Legal
Privacy policy
Last updated: September 2026
1. Legal framework
We process your personal data in accordance with applicable data-protection legislation, including Costa Rica's Law 8968 for residents of Costa Rica.
2. Data we collect
Name, email, phone, country, delivery address and region, order notes, purchase history and, for volume discount requests, your company or clinic details. To prevent fraud we store an encrypted identifier (hash) of the connection and browser. Card details are processed directly by a PCI DSS-certified payment processor; we do not store them.
3. Purpose
We use your data only to process and deliver orders, verify payments, respond to applications, communicate about your purchase and meet legal obligations. We do not sell or transfer your data to third parties for commercial purposes.
4. Third-party processors
We share strictly necessary information with a PCI DSS-certified payment processor, the courier service for delivery and our technology infrastructure providers.
5. Retention and security
We keep data for as long as necessary for the stated purposes and legal obligations, applying reasonable technical and organizational security measures.
6. Your rights
You may at any time exercise your rights of access, rectification, update and deletion of your data, and withdraw your consent, by writing to us through the channels listed in the Contact section.
7. Consent
By placing an order or submitting an application and ticking the acceptance box, you consent to the processing of your data under this policy.
