Privacy policy

Privacy Policy


Last updated: 01.08.2026


1. Who we are (Data Controller)

The controller of your personal data is DR YAN LABS Spółka z ograniczoną odpowiedzialnością (DR YAN LABS Ltd.), with its registered office at ul. Św. Wawrzyńca 1a/1, 60-539 Poznań, Poland, registered in the National Court Register (KRS) under number 0001093821, REGON 528057617, VAT (NIP) 7812067104 (“Dr Yan Labs”, “we”, “us”).


You can contact us about your data at any time: info@dryanlabs.com.


2. Scope of this policy

This policy explains how we collect, use, share and protect personal data when you visit www.dryanlabs.com, contact us, or sign up to Dr Yan’s Health Club or our newsletter. We currently operate as a business-to-business ingredient supplier and an educational community; we do not sell finished products online at this time. If we launch online sales in the future, this policy will be updated to cover orders, payments and delivery.


We process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) and the Polish Personal Data Protection Act of 10 May 2018.


3. What data we collect

  • Contact and B2B inquiries. When you use a contact form or email us, we collect the data you provide, such as your name, company, business email, phone (optional) and the content of your message.
  • Health Club and newsletter. When you sign up, we collect your email address and your consent record.
  • Technical and usage data. When you visit the site, we may collect your IP address, device and browser information, and information about how you use the site, in part through cookies and similar technologies (see section 6).


We do not intentionally collect special categories of data. Please do not include health or other sensitive information in messages to us.


4. Why we use your data and our legal bases

We use personal data only for specified, lawful purposes:

  • To respond to your inquiries and manage a business relationship - to answer contact and B2B messages and provide requested documentation or samples. Legal basis: our legitimate interest in responding and running our business (Art. 6(1)(f) GDPR); and, where a contract is involved, performance of a contract or steps prior to a contract (Art. 6(1)(b) GDPR).
  • To send educational content and marketing (Health Club / newsletter) - where you have subscribed. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time.
  • To operate, secure and improve the site - including analytics and diagnosing technical or security issues. Legal basis: your consent for non-essential cookies/analytics (Art. 6(1)(a)); our legitimate interest in the security and improvement of our site (Art. 6(1)(f)).
  • To comply with legal obligations - for example tax and accounting duties. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
  • To establish, exercise or defend legal claims. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).


We do not carry out automated decision-making that produces legal or similarly significant effects on you.


5. Who we share data with

We may share personal data with trusted service providers that process it on our behalf and under a data processing agreement, such as: our website/e-commerce platform, email and marketing tools, analytics providers, and IT/hosting providers.


We do not sell your personal data. We may disclose data where required by law or to protect our legal rights.


6. Cookies and analytics

Our site uses cookies and similar technologies for essential functionality and, with your consent, for analytics and marketing. Essential cookies are necessary for the site to work. Non-essential cookies (analytics, marketing) are only used after you give consent through our cookie banner, and you can change or withdraw your choice at any time.


We use analytics (for example Google Analytics) to understand how the site is used. Analytics data is collected only after consent. You can also opt out of Google Analytics using Google’s browser add-on: https://tools.google.com/dlpage/gaoptout.


You can manage or delete cookies through your browser settings; disabling some cookies may affect how the site works.


7. Social media plugins

Our site may link to or embed content from social platforms (for example Facebook, Instagram, LinkedIn). These platforms may process your data under their own privacy policies, for which we are not responsible.


8. International transfers

Some of our service providers may be located outside the European Economic Area (for example in the United States). Where we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as an adequacy decision, the EU–US Data Privacy Framework where applicable, or the European Commission’s Standard Contractual Clauses.


9. How long we keep your data

We keep personal data only as long as necessary for the purposes above:

  • inquiry and business-relationship data: for as long as needed to handle your request and our relationship, and afterwards for the period required to defend claims and meet legal (e.g. tax) obligations;
  • consent-based data (Health Club/newsletter): until you withdraw consent or it is no longer needed;
  • after that, data is kept only until the relevant limitation periods for potential claims expire.


10. Your rights

Under the GDPR you have the right to: access your data; have it corrected; have it erased; restrict or object to its processing; data portability; and withdraw consent at any time (without affecting processing carried out before withdrawal). To exercise any of these, contact us at info@dryanlabs.com.


You also have the right to lodge a complaint with the Polish supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.


11. Children

Our site is not directed at children. Minors should not send us personal data or subscribe to our services without the consent of a parent or guardian.


12. Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. Access to personal data is restricted to authorised persons only.


13. Changes to this policy

We may update this policy to reflect legal, technical or business changes. The current version is always available on this page, with the “last updated” date above.


14. Contact

Questions about your data or this policy: info@dryanlabs.com, or by post to the registered address above.