This policy explains how Regenera Activa Worldwide SL collects and uses personal data when you visit our website, fill in one of our forms, book a call with us, register at one of our events, contact us or buy from us. It applies to healthcare professionals, clinics, distributors, patients and all other visitors. By using our website or sending us your data, you confirm that you have read this policy.
Regenera Activa Worldwide SL is responsible for your personal data (the “data controller”).
| Company | Regenera Activa Worldwide SL |
| Address | C/ Sant Ferran 10-12, local, 08031 Barcelona, Spain |
| info@regeneraactiva.com | |
| Phone | +34 93 514 57 56 |
We only collect the data we need for the purpose you contacted us for. Most of it you give us directly.
| When | What we collect |
|---|---|
| You contact us or fill in a form on our website | Name, email, phone number, country, city, clinic or company, role or specialty, the products you are interested in, and your message |
| You request a demo as a professional | Your answers to our questions (treatments you offer, your role, timeline, approximate number of hair-loss patients per month, country) and your booking details: date, time and time zone of the call |
| You contact us as a patient | Name, email, phone number, country, whether you are experiencing hair loss, and what you would like to do (for example, find a certified clinic) |
| You register at one of our events | Name, email, phone number, clinic or company, country, specialty, topics of interest and anything you ask us to prepare |
| You speak or write to us | Emails, WhatsApp messages, video-call details and notes from our calls with you |
| You buy from us | Billing and delivery details, order history and payment records |
| You visit our website or see our ads | IP address, device and browser type, pages visited, and how you reached us (for example, which ad you clicked). See section 7 for cookies |
Health information. Telling us that you experience hair loss is information about your health. We only collect it with your explicit consent, given on the form, and use it only to answer your request. Please do not send us medical records, photographs or other health details we have not asked for. The information on our website is for general and professional information only and is not medical advice; diagnosis and treatment decisions are made by your doctor.
Sometimes we receive your details from a third party, for example a distributor or clinic you asked to put you in touch with us, or an event organiser when you visit our stand.
| Purpose | Legal basis |
|---|---|
| Answer your enquiry and send you the information you asked for | Steps you asked us to take before a contract, or our legitimate interest in answering business enquiries |
| Book your demo or call, and send confirmations and reminders by email, SMS or WhatsApp | Steps you asked us to take before a contract |
| Help patients find a certified clinic and answer their questions | Your explicit consent (health information) |
| Manage our relationship with clinics and distributors: orders, delivery, invoicing, training and support | Performance of a contract |
| Keep accounting and tax records, and meet our obligations as a medical device company, such as product safety (vigilance) reports | Legal obligation |
| Send you news, offers and event invitations | Your consent, which you can withdraw at any time. For existing customers, our legitimate interest in telling you about similar products, with an easy way to opt out |
| Register you at our events and follow up after the event | Your consent, given on the registration form |
| Measure and improve our website and advertising, and show our ads to people likely to be interested | Your consent, given through the cookie banner |
| Keep our website and systems secure and prevent fraud, misuse and spam | Our legitimate interest |
| Establish, exercise or defend legal claims, and enforce our terms and agreements | Our legitimate interest |
| Prepare or carry out a reorganisation, merger, sale or transfer of all or part of our business | Our legitimate interest |
Where we rely on legitimate interest, we have balanced it against your rights, and you can object at any time (see section 9). We do not make decisions about you based solely on automated processing.
Photographs and filming at events. We may take photographs or film at our stands, courses and events for our communication. Where you can be clearly identified, we will ask for your permission or inform you on site, and you can ask us not to include you.
We never sell your data. We share it only with the people and companies below, and only what they need for the purpose.
Service providers who work for us. They act on our behalf, may only use your data on our instructions and are bound by a data processing agreement.
| Provider | What they do for us |
|---|---|
| HubSpot | Customer database (CRM) and emails |
| Typeform | Website and campaign forms |
| Calendly | Booking demos and calls, and sending reminders |
| Zoom | Video calls |
| Meta Platforms (Facebook, Instagram, WhatsApp) | Advertising, measuring our ads, and WhatsApp messages |
| Zapier | Connecting our tools, for example to send event welcome emails |
| Email delivery, website hosting, IT and accounting providers | Sending emails, hosting this website, technical support and bookkeeping |
Our group companies and authorised distributors. If you are in a country covered by a distributor, we may pass your enquiry to them so they can serve you locally.
Certified clinics. If you are a patient and ask us to put you in touch with a clinic, we share your contact details with that clinic, with your consent.
Independent controllers. Distributors, clinics and platforms such as Meta use the data they receive under their own privacy policies and are responsible for their own processing. We are not responsible for how they handle your data once it has been shared at your request or with your consent.
Authorities, advisers and business transfers. We may share data when the law requires it or to protect our rights, for example with tax or health authorities, courts, lawyers, auditors and insurers. If our business, or part of it, is reorganised, sold or merged, your data may be transferred to the new owner under the same protections.
Transfers outside the European Economic Area. Some of our providers process data in the United States or other countries. In those cases we rely on the EU–US Data Privacy Framework, the European Commission’s Standard Contractual Clauses or another safeguard recognised by law.
Our website may contain links to other websites and to our social media pages, and may show embedded content such as videos. We are not responsible for the content or privacy practices of those websites and platforms. Please read their own privacy policies before giving them your data.
Our website uses cookies and similar technologies. Only the necessary ones are set without your consent. You choose the rest in our cookie banner and can change your choice at any time.
| Type | What it does | Needs your consent |
|---|---|---|
| Necessary | Makes the website work, keeps it secure and remembers your cookie choice | No |
| Analytics | Tells us which pages are visited, so we can improve the website | Yes |
| Marketing | The Meta Pixel measures our Facebook and Instagram ads and shows our ads to people likely to be interested | Yes |
When you arrive from one of our ads, the link carries labels that tell us which campaign and ad you came from. We store them with your form answers so we know which campaigns work.
For the full list of cookies and how long they last, see our Cookie Policy. You can also block or delete cookies in your browser settings; some parts of the website may then not work properly.
We keep your data only as long as we need it for the purposes above, then delete or anonymise it.
| Data | How long |
|---|---|
| Enquiries and leads that did not become customers | 2 years after our last contact with you |
| Customer and order records | For the business relationship, then 6 years to meet Spanish commercial and tax law |
| Marketing preferences | Until you unsubscribe or withdraw your consent |
| Patient enquiries and health information | 1 year after your request is answered, or sooner if you withdraw your consent |
| Call and booking records | 2 years |
| Product safety (vigilance) records | As long as medical device regulations require |
We may keep data for longer, with access restricted, when the law requires it or when it is needed to establish, exercise or defend legal claims, until those obligations or claims have ended.
You can ask us at any time to:
To use any of these rights, email info@regeneraactiva.com with the subject “Data protection”. To protect your data, we will ask you to confirm your identity before we act. We will reply within one month; this can be extended by two further months for complex or numerous requests, and we will tell you if so.
These rights have limits set by law. For example, we may keep data we are legally required to keep or need for legal claims, and we may refuse, or charge a reasonable fee for, requests that are clearly unfounded or excessive. If we cannot fully meet your request, we will explain why.
If you are not satisfied with our answer, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos, or to the data protection authority in the EU country where you live. We would appreciate the chance to resolve your concern first, so please contact us before you do.
We use appropriate technical and organisational measures to protect your data, including access controls, encrypted connections and reputable providers. Only the people who need it for their work can see it, and they must keep it confidential.
No transmission over the internet and no storage system is completely secure, so we cannot guarantee absolute security. You are responsible for keeping any passwords and devices you use to contact us safe. If a security incident affects your data, we will act promptly and inform you and the authorities when the law requires it.
Our website and services are intended for adults. We do not knowingly collect data from anyone under 18. If we learn that we have done so, we will delete it.
This policy is governed by Spanish law and the EU General Data Protection Regulation (GDPR). This does not take away any rights you have under the laws of the country where you live. If this policy is translated, the English version prevails in case of any difference.
We may update this policy when our services, our providers or the law change. The new version applies from the date it is published on this page, shown below. If a change significantly affects how we use your data, we will inform you or, where required, ask for your consent.
Last updated: 28 October 2026