Legal
Privacy Policy
Last updated: 8 July 2026
This Privacy Policy explains how Alveon ("we", "us", "our") processes personal data when you visit alveonbio.com, place an order, or contact us. We are committed to handling your information transparently and in line with the EU General Data Protection Regulation (GDPR).
1. Data controller
Alveon is the controller of personal data collected through this website. For any privacy request you can reach us at info@alveonbio.com.
2. Data we collect
- Account & order data: name, email, shipping and billing address, phone (optional), order history.
- Payment data: processed directly by our payment provider; we never see or store full card details.
- Communication data: messages you send via the contact form or email.
- Technical data: IP address, browser, device, referrer, pages viewed — used for security and analytics.
- Cookies: essential cookies for cart and session; optional analytics cookies only with your consent.
3. Why we process it (legal bases)
- Contract (Art. 6(1)(b) GDPR): to process orders, fulfil shipments, handle returns and support.
- Legal obligation (Art. 6(1)(c)): accounting, tax and invoicing records.
- Legitimate interest (Art. 6(1)(f)): fraud prevention, service security, product improvement.
- Consent (Art. 6(1)(a)): newsletter, marketing emails, non-essential cookies — withdrawable at any time.
4. Sharing with processors
We only share data with vetted service providers under a data processing agreement:
- Hosting and backend infrastructure
- Payment processor
- Shipping carriers (DHL and equivalents)
- Transactional email provider
- Analytics (only if you consent)
We do not sell personal data. Transfers outside the EEA rely on Standard Contractual Clauses where applicable.
5. Retention
- Order and invoicing records: retained for the period required by tax law (typically up to 10 years).
- Account data: kept while your account is active, deleted on request unless subject to legal retention.
- Support messages: up to 24 months.
- Marketing consent records: until you withdraw consent, then deleted.
6. Your rights
Under GDPR you may request access, rectification, erasure, restriction, portability, and object to processing. You may also withdraw consent at any time and lodge a complaint with your local data protection authority. To exercise these rights, email info@alveonbio.com.
7. Security
We use TLS encryption in transit, encrypted storage, role-based access controls, and audited third-party providers. No system is perfectly secure; we work to protect your data using industry-standard measures.
8. Cookies
Strictly necessary cookies (cart, session, security) are set without consent. Analytics or marketing cookies, if enabled, are only set after you consent via our cookie banner and can be revoked at any time.
9. Children
Our products are sold for research use only, exclusively to adults aged 18+. We do not knowingly collect data from minors.
10. Changes
We may update this policy to reflect operational, legal, or regulatory changes. Material changes will be announced on this page with a new "last updated" date.