Privacy Policy
Last updated: 11 August 2026
This Privacy Policy explains how Mevian Medicare Ltd. (“Mevian”, “we”, “us” or “our”) collects, uses, stores and protects personal data when you visit our website, contact us or otherwise interact with us through the website.
Mevian Medicare Ltd. is based in Cyprus and processes personal data in accordance with applicable European Union and Cyprus data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”).
1. Who we are
The data controller responsible for personal data processed through this website is:
Mevian Medicare Ltd.
Ioanni Tsirou 11
3021 Limassol
Cyprus
Email: info@mevian.com
Telephone: +357 99 00 55 26
2. Personal data we may collect
Depending on how you interact with our website, we may collect the following personal data:
Information you provide to us
When you contact us or submit an enquiry through our website, we may collect:
name and surname;
company or organisation;
email address;
telephone number;
information included in your message or enquiry; and
any other information you choose to provide to us.
If you contact us directly by email or telephone, we may also process the information contained in that communication.
Technical and website usage information
When you visit our website, certain technical information may be processed automatically, including:
IP address;
browser type;
device type;
operating system;
pages visited;
approximate geographical information;
website interaction and usage information; and
other technical information associated with accessing our website.
Where analytics cookies or similar technologies are used, they are subject to the choices described in our Cookie Policy.
3. How we use personal data
We may process personal data for the following purposes:
responding to enquiries and communications;
assessing and responding to partnership or distribution enquiries;
providing information about our company, products and services;
communicating with pharmaceutical companies, distributors, healthcare professionals and other business partners;
managing existing or prospective business relationships;
administering and improving our website;
monitoring website performance and usage where appropriate consent has been obtained;
maintaining the security and integrity of our website and systems;
complying with legal, regulatory and professional obligations;
establishing, exercising or defending legal claims; and
protecting our legitimate business interests where permitted by law.
We do not use personal data submitted through the website for purposes that are incompatible with those for which it was collected.
4. Legal bases for processing
Under the GDPR, we must have a lawful basis for processing personal data.
Depending on the circumstances, we may rely on:
Consent
We may process your personal data where you have provided clear consent for a specific purpose.
For example, consent may be used for optional analytics technologies or other activities where consent is legally required.
You may withdraw your consent at any time.
Steps prior to entering into a contract or performance of a contract
We may process your information where this is necessary to:
respond to a request concerning a potential business relationship;
discuss distribution or partnership arrangements;
take steps requested by you before entering into an agreement; or
perform an existing agreement.
Legitimate interests
We may process personal data where this is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms.
These interests may include:
responding to business enquiries;
developing and managing professional relationships;
operating and improving our website;
maintaining the security of our systems;
preventing misuse or fraud; and
managing and developing our business.
Legal obligations
We may process or retain personal data where necessary to comply with applicable legal, regulatory, accounting or other obligations.
5. Health and special-category personal data
Mevian operates in the fields of nutraceuticals, food supplements, Foods for Special Medical Purposes (FSMPs) and clinical nutrition.
Our website is primarily intended to provide corporate, scientific and product information and to support communication with distributors, pharmaceutical companies, healthcare professionals and other business partners.
The website is not intended to collect patient medical records, diagnoses, treatment information or other detailed health information through general contact forms.
Under the GDPR, information concerning an individual’s health is considered special-category personal data and is subject to additional protection.
Please do not submit medical records, diagnoses, test results, prescriptions or other sensitive health information through our general website enquiry forms unless we specifically request such information through an appropriate process.
If health-related personal data is nevertheless provided to us, we will assess the appropriate lawful basis and GDPR Article 9 condition before processing it further and will limit its use to what is legally permitted and necessary.
Submitting information through the website does not establish a doctor-patient relationship and the website should not be used for medical emergencies or individual medical diagnosis or treatment.
6. Product and medical enquiries
Information available through the Mevian website is intended primarily for general, professional and informational purposes.
Where you contact us with a question concerning one of our products, we may process your contact details and the information contained in your enquiry in order to provide an appropriate response.
Where an enquiry relates to medical advice, adverse events, product safety, product quality or another matter subject to specific regulatory obligations, we may need to retain, process or share relevant information where required by applicable law.
We will only process the information reasonably necessary for the relevant purpose.
7. Google Analytics
With your consent, our website uses Google Analytics 4 (“GA4”) to help us understand how visitors use the website.
Google Analytics may process technical and usage information such as:
pages visited;
interactions with the website;
browser and device information;
approximate geographical information; and
session information.
Google Analytics must not be intentionally configured to collect names, email addresses, telephone numbers, medical information or other information that directly identifies an individual.
Analytics processing will only take place where the appropriate consent has been provided through our cookie consent mechanism.
For more information, please see our Cookie Policy.
8. Sharing personal data
We do not sell personal data.
We may share personal information where reasonably necessary with trusted third parties that support the operation of our business or website.
These may include:
website hosting and IT service providers;
website maintenance and security providers;
analytics providers;
professional advisers such as lawyers, accountants and auditors;
business partners where necessary for a legitimate enquiry or relationship; and
public authorities, regulators or law-enforcement bodies where disclosure is legally required.
Where a third party processes personal data on our behalf, we require appropriate contractual and data protection safeguards where required by law.
9. International data transfers
Some service providers we use may process personal data outside Cyprus or outside the European Economic Area (“EEA”).
Where personal data is transferred outside the EEA, we will take appropriate measures to ensure that the transfer complies with applicable data protection legislation.
Depending on the circumstances, these safeguards may include:
a European Commission adequacy decision;
approved Standard Contractual Clauses;
another legally recognised transfer mechanism; or
another applicable GDPR safeguard.
10. How long we keep personal data
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to comply with applicable legal, regulatory, accounting and reporting obligations.
Retention periods may therefore vary depending on the type of information and the reason it was collected.
For example, general enquiries that do not develop into a business relationship may be retained for a shorter period than information associated with an ongoing contractual, regulatory or commercial relationship.
Where personal data is no longer required, we will delete, anonymise or securely dispose of it, subject to any legal retention requirements.
11. Data security
We take reasonable technical and organisational measures to protect personal data against:
unauthorised access;
accidental or unlawful destruction;
loss;
alteration;
disclosure; and
other unlawful processing.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
12. Your rights
Subject to the conditions and limitations of the GDPR, you may have the right to:
access personal data we hold about you;
correct inaccurate or incomplete personal data;
request the deletion of your personal data;
request restriction of processing;
object to certain processing, including processing based on legitimate interests;
receive certain personal data in a portable format;
withdraw consent where processing is based on consent; and
lodge a complaint with the relevant data protection supervisory authority.
You will not normally be required to pay a fee to exercise your rights.
We may need to verify your identity before responding to a request.
To exercise any of these rights, contact us at:
13. Complaints
If you believe that your personal data has been processed unlawfully, you may contact us first so that we can investigate your concern.
You also have the right to lodge a complaint with the competent supervisory authority.
For Mevian Medicare Ltd. in Cyprus, the relevant supervisory authority is the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus.
14. Links to other websites
Our website may contain links to external websites, including websites operated by business partners, manufacturers, professional organisations or other third parties.
We are not responsible for the privacy practices or content of third-party websites.
We recommend reviewing the privacy policy of any external website before providing personal data.
15. Children
The Mevian corporate website is not directed at children and is primarily intended for businesses, distributors, healthcare professionals and other professional visitors.
We do not knowingly seek to collect personal data directly from children through this website.
If we become aware that personal data relating to a child has been submitted through the website without an appropriate legal basis, we will take appropriate steps in accordance with applicable law.
16. Cookies
Our website uses cookies and similar technologies.
Information about the cookies we use, why we use them and how you can manage your preferences is provided in our Cookie Policy.
17. Automated decision-making
We do not currently use personal data collected through this website to make decisions based solely on automated processing that produce legal effects or similarly significant effects on individuals.
18. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect:
changes to our website or services;
changes to the personal data we process;
new service providers or technologies;
changes to our business operations; or
legal or regulatory developments.
The most recent version will be published on this website and the Last updated date will be revised accordingly.
19. Contact us
If you have any questions about this Privacy Policy, the way we process personal data or your data protection rights, please contact:
Mevian Medicare Ltd.
Ioanni Tsirou 11
3021 Limassol
Cyprus
Email: info@mevian.com
Telephone: +357 99 00 55 26
