Privacy Policy — MEDÉRA

1. Who we are

MEDÉRA ("we", "us") operates the website med-era.com (the "Site"), a B2B catalog and quote-request platform for the distribution of original Korean botulinum toxins to licensed professionals and aesthetic clinics. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR").

2. What data we collect

When you submit a quote request through the Site we collect:

Name
Phone number
Email address
Position / role (e.g. cosmetologist, clinic owner)
The list of products you added to your request and any optional message

We also automatically collect:

IP address (used to identify approximate country of origin for shipping eligibility)
Browser language preference
Timestamp of submission

3. How we use your data

We process your personal data solely for the following purposes:

To respond to your quote request with current prices, stock availability, and wholesale conditions;
To verify your professional eligibility to receive prescription-grade products;
To process subsequent orders and arrange cold-chain shipping;
To comply with applicable legal obligations relating to pharmaceutical distribution.

We do not use your data for marketing, profiling, or automated decision-making, and we do not sell your data to third parties.

4. Legal basis

The legal basis for processing is your consent (Art. 6(1)(a) GDPR), which you provide by ticking the consent checkbox before submitting the form. For order fulfilment and legal compliance, we may also rely on the necessity of contract performance (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)).

5. Sharing of data

We may share your data with:

Cold-chain logistics providers, strictly for shipping purposes;
Authorised regulatory authorities, only where required by law.

Our internal messaging tools (Telegram) are used solely for notifying our team of new requests. No marketing or third-party retargeting is performed.

6. Data retention

We keep your data for up to 3 years from the last interaction, after which it is securely deleted. You may request earlier deletion at any time via the contact email below.

7. Your rights under GDPR

Right to access your personal data;
Right to rectify inaccurate data;
Right to erasure ("right to be forgotten");
Right to restrict processing;
Right to data portability;
Right to object to processing;
Right to withdraw consent at any time;
Right to lodge a complaint with the supervisory authority in your EU country of residence.

8. Data security

We use industry-standard technical and organisational measures to protect your data, including HTTPS encryption for all transmissions, access controls on our systems, and regular security reviews.

9. Cookies

The Site uses only essential technical cookies and local storage required for the cart/request functionality. We do not use analytics, advertising, or third-party tracking cookies.

10. Contact

To exercise your rights or for any privacy-related question, write to us via Instagram DM at @medera_aesthetic.

11. Changes to this Policy

We may update this Privacy Policy from time to time. The current version is always published on this page. Continued use of the Site after changes constitutes acceptance of the updated Policy.