Privacy Policy

Last updated: September 28, 2026

At DERMAX BIOCOSMETIC LABS LLC (“DERMAX”, “we”, “us” or the “Company”), we respect the privacy of our users, clients, suppliers, company representatives, laboratories, manufacturers, and other persons who interact with us.

This Privacy Policy explains how we may collect, use, store, share, and protect personal information obtained through dermaxlabpro.com, our contact forms, and communications related to our services.

1. Data Controller

The controller responsible for information collected directly through this website is:

DERMAX BIOCOSMETIC LABS LLC
United States of America
Website: dermaxlabpro.com
Email: info@dermaxlabpro.com

Depending on a particular business relationship, other entities involved in a project may act as independent controllers or processors in accordance with applicable law.

2. Information We May Collect

Information Provided Directly

When a person completes our forms, requests information, requests a quotation, or communicates with DERMAX, we may receive information such as:

• Name or identifying information of the contact person.
• Company name.
• Country.
• Job title.
• Telephone or WhatsApp number.
• Email address, where applicable.
• Website.
• Social media profiles.
• Service of interest.
• Content of messages or comments.
• Information related to a commercial request.

Information Related to Services

When a commercial relationship is established, we may additionally receive:

• Information concerning legal representatives.
• Corporate information.
• Billing information.
• Supplier and manufacturer information.
• Regulatory documents.
• Product-related documentation.
• Certificates.
• Information necessary for importation, representation, distribution, intellectual property, or health-related regulatory processes.
• Communications and records related to performance of the service.

DERMAX will seek to request only information reasonably necessary for the corresponding purpose.

3. Information Collected Automatically

Depending on the technologies enabled on the website, our server, hosting provider, or other technology providers may process technical information related to browsing activity, including:

• IP address.
• Browser type.
• Operating system.
• Device used.
• Date and time of access.
• Pages visited.
• Technical information necessary for security and operation.

When we use cookies, analytics tools, or other technologies that require consent under applicable law, we will implement the corresponding mechanisms.

4. Purposes of Processing

We may use personal information to:

• Respond to inquiries.
• Contact potential clients.
• Prepare quotations and proposals.
• Evaluate potential business relationships.
• Provide contracted services.
• Manage representation and distribution projects.
• Support regulatory and health-related processes.
• Support trademark-related processes.
• Communicate with manufacturers and laboratories.
• Manage relationships with suppliers and business partners.
• Conduct commercial follow-up.
• Manage payments and billing.
• Fulfill contractual obligations.
• Comply with legal or regulatory obligations.
• Prevent fraud and unlawful activities.
• Protect the security of the website and our systems.
• Maintain administrative and commercial records.
• Exercise or defend legal rights.

When permitted by law and where the appropriate authorization exists, we may also use certain contact information to send commercial information related to our services.

The data subject may request to stop receiving such communications at any time.

5. Legal Bases for Processing

Depending on the applicable law and the nature of the relationship, DERMAX may process information based on:

• Consent of the data subject.
• Performance of pre-contractual measures requested by the data subject.
• Performance of a contract.
• Compliance with legal obligations.
• Legitimate business interests permitted by applicable law.
• Establishment, exercise, or defense of legal claims.

Where specific regulations require express consent, DERMAX will request such consent.

6. Business Information

A substantial portion of our services is directed toward businesses and organizations.

Certain purely corporate information may not be considered personal data in some jurisdictions. However, where information identifies an individual—for example, a representative, employee, director, or business contact—it will be processed in accordance with this Policy and applicable law.

7. Sharing of Information

DERMAX does not sell personal information as part of its ordinary business model.

We may share information when reasonably necessary with:

• Manufacturers.
• Laboratories.
• Suppliers.
• Commercial representatives.
• Consultants.
• Attorneys or specialized agents.
• Intellectual property agencies.
• Health authorities.
• Customs authorities.
• Government entities.
• Logistics operators.
• Technology providers.
• Web hosting services.
• Communication platforms.
• Billing or accounting services.
• Financial institutions or payment processors.

Information shared will, to the extent reasonably possible, be limited to what is necessary to fulfill the corresponding purpose.

8. Public Authorities

When a client engages services requiring the filing of applications or documentation with administrative, health, customs, intellectual property, or governmental authorities, certain information may be disclosed to those authorities.

Information submitted to an authority may become subject to the public disclosure, record retention, and public records access rules of the corresponding jurisdiction.

9. International Transfers

DERMAX operates from the United States and maintains international business relationships, including activities related to Latin American markets.

For this reason, information may be processed, stored, or transmitted between different countries.

Where an international transfer of data is subject to specific requirements, DERMAX will adopt the measures reasonably necessary in accordance with applicable law.

10. Retention of Information

We will retain information for as long as reasonably necessary to:

• Address the request that led to its collection.
• Maintain the business relationship.
• Perform contracted services.
• Comply with regulatory, accounting, tax, or legal requirements.
• Resolve disputes.
• Exercise or defend rights.

When information is no longer necessary and there is no legitimate obligation to retain it, it may be deleted, anonymized, or archived in accordance with our internal procedures.

11. Security

DERMAX adopts reasonable administrative, organizational, and technical measures intended to protect information against:

• Unauthorized access.
• Loss.
• Alteration.
• Disclosure.
• Destruction.
• Misuse.

However, no electronic transmission or storage system can be considered absolutely invulnerable.

12. Rights of Data Subjects

Depending on applicable law and the location of the data subject, the data subject may have the right to:

• Know whether we process their data.
• Access their information.
• Request updates or corrections.
• Request deletion where legally applicable.
• Withdraw previously granted consent.
• Object to certain processing activities.
• Request restrictions on processing.
• Request information regarding the use of their data.
• File complaints with the competent authority.

Requests may be sent to:

info@dermaxlabpro.com

DERMAX may request information reasonably necessary to verify the identity of the requester before addressing certain rights.

13. Data Subjects Located in Colombia

Where Colombian personal data protection law applies, data subjects may exercise the rights established by the corresponding regulations, including the right to know, update, and rectify their personal data; request proof of authorization where applicable; be informed about the use of their data; submit inquiries or complaints; revoke authorizations; and request deletion where legally applicable.

Processing will be carried out in accordance with the principles and obligations applicable under Colombian personal data protection law.

14. Rights Under United States Laws

Residents of certain jurisdictions within the United States may have additional rights under applicable state law.

Where such laws apply to DERMAX based on their scope, processing volume, or other legal criteria, the Company will respond to applicable requests in accordance with the procedures and timeframes established by applicable law.

15. Minors

DERMAX's services are primarily directed toward businesses, professionals, and adults.

We do not intentionally collect personal information from minors for commercial purposes.

If we become aware that information from a minor has been collected without the legally required authorization, we will take reasonable steps to delete it.

16. Cookies and Similar Technologies

The website may use strictly necessary cookies or other technologies to enable technical functions, security, and proper operation.

Where additional analytics, advertising, or tracking tools are implemented, their use will comply with applicable legal provisions and, where appropriate, will be subject to applicable notice or consent mechanisms.

Users may manage certain cookies through their browser settings.

17. Third-Party Services and Links

Our website may link to websites or services operated by third parties.

When a user leaves our website and interacts directly with a third party, any processing of information performed by that third party will be subject to its own policies.

DERMAX does not control the privacy policies of external websites.

18. Automated Decision-Making

As part of the ordinary services described on this website, DERMAX does not use exclusively automated systems intended to make decisions that produce significant legal effects concerning users.

If this practice changes, we will update this Policy accordingly.

19. Changes to this Policy

DERMAX may modify this Policy to reflect changes that are:

• Legal.
• Regulatory.
• Technological.
• Operational.
• Related to our services.

The current version will be available on this website and will identify its last updated date.

20. Contact

To exercise rights related to personal data or ask questions regarding this Policy:

DERMAX BIOCOSMETIC LABS LLC
Website: dermaxlabpro.com
Email: info@dermaxlabpro.com
United States of America