Privacy Policy

Last updated: 15 September 2026

1. Introduction

This Privacy Policy explains how Hypotenol ("we", "us", "our") collects, uses, discloses and safeguards your personal data when you visit our website https://hypotenol.life/ and its language versions (Italy, Portugal, Spain, Bulgaria and Cyprus), or when you place an order for our products.

We are committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable local data protection laws.

2. Data Controller

The data controller responsible for the processing of your personal data is Hypotenol. For any privacy-related question or request, please use the contact form available on the website.

3. Personal Data We Collect

We may collect and process the following categories of personal data:

• Identification data: first name, last name.
• Contact data: telephone number.
• Order data: product selection, quantity, delivery preferences.
• Technical data: IP address, browser type, device type, operating system, referring URL.
• Usage data: pages visited, time spent on the website, interactions with content.
• Marketing data: preferences regarding receiving promotional communications.

4. How We Collect Your Data

• Directly from you when you fill in the order form or contact us.
• Automatically through cookies and similar technologies when you browse the website.
• From third-party service providers that support our order processing and delivery operations.

5. Purposes and Legal Bases of Processing

We process your personal data for the following purposes:

• Order processing and delivery: to confirm, prepare and deliver your order. Legal basis: performance of a contract.
• Customer support: to respond to your enquiries and requests. Legal basis: legitimate interest.
• Marketing communications: to send you promotional information, only with your consent. Legal basis: consent.
• Analytics and website improvement: to understand how users interact with our website. Legal basis: legitimate interest or consent, where required.
• Legal compliance: to comply with applicable legal and regulatory obligations. Legal basis: legal obligation.

6. Cookies and Similar Technologies

We use cookies and similar technologies to ensure the proper functioning of the website, to analyse traffic and, with your consent, to deliver personalised marketing content. For more information, please read our Cookie Policy.

7. Sharing Your Personal Data

We may share your personal data with:

• Logistics and delivery partners, to fulfil your order.
• Payment processing and order management service providers.
• IT, hosting and analytics service providers.
• Marketing and advertising partners, only where you have given your consent.
• Competent authorities, where required by law.

All third parties are contractually bound to process your personal data only for the purposes specified by us and in compliance with the GDPR.

8. International Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

9. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting or reporting requirements. When data is no longer needed, it is securely deleted or anonymised.

10. Your Rights

Under the GDPR, you have the right to:

• Access your personal data and obtain a copy of it.
• Request rectification of inaccurate or incomplete data.
• Request erasure of your personal data ("right to be forgotten").
• Request restriction of processing.
• Object to processing based on legitimate interest.
• Request data portability.
• Withdraw your consent at any time, where processing is based on consent.
• Lodge a complaint with a supervisory authority.

To exercise any of these rights, please contact us through the contact form available on the website.

11. Security of Your Data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These measures include encrypted connections (HTTPS), access controls and regular security reviews.

12. Children's Privacy

Our website and products are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe that a minor has provided us with personal data, please contact us so that we can take appropriate action.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be published on this page with a revised "Last updated" date.

14. Contact

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us through the contact form available on our website.