Privacy Policy
Last updated: October 6, 2026
We ask for your explicit consent to use the health and sex-life information you provide for our quiz or personalized marketing. Other processing, including product safety reporting, requires the applicable legal basis described below. We may share limited health information with analytics, email and advertising providers only with your separate consent, as described in this Policy. For health or sex-life information, this consent must be explicit.
You can withdraw consent, unsubscribe from marketing and exercise your privacy rights by emailing [email protected]. To opt out of targeted advertising or the sale or sharing of personal information, use our cookie and privacy settings.
Contents
- 1. SCOPE OF THIS POLICY
- 2. CONTROLLER AND PRIVACY CONTACTS
- 3. INFORMATION WE COLLECT AND WHY
- 4. WHO WE SHARE INFORMATION WITH AND INTERNATIONAL TRANSFERS
- 5. YOUR PRIVACY RIGHTS
- 6. U.S. PRIVACY RIGHTS
- 7. REQUESTS AND APPEALS
- 8. AUTOMATED RECOMMENDATIONS
- 9. COOKIES AND SIMILAR TECHNOLOGIES
- 10. SECURITY AND CHILDREN’S INFORMATION
- 11. POLICY UPDATES
- 12. CONTACT DETAILS
1. SCOPE OF THIS POLICY
1.1. This Privacy Policy (the “Policy”) explains how Harmonia Sciences, UAB (“Harmonia”, “we”, “us”) collects, uses, shares and stores your personal information when you visit drinkharmonia.com, take our quiz, buy our Products, contact us or receive our messages. It also explains your privacy rights and how to exercise them.
1.2. We are established in Lithuania. The EU General Data Protection Regulation 2016/679 (“GDPR”) applies to personal information processed in connection with our Lithuanian establishment, including information about customers in the United States. Other privacy laws also apply where their requirements are met.
2. CONTROLLER AND PRIVACY CONTACTS
2.1. Harmonia Sciences, UAB is the data controller for the personal information we process. This means we decide why and how we use that information and are responsible for that processing.
Detail | Information |
|---|---|
Data Controller | Harmonia Sciences, UAB |
Company code | 306831905 |
Address | Perkūnkiemio g. 13-91, LT-12114 Vilnius, Lithuania |
Privacy contact |
3. INFORMATION WE COLLECT AND WHY
This section explains what personal information we use for each purpose, our legal basis, whether you need to provide it and how long we keep it.
Where we rely on consent, you may withdraw it at any time by contacting [email protected]. Withdrawal does not affect the lawfulness of processing carried out before you withdrew consent.
3.1. To provide your quiz results and product recommendations
When | When you take our quiz. |
Information we use | Your email address and the answers you provide, including your age, gender, height, current and target weight, body mass index and preferred measurement units. Depending on your answers, we may also collect information about health conditions, medications, pregnancy, post-partum recovery, menopause, menstruation, symptoms, sleep, stress, smoking, alcohol use, allergies and libido. We also create quiz results and product recommendations based on those answers. |
Legal basis | Your consent under Article 6(1)(a) GDPR. For information about your health or sex life, we also rely on your explicit consent under Article 9(2)(a) GDPR. |
How we obtain the information | Through the answers and contact details submitted in our quiz. We generate quiz results and product recommendations from those answers. |
Is it required? | No. The quiz is optional, and you can buy Products without completing it. |
How long do you keep it? | Up to 12 months after your last quiz activity. If you have an active subscription and your consent covers continued use of your quiz information to support it, we may keep that information until your subscription ends. We stop consent-based processing earlier if you withdraw consent. Limited records needed to demonstrate consent or deal with legal claims may be kept separately, as explained in Section 3.11. |
3.2. To sell our Products and manage your orders and subscription
When | When you place an order or have a subscription. |
Information we use | Your name, email address, shipping address and phone number where needed; the Products you order; your subscription plan; payment and renewal dates; and records of cancellations, refunds and returns. We link quiz results to your order or subscription only if your consent specifically covers that use. |
Legal basis | Performance of our contract with you under Article 6(1)(b) GDPR. Linking and using quiz results relies on your consent under Article 6(1)(a) and, for health or sex-life information, your explicit consent under Article 9(2)(a) GDPR. If order information itself reveals health information covered by Article 9 GDPR, we also require explicit consent for that processing, unless another applicable exception under Article 9 permits it. |
How we obtain the information | Through checkout, account details and subscription requests, and from records generated when we process orders, renewals, cancellations, refunds and returns. Where the relevant consent has been given, we also use results from our quiz. |
Is it required? | We need the order and payment details necessary to complete your purchase. Completing the quiz and agreeing to marketing are optional. |
How long do you keep it? | While needed to manage your account, orders or subscription, and for 3 years after your last order or subscription payment. Quiz information follows Section 3.1. Payment, accounting and legal-claim records follow Sections 3.3, 3.9 and 3.10. |
3.3. To process your payments
When | When you pay for an order or a subscription renewal. |
Information we use | Cardholder name; the first six and last four digits of your card number; expiry date; card network and type; issuing bank and country; payment method, such as card, PayPal or Google Pay; payment token; payment provider customer ID; PayPal and billing email addresses; and transaction, chargeback and payment-dispute records. |
Card security | We do not receive or store your full card number or security code. You enter these directly into our payment providers’ secure payment fields. |
Legal basis | Performance of our contract with you under Article 6(1)(b) GDPR. For preventing payment fraud and handling payment disputes, our legitimate interests under Article 6(1)(f) GDPR. |
How we obtain the information | Through the payment process and from our payment providers, including payment confirmations and records of refunds, chargebacks and disputes. |
Is it required? | Yes. We need the relevant payment information to process your payment. |
How long do you keep it? | Payment tokens are kept while needed for an active subscription or another payment you authorize and deleted when no longer needed. Refund, chargeback and dispute records are kept for the period needed to handle those matters and any related claims. Accounting records follow Section 3.9. |
3.4. To deliver your Products
When | When we prepare, ship and track your order. |
Information we use | Your name, shipping address, email address and phone number where needed; order contents; and tracking and delivery information. We give fulfilment and delivery partners only the information they need for their role. |
Legal basis | Performance of our contract with you under Article 6(1)(b) GDPR. If order contents reveal health information covered by Article 9 GDPR, the additional legal basis described in Section 3.2 applies. |
How we obtain the information | Through delivery details provided at checkout or updated later, and from tracking and delivery updates supplied by our fulfilment and delivery partners. |
Is it required? | Yes. We need the relevant delivery information to fulfil your order. |
How long do you keep it? | The same period as order records, as explained in Section 3.2. |
3.5. To respond to your requests, complaints and adverse reaction reports
When | When you contact us with a question, request, complaint or report of an adverse reaction. |
Information we use | Your name, contact details, order details, messages, attachments and our replies. This may include health information you provide in connection with your request or report. |
Legal basis | For order-related support, performance of our contract under Article 6(1)(b) GDPR. For other enquiries, our legitimate interest in responding under Article 6(1)(f) GDPR. For optional health information, your consent under Article 6(1)(a) and explicit consent under Article 9(2)(a) GDPR. For adverse reaction reports, our legitimate interest in monitoring Product safety and meeting applicable safety requirements under Article 6(1)(f) GDPR, together with your explicit consent under Article 9(2)(a) for health information. Health information necessary for legal claims may instead be processed under Article 9(2)(f) GDPR. |
How we obtain the information | Through messages, forms, attachments and other communications submitted to our customer support, including follow-up information. We also create records of our replies and how we handle each matter. |
Is it required? | You do not have to contact us or provide optional information. However, we may need specific details to resolve your request or assess an adverse reaction. Please provide only information relevant to the matter. |
How long do you keep it? | Support records are kept for 1 year after the matter is closed. Optional health information is deleted sooner when no longer needed or when you withdraw consent, unless another lawful basis permits continued processing. Adverse reaction records subject to U.S. dietary supplement recordkeeping requirements are kept for 6 years. Other safety records are kept for the applicable statutory period. |
3.6. To send you news and offers (direct marketing)
When | When you agree to receive marketing, or when we may lawfully email you about our own similar Products as an existing customer. |
Information we use | Your name, email address, phone number and order history. We use quiz answers or health-based recommendations to personalize marketing only with your separate explicit consent for that purpose. |
Legal basis | Your consent under Article 6(1)(a) GDPR and Article 81(1) of the Lithuanian Law on Electronic Communications. Where the existing-customer exception applies to email marketing, our legitimate interest in promoting our own similar Products under Article 6(1)(f) GDPR and Article 81(2) of that Law. In that case, we provide an opt-out when collecting your email address and in every marketing email. Using health or sex-life information to personalize marketing also requires explicit consent under Article 9(2)(a) GDPR. For automated marketing texts to U.S. numbers, we obtain prior express written consent where required. |
How we obtain the information | Through marketing sign-up forms and preferences, purchase records and interactions with our marketing messages. Where separate explicit consent has been given, we also use relevant quiz answers and recommendations. |
Is it required? | No. Marketing consent is not a condition of purchase. You can unsubscribe or withdraw consent at any time. |
How long do you keep it? | Until you unsubscribe or withdraw the relevant consent, and no longer than 3 years after your last marketing interaction. Health information is subject to Section 3.1 and any shorter applicable period. We may retain a minimal opt-out record to avoid contacting you again, and limited evidence of consent where lawfully necessary. |
3.7. To run, secure and improve our website and measure our advertising
When | When you visit or interact with our Website. |
Information we use | Your IP address and approximate location, such as country, region, city or ZIP code; internet provider; device, operating system, browser and screen size; time zone and language; pages viewed, clicks and other interactions; cookie, advertising and click identifiers; and session recordings, subject to applicable consent and privacy safeguards. For advertising measurement and matching, we may also use hashed contact details, including email address, phone number, name and address, and gender. |
Sensitive information | We may share quiz answers, recommendations or events that reveal health or sex-life information with analytics providers, and limited health-related information with advertising partners, only where permitted by applicable law and the recipient’s terms, and with your separate explicit consent and any additional authorization required by law. We do not disclose this information to providers whose terms prohibit receiving or using it. Hashing information does not make it anonymous. |
Legal basis | Your consent under Article 6(1)(a) GDPR and applicable cookie rules for non-essential cookies, analytics, session recordings and advertising technologies and, for health or sex-life information, your separate explicit consent under Article 9(2)(a) GDPR. For essential Website operation and security, our legitimate interests under Article 6(1)(f) GDPR, limited to processing that does not require consent. |
How we obtain the information | Through interactions with our Website, cookies and similar technologies, information transmitted by the browser or device, and reports from our analytics and advertising partners. Contact details used for advertising matching come from information previously provided through our Website. |
Is it required? | Non-essential technologies are optional. Strictly necessary technologies are required for the relevant Website functions to work. |
How long do you keep it? | The periods shown in our cookie settings, and no longer than 14 months for the information used for this purpose. |
3.8. To prevent fraud, abuse and unauthorized resale
When | When we verify an order or investigate suspected fraud, abuse, chargebacks or unauthorized resale. |
Information we use | Identity and contact details needed to verify an order; order and payment history; IP address and device information; Product lot and batch identifiers; and relevant information from test purchases and marketplaces. We do not use quiz answers or health profiles for routine fraud or resale checks. |
Legal basis | Our legitimate interests in preventing fraud and protecting our business, customers and brand under Article 6(1)(f) GDPR. If health information is necessary for a specific legal claim, Article 9(2)(f) GDPR also applies. |
How we obtain the information | From order and payment records, information submitted during order verification, Website security records, Product lot and batch records, payment providers, marketplace listings and test purchases. |
Is it required? | You do not have to provide additional verification information. However, we may refuse an order if we cannot reasonably verify it. |
How long do you keep it? | 3 years after your last order. Records needed for a specific investigation or legal claim may be kept longer, until the matter is resolved and the applicable claim period ends. |
3.9. To meet our accounting and tax obligations
When | When you buy from us or make a payment that we must record for accounting or tax purposes. |
Information we use | Your name, address and email address; invoices; payment details and amounts; and other information required for accounting or tax records. |
Legal basis | Compliance with EU or Lithuanian legal obligations under Article 6(1)(c) GDPR. Where processing is needed solely for U.S. tax obligations and no EU or Lithuanian legal obligation applies, our legitimate interest in lawful tax compliance under Article 6(1)(f) GDPR. |
How we obtain the information | From details provided when placing an order, and from invoices, payment confirmations and other transaction records. |
Is it required? | Yes. We must collect and retain the information required by applicable accounting and tax rules. |
How long do you keep it? | Accounting records are kept for 10 years where the applicable rules require this, calculated from the starting date specified in those rules. Other tax records are kept for the statutory period applicable to the relevant entity and record. |
3.10. To defend our rights and interests
When | When we establish, exercise or defend a legal claim, take part in proceedings, or respond to a request from an authority. |
Information we use | Information described above that is relevant and necessary for the matter, together with case documents and correspondence. |
Legal basis | Our legitimate interest in establishing, exercising or defending legal claims under Article 6(1)(f) GDPR. For health or sex-life information necessary for those claims, Article 9(2)(f) GDPR also applies. Disclosures required by EU or Member State law rely on Article 6(1)(c) GDPR and, where relevant, an applicable exception under Article 9. Requests from foreign authorities are assessed under the GDPR, including its international transfer requirements. |
How we obtain the information | From relevant records described in this Section, correspondence and case documents, and information supplied by courts, authorities or other parties involved in the matter. |
Is it required? | You are required to provide information only where the law requires it. |
How long do you keep it? | For as long as necessary to handle the matter, including proceedings and any applicable appeal or related claim period. |
3.11. When the applicable retention period ends, we delete or irreversibly anonymize the information and require our processors to do the same. We may keep limited records longer where necessary to meet a legal obligation, demonstrate consent or establish, exercise or defend a legal claim. We retain only the information needed for that purpose and only where an appropriate legal basis applies. For health or sex-life information, this also requires an applicable exception under Article 9 GDPR. Backup copies are restricted from ordinary use and deleted according to the applicable backup schedule, subject to legal retention requirements and any shorter statutory deletion deadline.
4. WHO WE SHARE INFORMATION WITH AND INTERNATIONAL TRANSFERS
4.1. We share personal information with the recipients listed below only where needed for the purposes described in this Policy. Service providers acting as our processors must process information under contract and follow our instructions. Recipients acting as independent controllers are responsible for their own processing. We share health or sex-life information only where necessary for a specific purpose and permitted by the applicable legal basis, including an exception under Article 9 GDPR where required. Payment and delivery partners may receive order details that qualify as consumer health data under applicable U.S. laws. They do not receive your quiz profile unless this is necessary for a separately explained purpose and the required consent or other legal authorization is in place.
Recipient | Purpose | Location and safeguards |
|---|---|---|
Cloud hosting and database providers | To operate our website and store information | United States; EU-U.S. Data Privacy Framework or standard contractual clauses |
Fulfilment, logistics and delivery partners | To prepare, ship and deliver orders. They may receive limited order details that qualify as consumer health data. | United States; standard contractual clauses |
Email, text message and customer relationship management providers | To send order, subscription and other service messages, and permitted marketing messages. Using health information to personalize marketing requires separate explicit consent. | United States; Data Privacy Framework or standard contractual clauses |
Customer support software providers | To receive, manage and respond to enquiries, complaints and adverse reaction reports. | United States; Data Privacy Framework or standard contractual clauses |
Advertising and analytics partners | To analyze Website use and measure or display advertising, subject to your privacy choices. Health or sex-life information, including quiz answers, recommendations or related events, may be disclosed only where permitted by applicable law and the recipient’s terms, and with your separate explicit consent and any additional authorization required by law. | United States and other countries; Data Privacy Framework or standard contractual clauses; only with your consent where required |
Security, address-validation, error-monitoring and consent-management providers | To protect and maintain the Website, validate delivery details and record privacy choices. | United States and EU; Data Privacy Framework or standard contractual clauses |
Accountants, auditors, lawyers and other professional advisers | To meet accounting and legal obligations, obtain advice and establish, exercise or defend legal claims. Health information is shared only where necessary and legally permitted. | EU and United States |
Payment providers and marketplaces | To investigate suspected fraud, chargebacks, abuse or unauthorized resale. | Countries where the relevant provider or marketplace operates |
Courts, law enforcement and other authorities | To comply with legally binding obligations or respond to requests where disclosure is lawful. We disclose only the information necessary for the matter. | Country of the relevant court or authority |
Potential buyers or successors of our business | To assess or complete a merger, acquisition, reorganization or sale of our business or assets. Disclosures are subject to confidentiality and limited to necessary information. Health or sex-life information is disclosed only where an applicable legal basis permits it. | EU and United States |
4.2. Some recipients process personal information outside the European Economic Area (“EEA”), which consists of the EU, Iceland, Liechtenstein and Norway. For these transfers, we rely on:
(a) an applicable adequacy decision: a European Commission decision recognising an adequate level of data protection in the destination country or for the relevant recipients.
(b) appropriate safeguards: usually the European Commission’s standard contractual clauses, together with additional protective measures where necessary.
4.3. For transfers to the United States, we rely on the EU-U.S. Data Privacy Framework only where the recipient has an active certification that covers the information and processing concerned. Otherwise, we use another applicable transfer mechanism. In limited circumstances, a transfer may rely on a specific exception permitted by the GDPR. Requests from foreign courts or authorities do not, by themselves, authorize disclosure. We assess both the legal basis for disclosure and the applicable international transfer requirements before providing information. These requirements apply to all relevant transfers, including transfers to affiliates, advisers and potential buyers.
4.4. You can contact [email protected] for details of the transfer mechanism used for a particular recipient or a copy of the relevant safeguards. We may redact confidential information where necessary.
5. YOUR PRIVACY RIGHTS
5.1. You have the following rights under the GDPR, subject to the conditions and exceptions set out in the law:
Your right | What it means |
|---|---|
Access your information (access) | You can ask whether we process your personal information, receive a copy and obtain information about how we use it. |
Correct your information (rectification) | You can ask us to correct inaccurate information or complete information that is missing. |
Delete your information (erasure) | You can ask us to delete your information where the legal conditions are met, for example when it is no longer needed or you withdraw consent and there is no other lawful ground for keeping it. Exceptions may apply, including where retention is necessary to meet a legal obligation or handle legal claims. |
Limit how we use your information (restriction) | You can ask us to restrict processing in certain circumstances, for example while we check information whose accuracy you dispute or assess your objection to processing. |
Receive or transfer your information (portability) | Where processing is automated and based on consent or a contract, you can receive the personal information you provided in a structured, commonly used, machine-readable format. You can also ask us to send it directly to another controller where technically feasible. |
Object to processing (objection) | You can object, for reasons relating to your particular situation, to processing based on our legitimate interests. We must stop unless we demonstrate overriding legitimate grounds or need the information for legal claims. You can object to direct marketing at any time, including related profiling, and we will stop processing for those purposes. |
Withdraw your consent | You can withdraw consent at any time, as easily as you gave it. We will stop the processing covered by that consent. Withdrawal does not affect processing lawfully carried out before withdrawal. We may retain or use information for a separate purpose only where an independent lawful basis permits it. |
Make a complaint | You can complain to the Lithuanian State Data Protection Inspectorate at vdai.lrv.lt or another competent data protection authority, particularly in the country where you normally live, work or believe an infringement occurred. |
6. U.S. PRIVACY RIGHTS
6.1. The table below summarizes the personal information we collect and our marketing and analytics disclosures, including, where applicable, during the preceding 12 months. Section 3 explains the sources, purposes and retention periods. The section on recipients identifies other service providers and recipients. Disclosure to a service provider does not automatically constitute a sale or sharing. Hashed information remains personal information where it can be linked to an individual. Some advertising disclosures may constitute a “sale” or “sharing” under applicable state law, even without a cash payment.
Category | Examples of information collected | Marketing and analytics disclosures |
|---|---|---|
Identifiers | Name, email address, phone number, postal address, IP address and online identifiers. | Contact details are provided to email and CRM providers. Advertising and analytics partners receive relevant identifiers, including hashed contact details, IP addresses and online identifiers. |
Customer records and commercial information | Orders, subscriptions, refunds and payment details. We do not receive or store full card numbers. | Purchase and conversion events are sent to advertising and analytics partners. |
Personal characteristics | Age and gender | Age and gender are provided to email and CRM providers; gender may also be included in advertising matching data. |
Sensitive personal information | Health and sex-life information, including quiz answers, health conditions, medications, reproductive information and libido. | Weight, target weight, age and gender may be provided to email and CRM providers to personalize emails, and quiz answers or related events may be provided to analytics and advertising providers, in each case only with your separate consent. Health-related disclosures also require the explicit consent or authorization required by applicable law. |
Internet activity and approximate location | Pages viewed, clicks, quiz events, session recordings, device information and location derived from an IP address. | Relevant browsing, event, device and approximate location information is provided to advertising and analytics partners; quiz events that reveal health information are provided only with your separate consent. |
Communications | Customer support messages and related correspondence. | Provided to customer support providers; not identified as an advertising disclosure. |
Inferences | Results and recommendations derived from quiz answers. | Used to personalize results and recommendations. Any marketing use is subject to the requirements described below. |
6.2. Depending on your state of residence and the law applicable to our business, you may have the right to:
(a) know whether we process your personal information, access it and receive a portable copy;
(b) correct inaccurate information;
(c) delete personal information, subject to legal exceptions;
(d) opt out of the sale of personal information, sharing for cross-context behavioral advertising and processing for targeted advertising;
(e) limit certain uses and disclosures of sensitive personal information under California law;
(f) appeal a decision declining your privacy request.
We will not discriminate against you for exercising your privacy rights.
6.3. Email [email protected] to exercise your rights or submit an appeal where available. An authorized agent may submit a request on your behalf. We may request information reasonably necessary to verify an access, correction or deletion request, or an agent’s authority.
6.4. You can opt out of sale, sharing for cross-context behavioral advertising or targeted advertising through our cookie and privacy settings or by emailing [email protected]. We honor applicable opt-out preference signals, including Global Privacy Control (GPC), without fees, additional steps or a change in service. You can enable GPC in a compatible browser or extension. The signal applies to that browser or device and, where we can identify you, your associated account and relevant records. You do not need an account or identity verification to opt out. Where California law gives you the right to limit the use or disclosure of sensitive personal information, you can use the same settings or email address.
6.5. Using health or sex-life information for marketing, or disclosing it to analytics or advertising providers, requires separate explicit consent and any additional authorization required by applicable law. You may withdraw the relevant consent or authorization at any time. We do not knowingly sell or share personal information of consumers under 16.
6.6. Where U.S. state consumer health data laws apply to us, we collect consumer health data only with your consent, share it with third parties other than our service providers only with your separate consent, and do not sell it for money; any disclosure that could be considered a sale under state law is made only with the consent or authorization that law requires. You may confirm whether we hold your consumer health data, access it, have it deleted and withdraw your consent as described in Section 7.
7. REQUESTS AND APPEALS
7.1. Submitting a request. To exercise your privacy rights, email [email protected] or write to the address in Section 12. Please describe your request so that we can help you. An authorized agent may submit a request on your behalf, subject to applicable legal requirements. We ask for identity verification only where necessary. Requests to opt out of sale, sharing or targeted advertising, or to limit the use or disclosure of sensitive personal information, do not require identity verification, although we may need information to identify the records or device to which your request applies.
7.2. Response times. We respond to GDPR requests without undue delay and within one month of receiving them. Where the law permits, we may extend this period by up to two further months. If an extension is needed, we explain the reason within the first month. For U.S. access, correction and deletion requests, we respond within the applicable legal deadline, generally 45 calendar days. If a permitted extension is needed, we notify you and explain why. Where California law applies, we acknowledge access, correction and deletion requests within 10 business days. We implement requests to opt out of sale or sharing, or limit the use or disclosure of sensitive personal information, as soon as reasonably possible and no later than 15 business days after receiving them.
7.3. Appeals and complaints. If we decline your request, we explain the reason and any available appeal rights. Where you have a right to appeal, you can reply to our decision or email [email protected]. We respond to appeals within the applicable legal deadline and explain how to contact the relevant authority if you remain dissatisfied. You do not need to complete our appeal process before exercising a statutory right to complain to an authority.
8. AUTOMATED RECOMMENDATIONS
8.1. Our quiz uses your answers to automatically suggest Products. You decide whether to follow those recommendations or make a purchase. The quiz recommendations do not have legal or similarly significant effects on you.
9. COOKIES AND SIMILAR TECHNOLOGIES
9.1. We use cookies, pixels and similar technologies to operate the Website, remember your choices, analyze Website use and support advertising. Where consent is required, non-essential analytics, session recording and advertising technologies are used only after you consent. You can accept or reject non-essential technologies and change your choices at any time through the cookie settings. Those settings explain the purposes, providers and retention periods. Advertising also follows your cookie and privacy settings and applicable opt-out preference signals. Using or sharing health or sex-life information for marketing requires separate explicit consent and any additional authorization required by law; cookie consent alone does not cover this.
10. SECURITY AND CHILDREN’S INFORMATION
10.1. Security. We use technical and organizational measures designed to protect personal information, taking account of its sensitivity. These include access controls, encryption in transit and secure payment fields. No system is completely secure. If a personal data breach occurs, we notify affected individuals and the relevant authorities where required by law.
10.2. Children and age requirements. Our Website and Products are intended for adults. To purchase Products, you must be at least 18 years old and legally able to enter into a binding contract with us under applicable law, as set out in our Terms of Sale. We do not knowingly collect personal information from anyone under 18. If you believe that a person under 18 has provided personal information, please contact [email protected]. We will delete that information, except for any limited records we are legally required to retain.
11. POLICY UPDATES
11.1. We may update this Policy from time to time by publishing a revised version on the Website with a new “Last updated” date. We will notify you of material changes where required by applicable law.
12. CONTACT DETAILS
12.1. For privacy questions or requests, please contact:
Harmonia Sciences, UAB
Perkūnkiemio g. 13-91, LT-12114 Vilnius, Lithuania
Email: [email protected]