Privacy Policy
Last updated: ———
At Eternell, your privacy isn’t a checkbox — it’s part of our care philosophy. This policy explains what data we collect, why we collect it, how we protect it, and the choices you have. We’ve kept it clear and readable on purpose.
By using shop.eternell.org (the “Site”) or buying/using our test kits and products, you agree to the practices described here.
1) What this policy covers
This policy applies to:
- Visitors to our Site
- Customers buying supplements or test kits
- Users who register kits, upload reports, or contact support
- Anyone interacting with our ads, emails, or social pages that link to this policy
2) The data we collect
We only collect what we truly need to serve you better. Under modern privacy laws, companies must use a “purpose-limited, minimal collection” approach — that’s our rule too. eHealth Magazine+2India Briefing+2
A) Information you give us directly
- Contact details: name, phone, email, shipping address
- Account info: password (encrypted), preferences
- Order details: products ordered, delivery notes, invoices
- Support messages: chats, emails, calls you have with us
- Health & test-related info (Sensitive):
- microbiome/lab kit registration details
- lifestyle or symptom info you share
- uploaded test results
- genetic/epigenetic markers if included in the kit
Health and genetic data are treated as sensitive/special category data and need extra protection and explicit consent. GDPR+2GDPR Local+2
B) Information collected automatically
- Device and browser info
- IP address, approximate location (city-level)
- Pages visited, time spent, clicks
- Cookies and similar tracking IDs
3) Why we use your data
We use your data only for clear reasons, including:
- To process orders and deliver products
- To register and run your test kits
- To generate/host your reports and dashboards
- To provide customer support
- To improve Site performance and user experience
- To send updates you ask for (order status, kit steps, support replies)
- Marketing (only with your choice) — offers, health education, new launches
- Legal / safety reasons — fraud prevention, compliance, audits
We don’t use your sensitive health/genetic data for advertising without your explicit permission. GDPR+1
4) Consent and lawful use
When you:
- create an account
- place an order
- register a kit
- upload health data
- opt-in for communication
…you give consent for the related purpose. You can withdraw consent anytime via email or your account settings. DPDP Rules 2025 require easy withdrawal and clear notices — we follow that. eHealth Magazine+1
5) Who we share data with
We never sell your personal data.
We only share it with trusted partners when necessary:
- Delivery/logistics partners for shipping
- Payment gateways to complete transactions
- Labs / diagnostic partners to process your kit
- Cloud & IT vendors for secure hosting and analytics
- Compliance or legal authorities if required by law
All partners must follow strict confidentiality and security standards.
6) International data transfers
Eternell operates across regions (India/UAE/US). Your data may be processed in countries other than your own to provide services.
When we transfer data internationally, we apply appropriate safeguards aligned with global privacy standards. India Briefing+2EY+2
7) How long we keep your data
We keep data only as long as needed:
- Order & billing records: as required by tax/law
- Test results & dashboards: until you delete your account or ask removal
- Support chats: for quality and continuity
- Marketing data: until you opt out
If you request deletion, we will act unless we’re legally required to keep something. DPDP also expects deletion when purpose ends. Global Practice Guides+1
8) Your rights and choices
Depending on your location, you may have rights under India DPDP 2025, GDPR, or CCPA/CPRA. We honor these for everyone as a best practice. GDPR Local+3eHealth Magazine+3India Briefing+3
You can request to:
- Access your data
- Correct inaccurate info
- Delete your data
- Withdraw consent
- Opt out of marketing
- Know who your data was shared with
- Restrict certain processing (where applicable)
To exercise rights, email: [email protected]
Subject line: “Privacy Request”
We may verify identity for safety.
9) Cookies
Cookies help the Site work smoothly and remember your preferences.
We use:
- Essential cookies (login, cart, security)
- Analytics cookies (to improve Site)
- Marketing cookies (only if you allow)
You can control cookies via browser settings.
10) Data security
We protect your data through:
- encryption in transit and at rest
- role-based access controls
- secure servers and monitoring
- limited internal access
- periodic security reviews
No system is 100% risk-free, but we work hard to keep your data safe. If a breach ever occurs, we’ll notify you as required by law. Gulf News+1
11) Children’s privacy
Our Site and kits are not designed for children under 18 without a parent/guardian.
If we learn a minor’s data was collected without proper consent, we will delete it.
12) Third-party links
Sometimes we link to other sites (payment pages, partner labs, social media). Their privacy practices are their own — please review them.
13) Changes to this policy
We may update this policy to reflect improvements or legal requirements.
If changes are major, we will show a notice on the Site or email you.
14) Contact / Grievance
For any privacy concern, correction, deletion, or data request:
Email: [email protected]
Subject: Privacy / Data Request