Privacy Policy

1. Introduction

Welcome to Bioluga ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.

By accessing or using our website, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our website.

2. Information We Collect

2.1 Information You Provide to Us

We may collect information that you voluntarily provide to us when you:

• Register for an account on our website
• Subscribe to our newsletter
• Contact us through our contact forms
• Request product information or samples
• Participate in surveys or promotions
• Apply for professional access (HCP Portal)
• Apply for retail or wholesale partnerships

This information may include:

• Personal identifiers: name, email address, phone number, postal address
• Professional information: license numbers, specialty, institution (for HCP registration)
• Business information: company name, business address (for B2B inquiries)
• Any other information you choose to provide

2.2 Information We Collect Automatically

When you visit our website, we may automatically collect certain information, including:

• Device information: IP address, browser type, operating system, device identifiers
• Usage data: pages visited, time spent on pages, click patterns, referring URLs
• Location data: general geographic location based on IP address
• Cookies and similar tracking technologies (see Section 6 below)

3. How We Use Your Information

We may use your information for the following purposes:

• To provide, operate, and maintain our website and services
• To process your requests, inquiries, and registrations
• To send you marketing communications (with your consent)
• To send you transactional emails and service updates
• To improve our website, products, and services
• To comply with legal obligations
• To protect the security and integrity of our website
• To detect, prevent, and address fraud or unauthorized access
• To verify professional credentials for HCP Portal access

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal information under the following legal bases:

• Consent: Where you have given us explicit consent to process your data
• Contract: Where processing is necessary for the performance of a contract with you
• Legitimate Interests: Where processing is necessary for our legitimate business interests
• Legal Obligation: Where processing is necessary to comply with legal obligations

5. How We Share Your Information

We may share your information in the following circumstances:

• Service Providers: We may share your information with third-party service providers who assist us in operating our website, processing payments, delivering products, or providing customer support. These providers are contractually obligated to protect your information.
• Business Partners: We may share your information with retail or wholesale partners to fulfill your requests or process orders.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid legal requests from public authorities.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• Protection of Rights: We may disclose your information to protect our rights, property, or safety, or the rights of others.

We do not sell your personal information to third parties for their marketing purposes.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, analyze usage patterns, and deliver personalized content.

Types of cookies we use:

• Essential Cookies: Necessary for the website to function properly
• Analytics Cookies: Help us understand how visitors interact with our website
• Marketing Cookies: Used to deliver personalized advertising

You can manage your cookie preferences through our Cookie Preferences page or through your browser settings.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. We will delete or anonymize your information when it is no longer needed for the purposes for which it was collected.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data in transit and at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Employee training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Restriction: Request restriction of processing
• Portability: Request your data in a portable format
• Objection: Object to processing based on legitimate interests
• Withdrawal of Consent: Withdraw consent at any time

To exercise these rights, please contact us at privacy@bioluga.com.

10. Children's Privacy

Our website is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@bioluga.com.

For products intended for infants and young children, we collect information from parents or guardians, not directly from children.

11. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from your country's laws. We take appropriate measures to ensure that your information is protected in accordance with this Privacy Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. Your California Privacy Rights (CCPA)

If you are a California resident, you have the right to opt out of the sale of your personal information. Bioluga does not sell your personal information to third parties for their marketing purposes. To exercise your rights, please contact us at privacy@bioluga.com.

You also have the right to request:

• The categories and specific pieces of personal information we have collected about you
• The categories of sources from which we collected the information
• The business or commercial purpose for collecting the information
• The categories of third parties with whom we share the information

We will respond to verifiable consumer requests within 45 days.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: