Privacy Policy

The data controller responsible for your personal data is:

H.L.M. HEALTH LABS MED LTD
Registration Number: ΗΕ 461626
Address: Vasilis Frederikis 9A, 1066 Nicosia, Cyprus
Email: [email protected]

Account Information:

• Name, email address, phone number
• Company name and tax identification (for businesses)
• Payment information (bank account, PayPal)
• Login credentials (password stored encrypted)

Platform Usage Data:

• Traffic and conversion statistics
• IP addresses and device information
• Browser type and preferences
• Cookies and similar technologies

Communication Data:

• Support inquiries and correspondence
• Marketing preferences

We process your personal data for the following purposes:

• Contract Performance: Managing your account, processing payments, providing platform access
• Legitimate Interest: Fraud prevention, platform security, analytics, service improvement
• Legal Compliance: Tax reporting, regulatory requirements
• Consent: Marketing communications (where applicable)

We may share your data with:

• Payment Processors: To process commission payments
• Advertisers: Aggregated, non-identifying performance data
• Service Providers: Hosting, analytics, email services (under data processing agreements)
• Legal Authorities: When required by law or to protect our rights

We do not sell your personal data to third parties.

Your data may be transferred to countries outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions where applicable

We retain your personal data for:

• Active accounts: Duration of account activity plus 3 years
• Financial records: 7 years (legal requirement)
• Marketing data: Until consent withdrawal
• Analytics data: 26 months (anonymized thereafter)

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Object: Object to processing based on legitimate interest
• Withdraw Consent: Where processing is based on consent

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

We use cookies and similar technologies for:

• Essential: Platform functionality, authentication
• Analytics: Understanding platform usage
• Tracking: Affiliate link attribution

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.

We implement appropriate technical and organizational measures to protect your data, including:

• SSL/TLS encryption for data transmission
• Encrypted password storage (bcrypt)
• Regular security audits
• Access controls and authentication
• Secure data center hosting

We may update this Privacy Policy periodically. We will notify you of significant changes via email or platform notification. The "Last updated" date at the top indicates the latest revision.

For privacy-related inquiries or to exercise your rights:

Email: [email protected]

You also have the right to lodge a complaint with a supervisory authority, particularly in the EU Member State of your residence or where the alleged infringement occurred.