Privacy Policy


Last Updated: —–

This Privacy Policy explains how Eternell (“Eternell,” “we,” “our,” or “us”) collects, uses, shares, and protects your personal data when you visit or use our websites, apps, services, tests, and products, including shop.eternell.org and related Eternell platforms (together, the “Services”). We follow applicable privacy laws including India’s Digital Personal Data Protection Act, 2023 and DPDP Rules 2025, UAE Personal Data Protection Law (PDPL), and where relevant, GDPR and CCPA/CPRA.

By using our Services, you agree to this Policy. If you don’t agree, please don’t use the Services.


1. Who We Are (Data Controller)

Eternell is a longevity and wellness brand offering supplements, functional foods, and health testing services (such as microbiome, DNA, predictive risk, and biological age assessments), along with optional dashboards and community features.

Contact:
Email: info@eternell.org
UAE Office: 14th Floor, South Tower, Dubai Science Park, Dubai, UAE
US Office: 37660 Estuary Street, Newark, California 94560, USA


2. Scope

This Policy applies to:

  • Visitors to our websites
  • Customers purchasing supplements/food products
  • Users ordering or using testing kits and dashboards
  • Users participating in Eternell community/social features
  • Anyone contacting support or engaging with our marketing

3. What Data We Collect

We may collect the following categories of personal data:

A) Information you provide

  • Identity & contact: name, phone number, email, shipping/billing address, age/gender (if you choose to share).
  • Account details: login credentials, profile info, preferences.
  • Orders & transactions: products purchased, order history, delivery details, invoices.
  • Support & communications: messages, emails, chat history, feedback, survey responses.

B) Health, wellness, and test-related information (only if you use these Services)

  • Test sample and results data: microbiome, genetic/DNA-based insights, biomarkers, biological age indicators, and related reports.
  • Lifestyle & wellness inputs: diet, activity patterns, sleep, stress, habits you enter in questionnaires.
  • Wearable/device data (if you connect): steps, heart rate, sleep metrics, and other health signals from supported wearables.

These may be considered “sensitive” or “special category” data in some regions. We process them only with your explicit consent and for clear purposes.

C) Automatic data

  • Device & usage: IP address, browser type, pages viewed, clicks, time on site, app usage events.
  • Cookies & similar tech: to remember preferences, improve performance, and measure marketing effectiveness. Cookie consent is taken where required.

4. How We Use Your Data

We use data for the following purposes:

  1. To deliver products and services
    • process orders, payments, shipping, returns
    • provide access to dashboards, reports, and community features
  2. To generate and explain test results
    • analyze samples through partner labs
    • create personalized reports and insights
  3. To personalize your experience
    • suggest relevant wellness plans, supplements, or content
  4. To run the Eternell community and social features
    • enable your profile, posts, progress sharing, and connections (you control what you share)
  5. To provide customer support and communicate with you
    • confirmations, updates, troubleshooting, service notices
  6. For marketing (optional)
    • send offers, newsletters, and updates
    • you can opt out anytime
  7. For security, fraud prevention, and legal compliance
    • protect users, prevent misuse, meet legal obligations
    • notify you of breaches when required.

5. Legal Bases for Processing

Depending on your location and the Service used, we process data on these grounds:

  • Consent: especially for health/test/wearable data and marketing. You can withdraw consent anytime.
  • Contract necessity: to fulfill orders, deliver kits, and provide reports.
  • Legitimate interests: to improve Services, prevent fraud, and keep platforms secure.
  • Legal obligation: tax, accounting, consumer protection, and compliance requirements.

6. How We Share Your Data

We do not sell your personal data.

We may share data with:

A) Trusted service providers

Only as needed to operate:

  • payment gateways
  • shipping/logistics partners
  • IT hosting and cloud services
  • analytics and performance tools
  • customer support platforms

B) Accredited labs and clinical partners

If you order tests, your sample and required data are shared with partner laboratories/clinicians to perform analysis and prepare reports. Shared only within the scope of your consent.

C) Community sharing (your choice)

If you use Eternell social features, any profile details, posts, or progress you make public are visible to others according to your privacy settings.

D) Legal or safety reasons

We may disclose data if required by law, court order, or to protect rights, safety, and security.

E) Business transfers

If Eternell is involved in a merger, acquisition, or asset sale, user data may transfer as part of that transaction with continued protection.


7. Cross-Border Transfers

Eternell operates globally, and your data may be processed in India, UAE, the United States, or other countries where our providers or labs operate. We use safeguards required by law for international transfers.


8. Data Retention

We keep your data only as long as needed for:

  • providing Services
  • legal/accounting obligations
  • resolving disputes
  • improving user safety and platform integrity

Health/test data is retained for continuity of your program unless you request deletion, subject to legal limits.


9. Security

We use reasonable administrative, technical, and physical safeguards to protect data from loss, misuse, unauthorized access, or disclosure. However, no system is 100% secure. Please use strong passwords and keep them confidential.


10. Your Privacy Rights

Your rights depend on your region, but Eternell respects the strongest applicable standard.

India (DPDP Act / Rules 2025)

You have the right to:

  • access a summary of your personal data
  • correct or update inaccurate data
  • request deletion of data no longer needed
  • withdraw consent
  • file a grievance with us. EU/UK (GDPR)

You may:

  • access, correct, delete, or restrict processing
  • object to certain processing
  • request data portability
  • complain to a regulator.

California (CCPA/CPRA)

You may:

  • know what personal info we collect/use/share
  • request deletion
  • opt out of “sale”/“sharing” (we do not sell/share for cross-context ads)
  • be free from discrimination for exercising rights.

UAE (PDPL)

You may:

  • access your data
  • correct inaccuracies
  • restrict or stop processing in certain cases.

To exercise any right, email: info@eternell.org with subject “Privacy Request.”
We may verify your identity before actioning requests.


11. Cookies & Tracking

We use cookies to:

  • keep you logged in
  • remember preferences
  • understand site usage
  • measure campaigns

Where required, you’ll see a cookie banner to accept/reject non-essential cookies. You can also manage cookies in your browser settings.


12. Children’s Privacy

Our Services are not meant for children under 18 without parental/guardian consent. If we learn we collected data from a minor without valid consent, we will delete it.


13. Third-Party Links

Our site may contain links to third-party sites. We aren’t responsible for their privacy practices. Please review their policies before sharing data.


14. Changes to This Policy

We may update this Policy to reflect improvements, legal changes, or new Services. The updated version will be posted here with a new “Last Updated” date. Continued use after updates means you accept the revised Policy.


15. Contact & Grievances

If you have questions or complaints about privacy:

Eternell Privacy Team
Email: info@eternell.org

We’ll respond as per applicable law timelines.