Privacy Policy

At LifeXpan® we take the protection of your privacy seriously. In this Policy we explain clearly what personal data we collect, what we use it for, and what rights you have over it.

It applies to our websites (lifexpan.eu, eu.lifexpan.com, mx.lifexpan.com, us.lifexpan.com) and to the LifeXpan app (app.lifexpan.com).

1. Data controller

The controller responsible for the personal data collected through our websites and our app is:

Lifexpan Labs S.L.
Tax ID (NIF): B27520089
Registered address: C/ Oriente 78, 3-3, 08172 Sant Cugat del Vallès, Barcelona, Spain
Email: hola@mx.lifexpan.com

Personal data is processed in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), and other applicable legislation.

2. What data we process

Depending on how you use our websites and our app, we may process the following categories of data:

• Identification and contact details: name, surname, postal address, email address and phone number.
• Order-related data: products purchased, delivery address, order history, subscriptions, returns and any issues relating to your purchases.
• Payment and billing data: information needed to process and confirm payments and issue the relevant documentation. Card payments are processed directly by our payment provider: we neither see nor store your card number.
• Conversations with the website advisor: the questions you type into the chat and its replies (see section 3).
• App data: if you create an account, your medicine cabinet (the supplements you take and when) and your conversations with the app advisor, only with your express consent (see section 4).
• Browsing data: technical information generated while using the website (device, browser) and, only if you accept personalisation cookies, the products and articles you view and what you add to your basket (see section 11).
• Your communication preferences: which types of email you want to receive and whether you want personalised offers, and whether you click the links in our emails (we do not use pixels to find out if you open them).
• Communications: any information you provide when you contact our team.

3. The website advisor (AI chat)

On our websites you can ask an artificial intelligence advisor about our products, how to take them, shipping, or topics covered in our blog. You don't need to identify yourself.

• What we store: each question you type and the advisor's reply, the page you asked from, the website (store) and the language, and a random identifier for your browser. We don't know who you are and we don't store your IP address with the conversation. If you type an email address or phone number in the chat, it is redacted before being stored.
• On your device: the conversation is also saved in your browser's local storage, so you can keep following it as you move between pages or come back another day. You can delete it at any time using the “New conversation” button.
• What for: to reply to you and to improve the advisor and the website: to find out which queries are most common and which ones we're not answering well.
• Legal basis: providing the service you request when you ask a question, and our legitimate interest in improving our information and support, which does not require you to be identified.
• How long: 180 days. After that, it is automatically deleted.
• Who sees it: only the LifeXpan team, through our internal dashboard.
• Artificial intelligence provider: to generate each reply, your question is sent to Anthropic (provider of the Claude model), which acts as a data processor. Under its business terms, it does not use this data to train its models. This may involve an international transfer (section 7).

The advisor can guide you, but it does not replace your doctor or pharmacist. Please don't share health data or other personal details in the chat: it doesn't need them to help you.

Speaking to a person: if you ask for this via chat, we'll ask for your email address (and, if you like, your name) so our team can get back to you. Your query and any previous chat conversations are passed to our customer care team. We only use your email to reply to you. Legal basis: your request. We keep this conversation for as long as needed to assist you and, afterwards, to deal with any possible claims.

4. The LifeXpan app: your supplement cabinet and the app advisor

If you create an account in the app, you can save the supplements you take and chat with the app advisor, which takes your supplement cabinet into account. This information may reveal health-related data, so we only process it with your explicit consent, which you can withdraw at any time from the app. If you withdraw it, we delete your conversations with the advisor.

5. Waiting list and newsletter

• Waiting list (stores that haven't opened yet, such as Mexico): your email address and, if you like, your name, so we can let you know when we launch and send you your discount code. We'll only write to you for that purpose, unless you tick the separate box to also receive news, science and offers. With double opt-in confirmation by email. If you wish, you can tell us your age, city, how you heard about us and what supplements you take, to help us decide which products to stock: supplement details are only stored if you tick the specific consent box.
• Newsletter: your email address, with double opt-in confirmation, to send you offers, notices, news, science, blog articles and what we post on social media. In each email, you can choose which types of content you'd like to receive ('Choose what I receive') or unsubscribe from everything.
• Personalised offers: if you tick the box when signing up (or enable it in your preferences), we'll send you offers based on what interests you: the products you view or leave in your basket (if you've accepted personalisation cookies), what you buy and what the website advisor recommended to you in chat. To link what you view to your email, you need to confirm the newsletter or log in to your account.

Legal basis: your consent. You can unsubscribe at any time using the link in each email and we'll delete your details from the list.

5a. Communications to customers

If you've bought from us, we may email you offers and notices about our products similar to those you purchased, including suggestions based on your purchases (for example, a product that complements the one you bought). This is permitted under article 21.2 of Spanish Law 34/2002 on information society services (LSSI). Legal basis: our legitimate interest. You can object at any time, free of charge, using the 'Unsubscribe' or 'Choose what I receive' link in each email, or by writing to us.

We never use your wellbeing data from the app (your supplement cabinet or your conversations with its advisor) for these emails.

6. What we use your data for and the legal basis

We use your personal data mainly to:

• Manage your customer account.
• Process, prepare, charge for and deliver your orders and subscriptions.
• Manage returns, refunds and issues.
• Respond to your queries and requests.
• Comply with our legal, tax and accounting obligations.
• Prevent fraudulent use and ensure the security of our websites and services.
• Send you marketing communications when you've given your consent or, if you're a customer, about products similar to those you purchased (section 5a).
• Personalise the offers we send you based on what interests you, if you've agreed to this.
• Improve our websites, the advisor and our customer care.

We process your data on the following legal bases, depending on each purpose:

• Performance of a contract: to manage your orders, payments, deliveries, returns and related customer care.
• Compliance with legal obligations: including our tax, accounting and consumer protection obligations.
• Consent: for the newsletter, personalised offers, the waiting list, wellbeing data in the app and personalisation cookies.
• Legitimate interest: to improve the advisor and the website using anonymous chat conversations, to send our customers offers on products similar to those they've bought, to find out whether our emails are opened, to protect our websites and to prevent fraud, always ensuring our interests don't override your rights and freedoms.

You can withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.

7. Who we share your data with

We do not sell your personal data.

In order to provide our services, some providers access the information strictly necessary to carry out their functions, acting as data processors:

• Supabase: database, user accounts and server functions.
• Bunny.net: hosting and distribution of our websites.
• Resend: sending emails (order confirmations, notices, newsletter and campaigns).
• Stripe: card payments and e-wallets. For bank transfers and Bizum, our banking institution.
• Anthropic: the artificial intelligence behind the advisors on our website and app.
• Courier companies (such as Correos): delivery of your orders.
• Advisors, public authorities and bodies, where there is a legal obligation to do so.

Some of these providers may process data from countries outside the European Economic Area (for example, the United States). In such cases, the transfer is carried out with the safeguards required by applicable law, such as European Commission adequacy decisions or standard contractual clauses. You can ask us for more information about these safeguards.

8. How long we keep your data

We keep your data only for as long as necessary to fulfil the purpose for which it was collected:

• Website advisor conversations: 180 days.
• Purchases, invoicing and tax or legal obligations: the periods required by applicable law.
• Newsletter and waiting list: until you unsubscribe, keeping only the minimum needed to prove your request.
• Products and articles you view (personalisation cookies): 180 days, or until you withdraw your permission, which deletes them.
• Your email preferences and unsubscribe status: for as long as we hold your email address, so we can respect them.
• App wellbeing data: for as long as you maintain your consent and your account.

9. Your rights

Data protection law allows you to exercise, where applicable, the following rights:

• Access: find out what personal data we hold about you.
• Rectification: request the correction of inaccurate or incomplete data.
• Erasure: request the deletion of your data where the legally established circumstances apply.
• Objection: object to certain processing of your data.
• Restriction: request the restriction of processing in the cases established by law.
• Portability: receive certain data in a structured, commonly used and machine-readable format.
• Withdrawal of consent: withdraw previously given consent at any time.

To exercise your rights, write to us at hola@mx.lifexpan.com. We may ask you for the information needed to verify your identity. As website advisor conversations are anonymous, to locate them we may need you to tell us the approximate date and text of your questions.

If you believe that the processing of your data does not comply with the applicable regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD). If you live in Mexico, you can exercise your rights of access, rectification, cancellation and objection (ARCO) at the same address.

10. Security of your data

We apply technical and organisational measures designed to protect your personal data against unauthorised access, loss, alteration, disclosure or destruction, taking into account the nature of the data processed and the risks associated with the processing.

10 bis. Website statistics (cookie-free)

To understand which pages work well and how visitors reach a purchase, we measure visits without cookies and without storing anything in your browser. Each visit is identified with a fingerprint that changes every day (calculated using a secret key renewed daily), so we cannot track you from one day to the next or know who you are. We do not store your IP address: from your connection we only keep the country.

We record the pages viewed during that visit, what is clicked, what is searched for, where the visit came from (for example, Google or a campaign), the type of device and, if the visit ends in a purchase, the order it corresponds to, so we can calculate how many visits lead to a purchase and how much each source sells. In our internal dashboard, the team sees this data aggregated, along with purchase journeys, without the order number or any personal details. If your browser sends the "Global Privacy Control" signal, we do not measure your visit.

Legal basis: our legitimate interest in improving our website, with these measures in place so that you cannot be identified. We keep the detail of each visit (pages and clicks) for 120 days, and its summary for 400 days. You can object by writing to hola@mx.lifexpan.com.

11. Cookies and storage in your browser

Our websites use your browser's storage for what is necessary for them to work: your basket, your session, your language and your conversation with the advisor. These do not require your permission and we do not use them for anything else.

Personalisation (only with your permission): when you arrive, we ask you via a notice. If you click "Accept", we save which products and articles you view and what you add to your basket, using a random identifier for your browser (we don't know who you are). If you later log in to your account or confirm the newsletter, we link this to your email address to send you offers based on your interests (section 5). If you click "Necessary only", we do not save any of this.

You can change your choice at any time in Cookies: if you withdraw your permission, we delete what we had stored about your browsing. We do not use third-party advertising cookies or external analytics cookies.

12. Changes to this Privacy Policy

We may update this Privacy Policy whenever necessary to adapt it to legal or technical changes, or changes to our services. When changes are significant, we will take reasonable steps to inform you of them.

Last updated: 2 October 2026.