Privacy Policy

1. Overview & Scope

This Privacy Policy describes how Exosomus (operated by **SHEPA LTD**, a company registered in the United Kingdom, Company Number 17310288, located at 5, Brayford Square, London, E1 0SG) collects, uses, and protects your information when you visit our website or submit inquiry forms. We are a B2B supplier of research-grade extracellular vesicles (ExoTec™) targeting international laboratories and clinical researchers, including those located in the European Union (EU) and European Economic Area (EEA). We do not collect, process, or store patient diagnostic or medical records.

2. Information We Collect

We collect only the professional contact information that you voluntarily provide when requesting a quote, ordering an evaluation sample, or sending us inquiries:

• Full Name and Professional Title
• Institution, Laboratory, or Company Name
• Work Email Address and Telephone Number
• Shipping Address (for trial samples/kits)
• Intended research focus and message content

This website does not support user accounts, client logins, or online payment/billing processing. No financial or credit card information is collected or processed on this site.

3. Cookies & Analytics

We value your privacy. This website **does not use cookies**, persistent tracking identifiers, or any third-party marketing analytics scripts (such as Google Analytics or Meta Pixel). Your browsing activity on this website is completely private and is not recorded, profiled, or shared.

4. GDPR Compliance & Legal Basis

For visitors from the European Union, we process your personal data in compliance with the General Data Protection Regulation (GDPR). Our legal basis for processing your data under Art. 6(1)(f) GDPR is **legitimate interest** to respond to your B2B sales/technical inquiries, verify laboratory credentials, coordinate cold-chain logistics, and prevent spam.

5. Data Subject Rights

Under the GDPR, you have the following rights regarding your personal data:

• **Right to Access (Art. 15):** Request a copy of the personal data we hold about you.
• **Right to Rectification (Art. 16):** Request corrections to inaccurate or incomplete data.
• **Right to Erasure (Art. 17):** Request the deletion of your contact records.
• **Right to Restriction (Art. 18) & Objection (Art. 21):** Restrict or object to our processing of your professional data.

To exercise any of these rights, please email us directly at **info@exosomus.com**. We will process and respond to your request within 30 days.

6. Data Retention

We retain B2B inquiries, quote details, and contact records only for as long as necessary to fulfill the business or logistics relationship, or for up to 5 years from your last contact to comply with audit requirements for research-grade biological supply materials, unless you request prior erasure.

7. Security

Data is stored on secure networks and access is restricted to verified logistics and support personnel. We implement standard digital security measures to protect your professional information from unauthorized access.