Privacy Policy

Last updated: May 2026

1. Who We Are

AeternusVita ("we", "us", "our") operates aeternusvita.io. Our contact email is hello@aeternusvita.io. We are committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR) and applicable UK/EU data protection law.

2. Data We Collect

We collect: (a) Email address and marketing consent when you subscribe to our mailing list; (b) Order data (name, email, billing address) when you purchase a product; (c) Usage data via cookies and analytics (only with your consent); (d) IP address and browser information for security and fraud prevention.

3. Legal Basis for Processing

We process your data on the following legal bases: Consent — for marketing emails and non-essential cookies; Contract — to fulfil product orders; Legitimate Interests — for fraud prevention and basic site analytics; Legal Obligation — to comply with applicable laws.

4. How We Use Your Data

Your data is used to: process and fulfil orders; send marketing emails (only with explicit consent); improve our website and products; comply with legal obligations. We do not sell your data to third parties.

5. Cookies

We use: Necessary cookies (always active) for site functionality; Analytics cookies (opt-in only) to understand site usage via privacy-preserving tools; Marketing cookies (opt-in only) for advertising. You can change your cookie preferences at any time using the consent banner.

6. Data Retention

We retain email subscriber data until you unsubscribe. Order data is retained for 7 years for legal and tax compliance. Analytics data is retained for 26 months.

7. Your Rights (GDPR)

You have the right to: access your personal data; rectify inaccurate data; erase your data ('right to be forgotten'); restrict processing; data portability; object to processing; withdraw consent at any time. To exercise any right, email hello@aeternusvita.io. You also have the right to lodge a complaint with your national supervisory authority (in the UK: ICO; in the EU: your local DPA).

8. International Transfers

Some of our processors are based outside the EEA (e.g., US-based email and payment providers). Where we transfer data internationally, we rely on Standard Contractual Clauses (SCCs) or adequacy decisions.

9. Third-Party Processors

We use: Stripe for payment processing; an email marketing provider for newsletters; Vercel for hosting. Each processor has their own privacy policy and security commitments.

10. Changes to This Policy

We may update this policy. Material changes will be communicated via email or a prominent notice on our site. Continued use after changes constitutes acceptance.