Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. We will post the updated policy on our website with a revised "Last updated" date. Where required by law, we will provide additional notice of material changes. Your continued use of the Services after an update constitutes your acceptance of the revised Privacy Policy.

We collect personal information that you provide directly, information collected automatically through your use of the Services, and information from third-party sources.

Information you provide directly may include: name and contact details; billing and shipping address; order details and purchase history; payment information (processed by third-party processors); account credentials (such as email and password); communications with us, including customer support inquiries; and reviews, testimonials, and other user-generated content.

Information collected automatically may include: IP address and approximate location; device identifiers, browser type, and operating system; pages visited, links clicked, and other usage information; and information collected through cookies, pixels, and similar technologies.

Information from third parties may include: payment processors, for payment confirmation and fraud prevention; shipping and logistics providers, for delivery and tracking; and analytics and marketing partners, to help us understand site usage and improve our Services.

We use personal information for the following purposes: processing and fulfilling your orders and transactions; managing your account and providing customer support; shipping Products and handling returns and refunds; communicating with you about your orders, account, and the Services; providing, operating, maintaining, and improving our website and Services; personalizing your experience and tailoring content and offers; conducting analytics, research, and business operations; detecting and preventing fraud, security incidents, and misuse; complying with legal and regulatory obligations; and sending marketing communications where we have your consent or a lawful basis.

We process personal information only for purposes that a reasonable person would consider appropriate in the circumstances and as permitted by applicable privacy laws.

We use cookies and similar technologies to: enable core site functionality; remember your preferences and settings; understand how visitors use our site through analytics; improve performance and user experience; and support marketing and advertising activities, where applicable.

Analytics cookies — Google Analytics 4: We use Google Analytics 4 (Google LLC, United States) to understand how visitors navigate and use our website. Google Analytics may collect data such as pages visited, session duration, device type, browser, and approximate location derived from IP address. We have implemented Google Consent Mode v2: Google Analytics is blocked from collecting or processing any personal data unless and until you explicitly grant analytics consent through our cookie consent banner. You can change or withdraw your consent at any time via the "Cookie Settings" link in our footer.

Necessary cookies: Certain cookies are strictly necessary for the website to function and cannot be disabled. These include session identifiers, security tokens, and language preference storage. No consent is required for strictly necessary cookies.

You can manage all non-essential cookie preferences at any time through the Cookie Settings link in our website footer, or by configuring your browser settings. Disabling certain cookies may affect site functionality.

We may share personal information with: service providers and partners who assist in operating our business, including payment processors, hosting providers, analytics services (including Google LLC for Google Analytics 4), marketing services, and shipping companies; professional advisers, such as lawyers, accountants, and auditors, where necessary; government authorities or law enforcement, where required by law or to protect our legal rights; and another organization in connection with a corporate transaction such as a merger, acquisition, or sale of assets.

Service providers are given access to personal information only as needed to perform their functions and are required to protect the information and handle it in accordance with applicable privacy laws.

We do not sell or rent your personal information to third parties.

Your personal information may be transferred to and processed in jurisdictions outside your province or country of residence, including other provinces in Canada and countries where our service providers are located. These jurisdictions may have different data protection laws than your home jurisdiction.

Where personal information is transferred to the United States — for example, through our use of Google Analytics 4 (Google LLC) — we rely on applicable transfer mechanisms, including Standard Contractual Clauses (SCCs) approved by the European Commission, Google's Data Processing Terms under the EU General Data Protection Regulation (GDPR), and other appropriate contractual safeguards.

When transferring personal information to any third party, we take steps to ensure that appropriate safeguards are in place in accordance with applicable privacy laws.

Our Services are not intended for minors under the age of 18. We do not knowingly collect personal information from children under 18.

We use reasonable physical, technical, and administrative safeguards designed to protect personal information from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction.

However, no method of transmission over the internet or electronic storage is entirely secure. We cannot guarantee the absolute security of your personal information.

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, to meet legal and regulatory requirements, and to resolve disputes.

We typically retain order and transaction records for at least the period required by tax and accounting laws. We retain marketing preferences until you withdraw your consent or until we determine that the information is no longer needed.

When personal information is no longer required, we will securely delete, anonymize, or otherwise dispose of it in accordance with our policies and applicable law.

Subject to applicable law, you may have the right to: request access to the personal information we hold about you; request correction of inaccurate or incomplete personal information; request deletion of your personal information, in certain circumstances; request restriction of processing in certain circumstances; withdraw consent to processing where we rely on your consent; object to certain types of processing, including direct marketing; and request information about how your personal information has been used and disclosed.

To exercise these rights, please contact us using the contact information below. We may need to verify your identity before responding to your request.

We will not discriminate against you for exercising your privacy rights.

We comply with Canada's Anti-Spam Legislation (CASL).

We send marketing and promotional emails only where we have your express or implied consent.

You can withdraw your consent to receive marketing emails at any time by clicking the unsubscribe link in any marketing email, or by contacting us at the email address provided below.

Even if you opt out of marketing messages, we may still send transactional or service-related communications relating to your orders, account, or our ongoing business relationship, as permitted by law.

If you access the Services from outside Canada, you acknowledge that your personal information may be transferred to and processed in Canada and other jurisdictions where our service providers operate.

European Economic Area (EEA) and United Kingdom: If you are located in the EEA or UK, you have additional rights under the General Data Protection Regulation (GDPR) or UK GDPR, including: the right to lodge a complaint with your local data protection supervisory authority; the right to data portability; and the right not to be subject to solely automated decision-making. The lawful basis for processing your personal information is: consent (for analytics cookies and marketing communications); performance of a contract (for order fulfillment and customer support); and legitimate interests (for security, fraud prevention, and improving our Services).

California (USA): If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including: the right to know what personal information we collect, use, and disclose; the right to request deletion of your personal information; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of personal information (we do not sell or share your personal information for advertising purposes); and the right to non-discrimination for exercising your privacy rights.

To exercise any of these rights, please contact us at info@biotherasolutions.com. We will respond in accordance with applicable law.

You can review the most current version of this Privacy Policy at any time on this page. We reserve the right, at our sole discretion and subject to applicable law, to update, change, or replace any part of this Policy by posting updates and changes to our website. Where required by law, or where changes are material, we will provide you with reasonable advance notice. Your continued use of the website or Services following the posting of any changes constitutes acceptance of those changes.

This Privacy Policy is made available in multiple languages for accessibility. In the event of any inconsistency or conflict between the English version and any translation, the English version shall govern and take precedence.

If you have questions about this Privacy Policy, our data practices, or wish to exercise any of your privacy rights, please contact us at info@biotherasolutions.com.

BioThera Solutions Inc., Ottawa, Ontario, Canada.

If you are located in the EEA or UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.