Privacy Policy

Last updated: 01.10.2025

At Gerontis (“Company”, “we”, “our”, “us”), we value your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and the rights you have under applicable data protection laws, including the EU GDPR and UK GDPR.

1) Information We Collect

  • Identity & Contact Data – name, billing/shipping address, email, phone.
  • Order & Transaction Data – products purchased, order history, payment details (processed securely, we do not store full card data).
  • Technical Data – IP address, browser type/version, OS, device identifiers, cookies.
  • Usage Data – pages viewed, time spent, purchase behavior.
  • Communication Data – messages, support requests, feedback.

2) How We Use Your Data

  • To process, fulfill, and deliver your orders.
  • To communicate about purchases, support, or account issues.
  • To manage payments, refunds, and fraud prevention.
  • To comply with legal/tax obligations.
  • To improve website and customer experience.
  • To send marketing emails/promotions (with consent).
  • To enforce Terms & Conditions and policies.

3) Legal Bases for Processing

  • Contractual necessity (processing orders).
  • Legal obligation (e.g., tax compliance).
  • Legitimate interest (fraud prevention, site security).
  • Consent (e.g., newsletters, cookie tracking).

4) Sharing of Personal Data

We share data only with trusted parties for limited purposes:

  • Shipping/logistics providers (DHL, FedEx).
  • Payment processors (Stripe, PayPal, Apple Pay, Google Pay).
  • IT & hosting providers.
  • Analytics & marketing (Google Analytics, email services).
  • Professional advisors (legal, accounting).
  • Authorities/regulators if legally required.

We never sell or rent your personal data.

5) International Transfers

If data is transferred outside the EEA/UK, we ensure safeguards such as EU Standard Contractual Clauses are in place.

6) Data Retention

  • Order data: kept at least 6 years for tax/accounting.
  • Customer communications: ~2 years.
  • Marketing consents: until withdrawn.

When no longer needed, data is deleted or anonymized securely.

7) Your Rights

  • Access – request a copy of your data.
  • Rectification – correct inaccurate data.
  • Erasure – request deletion (subject to law).
  • Restriction – limit processing in certain cases.
  • Portability – request data transfer.
  • Objection – to processing or marketing.
  • Withdraw consent – at any time where consent applies.

To exercise rights, contact us (see section 11). Proof of ID may be required.

8) Cookies & Tracking Technologies

We use cookies to:

  • Enable functionality (shopping cart, login).
  • Analyze traffic and usage.
  • Personalize experience.
  • Provide targeted ads (with consent).

Manage cookies via your browser. See our Cookie Policy.

9) Security of Your Data

  • Encrypted transmission (SSL/TLS).
  • Secure hosting and access controls.
  • Restricted access to authorized personnel.

No method of storage or transfer is 100% secure, but we take all reasonable measures.

10) Children’s Privacy

The Website is not for children under 18. We do not knowingly collect minors’ data. If a minor provided data, contact us for deletion.

11) Contact Us

For privacy concerns, contact our Data Protection Officer:

Gerontis – Data Protection Officer
Email: privacy@yourdomain.com
Address: [Company Address, EU]

If you are in the EU/UK and feel your concerns are not addressed, you may lodge a complaint with your local supervisory authority.