EALIXIR INC.
PRIVACY POLICY

Last update: [July 06, 2026]

Ealixir Inc. (“Ealixir”, “Company”, “we”, “our” or “us”) is committed to protecting the privacy and security of personal data. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit or interact with our website or related online features (collectively, the “Website”). This Privacy Policy applies globally. Depending on your geographic location, additional region-specific provisions apply, including separate sections for individuals residing in the European Economic Area (EEA) and separate sections for individuals residing in the United States.

1. Data Controller
Ealixir Inc. E-mail address: info@ealixir.com
Data Protection Officer (DPO): dpo@ealixir.one

2. Categories of personal data collected
We may collect the following categories of personal data and personal information (as defined by applicable law):

  • Identifying data: first name, last name
  • Contact data: e-mail address, phone number
  • Technical data: IP address, browser type, operating system
  • Usage data: pages visited, session duration, interactions
  • Cookies and tracking technologies

Personal data may be provided directly by the user or collected automatically through the use of the website.
Where personal data is indicated as mandatory, failure to provide such data may prevent us from providing certain website services.

3. Purposes and legal bases of processing
Legal bases and rights depend on your geographic location. We process personal data for the following purposes and on the basis of the following legal grounds, where applicable:

A. Performance of a contract and legal obligations
EU/EEA: GDPR and local laws: (Article 6(1)(b) and (c) GDPR)

  • Provision, management, and operation of the website
  • Responding to inquiries and requests
  • Compliance with legal, regulatory, and tax obligations
  • Fraud prevention, security, and system integrity
  • Establishing, exercising, or defending legal claims

B. Consent-based processing
EU/EEA: GDPR and local laws: (Article 6, paragraph 1, letter a) and Article 7 of the GDPR)

  • Website registration
  • Delivery of requested services
  • Operational and service-related communications

C. Electronic communications
(Consent where required by law)
With your explicit consent, we may process personal data for:

  • Sending newsletters and promotional communications
  • Informing you about products, services, and events

You may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

4. Provision of data and consequences of refusal

  • Data necessary for service delivery is mandatory.
  • Marketing-related data is optional and does not affect access to the website.

5. Data access and recipients
Personal data may be accessed by:

  • Authorized employees and collaborators of Ealixir
  • Third-party service providers acting as data processors, including:
  • IT and hosting service providers
  • Analytics and security solution providers
  • Legal, financial, and professional consultants

All recipients are subject to contractual obligations of confidentiality and data protection.

6. Data disclosure
Personal data may be disclosed where required by law, regulations, or lawful requests by public authorities.
Ealixir does not sell personal data and does not publicly disclose personal data.

7. International data transfers
Personal data may be transferred to and processed in countries outside the European Economic Area, including the United States. Where necessary, such transfers are carried out in compliance with applicable data protection laws, including the use of standard contractual clauses approved by the European Commission or other lawful transfer mechanisms.

8. Data retention
Personal data is retained only for as long as reasonably necessary to achieve the purposes described in this Privacy Policy:

  • Website-related data: up to 2 years after the termination of the relationship
  • Business communication data: up to 1 year, unless consent is revoked earlier.

Retention of data for longer periods may be required by law or for the establishment, exercise, or defense of legal claims.

9. Your privacy rights
Depending on the jurisdiction in which you are located, you may have the right to:

  • Access the personal data we hold about you
  • Request correction or deletion of personal data
  • Restrict or object to data processing
  • Request data portability (where applicable)
  • Withdraw consent at any time
  • Lodge a complaint with a supervisory authority

Requests can be sent to info@ealixir.com or dpo@ealixir.one.

10. California privacy rights
If you reside in California, you have additional rights under the CCPA/CPRA, including the right to:

  • Know what personal information is collected, used, and disclosed.
  • Request access, correction, or deletion of your personal information.
  • Opt out of sale or sharing: We do not “sell” or “share” your personal information as defined by California law.
  • Limit the use of sensitive personal information (where applicable).
  • Not be discriminated against for exercising any of these rights.

How to exercise your rights: To submit a request to access, delete, or correct your data, please contact us via e-mail. Ealixir does not sell or share personal information for cross-context behavioral advertising and does not engage in targeted advertising as defined by the CPRA. Authorized agents may submit requests on behalf of California residents, subject to the submission of appropriate documentation. Identity verification may be required.

11. Security measures
We adopt appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

12. Analytics and monitoring
Google Analytics
We use Google Analytics to analyze website usage and performance.

  • Data collected: Cookies, Usage data
  • Processing location: United States

You can disable this feature via browser settings or Google’s opt-out tools.

13. Legal defense and system logs
Personal data may be processed to establish or defend legal claims, including in judicial or pre-litigation proceedings. For operational and security purposes, system logs may be collected, which may include IP addresses and technical identifiers.

14. Children’s privacy
The website is not intended for children under the age of 13, and we do not knowingly collect personal data from children in violation of the Children’s Online Privacy Protection Act (COPPA).

15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last update” date. Continued use of the Website constitutes acceptance of the updated Privacy Policy.

16. Definitions

  • Personal data / Personal information: information relating to an identified or identifiable natural person.
  • User: any individual accessing the website.
  • Data subject: the natural person to whom the personal data refers.
  • Data Controller: Ealixir Inc.
  • Processor: any entity that processes personal data on behalf of the data controller.
  • Cookies: small text files stored on the user’s device.