Privacy Policy
Last Updated: July 2, 2026
1. Introduction
This Privacy Policy (“Privacy Policy”) explains how Bioma Probiotics Health (“Company”, “we”, “our”, or “us”) collects, uses, stores, shares, and protects your personal information when you visit our website, use our mobile applications, purchase our products, subscribe to our services, communicate with us, or otherwise interact with our business.
We are committed to protecting your privacy and processing your personal information in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the California Consumer Privacy Act (“CCPA”), and other applicable privacy regulations.
By using our website, applications, products, or services, you acknowledge that you have read and understood this Privacy Policy.
2. Who We Are
Bioma Probiotics Health is a health and wellness company providing probiotic supplements, personalized wellness plans, digital health services, educational content, subscription services, and related health support services.
For questions regarding this Privacy Policy or your personal information, you may contact us through the contact information provided at the end of this policy.
3. Definitions
“Personal Data” means any information relating to an identified or identifiable natural person, including but not limited to:
- Name
- Email address
- Phone number
- Postal address
- Payment information
- Health-related information
- Device identifiers
- Location data
- Usage information
“Sensitive Personal Data” includes information relating to health, wellness conditions, and other categories protected under applicable law.
4. Data Protection Principles
We process personal data according to the following principles:
Lawfulness, Fairness, and Transparency
We process personal data lawfully, fairly, and transparently.
Purpose Limitation
We collect personal data only for specified, explicit, and legitimate purposes.
Data Minimization
We collect only the personal information necessary for the intended purpose.
Accuracy
We maintain accurate and up-to-date personal information whenever possible.
Storage Limitation
We retain personal information only for as long as necessary.
Integrity and Confidentiality
We implement appropriate technical and organizational measures to protect personal information.
5. Information We Collect
Personal Information You Provide
We may collect:
- First and last name
- Email address
- Telephone number
- Billing and shipping address
- Date of birth
- Payment information
- Purchase history
- Account credentials
- Customer support communications
Health and Wellness Information
For personalized wellness recommendations, we may collect:
- Age
- Height
- Weight
- Target weight
- Lifestyle information
- Dietary preferences
- Wellness goals
- Health questionnaire responses
- Digestive health information
- Other health-related information voluntarily provided by you
Technical Information
We may automatically collect:
- IP address
- Browser type
- Device identifiers
- Operating system
- Screen resolution
- Location information
- Website usage data
- App usage data
- Cookies and similar technologies
- Referral sources
- Session information
Social Media Information
When interacting with our social media pages, we may collect:
- Profile name
- Profile image
- Comments
- Likes
- Shares
- Messages
- Other public interactions
6. Purposes and Legal Basis for Processing
We process your personal data for the following purposes:
Personalized Wellness Services
We process health and wellness information to:
- Create personalized wellness plans
- Provide product recommendations
- Offer customized health guidance
Legal basis:
- Consent (GDPR Article 6(1)(a))
- Explicit consent for health-related data
Retention period:
- Up to 2 years after your last account activity or until consent withdrawal.
Product Purchases and Service Delivery
We process:
- Contact information
- Payment details
- Transaction history
- Purchase records
Purpose:
- Processing orders
- Delivering products
- Managing subscriptions
- Providing customer support
- Maintaining records
Legal basis:
- Contract performance (GDPR Article 6(1)(b))
Retention period:
- Up to 5 years after service completion or longer if required by law.
Marketing Communications
We may process:
- Email address
- Purchase history
- Marketing preferences
Purpose:
- Sending newsletters
- Product updates
- Promotions
- Educational content
Legal basis:
- Consent
- Legitimate interest where permitted by law
Retention period:
- Up to 2 years or until you opt out.
Customer Support
We may process:
- Contact information
- Customer inquiries
- Support tickets
- Communication history
Purpose:
- Responding to inquiries
- Resolving complaints
- Improving customer experience
Legal basis:
- Consent
- Legitimate interests
Retention period:
- Up to 3 years.
7. Artificial Intelligence (AI) Processing
We may use third-party Artificial Intelligence (“AI”) technologies to assist with:
- Customer support
- Chatbot interactions
- Support ticket categorization
- Personalized recommendations
- Customer service automation
AI systems may process:
- Personal information
- Account information
- Health-related information voluntarily provided by you
- Communication content
By contacting our support services and providing health-related information, you consent to the processing of such information through AI-assisted technologies for customer support purposes.
You have the right to request human review of automated decisions affecting you.
8. Cookies and Tracking Technologies
We use:
- Essential cookies
- Functional cookies
- Analytics cookies
- Advertising cookies
- Performance cookies
These technologies help us:
- Operate our services
- Improve website performance
- Analyze user behavior
- Personalize content
- Deliver relevant advertising
You may control cookie preferences through your browser settings.
9. Sharing Your Information
We may share your personal information with:
Group Companies
For:
- Service administration
- Customer support
- Product integration
- Internal business operations
Service Providers
Including:
- Payment processors
- Hosting providers
- Analytics providers
- Marketing platforms
- Customer support providers
- AI service providers
- Delivery providers
Professional Advisors
Including:
- Lawyers
- Auditors
- Insurers
- Consultants
Legal Authorities
When required by law or necessary to protect legal rights.
10. International Data Transfers
Your personal information may be transferred to countries outside your country of residence, including countries outside the European Economic Area (EEA).
Where required, we implement appropriate safeguards, including:
- Standard Contractual Clauses
- Adequacy decisions
- Other legally recognized transfer mechanisms
11. Marketing Communications
We may contact you through:
- SMS
- Telephone calls
- Push notifications
You may opt out of marketing communications at any time by:
- Clicking the unsubscribe link
- Updating your account preferences
- Contacting us directly
Service-related communications cannot be disabled.
12. Security of Personal Information
We implement reasonable technical and organizational security measures, including:
- Access controls
- Authentication systems
- Encryption technologies
- Employee confidentiality obligations
- Security monitoring
- Data backup systems
Despite these measures, no method of transmission or storage can be guaranteed to be completely secure.
13. Your Rights
Depending on applicable law, you may have the right to:
- Access your personal information
- Correct inaccurate information
- Delete personal information
- Restrict processing
- Object to processing
- Withdraw consent
- Data portability
- Object to direct marketing
- Request human review of automated decisions
- File complaints with supervisory authorities
We may require identity verification before processing requests.
14. Children’s Privacy
Our services are intended only for individuals aged 18 years or older.
We do not knowingly collect personal information from children under 18 years of age.
15. California Privacy Rights
If you are a California resident, you may have rights under applicable California privacy laws, including rights to:
- Know what information we collect
- Access collected information
- Delete personal information
- Correct inaccurate information
- Opt out of certain sharing practices
- Non-discrimination for exercising privacy rights
16. Third-Party Websites
Our website may contain links to third-party websites.
We are not responsible for the privacy practices of third parties and encourage you to review their privacy policies.
17. Data Scraping
Automated collection, scraping, extraction, or reproduction of content or information from our website using automated tools, bots, scripts, or similar technologies is prohibited without our prior written consent.
18. Changes to This Privacy Policy
We may update this Privacy Policy periodically.
Updated versions will be published on our website and become effective upon publication unless otherwise specified.
19. Contact Information
If you have questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact us through our official contact channels available on our website.
We will respond to verified requests within the timeframes required by applicable law.