Who we are

MEDO is the controller of personal data processed through this website. MEDO is an export brand for adult e-cigarette products offered only in compliant markets. This notice covers https://medo.pedoli.com/ and www.medo-lab.com. For privacy questions, contact service@medo-lab.com.

Information we collect

When you send a business enquiry through the contact form, we collect the fields you complete: Name, Company, Country/Region, Email, Phone/WhatsApp, Business Type, and Message. We use this information to identify your organisation and reply. Form submissions are processed with WPForms and delivered to our team by email.

If you leave a comment, we collect the details shown in the comment form, your IP address, and your browser user agent string, to help detect spam. An anonymized hash of your email address may be sent to Gravatar to check for a profile image. After a comment is approved, that image may appear with the comment. Gravatar is described at https://automattic.com/privacy/.

Adult use and minors

This website presents nicotine products for adult use only. MEDO products are not intended for minors. Do not submit personal data about anyone below the legal age for nicotine products in the relevant market. We do not knowingly collect personal data from children. If you believe a minor has sent us information, email service@medo-lab.com so we can delete it.

Cookies

If you leave a comment, you may choose to save your name, email address and website in cookies so you do not have to enter them again. Those cookies last for one year.

If you visit the WordPress login page, a temporary cookie checks whether your browser accepts cookies. It contains no personal data and is discarded when you close the browser. When you log in, WordPress also sets cookies for login status and screen display choices. Login cookies last two days and screen-option cookies last one year. If you select Remember Me, login persists for two weeks. Logging out removes the login cookies.

If you edit or publish an article while logged in, WordPress may store a cookie with the post ID you edited. It contains no personal data and expires after one day. Pages built with Elementor may set cookies needed for the editor and front-end display.

The contact form may set cookies required for security and submission (WPForms). This site may load Google Fonts, which can involve a connection to Google. Strictly necessary cookies support security and basic function of WordPress. We do not operate a separate named cookie-consent platform on this site.

Legal bases and third-party content

We process personal data where it is needed to respond to an enquiry or take steps at your request; where we have a legitimate interest in running, securing and improving the site and communicating with professional contacts, provided that interest is not overridden by your rights; where you have given consent (for example a comment or an optional cookie); and where we must comply with a legal obligation.

Pages may include content hosted by others, such as fonts, images or video. Embedded content behaves as if you visited the third-party site. Those providers may collect data, use cookies or measure interaction under their own policies. Links to other websites are not covered by this notice.

Who we share your data with

We do not sell personal data. Enquiry details may be processed by our website host, WordPress, WPForms and email delivery so that we can receive and answer messages. If a password reset is requested for an account, the IP address may be included in the reset email. We may disclose data to professional advisers or public authorities where the law requires it or to protect legal claims. Service providers act on our instructions.

How long we retain your data

Contact-form submissions and related correspondence are kept for as long as needed to handle the enquiry and for a reasonable period afterwards, typically up to 24 months after the matter is closed, unless a longer period is required for a dispute or a legal duty.

If you leave a comment, the comment and its metadata may be kept indefinitely so that follow-up comments can be recognised. If you register an account, profile information is stored until the account is removed. You can view, edit or delete your profile details, except the username. Website administrators can also access that information.

What rights you have over your data

Depending on applicable law, including the GDPR where it applies, you may ask to access, correct or erase your data, restrict or object to processing, receive a copy in a portable form, or withdraw consent. You may also lodge a complaint with a competent supervisory authority. To make a request, email service@medo-lab.com. We may need to verify your identity. We will not erase information we are required to keep for legal, administrative or security reasons.

Where your data is sent

Personal data may be processed on systems operated by our hosting, WordPress, form or font providers, which may be outside your country and, in some cases, outside the European Economic Area. Where a transfer requires a safeguard, we rely on an adequacy decision or contractual clauses as applicable. We may update this notice from time to time; the current version is published on this page. Contact service@medo-lab.com.