1.1. This Privacy Policy regarding the processing of personal data on the website hemoflex.com (hereinafter referred to as the “Policy”) defines the procedure and conditions for processing the personal data of users of the website https://hemoflex.com/ and its subdomains (hereinafter referred to as the “Website”), as well as the measures taken by Limited Liability Company “Inmed” to protect personal data.
1.2. The operator of personal data, the owner of the Website, and the seller of goods posted on the Website is LLC “Inmed” (hereinafter referred to as the “Operator”).
Full name: Limited Liability Company “Inmed”.
TIN / KPP: 7804447433 / 781901001.
OGRN: 1107847351556.
Address: 38, building 3, structure 1, Svyazi St., Strelna intracity settlement, Saint Petersburg, 198515.
Phone: +7 (812) 385-14-15.
E-mail: mail@hemoflex.com.
1.3. This Policy has been developed in accordance with Federal Law No. 152-FZ of 27.07.2006 “On Personal Data,” other regulatory legal acts of the Russian Federation in the field of personal data, and taking into account the recommendations of the authorized body for the protection of the rights of personal data subjects.
1.4. The Policy is posted in open access on the Website at https://hemoflex.com/privacy-policy/ or at another address indicated in the Website footer.
1.5. This Policy applies to the processing of personal data carried out by the Operator through the Website, as well as during subsequent interaction with the User in connection with their inquiry, request, order, review, visit to the Operator, or use of the Website services.
1.6. This Policy does not apply to third-party websites, services, and resources that the User may access via links placed on the Website, including marketplaces, messengers, social networks, video hosting platforms, mapping services, payment services, and partner websites. Such third parties independently determine the conditions for processing personal data in accordance with their own documents.
2.1. User — any individual who visits the Website, uses the Website materials, forms, or services, sends a request to the Operator, places an order, leaves a review, or provides data for a pass.
2.2. Personal data — any information relating directly or indirectly to an identified or identifiable individual.
2.3. Processing of personal data — any action or set of actions performed with personal data, including collection, recording, systematization, accumulation, storage, clarification, retrieval, use, transfer, depersonalization, blocking, deletion, and destruction.
2.4. Website services — interactive elements of the Website: feedback forms, request forms, review form, order form/cart, cookie banner, metering and analytics tools, and communication links.
2.5. Cookie files — small data fragments stored on the User’s device and used for Website operation, analytics, saving settings, and improving the convenience of Website use.
2.6. Consent — the User’s free, specific, informed, conscious, and unambiguous expression of will to process personal data.
2.7. Other terms are used in the meanings established by Federal Law No. 152-FZ “On Personal Data.”
3.1. When processing personal data, the Operator complies with the following principles:
processing is carried out on a lawful and fair basis;
processing is limited to achieving specific, predetermined, and lawful purposes;
processing of personal data incompatible with the purposes of collection is not permitted;
only personal data that correspond to the purposes of processing are processed;
the content and volume of the processed data correspond to the stated purposes;
personal data are stored no longer than required by the purposes of processing, the contract with the User, or the legislation of the Russian Federation;
necessary legal, organizational, and technical measures are taken to protect personal data.
4.1. The Operator processes Users’ personal data to the extent necessary for a specific processing purpose. The main categories of data subjects, purposes, and data categories are listed below.
4.2. Website visitors.
Purposes of processing: ensuring Website operation, information security, traffic analytics, and Website improvement.
Processed data: IP address; cookie files; browser, device, and operating system information; date and time of access; visited page addresses; traffic source; technical identifiers; actions on the Website; version of the consent and Policy recorded at the time of consent.
4.3. Users submitting a question, request, proposal, or inquiry.
Purposes of processing: processing the inquiry, feedback, preparing a response, consulting on goods, processing a purchase request, and protecting the Operator’s rights and lawful interests.
Processed data: surname, name, patronymic; phone number; e-mail; organization or place of work; position; message text; attached files; date and time of inquiry; consent information.
4.4. Buyers, customers, representatives of legal entities and individual entrepreneurs, and consignees.
Purposes of processing: conclusion and performance of a sales or supply contract, order placement, payment, delivery, return, exchange, claims handling, accounting, and tax accounting.
Processed data: full name; phone number; e-mail; organization name; position; delivery address; order data; payment status; contract, invoice, receipt, and UTD details; representative information; correspondence; claims and documents related to the order.
4.5. Visitors to the office, production site, or other territory accessed through the Operator.
Purposes of processing: issuing a pass, ensuring access control, security on the premises, and interaction with the administration or security of the site.
Processed data: full name; passport series and number; data from a foreign citizen’s identity document; information on registration in the Russian Federation for foreign guests; vehicle make and number; visit date; contact details; organization and position if needed.
4.6. Persons whose data appear in documents, attachments, messages, or correspondence of the User.
Purposes of processing: reviewing the inquiry, performing the contract, settling claims, and protecting the Operator’s rights.
Processed data: data contained in the relevant document, message, or attachment, to the extent necessary to achieve the processing purpose.
4.7. Users leaving reviews.
Purposes of processing: receiving, moderating, and publishing reviews about the product and the Operator’s work, feedback, and protection against false reviews.
Processed data: full name or first name; phone number; e-mail; position or status; review text; photograph or other image, if provided; review date; consent details for publication, if the review is published on the Website or in other materials of the Operator.
4.8. The Operator does not require the User to provide excessive personal data. The User must not enter third parties’ personal data in the Website forms without a lawful basis and the necessary consent of such persons.
4.9. The Operator does not intend to process special categories of personal data relating to health status, intimate life, racial or ethnic origin, political views, religious or philosophical beliefs, or biometric personal data.
4.10. The User must not send information about health status, diagnoses, treatment, injuries, or other special categories of personal data through the Website forms unless such information is required for the purpose of the inquiry. If such information is voluntarily sent by the User, the Operator processes it only to the minimal extent necessary to review the inquiry, or deletes or anonymizes it if there is no lawful basis for processing.
4.11. Photographs and other images provided by the User are not used by the Operator to identify the User and are not processed as biometric personal data unless otherwise expressly agreed with the User in a separate document.
5.1. The legal grounds for processing personal data are:
Federal Law No. 152-FZ of 27.07.2006 “On Personal Data”;
the Civil Code of the Russian Federation — when concluding and performing contracts with the User;
the Law of the Russian Federation “On Protection of Consumer Rights” — when interacting with individual buyers;
the Tax Code of the Russian Federation, the Federal Law “On Accounting,” and other acts establishing obligations for document retention and transaction accounting;
the User’s consent to the processing of personal data, including consent for processing data via forms, cookie files, receiving advertising messages, and publishing reviews;
a contract to which the User is a party, or actions taken at the User’s request prior to entering into a contract;
the Operator’s legitimate interests, including ensuring Website security, preventing abuse, protecting rights, and handling claims;
other legal grounds provided for by the legislation of the Russian Federation.
5.2. If personal data are processed on the basis of consent, the User has the right to withdraw consent in the manner specified in Section 12 of the Policy. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal and does not terminate processing if the Operator has another lawful basis to continue processing.
5.3. Consent to the processing of personal data is executed separately from other User documents and confirmations, if such consent is required by the legislation of the Russian Federation.
6.1. When submitting a feedback form, request, question, proposal, review, or order, the User provides personal data voluntarily, of their own free will, and in their own interest.
6.2. Before submitting the form, the User must confirm consent to the processing of personal data by checking a separate box or clicking a button, if processing is based on consent.
6.3. The Operator may record the fact of obtaining consent, including the date and time, IP address, user-agent, page URL, Policy version, consent text version, form identifier, and information about the cookie settings selected by the User. Such information is used to confirm the fact of obtaining consent and to protect the Operator’s rights.
6.4. Consent to receive advertising and marketing messages, as well as consent to publish a User’s review or image, is executed separately from consent to process data for handling an inquiry or fulfilling an order.
6.5. The Operator does not make decisions that produce legal consequences for the User or otherwise affect the User’s rights and lawful interests solely on the basis of automated processing of personal data.
7.1. The Website uses cookies and metering systems, including Yandex.Metrica, to ensure correct Website operation, analyze traffic, improve the structure and content of the Website, identify technical errors, and ensure information security.
7.2. When using cookies and metering systems, the IP address, cookie identifiers, browser and device details, date and time of visit, visited page addresses, traffic source, User actions on the Website, and other technical information may be processed.
7.3. The User may manage cookies through browser settings, as well as through the cookie banner interface on the Website, if such an interface is implemented. Disabling cookies may limit access to certain Website functions or affect the correctness of its operation.
7.4. Analytical cookies and metering tools that are not strictly necessary for the technical operation of the Website are used subject to the User’s consent, if such consent is required by the legislation of the Russian Federation.
7.5. The Operator recommends that the User review a separate Cookie Policy, if one is posted on the Website. In the event of a conflict between the Cookie Policy and this Policy regarding personal data processing, the provisions of this Policy shall apply, and the Cookie Policy shall apply regarding the technical description of cookies.
8.1. Personal data are processed using automation tools, without automation tools, and in a mixed manner.
8.2. The Operator performs the following actions with personal data: collection, recording, systematization, accumulation, storage, clarification, updating, modification, retrieval, use, transfer, provision, access, depersonalization, blocking, deletion, and destruction.
8.3. Dissemination of personal data, meaning disclosure to an indefinite number of persons, is carried out only if there is separate consent from the User for the processing of personal data authorized by the personal data subject for dissemination, or in other cases provided for by law.
8.4. The Operator ensures that databases containing personal data of Russian Federation citizens are stored using databases located within the territory of the Russian Federation, unless otherwise permitted by the legislation of the Russian Federation.
8.5. The Operator takes measures to restrict access to personal data only to those employees and engaged persons who need such access to perform their duties or provide services to the Operator.
9.1. The Operator may transfer personal data to third parties only if there is a lawful basis, to the extent necessary to achieve the processing purposes, and subject to compliance with the requirements of the legislation of the Russian Federation on personal data. Such third parties may include:
hosting providers, Website administrators, and technical contractors — for Website hosting and maintenance, ensuring the operation of forms, and protection against failures and attacks;
mail services, CRM systems, and request processing services — for receiving, storing, and processing inquiries, and communicating with Users;
payment aggregators, banks, and fiscal data operators — for accepting payments, refunds, issuing cash receipts, and complying with legal requirements;
delivery services, transport companies, and pick-up points — for delivery of goods, informing about delivery status, and return shipments;
accounting, legal, audit, and other consultants — for accounting, document preparation, and protection of rights and lawful interests of the Operator;
Yandex.Metrica and other analytics services — for traffic analysis and analysis of actions on the Website, and for Website improvement;
site administration, security services, and pass offices — for arranging access to the premises, ensuring access control, and maintaining security;
government authorities, courts, and other authorized persons — for compliance with legal requirements, court decisions, and requests from authorized bodies.
9.2. Persons to whom the Operator entrusts the processing of personal data undertake to maintain confidentiality, ensure the security of personal data, and use them only for the purposes specified in the instruction or agreement with the Operator.
9.3. When the User follows links to third-party websites and services, including marketplaces, messengers, social networks, video hosting platforms, and mapping services, personal data may be processed by the relevant third parties independently. The Operator does not control the conditions for processing personal data by such third parties.
10.1. As a general rule, the Operator does not carry out cross-border transfer of Users’ personal data when processing data through the Website.
10.2. If the Operator starts using services that involve cross-border transfer of personal data, or if such transfer becomes necessary to achieve the processing purposes, the Operator shall, before commencing such transfer, comply with the requirements of the legislation of the Russian Federation, including assessing the conditions of cross-border transfer and submitting a notification to Roskomnadzor in cases provided for by law.
10.3. If the User independently moves from the Website to third-party services, including messengers, social networks, marketplaces, and video hosting platforms, the processing of the User’s data by such services is governed by their own documents and may take place outside the Russian Federation.
11.1. Personal data are processed no longer than required by the purposes of processing, the contract with the User, or the legislation of the Russian Federation. The main retention periods are determined as follows:
inquiries, questions, requests, and proposals — until the inquiry is processed and a response is sent; thereafter for the period necessary to protect the Operator’s rights and settle possible claims, if applicable;
orders, contracts, payments, deliveries, returns, and claims — for the duration of contract performance and the storage periods established by accounting, tax, and consumer protection legislation, as well as for the limitation period in the event of a dispute;
cookies and metering data — for the duration of the relevant cookies and metering service settings, or until consent is withdrawn or cookies are disabled by the User, if applicable;
consent records and withdrawal records — for the duration of the consent, as well as for the period necessary to confirm the fact of obtaining or withdrawing consent and to protect the Operator’s rights;
reviews published on the Website or in the Operator’s materials — until consent to dissemination is withdrawn or the review is deleted by the Operator, unless another period has been agreed with the User;
data for pass issuance — until the visit is arranged and for the period necessary to comply with access control, site administration requirements, and protection of the Operator’s rights;
data for advertising and informational mailings — until consent to receive messages is withdrawn or the Operator stops the mailings.
11.2. Processing of personal data shall cease when the processing purpose is achieved, the retention period expires, consent is withdrawn in the absence of other lawful grounds for processing, unlawful processing is identified, the Operator ceases activity, or other circumstances provided for by the legislation of the Russian Federation occur.
11.3. After the processing purposes are achieved or other grounds for termination of processing arise, personal data shall be destroyed or anonymized in the time and manner prescribed by the legislation of the Russian Federation and the Operator’s internal documents.
12.1. The User has the right to:
receive information concerning the processing of their personal data;
request clarification, blocking, or destruction of personal data if they are incomplete, outdated, inaccurate, unlawfully obtained, or not necessary for the stated purpose of processing;
withdraw consent to the processing of personal data;
withdraw consent to receive advertising and informational messages;
withdraw consent to the dissemination of personal data, if such consent was given;
appeal the actions or inaction of the Operator to Roskomnadzor or a court;
exercise other rights provided for by the legislation of the Russian Federation.
12.2. To exercise their rights, the User may send a request to the Operator at mail@hemoflex.com or to the postal address of the Operator indicated in Section 1 of the Policy.
12.3. It is recommended that the request include the User’s full name, contact details for a response, the substance of the request, information enabling identification of the interaction with the Operator (for example, the order number, date of inquiry, e-mail or phone number provided in the form), and documents confirming the authority of the representative, if the request is submitted by a representative of the User.
12.4. The Operator reviews Users’ requests and provides responses within the time limits established by the legislation of the Russian Federation. If necessary, the Operator may request additional information required to identify the User and satisfy the request.
12.5. If the User withdraws consent to the processing of personal data, the Operator shall cease processing of personal data processed on the basis of such consent and destroy them if retention is no longer required for processing purposes and the Operator has no other lawful basis for processing.
13.1. The Operator takes the necessary legal, organizational, and technical measures to protect personal data from unlawful or accidental access, destruction, modification, blocking, copying, provision, dissemination, and other unlawful actions.
13.2. Such measures may include appointing responsible persons, restricting access, accounting for media and systems, using information protection tools, backup, antivirus protection, access control to information systems, contractual obligations of contractors, employee training, and internal regulations.
13.3. In the event of unlawful or accidental transfer, provision, dissemination of personal data, or access to them, the Operator takes measures required by the legislation of the Russian Federation, including notifying Roskomnadzor within the prescribed time limits, conducting an internal investigation, eliminating the consequences of the incident, and taking measures to prevent recurrence.
13.4. Where there is a risk of violation of the rights and lawful interests of Users, the Operator may notify Users of possible risks and recommended protective measures.
14.1. If inaccurate personal data are identified, the Operator shall correct them based on information provided by the User, their representative, or the authorized body for the protection of the rights of personal data subjects.
14.2. If unlawful processing of personal data is identified, the Operator shall stop such processing or ensure that it is stopped. If lawful processing cannot be ensured, the Operator shall destroy the relevant personal data or ensure their destruction.
14.3. Upon achievement of the processing purpose, withdrawal of consent, or loss of necessity for processing, personal data shall be destroyed or anonymized in the manner and within the time limits established by the legislation of the Russian Federation, unless otherwise required by contract or law.
14.4. Destruction of personal data shall be documented in a manner that allows confirmation of the fact of destruction, if such an obligation is established by law or internal documents.
15.1. If the User leaves a review and gives separate consent to its publication, the Operator may place the review on the Website, in social networks, and in the Operator’s presentation, advertising, and informational materials within the scope of the consent provided.
15.2. Publication of the User’s full name, first name, position, status, photograph, image, review text, and other data is permitted only if there is separate consent to the processing of personal data authorized by the personal data subject for dissemination, if such consent is required by law.
15.3. The User may establish prohibitions and conditions for the dissemination of personal data in the manner prescribed by the legislation of the Russian Federation. Withdrawal of consent to dissemination shall be sent to the Operator at the address indicated in Section 12 of the Policy.
16.1. The Operator may amend this Policy. The new version of the Policy enters into force from the moment it is posted on the Website, unless otherwise provided in the new version.
16.2. Users are advised to periodically check the current version of the Policy on the Website.
16.3. All questions regarding the Policy and the processing of personal data should be sent to mail@hemoflex.com.
16.4. Date of approval of this version: 16.06.2026.
16.5. Policy posting address: https://hemoflex.com/privacy-policy/.
© 2026 LLC “Inmed”. All rights reserved.