Privacy Notice

Effective date: 31 August 2026 Version 1.0

1. Who we are

This notice explains how CellGenic LLC, a Florida limited liability company (“CellGenic”, “we”, “us”, “our”), collects, uses, shares and protects personal data through the website cellgenic.com and the sales, support and marketing activities connected to it.

Our address, which is also the address for receiving notices about this notice, is:

CellGenic LLC, Datran Center, 9100 S Dadeland Boulevard, Suite 1500, Miami, Florida 33156, United States

CellGenic supplies cells, exosomes and peptides to verified physicians, clinics and distributors. Access to pricing and ordering is restricted to providers whose professional credentials we have verified.

2. What this notice covers

This notice covers personal data we handle when you:

visit cellgenic.com, including pages that require no account
use the peptide calculator or the certificate of analysis lookup
complete a contact form, a provider application or a distributor application
create or use a provider account
place, pay for or receive an order
register for or ask about a workshop, webinar, congress or training course
contact us by email, telephone, WhatsApp or text message
receive marketing or service communications from us

It does not cover the separate websites and services of other companies in our group, or of any independent distributor, physician or clinic. Those organizations publish their own notices and decide for themselves how they handle personal data.

3. The personal data we process

We process the following categories of personal data. Where a category can include sensitive personal data, we say so expressly.

Category	What it includes
Identification data	First name, last name, and where it appears on a document you upload, a photograph or signature
Contact data	Email address, telephone and mobile number, WhatsApp number, city, state or province, and country
Professional data	Your professional role, medical or professional license or registration number, the credential document you upload, your specialty, years of experience in regenerative medicine, the type of practice you work in, and the clinic or institution you are associated with
Commercial profile data	Approximate monthly patient volume, expected monthly spend band, the product categories you are interested in, and the outcome of the credential check we carry out
Account data	Username, password in encrypted form, account status and verification status
Transaction data	Orders, quotes, invoices, shipping and billing addresses, order history, and the record that payment was made. Card and bank details are entered into and held by our payment provider, not by us
Communications data	The content of messages between you and us by email, contact form, telephone, text message and WhatsApp, and the record of when those communications took place
Browsing and device data	IP address, device and browser type and version, operating system, language, the pages you view and how long you spend on them, the page or advertisement that brought you to the site, advertising click identifiers, cookie and similar identifiers, and recordings of how you move through and interact with pages
Event data	Your registration details for a workshop, webinar, congress or course, whether you attended, and any questions you submit

Sensitive personal data. We do not ask for information about your health, and our products are supplied to verified professionals rather than to patients. Two points still matter:

A professional license number is not sensitive personal data. It records a professional qualification and it can be consulted publicly in national professional registers.
If you tell us about your own health, for example in a free text message or by identifying yourself as someone seeking treatment, that is sensitive personal data. We do not ask for it, we ask you not to send it, and where we receive it we use it only to direct your enquiry to the right place and then remove it.

The peptide calculator runs entirely in your browser. The values you type into it are not sent to us and we do not store them.

4. Where the data comes from

Directly from you, when you complete a form, create an account, place an order, upload a document, register for an event or contact us.
Automatically, when you use the site, through the technologies described in section 6.
From public professional registers, when we check a license or registration number you have given us against the register kept by the relevant authority.
From other companies in our group and from event organizers, where you gave your details at a congress, workshop or webinar run under one of our brands.

5. Why we process your data

We are required to distinguish between purposes that are necessary for our relationship with you and purposes that are not. We do that here.

5.1 Necessary purposes

These purposes are required in order to give you what you have asked for. You cannot opt out of them and continue to use the service they support.

To answer an enquiry you send us and to provide customer support.
To assess a provider or distributor application, including checking the professional license or registration you give us against the relevant public register.
To create, secure and administer your provider account, and to control access to provider only pricing and ordering.
To take, process, invoice, ship and track your order, and to handle returns, complaints and product quality matters.
To provide product documentation, including certificates of analysis and batch traceability.
To register you for a workshop, webinar, congress or course you asked to attend, and to give you the practical information you need to attend.
To send you service communications about your account, application, order or registration.
To operate, secure and maintain the website, to prevent fraud and abuse, and to keep the records we are required to keep.
To comply with legal, tax, accounting, customs, regulatory and product traceability obligations, and to establish, exercise or defend legal claims.

5.2 Optional purposes

These purposes are not necessary for our relationship with you. You can refuse them, now or at any time afterwards, and refusing them does not affect anything in section 5.1.

Marketing, advertising and commercial prospecting. To send you newsletters, product and availability updates, educational material, event invitations and other commercial communications by email, telephone, text message and WhatsApp.
Advertising measurement and audience building. To measure how our advertising performs and to build audiences so that our advertising reaches relevant professionals on third party platforms.
Analytics and improvement of the site. To understand how the site is used, including through recordings of page interactions, so that we can improve it.
Segmentation and prioritization. To group and prioritize enquiries and accounts so that the right specialist responds, and to tailor what we show and send you.
Market research. To ask your opinion on our products, services and events.

5.3 How to refuse the optional purposes

You may refuse any or all of the purposes in section 5.2 by writing to info@stemcellsgroup.com with the subject line “Optional purposes”, giving your name, the email address or telephone number you gave us, and the purposes you are refusing.

If you do not tell us otherwise within five business days of this notice being made available to you, we will understand that you do not object to the purposes in section 5.2. Refusing them at any later date is equally effective and we will act on it.

You can also opt out at any time by using the unsubscribe link in any marketing email, by replying STOP, END, CANCEL, UNSUBSCRIBE or QUIT to any text message, or by asking us to stop in any WhatsApp conversation. We keep an internal exclusion list so that a request to stop is respected across email, telephone, text message and WhatsApp.

6. Cookies, pixels and similar technologies

When you visit cellgenic.com, technologies placed by us and by other companies collect data automatically. We use:

Strictly necessary technologies, which make the site work: your session, your language and currency, whether you are logged in, the contents of your cart, and protection against automated abuse.
Analytics technologies, which tell us how many people visit, which pages they use and how they move through the site.
Session recording technologies, which record page interactions such as clicks, scrolling and mouse movement so that we can find and fix problems. We configure these to mask text typed into form fields.
Advertising technologies, which recognize that a visit came from an advertisement, measure whether it led to an enquiry or an order, and allow relevant advertising to be shown to you on other platforms.

Through these technologies we obtain the browsing and device data described in section 3.

How to switch them off. You can block or delete cookies in your browser settings, usually found under “Privacy” or “Site settings”. Most browsers also offer a “do not track” or global privacy control setting, and where your browser sends one we treat it as an opt out of the advertising and analytics purposes. You can opt out of interest based advertising through the tools at youradchoices.com and youronlinechoices.eu. Blocking strictly necessary technologies will stop parts of the site from working, including login and checkout.

7. Automated processing

Some of what we do is automated. We use automated tools, including artificial intelligence tools, to sort and prioritize enquiries, to group accounts, to help check documents submitted with a provider application, and to produce internal summaries of conversations.

A decision to approve or refuse a provider or distributor application is always reviewed by a person before it takes effect. No automated process on its own determines whether you are approved.

You have the right to object to automated processing that evaluates your professional performance, economic situation, health, reliability or behavior without a person being involved. You also have the right to ask which data were used and to ask us to reconsider. Write to us at the address in section 11.

8. Who we share your data with

We do not sell your personal data.

We share personal data with the following categories of recipient, and only what each of them needs:

Who	Why
Companies within our group	To operate shared sales, event, training and support functions, and to route your enquiry to the right brand
Service providers acting on our instructions	Website hosting and maintenance, customer relationship management, email and messaging delivery, telephony, cloud storage, document verification and analytics. These companies act only on our instructions and may not use your data for their own purposes
Payment providers	To take and reconcile payment. They receive card and bank details directly from you and handle them under their own terms
Shipping, logistics and customs providers	To deliver your order and complete import and export formalities
Advertising and measurement platforms	To measure how our advertising performs and to reach relevant professionals. This involves sharing online identifiers and, in some cases, a hashed form of your contact details
Authorized distributors and local partners	Where you are in a market served by a local partner, so that they can respond to you and supply you
Professional advisers	Lawyers, accountants, auditors and insurers, where they need the data in order to advise us
Public authorities, regulators and courts	Where the law requires it, or to establish, exercise or defend legal claims

We do not share your data with anyone else for their own marketing purposes.

Transfer clause. Some of the recipients above are third parties rather than companies acting on our instructions, so sharing with them counts as a transfer. By providing your data you indicate whether or not you accept those transfers. If you do not accept them, write to info@stemcellsgroup.com before providing your data, or as soon as possible afterwards. Refusing a transfer that is necessary to fulfill an order or an application may mean we cannot complete it.

9. International transfers

Our headquarters are based in the United States, and we operate and serve customers worldwide. As part of our global operations, your data may be transferred to and processed in countries other than your own.

When personal data is transferred internationally, we take appropriate measures to protect it in accordance with applicable laws and this Privacy Notice.

10. How long we keep your data

We keep personal data only as long as we need it for the purposes in section 5, and then delete or anonymize it. In deciding how long that is, we consider:

how long our relationship with you lasts, and how long afterwards a question might reasonably arise
the retention periods that tax, accounting, customs, product traceability and other laws require of us in each market where we operate
the period during which a legal claim could still be brought
whether you have asked us to stop contacting you, in which case we keep the minimum record needed to honor that request

Where you ask us to delete your data, we block it first and delete it once any legally required retention period has run.

11. Your rights, and how to use them

You have the following rights. They are separate from one another and you can use any of them at any time.

Access, Rectification, Cancellation and Objection (ARCO). You may ask us what personal data we hold about you and how we use it; ask us to correct data that is wrong or incomplete; ask us to delete data we no longer have a reason to hold; and object to us using your data for a particular purpose.

Withdraw your consent. Where we rely on your consent, you may withdraw it at any time. This does not affect anything we did before you withdrew it.

Refuse the optional purposes. See section 5.3.

Limit the use or disclosure of your data. You may ask to be added to our internal exclusion list, which stops commercial contact across email, telephone, text message and WhatsApp.

Additional rights in some places. Depending on where you live you may also have the right to receive a copy of your data in a portable format, to restrict how we use it, to object to automated decisions, and to opt out of the sale or sharing of your data for cross context behavioral advertising. We apply these rights to anyone who asks, wherever they live, rather than checking your location first. We do not sell personal data, and we treat a request to stop the sharing of your data for

How to make a request

Write to our data protection department:

Data Protection Department, CellGenic LLC Email: info@stemcellsgroup.com, with “Privacy” in the subject line Postal address: as set out in section 1

Tell us your name, an address for our reply, which right you are using, and what you want us to do. Please attach a copy of an identity document, or the equivalent if you are acting on someone else’s behalf, so that we can confirm the request is genuinely yours.

We will confirm that we have received your request and will respond within the period allowed by the law of your country. There is no charge for making a request, although we may charge the cost of postage or copying if you ask for the information in physical form.

If you are not satisfied with our response you may complain to the data protection authority in your country. In Mexico that is the Secretaria Anticorrupcion y Buen Gobierno.

12. Children

This site and our products are intended for professionals. The site is not directed at children, we do not knowingly collect personal data from anyone under 18, and you must be 18 or over to use it. If you believe a child has given us personal data, write to us and we will delete it.

13. Security

We maintain administrative, technical and physical measures to protect personal data against loss, misuse, unauthorized access, disclosure, alteration and destruction, and we require our service providers to do the same. No system is completely secure. If a security breach occurs that significantly affects your rights, we will notify you.

14. Changes to this notice

We may update this notice. The current version is always published at cellgenic.com/privacy-policy/, with the effective date and version number at the top.

We will publish any change on that page. Where a change is significant, because we begin processing a new category of data, add a new purpose, change who we share data with, or change how you can use your rights, we will make that clear on the page and, where we hold your contact details and the change affects you, we will tell you directly.

15. Contact

For anything relating to this notice, or to use any of your rights:

CellGenic LLC Datran Center, 9100 S Dadeland Boulevard, Suite 1500, Miami, Florida 33156, United States Email: info@stemcellsgroup.com, with “Privacy” in the subject line Telephone: +1 305 560 5337

This notice should be read together with our Terms and Conditions at cellgenic.com/terms-and-conditions/.