Who is responsible for your data

The controller responsible for personal data collected through exosmart.co is Global Regenerative Group EOOD, a company registered in Bulgaria, company number (EIK) 205377929.

Registered address: 1 Dimitar Manchev Street, Building K, Apartment 4, Sofia 1407, Bulgaria.

Contact person: Mihail Blagoev.
Privacy enquiries: contact@exosmart.co.

Privacy notice updated: 4 November 2026

This Privacy Policy describes how exosmart™ (“we,” “us,” or “our”) collects, uses, discloses, and protects your personal information when you visit or use our website, www.exosmart.co (“Website”). We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR).

1. Information We Collect

1.1 Personal Information: We may collect personal information that you provide to us voluntarily when you use our Website. This may include your name, email address, postal address, phone number, and other contact information. We collect enquiry details when you submit our contact form or communicate with our team.

1.2 Usage Data: Technical information such as IP address, browser and device information may be processed to operate and secure the Website. Google Analytics collects information about visits and interactions only after you accept analytics, as described in section 7.

2. Use of Information

2.1 We use the collected information to provide, maintain, and improve our Website and services, including to:

• Respond to your inquiries and provide customer support
• Discuss requested product information and business cooperation
• Maintain and secure the Website
• Continue correspondence about your enquiry
• Analyze and monitor usage of our Website
• Detect, prevent, and address technical issues or fraudulent activities

2.2 Legal Basis for Processing: We process your personal information based on one or more legal grounds, including your consent, the performance of a contract with you, compliance with our legal obligations, and our legitimate interests.

3. Data Sharing and Disclosure

3.1 Third-Party Service Providers: We may share your personal information with trusted third-party service providers who assist us in operating our Website, conducting business, and providing services to you (e.g., hosting and email service providers).

Website enquiries are collected through Fluent Forms, stored in our WordPress website database and sent to our team using Mailgun. Visitor confirmations use the same email delivery service. Please do not submit patient information or medical records.

3.2 Legal Requirements: We may disclose your personal information if required to do so by law or in response to valid requests from public authorities (e.g., court orders, government agencies).

3.3 Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity or third party involved.

4. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law. We will securely delete or anonymize your personal information when it is no longer needed.

5. Data Security

We implement reasonable security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Your Rights

6.1 Data Subject Rights: Subject to applicable law, you may have certain rights regarding your personal information, including the right to access, correct, delete, restrict processing, and object to processing. You may also have the right to withdraw your consent (where applicable) and request data portability.

6.2 Exercising Your Rights: To exercise your rights, please contact us using the contact details provided at the end of this Privacy Policy. We may require additional information to verify your identity before processing your request.

7. Cookies

Essential website functions remain available whether you accept or reject analytics. Google Analytics is loaded only after you choose “Accept analytics”. It helps us understand visits and interactions with the Website. Google processes this information under its privacy policy. You can reject analytics or withdraw consent at any time using “Cookie settings”. Your choice is stored in this browser for six months using local storage. Clearing browser storage resets that choice. Withdrawing consent stops further analytics collection on this Website and removes its accessible Google Analytics cookies; it does not erase information already processed.

8. Links to Third-Party Websites

Our Website may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party websites or services. We recommend reviewing the privacy policies of those websites or services before providing any personal information.

9. Children’s Privacy

Our Website is not intended for individuals under the age of 16. We do not knowingly collect personal information from children without appropriate parental or guardian consent. If we become aware that we have collected personal information from a child, we will take steps to delete such information.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will notify you of any material changes by posting the updated Privacy Policy on our Website. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Email: contact@exosmart.co

exosmart™