Privacy Policy

1. About this Privacy Policy

This Privacy Policy explains how Renewal HRT Europe Ltd ("Renewal," "we," "us," or "our") collects, uses, and protects personal data when you visit this website (renewalhow.com/europe), submit forms, purchase or enquire about our services, or otherwise interact with us online. It is drawn up in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and applies within the territorial scope of the GDPR, including residents of the European Economic Area (EEA).

It applies to website visitors, medical leads and clients (physicians and healthcare professionals), course enrollees, suppliers (natural persons), legal representatives of partners, and job applicants who interact with this website.

2. Controller

Controller: Renewal HRT Europe Ltd. Registered office: 5 Chytron, Agioi Omologites, 1075 Nicosia, Cyprus. Company number: HE484759. Tax ID: 60275681O. Website: this Renewal Europe site. Because we are established in the EU (Cyprus), no separate Article 27 EU representative is required.

3. Data Protection Officer

You may contact our Data Protection Officer at dpo@renewalhow.com for privacy questions or to exercise your rights (see also our GDPR page). This channel is reserved for data protection matters.

4. Personal data we process

• Identification and contact data (name, email, phone, address, professional details)
• Government-issued identification where required for contracts or legal obligations
• Electronic identifiers (IP address, logs, device/browser data, cookie IDs)
• Professional and education data (specialty, credentials, CV for applicants)
• Financial and transactional data related to orders and invoicing (payment data is handled by our payment processor)
• Images or recordings only where you participate in events or courses and are informed
• Health data is not collected through ordinary marketing forms on this website. If volunteer-patient or clinical programmes collect health data, that is done under a specific notice and explicit consent (Art. 9 GDPR), not via this general website form set

5. Purposes and legal bases

• Operate and secure the website (strictly necessary cookies, logs) — legitimate interests / necessity to provide the service
• Analytics cookies — consent via cookie banner
• Marketing / advertising / social cookies — consent via cookie banner
• Capture and manage medical leads and respond to Contact Us / enquiry forms — legitimate interests and/or consent
• Direct marketing communications — consent (or soft opt-in where lawful); you may object at any time
• Client registration, checkout, payments, and invoicing — performance of a contract and legal obligations
• Certification course enrolment and related communications — performance of a contract
• Supplier / partner contracting — performance of a contract
• Recruitment / job applications — consent and/or pre-contractual steps
• Comply with legal obligations and establish, exercise, or defend legal claims

6. Hormodose+ and clinical tools

Hormodose+ is a separate digital platform for qualified physicians. Registration, clinical decision-support features, and any patient data entered by doctors are governed by the Hormodose+/Renewal platform Privacy Notice and Terms, available on the platform site (https://hormodoseplus.com/). On this marketing website we do not process patient clinical records. Where Renewal acts as a processor for a doctor-client, the doctor remains responsible for the lawfulness of patient data processing.

7. Cookies

We use cookies and similar technologies on this website. Strictly necessary cookies are always active (preferences, security, form/checkout function). Analytics and marketing cookies are used only with your consent, collected through our cookie banner on your first visit. You can reject non-essential cookies, change preferences later via “Cookie settings” in the footer, or adjust your browser settings. Analytics identifiers are retained for a maximum of 13 months.

• Strictly necessary — required for basic site operation; cannot be disabled via the banner
• Performance / analytics — aggregate usage metrics; optional
• Marketing / advertising / social — profiling and ads on other sites; optional; only with consent

8. How we obtain data

We obtain data directly from you (forms, checkout, account/course registration), automatically when you browse (cookies, logs), and occasionally from business partners or publicly available professional sources where lawful. We do not buy marketing lists of special-category health data for this website.

9. Recipients and processors

We share personal data only as needed with service providers acting as processors under Article 28 GDPR, or with independent controllers where required (e.g. payment institutions, authorities). Typical categories for this website include:

• Hosting and infrastructure (e.g. Hostinger)
• Website CMS and ecommerce (WordPress / WooCommerce)
• Payment and tax services (Stripe)
• Marketing / CRM form tools (e.g. RD Station), where used and consented
• Page builder and related site tooling (Elementor)
• Backup providers (e.g. WPvivid)
• Professional advisers and competent authorities where legally required

10. International transfers

Some of our service providers may process personal data outside the European Economic Area (EEA). When that happens, we rely on GDPR Chapter V safeguards such as an adequacy decision (including, where applicable, the EU–US Data Privacy Framework for certified organisations), Standard Contractual Clauses (SCCs), and supplementary measures where appropriate. Typical transfer contexts for this website include: payment and tax tooling (Stripe — SCCs/DPF as described in Stripe’s DPA); marketing/CRM form platforms when used after marketing cookie consent (e.g. RD Station — document transfer tool with the DPO); and optional infrastructure components whose region you can request at dpo@renewalhow.com. We do not transfer special-category health data through ordinary marketing forms on this site. For a current list of processors and the safeguard used for each transfer, contact the DPO or see our internal processors inventory (not published).

11. Retention

We keep personal data only as long as necessary for the purposes above, including legal retention for accounting and claims. Indicative periods: website analytics cookies up to 13 months; marketing lists until consent is withdrawn (with periodic review); contract and invoicing records for the statutory period applicable in Cyprus/EU; support enquiries for the time needed to resolve and document the matter. When retention ends, data are deleted or anonymised.

12. Security

We apply technical and organisational measures appropriate to the risk, including access controls, encrypted transport (HTTPS), least-privilege access, backups, and staff confidentiality obligations. No method of transmission or storage is completely secure; we work to prevent and respond to incidents under our internal incident response procedures.

13. Your rights

You may exercise access, rectification, erasure, restriction, portability, objection (including absolute objection to direct marketing), and withdrawal of consent, and you may lodge a complaint with a supervisory authority (Art. 77). Contact dpo@renewalhow.com. Full details are on our GDPR page. We do not currently carry out solely automated decisions producing legal or similarly significant effects (Art. 22).

14. Children

This website and our B2B professional services are not directed at children. We do not knowingly collect personal data from children under 16 through this site. If you believe we have done so, contact the DPO so we can delete the data.

15. Educational content notice

Information on this website is for educational and informational purposes for healthcare professionals and the public. It does not constitute medical advice, diagnosis, or treatment. See our Medical Disclaimer. For emergencies, contact local emergency services (EU: 112).

16. Changes

We may update this Privacy Policy from time to time. The “Last updated” date and version below will change. Material changes may be communicated via the website or by email where appropriate.