1. Data Controller

This website is operated by:

Neos Bios Ltd.
 Company ID: 204530731
 Address: 18 Rishki Prohod Boulevard, Floor 11, Apt. 42
 Email: info@neos-bios.com 

(“we”, “us”, “our”)

We process personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (GDPR).

2. Scope of this Policy

This Privacy Policy explains how we collect, use, and protect your personal data when you:

  • visit our website
  • create an account
  • place an order
  • contact us
  • interact with our services

3. What Data We Collect

We may collect and process the following categories of personal data:

a) Identity & Contact Data

  • Name
  • Email address
  • Phone number
  • Billing and shipping address

b) Order & Transaction Data

  • Purchased products
  • Payment details (processed securely via third-party providers)

c) Technical Data

  • IP address
  • Browser type and version
  • Device information
  • Website usage data

d) Marketing Preferences

  • Subscription status
  • Communication preferences

We do not collect sensitive personal data (e.g. health, biometric, or genetic data).

4. How We Use Your Data

We use your personal data for the following purposes:

  • processing and delivering orders
  • managing your account
  • communicating with you
  • improving our website and services
  • complying with legal obligations
  • sending marketing communications (where permitted)

5. Legal Basis for Processing

We process your data based on:

  • Contractual necessity – to fulfill your order
  • Legal obligation – accounting, tax, compliance
  • Legitimate interest – business improvement, fraud prevention
  • Consent – for marketing communications

6. Data Sharing

We may share your data with:

  • courier and delivery services
  • payment providers
  • IT and hosting providers
  • marketing platforms
  • legal and accounting advisors

All third parties are required to protect your data.

7. International Data Transfers

EU Customers

If you are located in the European Union, your data is processed in accordance with GDPR.

Non-EU Customers

If you are located outside the EU:

  • your data may be processed within the EU
  • or transferred internationally where necessary
  • we ensure appropriate safeguards (e.g. Standard Contractual Clauses)

8. Data Retention

We retain your personal data only as long as necessary:

  • Order data: up to 5 years (legal/accounting requirements)
  • Marketing data: until you withdraw consent
  • Account data: while active + reasonable period after

9. Your Rights

Depending on your location, you may have the right to:

  • access your personal data
  • request correction
  • request deletion
  • restrict processing
  • object to processing
  • data portability
  • withdraw consent

To exercise your rights, contact us at:
info@neos-bios.com

10. Data Security

We implement appropriate security measures, including:

  • SSL encryption
  • access control
  • secure storage systems

11. Cookies

We use cookies to:

  • ensure website functionality
  • analyze traffic
  • improve user experience

You can manage cookies via your browser settings.

12. Marketing Communications

We may send you marketing messages if:

  • you have given consent, or
  • you are an existing customer (where legally permitted)

You can unsubscribe at any time.

13. Complaints

If you are in the EU, you have the right to lodge a complaint with your local data protection authority.

In Bulgaria:
 Commission for Personal Data Protection (CPDP)

14. Updates

We may update this Privacy Policy from time to time. The latest version will always be available on our website.