Privacy document
Privacy policy
A plain-language account of what the site collects, why it is needed and how people can exercise their privacy choices.
Last updated July 31, 2026
Section 01
Scope and accountability
This policy describes the personal information EternaGen proposes to handle through the public site, accounts, partner applications, approved commerce and support. EternaGen must designate a privacy officer responsible for the privacy program, requests, provider oversight and incident response.
The policy applies to information under EternaGen’s control. Third-party services may also apply their own notices when they interact directly with you.
Section 02
Information we collect
Depending on the service used, information may include account identity and contact details; organization membership, role and eligibility; partner-application details; order, delivery and transaction records; support communications; security and audit records; and consent-based site analytics.
Do not submit medical records, health information, government identifiers, passwords or complete payment-card details. Payment credentials are intended to be handled by the approved payment provider, not stored in the EternaGen application database.
Section 03
Purposes and consent
Information is collected for stated purposes such as providing the requested service, verifying eligibility, administering an account or organization, reviewing an application, processing an approved order, preventing misuse, keeping required records and responding to support.
Consent must be meaningful and proportionate to the sensitivity of the information. Optional analytics or marketing uses require a real choice and are not bundled with access to unrelated services.
Section 04
Use, access and disclosure
Access is limited by role, operational need and, where applicable, organization membership. Information may be disclosed to contracted providers only for their approved function, to protect the service or rights of others, to complete a requested transaction, or where authorized or required by law.
EternaGen does not sell personal information. Provider access does not authorize a provider to use information for its own unrelated purposes.
Section 05
Providers and processing locations
Hosting, identity, database, payment, email, shipping, monitoring and analytics providers may process limited information for their contracted function. Some processing may occur outside your province or Canada and may be subject to lawful access in another jurisdiction.
The final provider list, processing locations and cross-border safeguards must be confirmed from the production configuration before collection is enabled. A provider appearing in technical documentation is not proof that it is active.
Section 06
Retention and deletion
Unsuccessful or inactive partner inquiries are scheduled for review or deletion after 18 months. Account, order, transaction, compliance, security and tax records may require different periods based on legal and operational obligations.
Information that is no longer required should be securely deleted or anonymized, subject to legal holds, dispute preservation and documented retention requirements.
Section 07
Safeguards and incidents
Administrative, technical and organizational safeguards are designed in proportion to the information handled, including authenticated access, tenant-scoped permissions, audit records, request controls and encryption supplied by approved infrastructure providers. No internet service can promise absolute security.
EternaGen must maintain an incident process and breach register, including assessment, notification and reporting where required.
Section 09
Access, correction and choices
You may ask about the existence, use or disclosure of your information, request access or correction, withdraw optional consent, or raise a concern by contacting support@eternagenlife.com. Identity verification may be required before a request is fulfilled.
Consent withdrawal does not affect prior lawful processing and may limit a service where the information is necessary to provide it.
Section 10
Questions and complaints
Privacy concerns should first be directed to the designated EternaGen privacy contact. The final policy must publish the privacy officer’s title, mailing address and escalation process.
The Office of the Privacy Commissioner of Canada publishes information about privacy rights and complaints under federal private-sector privacy law. Applicable provincial law may also apply depending on the organization and activity.