EALIXIR INC. – PRIVACY POLICY

Last updated: March 3, 2026


Ealixir Inc. (“Ealixir,” “Company,” “we,” “our,” or “us”) is committed to protecting the privacy and security of personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you visit or interact with our website or related online features (collectively, the “Website”).

This Privacy Policy applies globally. Additional region-specific provisions apply depending on your location, including separate sections for individuals in the European Economic Area (EEA) and the United States.


1. Data Controller

Ealixir Inc.
Designated Email Address: [email protected]

For privacy-related inquiries, you may also contact our Data Protection Officer (DPO):
📧 [email protected]


2. Categories of Personal Data Collected

We may collect the following categories of personal data and personal information (as defined by applicable law):

  • Identification Data: First name, last name

  • Contact Data: Email address, telephone number

  • Technical Data: IP address, browser type, operating system

  • Usage Data: Pages visited, session duration, interactions

  • Cookies and Tracking Technologies

Personal data may be provided directly by you or collected automatically through your use of the Website.

Where personal data is identified as mandatory, failure to provide such data may prevent us from providing certain website services.


3. Purposes and Legal Bases of Processing

Legal Bases and Rights Depending on Your Location

We process personal data for the following purposes and based on the following legal grounds, as applicable:

A. Performance of a Contract and Legal Obligations

EU/EEA: GDPR and local laws (Article 6(1)(b) and (c) GDPR)

  • Providing, operating, and managing the Website

  • Responding to inquiries and requests

  • Compliance with legal, regulatory, and tax obligations

  • Fraud prevention, security, and system integrity

  • Establishing, exercising, or defending legal claims

B. Consent-Based Processing

EU/EEA: GDPR and local laws (Article 6(1)(a) and Article 7 GDPR)

  • Website registration

  • Delivery of requested services

  • Operational and service-related communications

C. Electronic Communications

(Consent where required by law)

With your explicit consent, we may process personal data to:

  • Send newsletters and promotional communications

  • Inform you about products, services, and events

You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.


4. Data Provision and Consequences of Refusal

  • Data required for service provision is mandatory

  • Marketing-related data is optional and does not affect access to the Website


5. Data Access and Recipients

Personal data may be accessed by:

  • Authorized employees and contractors of Ealixir

  • Third-party service providers acting as Data Processors, including:

    • IT and hosting providers

    • Analytics and security vendors

    • Legal, financial, and professional advisors

All recipients are subject to contractual confidentiality and data protection obligations.


6. Data Disclosure

Personal data may be disclosed where required by law, regulation, or lawful requests by public authorities.

Ealixir does not sell personal data and does not publicly disclose personal data.


7. International Data Transfers

Personal data may be transferred to and processed in countries outside the European Economic Area, including the United States.

Where required, such transfers are carried out in compliance with applicable data protection laws, including the use of Standard Contractual Clauses approved by the European Commission or other lawful transfer mechanisms.


8. Data Retention

Personal data is retained only for as long as reasonably necessary for the purposes described in this Privacy Policy:

  • Website-related data: up to 2 years following termination of the relationship

  • Company communications data: up to 1 year, unless consent is withdrawn earlier

Longer retention may apply where required by law or for the establishment or defense of legal claims.


9. Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

  • Access personal data we hold about you

  • Request correction or deletion of personal data

  • Restrict or object to processing

  • Request data portability (where applicable)

  • Withdraw consent at any time

  • Lodge a complaint with a supervisory authority

Requests may be submitted to:
📧 [email protected]
📧 [email protected]


10. California Privacy Rights

If you are a California resident, you have additional rights under the CCPA/CPRA, including the right to:

  • Know what personal information is collected, used, and disclosed

  • Request access, correction, or deletion of your personal information

  • Opt-out of Sale or Sharing (Ealixir does not “sell” or “share” personal information as defined under California law)

  • Limit the use of sensitive personal information (if applicable)

  • Not be discriminated against for exercising any of these rights

How to Exercise Your Rights

To submit a request to know, delete, or correct your information, please email us.

Ealixir does not sell or share personal information for cross-context behavioral advertising and does not engage in targeted advertising as defined by CPRA.

Authorized agents may submit requests on behalf of California residents with appropriate documentation. Identity verification may be required.


11. Security Measures

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.


12. Analytics and Tracking

Google Analytics

We use Google Analytics to analyze website usage and performance.

  • Data collected: Cookies, Usage Data

  • Processing location: United States

You may opt out through browser settings or Google’s opt-out tools.


13. Legal Defense and System Logs

Personal data may be processed to establish or defend legal claims, including in judicial or pre-litigation proceedings.

For operational and security purposes, system logs may be collected and may include IP addresses and technical identifiers.


14. Children’s Privacy

The Website is not directed to children under the age of 13, and we do not knowingly collect personal data from children in violation of the Children’s Online Privacy Protection Act (COPPA).


15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last updated” date.

Continued use of the Website constitutes acceptance of the updated Privacy Policy.


16. Definitions

  • Personal Data / Personal Information: Information relating to an identified or identifiable individual

  • User: Any individual accessing the Website

  • Data Subject: The individual to whom the personal data relates

  • Data Controller: Ealixir Inc.

  • Data Processor: Any entity processing personal data on behalf of the Data Controller

  • Cookies: Small text files stored on a user’s device