Privacy Policy

October 1, 2026

1. Introduction

Hyamax (“we,” “us,” “our”) respects your privacy and is committed to protecting the personal data we collect from visitors to our website and users of our dermal filler products and aesthetic medicine services.

Hyamax is based in Geneva, Switzerland. This Privacy Policy explains what data we collect, why we collect it, how we use and protect it, and what rights you have regarding your data. This Policy applies to users worldwide, while respecting relevant local regulations, including the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR) for users based in the European Union.

By using our website or contacting our company, you agree to the practices described in this Policy.

2. What Data We Collect

Depending on how you interact with us, we may collect the following categories of data:

Basic identification data: first name, last name, email address, phone number
Contact/inquiry form data: messages, questions, requests you send us
Technical data: IP address, browser type and version, device, operating system
Website usage data: pages you visit, time spent on the site, referral source (via cookies and similar technologies)
Health/aesthetic data (special category data): if you voluntarily provide information related to aesthetic treatments, allergies, prior procedures, or similar health matters through an inquiry or consultation, this data is considered a special category of data and is processed with your explicit consent and with particular care.

Please note that our website does not process online payments and does not collect payment card data.

3. Purpose of Processing

We use your data for the following purposes:

Responding to your inquiries and requests
Providing information about our products and services
Processing and confirming consultation/appointment requests submitted through our online booking form
Improving the functionality and content of our website
Fulfilling legal obligations (e.g., retaining medical records, where required)
Sending notifications and marketing communications — only with your prior consent, with the option to unsubscribe at any time

4. Legal Basis for Processing

We process your data based on one or more of the following legal grounds:

Your consent (e.g., for marketing, cookies, processing of special category data)
Performance of a contract or steps taken prior to entering into a contract (e.g., responding to a service inquiry)
Legal obligation (e.g., record retention required by regulations governing health/aesthetic services)
Legitimate interest of the company (e.g., website security, fraud prevention), provided this does not override your rights

5. Cookies

Our website uses cookies and similar technologies to:

Ensure basic website functionality
Analyze traffic and user behavior via Google Analytics
Improve the user experience

Google Analytics may set cookies and collect data such as your IP address (typically anonymized/truncated) and browsing behavior on our site. This data is processed by Google in accordance with its own privacy policy. You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on.
You can control and disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the website.

6. Sharing Data with Third Parties

We do not sell your data to third parties, and we do not share your data with external clinics, distributors, or business partners. We only share data with:

Service providers who help us operate our website (hosting, email services, Google Analytics) — under appropriate data protection agreements
Competent authorities, when legally required

All third-party service providers are required to process data in accordance with applicable data protection laws.

7. International Data Transfers

Since our services are used by customers worldwide, your data may be processed or stored in countries outside your country of residence. In such cases, we implement appropriate safeguards (e.g., standard contractual clauses, selection of reliable service providers) to ensure an adequate level of protection for your data.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law (e.g., health/medical records may be retained longer in accordance with statutory retention periods).

9. Data Security

We implement reasonable technical and organizational measures (encryption, access controls, regular security updates) to protect your data from unauthorized access, loss, or misuse. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Your Rights

Depending on the law applicable to you (e.g., GDPR for users in the EU), you have the right to:

Request access to the data we hold about you
Request correction of inaccurate data
Request deletion of your data (“right to be forgotten”)
Restrict or object to processing
Request data portability
Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal
File a complaint with the relevant data protection authority in your country

To exercise these rights, please contact us using the details in Section 13.

11. Children's Data

Our services are not intended for individuals under the age of 18. We do not knowingly collect data from minors. If we become aware that we have collected data from a minor without appropriate parental/guardian consent, we will take steps to delete that data.

12. Changes to This Policy

We reserve the right to update this Privacy Policy from time to time. We will notify you of any significant changes via our website or other appropriate means. The date of the last update is always indicated at the top of this document.