commissioner's Office (ICO), registration reference ZA482119. Genetic and health data constitutes Special Category data under UK GDPR and EU GDPR Article 9. Your explicit consent is the lawful basis for processing this category of data.

We may anonymise and aggregate your Genetic Information and Self-Reported Information for research purposes. We will never release individual-level Genetic Information to any third party without your explicit consent, unless required by law.

7. DNA AND EPIGENETIC TEST KITS

7.1 What Is Included

Each test kit contains a saliva collection tube, detailed collection instructions, and a pre-paid return envelope (for UK customers; international customers are responsible for return postage). Some kits include access to specific testing categories as set out in the product description at the time of purchase.

7.2 Your Obligations

To ensure accurate results, you must:

• Follow the sample collection instructions carefully, including not eating, drinking, or smoking for 30 minutes before collection.

• Provide a sufficient saliva sample as instructed.

• Return the sample within the timeframe specified in the instructions.

• Ensure the sample is not contaminated.

You must submit only your own saliva sample. Providing a sample that is not your own, or misrepresenting whose sample you are submitting, is a breach of these Terms. We cannot be responsible for inaccurate or invalid results caused by failure to follow sample collection instructions.

7.3 Sample Processing and Turnaround

DNA results typically take 3–4 weeks from receipt of your sample at the laboratory. Epigenetic results may take up to 6 weeks due to the complexity of the analysis. We will notify you by email, text and in-app messaging (if enabled) when your results are available. These are estimated turnaround times and may vary due to laboratory capacity.

7.4 Sample Submissions — No Return

Once you have submitted your saliva sample to the laboratory, it cannot be returned to you. Your physical sample will be destroyed by the laboratory after analysis. You may request a replacement kit free of charge if your sample is lost in transit — contact info@muhdo.com.

7.5 Invalid Samples

If your sample is insufficient or invalid for analysis (due to inadequate volume, contamination, or other laboratory determination), we will notify you and arrange a replacement kit free of charge. We cannot guarantee results for samples that do not meet laboratory quality standards.

7.6 Re-Test Kits

Re-Test Kits allow you to submit a further saliva sample to track changes in your epigenetic profile and biological age over time. Re-Test results are compared against your original baseline within your account. Re-Test turnaround times are the same as standard epigenetic testing.

7.7 Accuracy of Results

We use accredited laboratory partners and validated genetic and epigenetic analysis methodologies. However, no genetic or epigenetic test is infallible. Results are based on current scientific understanding of the genetic and epigenetic markers we analyse, which continues to evolve. We make no warranty that results will be accurate in all circumstances. Results must not be relied upon for clinical decision-making.

7.8 Retesting Policy

If we are unable to process your saliva sample, we may re-attempt at no charge. If we remain unable to process it, we will send a replacement muhdohub Kit at no charge. If failure is due to your violation of these Terms, a fee may apply.

8. RISKS AND CONSIDERATIONS

Once you obtain your Genetic Information, that knowledge is irrevocable. You should understand that:

• Genetic research is not comprehensive. Only a portion of genetic variants are known to be related to human traits or health conditions, and scientific understanding is rapidly evolving.

• Many ethnic groups are under-represented in genetic studies; some interpretations may not apply equally to all populations.

• Genetic Information you share with others could be used against your interests.

• You should not change health behaviours solely on the basis of Muhdo Health results. Always consult a physician or qualified health care provider.

• Muhdo Health Services are for research, informational, and educational use only. We do not provide medical advice.

The Services are not intended to be used for any diagnostic purpose and are not a substitute for professional medical advice. You should always seek the advice of your physician or other qualified health care provider regarding diagnosis, cure, treatment, mitigation, or prevention of any disease or medical condition.

9. WELLNESS RECOMMENDATIONS

9.1 Personalised Wellness Guidance

Wellness recommendations generated by our platform are based on your DNA and epigenetic profile. They are for general wellness purposes and do not constitute personalised medical or dietary advice. The same recommendation may be generated for multiple users with similar genetic profiles.

9.2 Quality and Methodology

Our wellness recommendations are developed using high-quality, clinically studied data from trusted scientific sources. All recommendations are developed in compliance with applicable UK consumer wellness regulations. For full details of the scientific methodology underpinning our recommendations, refer to the Muhdo Science and Education documentation available on request.

9.3 Drug Interactions and Medical Conditions

Some recommendations generated by our platform may relate to nutritional or lifestyle factors that could interact with prescription medications or be contraindicated in certain medical conditions. Consult your GP or qualified healthcare professional if you are taking prescribed medication or managing a medical condition before acting on any recommendation from our platform.

10. USER REPRESENTATIONS

By accessing Muhdo Health Services, you agree to, acknowledge, and represent as follows:

• You understand that information from Muhdo Health is not designed to independently diagnose, prevent, or treat any condition or disease, and is intended for wellness, research, informational, and educational purposes only.

• You give permission to Muhdo Health to perform genotyping services on DNA extracted from your saliva sample.

• You are eighteen (18) years of age or older if providing a saliva sample or accessing Genetic Information.

• You guarantee that any sample you provide is your own saliva.

• You confirm that submitting a saliva sample is not subject to any export ban or restriction in your country of residence.

• You are not an insurance company or employer attempting to obtain information about an insured person or employee.

• You are aware that some information you receive may provoke strong emotion.

• You take responsibility for all consequences resulting from sharing your Genetic Information and Self-Reported Information with others.

• You understand that all Personal Information will be stored in Muhdo Health databases and processed in accordance with the Muhdo Health Privacy Policy.

• Waiver of Property Rights: You understand that by providing a sample or accessing Genetic Information, you acquire no rights in any research or commercial products developed using your de-identified and aggregated data, and will not receive compensation for such products.

11. MAISIE — AI WELLNESS COACH

11.1 What MAISIE Does

MAISIE is Muhdo Health's artificial intelligence wellness coach, trained on genetics, epigenetics, and wellness science. MAISIE analyses your genetic results, epigenetic scores, and lifestyle data to deliver personalised wellness guidance, answer questions about your results, and help you understand your wellness profile and recommendations.

11.2 What MAISIE Does Not Do

MAISIE is not a clinician. MAISIE does not:

• Provide medical diagnoses or clinical assessments.

• Have access to your full medical history, current medications, or other clinical information beyond what you share in the App.

• Replace a GP, specialist, or any other qualified healthcare professional.

• Make decisions about your care — all guidance provided by MAISIE is informational and for general wellness only.

11.3 Accuracy and Limitations of AI Responses

AI-generated responses can be incorrect, incomplete, or inappropriate for your individual circumstances. You must exercise independent judgement when acting on any AI-generated wellness guidance. We are not liable for any harm arising from your reliance on MAISIE's responses for medical, clinical, or safety-critical decisions.

MAISIE is explicitly programmed not to: provide medical diagnoses; recommend or advise against specific prescription medications; advise you to seek or avoid clinical referral on the basis of your epigenetic or genetic scores; or interpret your results in a manner that suggests a clinical condition. If MAISIE's response ever appears to conflict with advice from your healthcare professional, always follow the advice of your healthcare professional.

11.4 AI and Special Category Data

MAISIE processes your genetic and epigenetic data to generate responses. This involves automated processing of special category data. Under Article 22A UK GDPR (as amended by the Data (Use and Access) Act 2025), you have the right to request human review of any significant AI-generated output. To exercise this right, contact info@muhdo.com.

12. INTELLECTUAL PROPERTY

12.1 Our Intellectual Property

All intellectual property in the Services — website, App, software, algorithms (including our epigenetic analysis algorithms and AI models), designs, text, graphics, and branding — is owned by or licensed to Muhdo Health Ltd. Nothing in these Terms grants you any ownership rights other than the limited licence in Section 12.2.

12.2 Licence to Use the Services

Subject to compliance with these Terms and payment of applicable fees, we grant you a personal, non-exclusive, non-transferable, revocable, limited licence to access and use the Services for your own personal wellness purposes. You must not reproduce, distribute, or exploit any content from the Services for commercial purposes without prior written agreement from Muhdo Health.

12.3 Your Data

You retain full ownership of your personal health, genetic, and epigenetic data. By using the Services, you grant us a limited licence to process your data solely to provide the Services to you. This licence terminates when you delete your account and request deletion of your data. We do not claim ownership of your personal data. We will never sell it or use it for advertising targeting.

13. SUBSCRIPTIONS, PRICING, AND PAYMENT

13.1 Subscription Plans

We offer free and paid subscription tiers. Features and pricing for each tier are set out on our website. We will give at least 30 days' notice of any material changes to features or pricing.

13.2 Pricing

All prices are displayed inclusive of applicable VAT at the time of purchase. For price increases: we give at least 30 days' written notice; increases apply to renewals only, not the current period; you may cancel before a price increase takes effect.

13.3 Billing and Payment

Subscription fees are billed in advance on a recurring basis. Payment is processed by our third-party payment processor. If a payment fails, we may retry and may suspend access to paid features until payment is received, with notification to you.

Subscription Transparency: Where we offer both subscription and one-time purchase options, neither option is pre-selected by default — you must actively choose your preferred option. The full subscription terms, including renewal period, total cost per period, and how to cancel, are displayed clearly at the point of purchase before you commit. We comply with the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013 and applicable DMCCA 2024 requirements.

13.4 Free Trial / Introductory Offers

Where we offer a free trial or introductory offer, your payment method is charged at the end of the trial/offer period unless you cancel before it ends. We will remind you before charging.

Apple App Store / Google Play Store Subscriptions: If you subscribe through the App Store or Google Play Store, all billing, renewals, and cancellations must be managed through your Apple ID or Google account settings at least 24 hours before the end of the current period. Muhdo Health cannot process refunds or cancellations for App Store / Play Store subscriptions.

13.5 DMCCA 2024 Subscription Rules

The Digital Markets, Competition and Consumers Act 2024 introduces enhanced subscription contract rules (mandatory auto-renewal reminders, enhanced cooling-off rights, clearer cancellation processes). These rules are confirmed for Autumn 2026 commencement at the earliest. We are preparing for full compliance and will update these Terms when the date is confirmed. In the meantime, all existing consumer protections apply in full.

14. PAYMENT TERMS

Muhdo Health offers one-off purchases and a range of subscription plans. Plans automatically renew for a period equal to your prior subscription period unless you provide written notice of non-renewal to info@muhdo.com at least 30 days prior to the end of the current period. Muhdo Health may change fees at any time with advance notice as set out in Section 13.2. Changes to subscriptions must be approved by Muhdo Health Ltd on a case-by-case basis.

15. CANCELLATION, REFUNDS, AND STATUTORY RIGHTS

15.1 Statutory 14-Day Cooling-Off Right

Under the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013, you have a 14-day right to cancel a subscription or digital service contract from the date you entered into it. If you exercise this right, you will receive a full refund of any subscription fee paid.

To cancel within 14 days: email info@muhdo.com with subject "Cancellation Notice" or use the cancellation function in your account settings. We will process your refund within 14 days of receiving your cancellation notice.

Note: The 14-day right applies to subscriptions and digital services. Physical test kit orders: once you have returned your saliva sample to the laboratory, the testing service has commenced and cancellation rights for that service are extinguished. See Section 15.4 for test kit returns.

App Store / Play Store Subscriptions: Your statutory 14-day cancellation rights still apply, but refunds will be processed through Apple / Google according to their respective refund policies.

15.2 Cancelling After the Cooling-Off Period

You may cancel your subscription at any time through account settings or by contacting us. Cancellation takes effect at the end of your current billing period. No refund is given for the remainder of the current billing period, except as set out in Sections 15.3 and 15.4.

15.3 Refunds for Service Failures

Under the Consumer Rights Act 2015, if we fail to provide the Services with reasonable care and skill and fail to remedy that failure within a reasonable time, you may be entitled to a price reduction or full/partial refund. Contact info@muhdo.com.

15.4 Test Kit Returns and Refunds

Physical test kits (unopened): you may return an unopened test kit within 30 days of receipt for a full refund (excluding shipping and handling fees), in accordance with our Refund Policy and your statutory rights.

Opened test kits / submitted samples: once you have opened the sealed sample collection tube or submitted your saliva sample, the kit cannot be returned and the testing service is considered commenced. No refund is available for commenced testing services, except where we have failed to deliver results within a reasonable time or where results are invalid for reasons within our control.

15.5 Cancellation Due to Our Changes

If we make a material change to the Services or increase prices and you do not accept the change, you may cancel within 30 days of notice of the change. We will provide a pro-rata refund of any prepaid fees for the unused period.

16. OFFER CODES

Offer codes are redeemable towards purchases on muhdohub.com or in the muhdohub App, subject to product exclusions and restrictions determined by Muhdo Health at its sole discretion. Codes may not be combined. Offer codes cannot be redeemed for cash, have no monetary value on return, and may carry expiration dates.

17. LIMITATION OF LIABILITY

This section limits our liability. It does not affect your statutory consumer rights or any liability that cannot be limited under UK law.

17.1 No Limitation For

Nothing in these Terms limits or excludes our liability for:

• Death or personal injury caused by our negligence.

• Fraud or fraudulent misrepresentation.

• Breach of your statutory rights under the Consumer Rights Act 2015.

• Any other liability that cannot be excluded or limited under applicable UK law.

17.2 What We Are Not Liable For

Subject to Section 17.1, we are not liable for:

• Any harm arising from your reliance on DNA results, epigenetic scores, biological age assessments, or AI coaching for medical, clinical, or safety-critical decisions.

• Inaccurate results caused by failure to follow sample collection instructions.

• Loss of profits, revenue, or business; loss of data; indirect or consequential losses.

• Delays in test result delivery caused by laboratory capacity, sample quality issues, or circumstances beyond our reasonable control.

17.3 Aggregate Liability Cap

Subject to Section 17.1, our total aggregate liability to you in any 12-month period shall not exceed the greater of: (a) the total fees you paid to us in the 12 months preceding the claim; or (b) £100.

17.4 Force Majeure

We are not liable for failure or delay caused by circumstances beyond our reasonable control, including laboratory partner delays, courier failures, force majeure, or third-party service outages.

18. ACCEPTABLE USE

You may use our Services solely for lawful, personal, non-commercial wellness purposes in accordance with these Terms. You must not:

• Provide a saliva sample that is not your own, or misrepresent whose sample you are submitting.

• Use the Services to make clinical, diagnostic, or treatment decisions without independent medical advice.

• Violate any applicable law or regulation.

• Attempt to gain unauthorised access to our systems or other users' accounts.

• Reverse engineer, decompile, or disassemble any part of the Services, including our AI models or genetic algorithms.

• Resell, sublicense, or commercially exploit the Services without our prior written consent.

• Use automated tools to scrape or extract data from the Services.

• Introduce viruses or other harmful code.

• Market or sell data derived from the Services.

19. SUSPENSION AND TERMINATION

19.1 Termination by You

You may close your account at any time through account settings or by contacting info@muhdo.com. Any in-progress test kit orders will be fulfilled. Your subscription continues until the end of the current billing period unless you are entitled to a refund under Section 15.

19.2 Termination by Us

We may suspend or terminate your access if you materially breach these Terms (with 14 days to remedy if capable of remedy); we reasonably suspect fraud or illegal activity; or we are required to do so by law. If we discontinue the Services entirely, we will give at least 30 days' notice and a pro-rata refund of prepaid fees.

19.3 Effect of Termination

On termination, your licence to use the Services ends immediately. We retain your data per our Privacy Policy. Your UK GDPR rights regarding data deletion are unaffected. Upon account closure, you may request permanent deletion of your personal data (including all genetic and epigenetic results) within 30 days per our Privacy Policy. Contact info@muhdo.com to initiate deletion. Apple App Store and Google Play Store users may also use native store account deletion APIs where available.

20. GOVERNING LAW AND DISPUTE RESOLUTION

20.1 Governing Law

These Terms are governed by the law of England and Wales. If you are accessing the Services from outside the UK, you retain the benefit of any mandatory consumer protection provisions applicable in your country of residence under applicable local law.

20.2 Jurisdiction

The courts of England and Wales have exclusive jurisdiction to settle any dispute, subject to Section 20.4.

20.3 Alternative Dispute Resolution

If you have a complaint, contact us first at info@muhdo.com. We acknowledge within 5 working days and aim to resolve within 30 days. If we cannot resolve it, you may refer the dispute to:

Centre for Effective Dispute Resolution (CEDR)

100 St Paul's Churchyard, London, EC4M 8BU

Tel: 020 7536 6000 | cedr.com/consumer

CEDR is an approved ADR body under the Alternative Dispute Resolution for Consumer Disputes Regulations 2015. We agree to engage with CEDR's consumer ADR process. Use of CEDR is voluntary for you and does not affect your right to bring court proceedings.

20.4 Consumer Statutory Rights

Nothing in these Terms affects your right as a consumer to bring a claim in the courts of England and Wales, Scotland, or Northern Ireland in accordance with your statutory rights.

21. CHANGES TO THESE TERMS

Where a change is material, we will give you at least 30 days' written notice by email or in-app notification, explain what is changing and why, and give you the option to cancel without penalty. Non-material changes may be made without notice, though we will update the "Last Updated" date. Continued use after the effective date of a change constitutes acceptance.

22. YOUR STATUTORY CONSUMER RIGHTS

These Terms do not limit or exclude your statutory rights:

• Services must be provided with reasonable care and skill (Consumer Rights Act 2015, s.49).

• Physical goods (test kits) must be of satisfactory quality, fit for purpose, and as described (Consumer Rights Act 2015, ss.9–11).

• You have a 14-day right to cancel distance contracts (Consumer Contracts Regulations 2013).

• Consumer protection from unfair trading practices applies (DMCCA 2024, Part 4, Chapter 1 — in force 6 April 2025). Drip pricing prohibitions are in force: the total price at checkout reflects all mandatory fees.

• DMCCA 2024 enhanced subscription contract rules (renewal reminders, enhanced cancellation rights): expected Autumn 2026 commencement. We will update these Terms when confirmed.

For more information about your consumer rights: citizensadvice.org.uk | 0808 223 1133

23. DATA RETENTION

Muhdo Health retains your personal data, including Genetic Information and Self-Reported Information, for as long as your account is active or as necessary to provide the Services. Following account closure, personal data will be deleted or anonymised in accordance with our Privacy Policy and applicable law, including UK GDPR. Anonymised, aggregated data may be retained indefinitely for research purposes where it can no longer be linked to any individual. Physical saliva samples and extracted DNA are retained for up to 3 months following completion of sequencing, after which they are destroyed. Transaction and payment records are retained for 7 years for tax and legal compliance purposes. For full retention periods by data category, please refer to our Privacy Policy or contact us at info@muhdo.com.

24. INDEMNIFICATION

You agree to defend, indemnify, and hold harmless Muhdo Health Ltd, its affiliates, officers, directors, employees, contractors, and suppliers from any claims, liabilities, damages, costs, or fees (including reasonable legal fees) arising from your violation of these Terms or your use of the Services.

25. GENERAL PROVISIONS

Entire Agreement. These Terms, the Privacy Policy, and any specific product or subscription terms constitute the entire agreement between you and Muhdo Health relating to the Services, and supersede all prior and contemporaneous understandings, agreements, representations, and warranties.

Severability. If any provision is unenforceable, it will be modified to the minimum extent necessary, or severed if modification is not possible. Remaining provisions continue in full force.

No Waiver. Our failure to enforce any provision does not constitute a waiver. Any waiver must be in writing.

Assignment. We may assign our rights to a successor in connection with a merger or acquisition, provided the successor assumes our obligations. You may not assign your rights without our prior written consent.

Notices. All legal notices to us should be sent to: Muhdo Health Ltd, Columba House, Adastral Park, Martlesham Heath, Ipswich, IP5 3RE, UK or info@muhdo.com. We send notices to your registered account email address.

Third Party Rights. No third party has any right to enforce these Terms under the Contracts (Rights of Third Parties) Act 1999, except where expressly stated.

26. CONTACT AND COMPLAINTS

For feedback, support, or enquiries:

• Email: info@muhdo.com

• Phone: +44 (0) 1473 232 428

• Address: Muhdo Health Ltd, Columba House, Adastral Park, Martlesham Heath, Ipswich, IP5 3RE, UK

Complaints Procedure:

• Service or product complaints: info@muhdo.com — subject "Service Complaint".

• Data protection complaints: info@muhdo.com — subject "Data Protection Complaint".

• We acknowledge within 5 working days and aim to respond fully within 30 days.

• Unresolved complaints: refer to CEDR — see Section 20.3.

Company Registration Number: 10673236 | ICO Registration Reference: ZA482119

— END OF TERMS OF SERVICE —

Refund policy

REFUND POLICY
Muhdo Health Ltd | Company Registration No. 10673236
Last updated: 13 May 2026

1. DNA AND EPIGENETIC TESTING — REFUND POLICY
If you decide you no longer want a DNA or epigenetic Product or our Genomic Sequencing following your purchase, please contact us immediately. If the purchase includes a Muhdo Kit, you may request a refund for the Muhdo Kit and any bundled DNA or epigenetic Product within 30 days of purchase, provided the Muhdo Kit has not been used or registered. This refund will deduct shipping and handling fees.

You can request a refund by calling Customer Care at +44 (0) 1473 232 428 or writing to info@muhdo.com and providing your order confirmation number. Once a Muhdo Kit has been registered, the purchase of the Muhdo Kit and any bundled DNA or epigenetic Product can no longer be refunded. However, you may close your Muhdo Account as described in Section 20 of our Terms of Service.

Please note that Muhdo DNA and epigenetic testing products are wellness and lifestyle research tools. Results provided are not medical diagnoses and do not constitute medical advice. Refund eligibility is not affected by dissatisfaction with, or disagreement about, any wellness result, genetic predisposition score, or biological age estimate provided by the Services, as such outputs are probabilistic wellness indicators and not guaranteed outcomes. Muhdo strongly recommends consulting a qualified healthcare professional regarding any health concerns arising from your results.

2. REPLACEMENT POLICY
We must receive your saliva sample prior to the expiry date of your Muhdo Kit (12 months from the date of purchase) to assure the quality and accuracy of your Genetic Information. Muhdo will not accept or process a Muhdo Kit received after its expiry date. If your kit has expired, is lost, or is damaged, please contact us via phone or email for help with replacing your kit. Depending on the circumstances, a fee may apply.

3. VITAMINS AND SUPPLEMENTS — REFUND AND EXCHANGE
We offer a 30-day exchange guarantee on vitamin and supplement products.

• Full refunds are available only on products returned in their original containers with unbroken tamper-evident seals.
• Refunds and exchanges are available only on products returned within 30 days from receipt of order.
• If you purchase products as part of a bundle, promotional offer, or via a discount code, and you have used a small amount of one product with all other items retaining intact seals, you will be refunded according to the discount applied. The refund for the used product will be given on a proportionate basis reflecting how much was used.
• No refunds will be given on products that are out of date.
• No further exchanges will be given on items already exchanged or returned.

This refund policy does not affect your statutory rights.

4. WHO PAYS FOR THE RETURN?
If you are returning a product because of an error by our team, all return costs will be covered by us. If you are returning a product for any other reason, we advise that you use a tracked service. We cannot be held responsible for lost returns resulting from your choice of carrier. Please retain your proof of return receipt until you have received confirmation from us that the return has been processed and you have been refunded.

5. HOW TO RETURN AN ITEM
Please email our customer services team at info@muhdohub.com with your Order ID and details of the product(s) and reason(s) for return. We will provide you with a returns number and the address to which you should return your parcel. Please allow 28 working days for your refund or exchange to be processed.

6. CONTACT
• Customer Care: +44 (0) 1473 232 428
• Email: info@muhdohub.com
• Muhdo Health Ltd, Columba House, Adastral Park, Martlesham Heath, Ipswich, IP5 3RE, UK
• Company Registration Number: 10673236

REFUND POLICY
Muhdo Health Ltd | Company Registration No. 10673236
Last updated: 13 May 2026

3. VITAMINS AND SUPPLEMENTS — REFUND AND EXCHANGE
We offer a 30-day exchange guarantee on vitamin and supplement products.

This refund policy does not affect your statutory rights.

Questions about your data?

Email info@muhdo.com and our team will help.