PRIVACY POLICY
Last updated: 25 September 2026
This Privacy Policy (the “Policy”) sets out how MB “Solea Pharma” collects, uses, stores, transfers and otherwise processes personal data when you use the FILLaCELL website (www.fillacell.com), buy goods, subscribe to newsletters, interact with us on social media or otherwise use our services.
We aim to uphold the highest standards of personal data protection and transparency in line with the European Union General Data Protection Regulation (GDPR, 2016/679), the Law on Legal Protection of Personal Data of the Republic of Lithuania and other applicable legislation.
By using the Website you confirm that you have read this Policy and understand its contents.
1. DATA CONTROLLER
Company: MB “Solea Pharma”
Address: Visorių g. 18-32, LT-10210 Vilnius, Lithuania, EU
Email: hello@fillacell.com
Website: www.fillacell.com
In this Policy MB “Solea Pharma” may also be referred to as the “Company”, “we” or “our”.
2. WHAT DATA WE COLLECT
Depending on how you use the Website, we may collect and process the following personal data:
- first name and surname;
- phone number;
- email address;
- date of birth;
- gender;
- delivery and billing address;
- payment information (processed through third-party payment operators – we do not store payment card details);
- order history and communication information;
- account and newsletter subscription information;
- IP address, browsing and behavioural data;
- cookie, device and browser information;
- social media profile information (if you sign in through a social media account);
- customer service information.
Certain data is collected automatically when you use the Website. We do not collect special categories of personal data (for example health data) unless you provide them on your own initiative.
3. PURPOSES AND LEGAL BASES OF PROCESSING
Your personal data is processed for the following purposes and on the following legal bases:
3.1. Performance of a contract (GDPR Article 6(1)(b))
- receiving, processing and fulfilling orders;
- administering payments;
- delivering goods;
- administering accounts;
- customer service and communication.
3.2. Legitimate interest (GDPR Article 6(1)(f))
- fraud prevention and security;
- improving the operation of the Website;
- statistical analysis;
- direct marketing to existing customers (with the right to object).
3.3. Consent (GDPR Article 6(1)(a))
- sending newsletters and marketing messages (to new customers who have not yet bought products);
- the use of non-essential cookies (analytics, advertising, remarketing);
- providing personalised offers;
- profiling and individualised advertising.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
3.4. Legal obligation (GDPR Article 6(1)(c))
- complying with accounting, tax and other statutory requirements;
- responding to requests from authorities and to court orders.
3.5. The “Refer a friend” programme
A “Refer a friend” programme may be offered on the Website, allowing registered FILLaCELL customers to recommend FILLaCELL to other people and to receive the reward set out in the programme for successful referrals.
For the purpose of administering the programme we may process referral information, referral link or code data, account information, order history, the status of a referral and information about the reward linked to a referral. To attribute a referral and to protect the programme from misuse, technical data may be used, including cookie, IP address, device, browser and other technical information, as well as certain contact or payment identifiers where this is necessary to apply the programme rules and to detect misuse.
By providing the email address of a friend or another person, the user confirms that they have the right to pass on these contact details for the purpose of a referral. Such data is used for a one-off referral invitation or related communication and is not used for ongoing direct marketing without a separate legal basis or the recipient’s consent.
Data relating to the “Refer a friend” programme is processed to the extent necessary to administer the programme, attribute referrals, calculate and grant rewards, prevent misuse and protect the Company’s legitimate interests, on the legal bases set out in this Privacy Policy.
4. COOKIES AND TRACKING TECHNOLOGIES
4.1. The Website may use cookies, pixels, tags, SDKs, local browser storage and other similar technologies that help ensure the Website works, remember your choices, analyse how the Website is used, ensure security and, where consent has been given, carry out marketing and advertising functions.
4.2. A cookie is a small text file or similar technology that is stored on your device or used to obtain information about your browser or device. Cookies may be first-party cookies, set by the Website itself, or third-party cookies, set by the technologies of service providers used on the Website.
4.3. By purpose, cookies can be divided into the following main categories:
4.3.1. Essential cookies – necessary for the proper operation and security of the Website, for maintaining a session, signing in to an account, cart and checkout functions, carrying out the order process and saving language or other necessary choices. These cookies may be used without separate consent where they are necessary to provide the specific service you have requested.
4.3.2. Functional / preference cookies – help remember your choices and improve the functionality and usability of the Website. They are used according to their purpose and, where they are not necessary to provide a Website service, only with your consent.
4.3.3. Analytics cookies – help us understand how visitors use the Website, which pages are visited, which functions are used and how the Website performs. They may be based, for example, on Google Analytics or other analytics services and are activated only with consent, where such consent is required by applicable law.
4.3.4. Marketing / advertising cookies – may be used to measure the effectiveness of advertising campaigns, build audiences, run remarketing, track conversions and provide personalised advertising. They are activated only with your consent, where such consent is required.
4.3.5. Social media and third-party cookies – may be used when third-party services are integrated into the Website, for example social media, video, advertising, payment or other service functions. Depending on the service and the technology, such cookies may be set only with your consent.
4.4. The Website may use platforms and technologies such as WooCommerce, WordPress, Elementor, Google Analytics, Google Ads, Google Tag Manager, Meta/Facebook Pixel, social media integrations, newsletter and analytics platforms and other technologies needed for the Website to work and for business processes.
4.5. The specific set of cookies used on the Website may change as Website functions, plugins, analytics, advertising or other technologies are updated. Specific cookie names, providers, retention periods and purposes may therefore be presented and updated in the cookie management tool.
4.6. Cookies may be used for the following purposes: ensuring the technical operation of the Website; storing cart and login information; ensuring secure checkout; remembering user choices; analysing Website traffic and use; evaluating the results of marketing campaigns; tracking conversions; building advertising audiences; running remarketing; personalising content or offers where there is a legal basis and the necessary consent has been obtained.
4.7. Essential cookies may be used without consent where they are necessary for the Website to work or to provide the specific service you have requested. Non-essential cookies, including analytics, marketing and advertising cookies, are used only with your consent in cases where such consent is mandatory.
4.8. Cookie consent must be freely given, specific, informed and unambiguous. You can choose individual cookie categories where that choice is offered in the cookie management tool. Refusing non-essential cookies must not be hidden or made unreasonably difficult.
4.9. Your cookie choices may be stored in a separate technical cookie or similar technology so that the Website can remember whether and which choices you have made. Such a consent management mechanism may be used so that you are not asked to choose again on every visit.
4.10. You may change or withdraw your consent to non-essential cookies at any time using the cookie settings / privacy choices tool available on the Website. Withdrawing consent does not affect the lawfulness of processing lawfully carried out before the withdrawal.
4.11. If you refuse non-essential cookies, the Website must still be available to the extent that essential cookies are enough for it to work. However, certain additional functions, personalisation, analytics or advertising functions may not work or may work only to a limited extent.
4.12. In addition to the cookie management tool on the Website, you can manage cookies in your browser settings, including blocking, deleting or allowing them. Blocking essential cookies may disrupt some Website functions and the operation of your account, cart or checkout.
4.13. Cookie retention periods depend on the purpose of the particular cookie. Cookies may be session cookies, which are deleted when the browser is closed, or persistent cookies, which remain for a set period. The specific retention period depends on the particular cookie and its provider and, where applicable, is stated in the cookie management tool.
4.14. Third-party service providers may process information collected through cookies or other tracking technologies in accordance with their own privacy policies and terms of use. Third-party service providers may change the technologies they use, cookie names, purposes or retention periods.
4.15. Where cookies are used to collect personal data or to link it with personal data we already hold, such processing is carried out for the purposes and on the legal bases set out in this Privacy Policy. The use of non-essential cookies, where consent is required for it, is based on your consent under Article 6(1)(a) GDPR.
4.16. The use of cookies and other tracking technologies may involve your IP address, device and browser information, the date and time of your visit, the pages you visited, clicks, technical identifiers, interactions with advertising, conversions and other browsing data, depending on the particular technology and your choices.
4.17. Where advertising or analytics technologies are used, information may be transferred to the relevant technology providers so that they can provide their services. In such cases the privacy rules of those providers also apply, as described in more detail in the section of this Privacy Policy about third parties.
4.18. The Website may use Google Analytics, Google Ads, Google Tag Manager, Meta/Facebook Pixel and similar technologies only in line with the purpose of the particular technology and the applicable consent and data protection requirements. Where a particular technology requires consent, it should not be activated until such consent has been obtained.
4.19. The information presented in the cookie management tool can be treated as the most up-to-date source about the non-essential cookie categories and specific cookies actually activated on the Website at that time, because the list may change because of technical updates to the Website.
4.20. If we change the purposes for which cookies are used, the technologies used or other essential aspects of privacy, we update this Privacy Policy accordingly and, where necessary, ask for your consent again.
5. GOOGLE, META AND THIRD-PARTY TECHNOLOGIES
We may use Google, Meta/Facebook and other third-party services for analytics, advertising, remarketing, audience building, conversion tracking and marketing optimisation. These technologies may collect information about your device, browsing behaviour, visit history, IP address, interactions with advertising and your actions on the Website.
Third-party platforms are subject to their own privacy policies and terms of use, which MB “Solea Pharma” does not control. We recommend reading the privacy policies of the relevant platforms.
6. PROFILING AND AUTOMATED DECISIONS
We may use automated systems, analytics tools and artificial intelligence (AI) solutions in order to improve the user experience, optimise advertising, personalise offers, automate customer service, analyse the use of the Website and ensure security.
Automated decisions that produce significant legal effects for you or a similarly significant impact are not taken without human involvement. If such processing were to be applied, we would inform you separately in accordance with Article 22 GDPR.
7. TRANSFER OF DATA TO THIRD PARTIES
We may transfer your data to:
- logistics and courier service providers – for the delivery of goods;
- payment operators – for processing payments;
- IT and hosting service providers – for administering the Website;
- marketing and analytics platforms – for marketing activities (with consent);
- state authorities – on the basis of applicable law.
MB “Solea Pharma” takes reasonable and commercially reasonable steps to choose reliable partners but, to the extent permitted by applicable law, is not liable for the actions of third parties, their privacy practices, system failures, data leaks, technical errors or security breaches in their infrastructure.
8. INTERNATIONAL DATA TRANSFERS
In certain cases your data may be transferred outside the European Economic Area (EEA). In such cases MB “Solea Pharma” applies the safeguards provided for by law, including standard contractual clauses (SCCs), European Commission adequacy decisions or other lawful safeguard mechanisms (Articles 46–49 GDPR).
9. DATA RETENTION PERIODS
Data is kept no longer than is necessary for the purposes for which it was collected, or for as long as required by law. Indicative periods:
- order and accounting data – up to 10 years (under the legislation governing accounting);
- marketing consent data – until consent is withdrawn;
- customer enquiry data – up to 3 years;
- server and security logs – up to 12 months.
Once the retention period ends, data is securely deleted or anonymised.
10. SECURITY OF PERSONAL DATA
MB “Solea Pharma” applies technical and organisational security measures, including SSL/TLS encryption, access control, server protection, system monitoring, backups and software updates.
Despite the measures applied, no internet system can guarantee absolute security. We will inform you and the supervisory authority of any data security breaches known to us that may pose a high risk to your rights and freedoms, in the manner prescribed by law.
11. THE USER’S OBLIGATIONS
The user is responsible for the accuracy of the information they provide, for protecting their login details, for the confidentiality of their passwords and for using the Website safely. If you notice a possible security breach, we recommend informing us immediately at hello@fillacell.com.
12. DIRECT MARKETING
Newsletters and marketing messages are sent only with your consent or on other bases permitted by law (for example to existing customers about similar products, on the basis of legitimate interest). You have the right to unsubscribe from marketing messages at any time by clicking the unsubscribe link in the email or by contacting us at hello@fillacell.com.
13. AVAILABILITY OF SERVICES AND TECHNICAL LIMITATIONS
The Website is provided on an “AS IS” and “AS AVAILABLE” basis. MB “Solea Pharma” does not guarantee that the Website will always work without errors, disruptions or temporary unavailability. Because of maintenance, updates or the operation of third-party infrastructure, certain functions may be temporarily limited.
MB “Solea Pharma” is not liable for disruptions to data security, system operation or service availability if they arose because of circumstances the Company could not reasonably control (force majeure), including cyber attacks, viruses, internet or power supply disruptions, actions of state authorities, natural disasters, acts of war or other force majeure events.
14. SOCIAL MEDIA
Our social media accounts may be administered using third-party platforms such as Meta/Facebook, Instagram, TikTok, Pinterest or others. MB “Solea Pharma” does not control the privacy practices of these platforms and is not liable for their actions or their data processing.
15. MINORS
The Website is not intended for persons under 18 years of age. We do not knowingly collect the personal data of minors. If we learn that we have collected such data, we will delete it without delay.
16. YOUR RIGHTS
Under the GDPR you have the following rights:
- the right of access to your data (Article 15 GDPR);
- the right to have inaccurate data corrected (Article 16 GDPR);
- the right to erasure of your data (Article 17 GDPR);
- the right to restriction of processing (Article 18 GDPR);
- the right to object to processing (Article 21 GDPR);
- the right to withdraw consent at any time;
- the right to data portability (Article 20 GDPR);
- the right to lodge a complaint with the supervisory authority.
You can exercise your rights by contacting us at hello@fillacell.com. We will respond to your request within 1 month (in exceptional cases within 3 months, of which we will inform you).
If you believe your rights have been infringed, you may contact the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).
17. CHANGES TO THE PRIVACY POLICY
MB “Solea Pharma” has the right to update this Policy from time to time in response to changes in the law, technological developments or business needs. The updated version takes effect from the moment it is published on the Website. We may inform you of significant changes by email or by a clearly visible notice on the Website.
18. CONTACT
Company: MB “Solea Pharma”
Address: Visorių g. 18-32, LT-10210 Vilnius, Lithuania, EU
Email: hello@fillacell.com
Website: www.fillacell.com
