it has a pretty good one:

https://promethease.com/privacy

> After 45 days Promethease deletes your Promethease report.

> At no time is your DNA data shared - or sold - to any external party, period. We also do not sell any products like vitamins or supplements.

[...]

> We do not claim any ownership rights in your genome and it belongs to you only.

Fantastic. For this reason alone, I would endorse them over 23andme “We own your data forever and can do whatever we want with it”.