Privacy Policy

Last updated: 9 October 2026

This Privacy Policy describes how Notrel LLC ("Biohance", "we", "us", "our") collects, uses, stores, shares and protects the personal data of visitors and customers of biohance.eu (the "Site") and all related services, products, content and digital platforms operated by us (together with the Site, the "Services"). This Privacy Policy applies to all individuals who access, visit, browse or use the Services in any way, whether or not they make a purchase.

By using the Services you acknowledge that you have read, understood and agree to the practices described in this Privacy Policy. If you do not agree with anything in this policy, please do not use the Services.

1. Definitions

In this Privacy Policy, the following terms have the following meanings:

"Personal data" means any information that identifies you or that could be used, alone or together with other information, to identify you. This includes your name, email address, IP address, payment information, device identifiers and any other data described below.
"Processing" means any operation performed on personal data, whether automated or not, such as collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, alignment, combination, restriction, erasure or destruction.
"Controller" means the person or entity that determines the purposes and means of processing personal data. For the purposes of this policy, the controller is Notrel LLC.
"Processor" means a person or entity that processes personal data on behalf of the controller.
"Special categories of personal data" means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health, or data concerning a person's sex life or sexual orientation.
"Services" means the Site, all content delivered through it, the Biohance Room, the Peptide Vault, the Dosage Calculator, the Inner Room, plan calls, coaching, the monthly subscription, the Q and A sessions and any other product, service or platform operated by us.

2. Who we are

The controller of your personal data is:

Notrel LLC
Miami Beach, Florida, USA

We decide how and why your personal data is used. Under the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679), this makes us the controller. We are responsible for making sure your data is processed lawfully, fairly, transparently and only for the purposes described in this policy.

For all questions, concerns, complaints or requests about your personal data or this Privacy Policy, you can reach us by email at support@biohance.eu. We aim to respond to every enquiry within 5 working days and to resolve every request within 30 calendar days, as required by the GDPR.

3. What personal data we collect

We collect personal data in the following circumstances and categories. The exact data points depend on how you interact with us.

3.1 Data you give us when you buy

When you place an order on the Site, we collect your full name, email address, country of residence, the products you purchased, the prices you paid, the date and time of each transaction, any discount or promotional code you used, and the currency of the transaction. We also collect the technical details of your payment method (card type, last four digits, expiry date) as returned to us by our payment processor. We never see, receive, access or store your full card number, CVV code or other sensitive payment credentials. Those go directly to Stripe, our payment processor, and are handled entirely within their certified systems.

3.2 Data collected by our payment processor

Stripe, Inc. and Stripe Payments Europe, Ltd. (together, "Stripe") act as our payment processor. When you make a purchase, Stripe collects your full card number, expiry date, CVV, billing address and any information required by 3D Secure or similar authentication flows. Stripe also keeps your card on file after your first purchase so that the one-click offers shown after checkout, and the monthly subscription if you opt in, can be charged without asking you to enter your details again. Stripe processes this data as a controller in its own right for fraud prevention, compliance with financial regulations and the operation of its payment network. You can read Stripe's own privacy policy on their website.

3.3 Data you give us when you book or take a call

When you book a plan call or an Inner Room kickoff call, we collect your name, email address, the date and time you selected and any notes or questions you submit through the booking form. During and after the call, we may take written notes about the topics discussed, the goals you described, the recommendations given, and any follow-up actions agreed. These notes are stored in our internal systems and are accessible only to the team members involved in your coaching.

3.4 Data you share inside the Room and the Inner Room

When you use the Biohance Room, the Inner Room or any of the related platforms, you may choose to share information about yourself in messages, forms, uploads or during calls. This may include your body weight, age, sex, health goals, the compounds you use or plan to use, your dosages, your injection schedule, your bloodwork results, your medical history, your symptoms, your progress, your photographs and any other information you volunteer.

We process this data only for the purpose of providing the information and educational content you signed up for. You can ask us to stop processing it at any time by emailing us. This does not affect the lawfulness of processing that happened before your request, and does not affect your access to the Room or other products.

3.5 Data you give us when you contact support

When you email us at support@biohance.eu or contact us through any other channel, we collect the content of your message, your email address, any attachments you send, and the metadata of the communication (date, time, subject line). If you contact us to ask about a refund, a cancellation, an account issue or a complaint, we keep a record of the conversation and the resolution for as long as needed to handle the matter and to comply with our legal and accounting obligations.

3.6 Data collected automatically when you visit the Site

When you visit any page on biohance.eu, we and our third-party service providers automatically collect certain technical and usage data. This data is collected through cookies, pixels, scripts, server logs and similar technologies. It includes:

Your IP address (which may indicate your approximate geographic location).
Your browser type, version and language settings.
Your operating system and device type (desktop, tablet or mobile).
Your screen resolution and viewport size.
The pages you visit on the Site, the order in which you visit them, the time you spend on each page and the date and time of your visit.
How far you scroll on each page and how far you watch any embedded video content.
The URL of the page that referred you to the Site (the "referrer").
The ads, links, social media posts or search results you clicked to reach us, including UTM parameters, click identifiers (such as gclid, fbclid or similar identifiers appended by advertising platforms) and any other tracking tags attached to the URL.
Whether you are a new visitor or a returning visitor, as determined by the cookies and identifiers stored in your browser.
Which buttons, links and form fields you interact with on the Site.

3.7 Data related to the monthly subscription

If you leave the updates box ticked at checkout, your email address is used to send you the Vault updates and the subscription-related reminders (such as the reminder before your next charge). Stripe keeps your card on file to process the recurring monthly payments. We store the date your subscription started, the date of each charge, the amount charged, whether the charge succeeded, and the date you cancel if you choose to do so.

3.8 Data we do not collect

We do not knowingly collect personal data from children under the age of 18. We do not collect data about your racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data for identification purposes or data about your sex life or sexual orientation.

4. How and why we use your personal data

We process your personal data only when we have a valid legal basis to do so. The table below lists each purpose, the categories of data involved and the legal basis we rely on.

Purpose	Data involved	Legal basis
Process your purchase, take payment through Stripe, confirm the transaction and deliver your access	Name, email, country, purchase details, payment transaction data	Performance of the contract between you and us (Art. 6(1)(b) GDPR)
Run your monthly subscription: send Vault updates, send the email reminder before each charge, take the recurring payment through Stripe, handle cancellation	Name, email, subscription status, charge dates and amounts, card on file (held by Stripe)	Performance of the contract (Art. 6(1)(b) GDPR)
Process one-click upsell purchases shown after checkout, charging the card Stripe has on file	Name, email, purchase details, card on file (held by Stripe)	Performance of the contract (Art. 6(1)(b) GDPR)
Issue invoices, keep accounting records and comply with tax obligations	Name, email, country, purchase details, payment amounts and dates	Legal obligation (Art. 6(1)(c) GDPR)
Deliver your plan call, Inner Room sessions, coaching, written plans, and group calls	Name, email, booking details, call notes, messages	Performance of the contract (Art. 6(1)(b) GDPR)
Use the information you share with us to build and adjust your protocol, plan and dosing	Weight, bloodwork, compounds, doses, symptoms, goals, history	Performance of the contract (Art. 6(1)(b) GDPR)
Send you transactional emails about your order, your access, your calls, your subscription status and service changes	Name, email, purchase and subscription details	Performance of the contract (Art. 6(1)(b) GDPR)
Respond to your support emails, complaints, refund requests and general enquiries	Name, email, message content, order history	Performance of the contract (Art. 6(1)(b) GDPR) and legitimate interest (Art. 6(1)(f) GDPR)
Detect, prevent and investigate fraud, chargebacks, unauthorised access and abuse of the Services	IP address, device data, payment data, usage patterns	Legitimate interest (Art. 6(1)(f) GDPR)
Measure the performance of our advertising campaigns by tracking which ads, links and referral sources lead to visits and purchases	IP address, device data, page views, referrer URLs, click identifiers, UTM parameters, cookies	Legitimate interest (Art. 6(1)(f) GDPR)
Analyse how visitors use the Site (pages visited, scroll depth, video watch time, funnel progression) to improve our pages and user experience	IP address, device data, page views, scroll and interaction data, cookies	Legitimate interest (Art. 6(1)(f) GDPR)
Send purchase and conversion data to advertising platforms (Google Ads, Meta) so they can optimise our ad campaigns and measure return on ad spend	Hashed email, purchase amount, product purchased, transaction ID, click identifiers	Legitimate interest (Art. 6(1)(f) GDPR)
Enforce our Terms of Sale, protect our rights and property, comply with legal processes	Any data relevant to the matter	Legitimate interest (Art. 6(1)(f) GDPR) and legal obligation (Art. 6(1)(c) GDPR)

About legitimate interest. Where we rely on legitimate interest as the legal basis, we have carried out a balancing test and concluded that our interest does not override your fundamental rights and freedoms. For analytics and advertising measurement, you can object at any time by adjusting your cookie settings as described in section 7, or by adjusting your ad personalisation settings directly with Google and Meta. If you object, we will stop the relevant processing, although the Site will continue to function normally apart from payment (which requires the Stripe cookies).

5. Who we share your personal data with

We share your personal data only with the third parties listed below, and only for the purposes described. We do not sell, rent, lease or trade your personal data to any third party for their own marketing or other purposes.

5.1 Payment processing

Stripe, Inc. (San Francisco, USA) and Stripe Payments Europe, Ltd. (Dublin, Ireland). Stripe processes your payment, stores your card details, handles 3D Secure authentication, manages the one-click upsell charges and the recurring subscription payments, and provides us with transaction data (amounts, dates, success or failure). Stripe also uses your transaction data for its own fraud prevention and compliance purposes as an independent controller.

5.2 Website hosting and serverless functions

Vercel Inc. (San Francisco, USA). Vercel hosts the Site and runs the serverless functions that connect the Site to Stripe and to our other tools. Vercel processes your data as a processor on our behalf. Vercel's infrastructure may process data in data centres located in the USA and in other countries.

5.3 Analytics

Google Ireland Limited (Dublin, Ireland). We use Google Tag Manager, Google Analytics 4 and Google Ads conversion tracking. Google Analytics collects anonymised and pseudonymised data about how visitors use the Site: pages visited, time on page, scroll depth, referrer, device type, browser and geographic region. We have IP anonymisation enabled. Google Ads conversion tracking tells us which ads lead to purchases, using the Google click identifier (gclid) stored in the _gcl_au cookie. Google processes this data partly as a processor on our behalf and partly as a controller for its own purposes (such as benchmarking and improving its services).

We also run our own first-party analytics system, hosted on Vercel. It uses the fa_vid, fa_lc and fa_lt cookies described in section 7 to recognise returning visitors, measure funnel progression and attribute visits to the ad or link that brought them. This system does not share data with any third party.

5.4 Advertising measurement

Meta Platforms Ireland Limited (Dublin, Ireland). We use the Meta Pixel (loaded via Google Tag Manager) and the Meta Conversions API. The Pixel collects data about page views and actions on the Site. When you make a purchase, we also send purchase data (amount, currency, product name, transaction ID) and a SHA-256 hashed copy of your email address to Meta through the Conversions API. This allows Meta to match the purchase to the ad you saw on Facebook or Instagram and to measure the performance of our ad campaigns. Meta processes this data as a joint controller for ad measurement and as a controller in its own right for its own purposes.

5.5 Email

Our email service provider sends transactional emails (order confirmations, access details, call bookings, subscription reminders) and, for subscribers, the Vault updates. The provider processes your name, email address and the content of the email on our behalf as a processor.

5.6 Coaching platform and tools

The Room, the Inner Room, the booking calendar and the Dosage Calculator are internal tools hosted on Vercel. The coaching notes, messages and information you share are stored within these tools. Access is limited to the team members involved in your coaching.

5.7 Professional advisors

Our accountant and any professional advisors we use may access your transaction data (name, email, purchase amount, date) when necessary for accounting, tax, audit or legal purposes.

5.8 Public authorities

We may disclose your personal data to law enforcement agencies, tax authorities, courts or other public authorities when we are required to do so by law, by a court order, by a regulatory obligation or to protect our rights or the rights of others.

5.9 Business transfers

If Notrel LLC is involved in a merger, acquisition, reorganisation, sale of assets or bankruptcy, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you by email before your data is transferred and becomes subject to a different privacy policy.

6. International transfers of personal data

Some of the third parties listed in section 5 are located in the United States or process data in the United States or other countries outside the European Economic Area (EEA). When your personal data is transferred outside the EEA, we make sure it is protected by one of the following safeguards:

EU-US Data Privacy Framework. Where the recipient is a US company certified under the EU-US Data Privacy Framework (DPF), the transfer is covered by the European Commission's adequacy decision for the DPF. As of the date of this policy, Stripe and Google are certified under the DPF.
Standard Contractual Clauses. Where the recipient is not covered by an adequacy decision or the DPF, we rely on the European Commission's Standard Contractual Clauses (SCCs), as adopted by Commission Implementing Decision (EU) 2021/914, together with any supplementary measures needed to ensure an equivalent level of protection.
Adequacy decisions. Where the European Commission has decided that a country provides an adequate level of data protection, transfers to that country do not need additional safeguards.

You can request a copy of the safeguards in place for any specific transfer by contacting us at support@biohance.eu.

7. Cookies, pixels and similar technologies

This section explains in detail what cookies and similar storage technologies the Site uses, who sets them, what they do, how long they last and how you can manage them. A "cookie" is a small text file that a website places in your browser. A "pixel" (also called a "web beacon" or "tracking pixel") is a small transparent image or piece of code embedded in a page that sends information back to a server when the page loads. "Local storage" and "session storage" are browser-based storage mechanisms that work like cookies but can hold more data and have different lifetimes.

7.1 Cookies we use

Name	Set by	Purpose	Type	Duration
Session storage	Biohance (first party)	Carries your name, email and payment status from the checkout page to the next pages in the funnel. This is necessary for the checkout flow to work. No data is sent to any server.	Strictly necessary	Until you close the browser tab
__stripe_mid	Stripe (third party)	A unique device identifier set by Stripe for fraud detection and prevention. This cookie is necessary for payment processing to work securely.	Strictly necessary	1 year
__stripe_sid	Stripe (third party)	A session identifier set by Stripe for fraud detection during the payment session. This cookie is necessary for payment processing.	Strictly necessary	30 minutes
_trk	Biohance (first party)	Stores the UTM parameters, click identifiers and referrer information from the URL that brought you to the Site, so we can attribute your visit and any purchase to the correct ad, link or campaign.	Analytics / attribution	90 days
fa_vid	Biohance (first party)	A randomly generated visitor identifier used by our first-party analytics system to distinguish new visitors from returning visitors and to count unique visitors over time.	Analytics	1 year
fa_lc	Biohance (first party)	Records the last campaign or ad source the visitor came from. Used to attribute a purchase to the most recent advertising touchpoint.	Analytics / attribution	1 year
fa_lt	Biohance (first party)	Records the timestamp of the visitor's last visit. Used together with fa_vid to measure return visit frequency and session gaps.	Analytics	1 year
_ga	Google Analytics (third party)	A randomly generated client identifier used by Google Analytics 4 to distinguish visitors and aggregate usage data (page views, sessions, events). The data is pseudonymised and aggregated in Google's analytics reports.	Analytics	2 years
_ga_*	Google Analytics (third party)	Used by Google Analytics 4 to persist session state across page loads. The suffix varies by measurement ID.	Analytics	2 years
_gcl_au	Google Ads (third party)	Stores the Google click identifier (gclid) so that a purchase made on a later visit can be attributed to the Google ad that originally brought the visitor to the Site.	Advertising measurement	90 days
_fbp	Meta / Facebook (third party)	A unique browser identifier set by the Meta Pixel. Used to deliver and measure Meta ad campaigns and to match a site visit or purchase to the Meta ad the visitor clicked.	Advertising measurement	90 days
_fbc	Meta / Facebook (third party)	Stores the Facebook click identifier (fbclid) from the URL when a visitor arrives from a Meta ad. Used to attribute the visit and any purchase to that specific ad click.	Advertising measurement	90 days

7.2 The Meta Pixel and the Conversions API

The Meta Pixel is a small piece of JavaScript code loaded via Google Tag Manager. When a page loads, the Pixel sends a "PageView" event to Meta's servers, together with the _fbp and _fbc cookie values, the page URL, the referrer and basic device information. When a purchase is completed, the Pixel sends a "Purchase" event with the transaction amount, currency and product name. We also send purchase events to Meta through the Conversions API (a server-to-server connection), including a SHA-256 hashed version of your email address. Meta uses this data to match the event to your Meta account (if any), measure ad performance and build advertising audiences. Meta processes this data as a joint controller with us for ad measurement, and as an independent controller for its own advertising and product improvement purposes.

7.3 Google Tag Manager

Google Tag Manager (GTM) is a tag management system that loads the Google Analytics, Google Ads and Meta Pixel scripts on the Site. GTM itself does not collect personal data; it manages the loading and firing of the other tags based on rules we configure. GTM may send its own usage data (tag firing times, error rates) to Google for debugging and service improvement.

7.4 How to manage cookies

You can control cookies through your browser settings. Every major browser lets you block or delete cookies, block third-party cookies only, or accept cookies only from specific sites. You can also set your browser to prompt you before accepting a cookie. Here are links to the cookie settings pages of common browsers:

Chrome: Settings, Privacy and Security, Cookies and other site data
Firefox: Settings, Privacy and Security, Cookies and Site Data
Safari: Preferences, Privacy, Manage Website Data
Edge: Settings, Cookies and site permissions, Manage and delete cookies

If you block all cookies, the Site will still work, but you will not be able to complete a payment (which requires the Stripe cookies). Blocking or deleting the analytics and advertising cookies will not affect the functionality of the Site; it will only mean that your visits and actions are not tracked by those tools.

You can also opt out of personalised advertising and tracking by Google and Meta through their own settings:

Google: Ad Settings (adssettings.google.com) and the Google Analytics opt-out browser add-on.
Meta: Ad Preferences in your Facebook or Instagram settings.

7.5 Do Not Track

Some browsers offer a "Do Not Track" (DNT) setting that sends a signal to websites asking them not to track the user. There is no accepted standard for how websites should respond to DNT signals, and the Site does not currently respond to them. You can use the cookie management methods described above to control tracking instead.

8. How long we keep your personal data

We keep your personal data only for as long as necessary for the purpose for which it was collected, or for as long as required by law. The retention periods for each category of data are as follows:

Orders, invoices and payment records: as long as tax and accounting law requires. In most cases this means 7 years from the end of the financial year in which the transaction took place. This applies to both one-off purchases and subscription charges.
Your account, coaching notes, protocols and plans: while you have an active account or active access to any of our products, and for 12 months after your access ends or after your last interaction with us, whichever is later. This retention period allows you to return and resume your plan without losing your history. After this period, we delete or anonymise the data. If you ask us to delete it earlier, we do so unless we are legally required to keep something (such as transaction records for tax purposes).
Subscription data: while your subscription is active. After you cancel, your subscription records (dates, amounts, status) are kept with your order and payment records for the tax retention period described above.
Support correspondence: for 3 years after the matter is resolved, or longer if the matter involves a legal claim, complaint or dispute that is still open.
Analytics and cookie data: for the durations listed in the cookie table in section 7. Aggregated, anonymised analytics reports may be kept indefinitely because they cannot be linked back to an individual.
Advertising platform data: we do not control how long Google and Meta retain the data they collect through their cookies and pixels. You can review their retention policies in their respective privacy policies.

9. Data security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration and disclosure. These measures include:

Encryption of data in transit using TLS (HTTPS) on all pages of the Site.
Use of a PCI-DSS compliant payment processor (Stripe) for all payment handling, so that full card details never reach or pass through our systems.
Access controls that limit who in our team can see your personal data, based on their role and the data they need to do their job.
Regular review of our third-party providers and their security practices.
Serverless architecture (Vercel) that reduces the attack surface compared to traditional server infrastructure.

No method of transmission over the internet and no method of electronic storage is 100% secure. While we do our best to protect your data, we cannot guarantee absolute security. If we become aware of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and notify you without undue delay, as required by the GDPR.

10. Your rights under the GDPR

If you are in the European Economic Area (EEA), the United Kingdom or a country with similar data protection laws, you have the following rights regarding your personal data:

Right of access (Art. 15 GDPR). You can ask us to confirm whether we process your personal data and, if so, to give you a copy of it together with information about the purposes, categories, recipients, retention periods, your rights and the source of the data.
Right to rectification (Art. 16 GDPR). You can ask us to correct any personal data about you that is inaccurate or to complete any data that is incomplete.
Right to erasure (Art. 17 GDPR). You can ask us to delete your personal data when it is no longer needed for the purpose for which it was collected, when you withdraw your consent and there is no other legal basis, when you object to the processing and there are no overriding legitimate grounds, when the data has been unlawfully processed, or when we are legally required to erase it. We may decline the request if we need the data to comply with a legal obligation or to establish, exercise or defend legal claims.
Right to restriction (Art. 18 GDPR). You can ask us to restrict the processing of your personal data in certain circumstances, for example when you contest its accuracy (while we verify it), when the processing is unlawful but you prefer restriction instead of erasure, or when we no longer need the data but you need it for legal claims.
Right to data portability (Art. 20 GDPR). You can ask us to provide the personal data you have given us in a structured, commonly used, machine-readable format, and to transmit it to another controller, where the processing is based on consent or on a contract and is carried out by automated means.
Right to object (Art. 21 GDPR). You can object to processing based on our legitimate interest at any time. We will stop the processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed for legal claims. For direct marketing purposes (including profiling related to direct marketing), you can object at any time and we will stop immediately.
Right to withdraw consent (Art. 7(3) GDPR). Where we process your data based on your consent, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before you withdrew.
Right not to be subject to automated decision-making (Art. 22 GDPR). You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects or similarly significant effects on you. We do not use automated decision-making of this kind.

To exercise any of these rights, email support@biohance.eu with your name and the email address associated with your account. We may ask you to verify your identity before we process the request. We will respond within 30 calendar days. If the request is complex or we receive a large number of requests, we may extend the response time by a further 60 days, in which case we will inform you of the extension and the reasons for it within the initial 30 days.

If you believe that we have not complied with your rights or that we are processing your data in a way that breaches the GDPR, you have the right to lodge a complaint with the supervisory authority in the EU member state where you live, where you work, or where the alleged breach took place. A list of supervisory authorities is available on the European Data Protection Board's website.

11. California privacy rights

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you additional rights regarding your personal information. Under the CCPA/CPRA:

You have the right to know what categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it.
You have the right to delete your personal information, subject to certain exceptions.
You have the right to correct inaccurate personal information.
You have the right to opt out of the "sale" or "sharing" of your personal information. We do not sell your personal information in the traditional sense. We do share certain identifiers and activity data with Google and Meta for advertising measurement purposes as described in this policy, which may constitute "sharing" under the CPRA. You can opt out of this by managing cookies as described in section 7.
You have the right not to be discriminated against for exercising any of your rights under the CCPA/CPRA.

To exercise any of these rights, email support@biohance.eu.

12. Third-party links

The Site may contain links to third-party websites, platforms or services that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services. We encourage you to review the privacy policy of every site you visit.

13. Children's privacy

The Services are intended for adults aged 18 and over. We do not knowingly collect, use or store personal data from anyone under the age of 18. If we learn that we have collected personal data from a child under 18, we will take steps to delete it as soon as possible. If you believe that we may have collected data from a child, please contact us at support@biohance.eu.

14. Automated decision-making and profiling

We do not use your personal data for automated decision-making (meaning decisions made solely by automated means, without human involvement) that produces legal effects or similarly significant effects concerning you. The analytics and advertising tools described in this policy use automated processing to measure and optimise our ad campaigns, but these tools do not make decisions about your access to the Services, the prices you are charged or any other matter with legal or significant effect.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, in the law or for other operational, legal or regulatory reasons. When we make changes, we update the "Last updated" date at the top of this page. If a change materially affects how we process your personal data, we will notify you by email (to the address associated with your account) before the change takes effect. We encourage you to review this page periodically to stay informed about our data practices. Your continued use of the Services after a change to this policy constitutes your acceptance of the revised policy.

16. Contact us

If you have any questions, concerns, complaints or requests about this Privacy Policy, about how we process your personal data, or about exercising your rights, you can contact us at:

Notrel LLC
Miami Beach, Florida, USA
Email: support@biohance.eu

We aim to respond to all enquiries within 5 working days and to resolve all requests within 30 calendar days.