Privacy Policy

Last updated: 13 September 2026

We process your personal data under Regulation (EU) 2016/679 (GDPR) and Romanian law. This page explains what we collect, why, who we share it with, how long we keep it and what your rights are.

1. Data controller

SIMAC VIOREL ÎNTREPRINDERE INDIVIDUALĂ (a Romanian sole proprietorship), which runs Holistic Regeneration through the website holisticregeneration.com.

Tax ID (CUI) 55460227 · Trade Register F2026040846002 · EUID ROONRC.F2026040846002
Registered office: Strada Dealul Boului 29B, Sat Rădăcinești, Comuna Berislăvești, Vâlcea County, Romania
Data protection contact: contact@holisticregeneration.com

2. What we collect

Where	Data
Biological age calculator	first and last name, email; your answers about health and lifestyle (age, sex, BMI, sleep, diet, smoking, alcohol, stress, blood pressure, conditions, etc.)
Guides, webinars, contact form	name, email, phone (if you give it), your message
Booking a consultation	first name, email, phone; billing details: full name, country, region, city, street address, postal code and, if you ask for a company invoice, the company name and tax number; health data: sex, date of birth, weight, height, diagnosis, medication, allergies, blood pressure, diet, sleep, smoking, alcohol, stress, fasting history; optionally, your spiritual perspective
Paying for the consultation	amount, date and status of the payment. Your card details never reach us: you enter them directly on Stripe's secure page.
Technical data	IP address, date and time a form was sent, one strictly necessary cookie that remembers you confirmed your email address

Health data and religious or philosophical beliefs are special categories of data (Art. 9 GDPR). We ask for them only to prepare your consultation and use them for nothing else.

3. Why we use it, and on what legal basis

The consultation: booking, preparing and holding it — to enter into and perform the contract (Art. 6(1)(b) GDPR). Health data and spiritual perspective — on your explicit consent (Art. 9(2)(a)), given through the checkbox in the form.
The biological age calculator — on your consent (Art. 6(1)(a) and Art. 9(2)(a)).
Invoicing and bookkeeping — to comply with legal obligations (Art. 6(1)(c)): Romanian tax and accounting law.
Newsletters (news, guides, invitations) — only if you agreed; you can withdraw at any time, from any email or by writing to us.
Site security and abuse prevention (email verification code, anti-bot protection) — our legitimate interest in not receiving fake sign-ups.

We make no automated decisions with effects on you and do not profile you for marketing.

4. Who we share it with

We do not sell data. Only the providers who help us deliver the service receive it, each only with what it needs:

Provider	Purpose	Data
Our web and email hosting provider	running the site, storing bookings, sending emails	all form data
Stripe Payments Europe Ltd. (Ireland)	card payment	email, amount, the card details you enter
OVH US LLC (USA)	the server running our order, payment and invoicing service	name, email, phone, billing details, the order — not your health data
SmartBill (Intelligent IT SRL, Romania)	issuing the invoice	billing details, email, phone
Romanian Tax Administration (ANAF) — RO e-Factura	legally required invoice reporting, for customers in Romania	the invoice data
Mailgun Technologies, Inc. (USA)	sending the invoice and some order emails	name, email, the invoice
Cloudflare, Inc. (USA) — Turnstile; Google (USA) — reCAPTCHA	protecting forms against bots	IP address, technical browser data
Google (USA) — Google Meet, Google Fonts	the online meeting; displaying fonts	the name shown in the meeting; IP address
Our email marketing provider	newsletters	name, email — only with your consent

Data may be disclosed to public authorities only where the law requires it.

5. Transfers outside the European Economic Area

Some of the providers above are in the United States. Transfers happen only with the safeguards the GDPR requires: the provider's certification under the EU-US Data Privacy Framework, or the European Commission's standard contractual clauses. The health data from the booking form does not reach the US server.

6. How long we keep it

Health data from a booking: at most 2 years after the consultation, then deleted. Earlier if you withdraw your consent, except for what we need to show that the service was provided.
Invoices and billing details: 10 years, as Romanian accounting law requires.
Calculator results and newsletter list: until you withdraw your consent.
Email verification code: expires after 15 minutes; the cookie remembering the confirmation, after 60 days.

7. Cookies

We use only strictly necessary cookies: the one remembering your email confirmation and those set by the anti-bot services. No advertising cookies. You can delete them at any time in your browser settings.

8. Your rights

to access your data and receive a copy;
to rectification and erasure;
to restrict processing and to object;
to data portability;
to withdraw your consent at any time, without affecting earlier processing;
to lodge a complaint with the Romanian supervisory authority, ANSPDCP (dataprotection.ro), or with the authority in the EU country where you live.

Write to contact@holisticregeneration.com. We reply within one month.

9. Minimum age

Consultations are for people aged 18 or over. We do not knowingly collect data about minors.

10. Security

Connections are encrypted (HTTPS), access to data is limited to the controller, and card payments happen only on Stripe's page. No system is entirely risk-free; if a breach affects you, we will tell you as the law requires.

11. Changes

We may update this policy. The version in force is the one published here, with the date above.