Privacy Policy

Effective date: 10 May 2026
Last updated: 06 September 2026

1. Who we are

This Privacy Policy explains how we collect, use, and protect your personal data when you visit aimcellhealth.com (the "Site") or purchase from us.

The data controller is:

UAB "Aim Health"
Registration code: 307399925
VAT number: LT100018851410
Registered address: Kviečių g. 2-107, LT-08418 Vilnius, Lithuania
Email: info@aimcellhealth.com
Phone: +370 618 60663
Represented by: Ignas Kamarauskas, Director

We are established in Lithuania and process personal data in accordance with Regulation (EU) 2016/679 ("GDPR") and the Lithuanian Law on Legal Protection of Personal Data.

We have not appointed a Data Protection Officer, as we are not required to. All privacy enquiries go to info@aimcellhealth.com.

2. What data we collect

You give us directly:

Identity and contact data: first and last name, email address, phone number
Delivery and billing address, country
Order data: products ordered, order value, order history, subscription plan and status
Account data: username, hashed password, saved preferences
Communications: messages sent to us by email, phone, or contact form
Marketing data: newsletter subscription status and consent records
Reviews and other content you post on the Site
Any health-related information you choose to share, for example when asking whether the product is suitable for you. We never require this, and we ask you not to send more than is necessary.

Collected automatically:

Technical data: IP address, browser type and version, device type, operating system, time zone, language
Usage data: pages viewed, time on page, referral source, clicks, cart activity
Cookie data — see section 8

From third parties:

Payment confirmation and fraud signals from Stripe. We never receive or store your full card number.
Delivery and tracking status from FedEx.
Fulfilment and returns status from our logistics partner.
Aggregated analytics and advertising data from Google and Meta.

3. Why we use your data, and our legal basis

Purpose	Legal basis
Processing, fulfilling, and delivering your order	Performance of a contract — Art. 6(1)(b)
Managing a recurring subscription and taking recurring payments	Performance of a contract — Art. 6(1)(b)
Creating and managing your account	Performance of a contract — Art. 6(1)(b)
Customer support and handling complaints	Performance of a contract; legitimate interests — Art. 6(1)(b), (f)
Processing returns, refunds, and guarantee claims	Performance of a contract; legal obligation — Art. 6(1)(b), (c)
Accounting, invoicing, and tax records	Legal obligation — Art. 6(1)(c)
Fraud prevention and Site security	Legitimate interests — Art. 6(1)(f)
Sending marketing emails	Consent — Art. 6(1)(a); or legitimate interests for existing customers regarding similar products, with opt-out in every message
Analytics and advertising cookies	Consent — Art. 6(1)(a)
Inviting you to leave a review	Legitimate interests — Art. 6(1)(f)
Product improvement and aggregated statistics	Legitimate interests — Art. 6(1)(f)
Establishing or defending legal claims	Legitimate interests — Art. 6(1)(f)

Where you voluntarily share health-related information, we process it on the basis of your explicit consent under Art. 9(2)(a), solely to answer your query, and we delete it once the query is closed.

4. Who we share your data with

Shopify Inc. — e-commerce platform, hosting, checkout, and order management
Stripe, Inc. / Stripe Payments Europe Ltd — payment processing and fraud prevention
UAB "Pekitas" (Statybininkų g. 5, LT-96155 Gargždai, Lithuania) — order fulfilment, packing, dispatch, and returns handling
FedEx Corporation and its affiliates — delivery and tracking. Requires your name, address, phone number, and email.
Omnisend (Soundest Ltd) — transactional and marketing email
Trustpilot A/S — collection and publication of customer reviews
Google Ireland Ltd — Google Analytics 4 and Google Ads, only with your cookie consent
Meta Platforms Ireland Ltd — advertising and measurement, only with your cookie consent
Professional advisers — accountants, auditors, and lawyers, bound by confidentiality
Public authorities — where required by law

Each processor acts under a written data-processing agreement. We do not sell your personal data.

5. International transfers

Some providers, including Stripe, Google, and Meta, may process data outside the European Economic Area, including in the United States. Such transfers are protected by an adequacy decision of the European Commission (including the EU–U.S. Data Privacy Framework where the recipient is certified), or by Standard Contractual Clauses approved by the European Commission together with supplementary technical and organisational measures. Request a copy of the relevant safeguards at info@aimcellhealth.com.

6. How long we keep your data

Order, invoice, and transaction records: 10 years from the end of the financial year, as required by Lithuanian accounting and tax law
Account data: while your account is active, then 3 years after your last activity
Subscription records: for the life of the subscription, then as per order records above
Marketing list data: until you unsubscribe or withdraw consent, plus a record of that withdrawal
Customer support correspondence: 3 years from last contact
Health-related information you send us: deleted once your query is resolved
Cookie and analytics data: up to 14 months
Data relating to a dispute: until resolution and expiry of any limitation period

7. Your rights

You have the right to access your data, have it rectified, request erasure, request restriction of processing, receive it in a portable format, object to processing based on legitimate interests, object to direct marketing at any time, and withdraw consent at any time without affecting the lawfulness of prior processing.

We do not carry out automated decision-making producing legal or similarly significant effects.

To exercise a right, email info@aimcellhealth.com. We reply within one month, extendable by two further months for complex requests, and may ask you to verify your identity.

If you believe we have handled your data unlawfully, you may complain to the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija), L. Sapiegos g. 17, LT-10312 Vilnius, ada@ada.lt, +370 5 271 2804 — or to the supervisory authority where you live.

8. Cookies

We use four categories:

Strictly necessary — cart, checkout, login, security. Set without consent because the Site cannot function without them.
Functional — remember language, currency, and preferences.
Analytics — Google Analytics 4, to understand how the Site is used.
Marketing — Meta Pixel and Google Ads, to show relevant advertising and measure campaigns.

Functional, analytics, and marketing cookies are set only after you consent via our cookie banner. You can change or withdraw your choices at any time via the "Cookie settings" link in the Site footer, or through your browser settings. Withdrawing consent does not affect processing already carried out.

9. Security

We apply appropriate technical and organisational measures: TLS encryption in transit, hashed passwords, access on a need-to-know basis, and contractual security obligations on every processor. Card data is handled entirely by Stripe under PCI-DSS and never reaches our systems. No internet transmission is completely secure and we cannot guarantee absolute security.

10. Children

The Site and our products are intended only for persons aged 18 or over. We do not knowingly collect data from children. If you believe a child has given us personal data, contact info@aimcellhealth.com and we will delete it.