Privacy Policy

Last updated: 14.10.2026

Limited Liability Company “Kompaniia Enzym” (“Kompaniia Enzym”, “we” or “us”) welcomes the users (“User” or “you”) of our website available at enzymfeed.com (the “Website”).

This Privacy Policy (the “Policy”) describes how we collect, use and otherwise process your personal data through the Website and in the course of your interaction with us.

Data controller

We are the controller of personal data. This means that we determine the purposes and means of processing personal data. Our details:

Users

We classify Users into categories of data subjects based on their interaction with us:

We do not knowingly process personal data of individuals under the age of 18. If you believe that we may have inadvertently collected personal data of an individual under 18, please contact us immediately. We will promptly take steps to delete such information from our records.

Personal data

Depending on the type of interaction with us, we may collect and use the following personal data:

Purposes of processing

We collect, use and otherwise process your personal data for the following purposes:

• to ensure the security of the Website and improve the user experience (see the Cookie Policy for details);
• to contact you about commercial or partnership enquiries submitted through our contact forms;
• to send marketing emails.

Legal bases for processing

We rely on the following legal bases for processing your data:

• Performance of a contract: processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract (for example, to contact you after you submit an enquiry through the contact forms);
• Legitimate interests: processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party (for example, processing your data to develop our services), except where such interests are overridden by your rights and freedoms;
• Consent: processing is necessary for specific purposes that require your freely given, specific, informed and unambiguous consent (for example, processing for direct marketing or the use of cookies);
• Legal obligation: processing is necessary for compliance with legal obligations of the controller (for example, under employment or tax law, or to comply with a lawful request of a state or local authority).

Processing operations

You browse the Website

Details of the cookie types and their purposes are available in the Cookie Policy.

You fill in contact forms on the Website

You fill in the newsletter subscription form

Recipients of personal data

We may share your personal data, to the extent necessary for operating the Website and providing our services, with the following parties:

• Employees: we may share data with our employees to ensure proper performance of our obligations under a contract with you;
• Service providers: we may share data with contractors, suppliers and consultants solely to the extent related to our business and commercial operations;
• Communication tools: we use electronic means of communication to communicate with you and our employees (for example, Google, Slack);
• State and local authorities, courts or law enforcement agencies: we may disclose your data to courts, law enforcement agencies and other state and local authorities upon receipt of a lawful request, order or other enforceable decision.

Protection of personal data

We implement appropriate organisational, physical and technical measures to protect your data against accidental loss or destruction, as well as unlawful processing, including unlawful destruction of or access to personal data. These measures include:

1) Physical measures

• Physical perimeter security;
• Air conditioning in server rooms;
• Physical access control to premises;
• Video surveillance;
• Fire and smoke detection systems;
• Fire extinguishers in server rooms;
• Uninterruptible power supply (UPS).

2) Organisational measures

• Password policy;
• Assignment of user rights;
• Creation of user profiles;
• Assignment of user profiles to IT systems.

3) Technical measures

• Password assignment;
• Username / password authentication;
• Two-factor authentication;
• Use of VPN technologies;
• Use of antivirus software;
• Use of a hardware firewall;
• Dedicated lines or VPN tunnels.

Transfers outside the European Economic Area

Where we transfer your personal data to recipients located outside the European Economic Area, we will ensure appropriate safeguards for the protection of your personal data in accordance with applicable data protection law, including the General Data Protection Regulation.

Where we transfer your data to countries that the European Commission has not recognised as providing an adequate level of data protection, we will rely on legally recognised transfer mechanisms such as the Standard Contractual Clauses (SCCs) to ensure that your data is handled securely in accordance with this Policy.

Data subject rights

As a data subject, you have the following rights under the General Data Protection Regulation:

• Right to be informed: you have the right to receive clear and transparent information about the collection and use of your personal data;
• Right of access: you have the right to request access to the personal data we hold about you;
• Right to rectification: you have the right to request the correction of inaccurate or incomplete personal data concerning you;
• Right to erasure (right to be forgotten): you have the right to request the deletion of your personal data under certain conditions (for example, where the data is no longer necessary for the purposes for which it was collected);
• Right to restriction of processing: you have the right to request the restriction of processing of your personal data in certain circumstances (for example, where the accuracy of the data is contested);
• Right to data portability: you have the right to receive your personal data in a structured, commonly used and machine-readable format and to transmit that data to another controller without hindrance;
• Right to object: you have the right to object to the processing of your personal data for certain purposes, including direct marketing and profiling;
• Rights related to automated decision-making and profiling: you have the right not to be subject to decisions based solely on automated processing, including profiling, which significantly affect you;
• Right to withdraw consent: you have the right to withdraw your consent at any time where processing is based on your consent;
• Right to lodge a complaint with a supervisory authority: you have the right to lodge a complaint with a supervisory authority.

We will respond to your personal data request within one month of receipt. Where a request is complex or numerous, we may extend this period by a further two months and will inform you of this within the first month. In the case of manifestly unfounded or excessive requests, we reserve the right to refuse the request and will explain the reasons for the refusal.

Cookies

Information about the cookies used on the Website, their purposes, retention periods and how to disable them is set out in the Cookie Policy.

Updates to this Policy

This Policy and the legal relations related to the protection and processing of personal data are governed by the General Data Protection Regulation, other applicable laws and best privacy practices.

We will make the necessary changes to the Policy and publish its updated version on the Website if the applicable legislation changes.

In the event of material changes that may affect your privacy and personal data protection, we will post information about the update on the Website and, where necessary, obtain your consent.