Data Controller and Contact Information
This Privacy Policy describes how personal data is processed when you use the website men-med.com (the "Website") operated under the name MenMed.
Controller: Rowena Calderwood (MenMed)
Address: 19 Rue d'Italie
13100 Aix-en-Provence
France
Email: [email protected]
MenMed is a dedicated men's health resource covering pharmaceuticals, medications, diseases, and science-backed supplements. For any questions about this Privacy Policy or our data practices, please contact us using the details above.
Scope and Definitions
This Privacy Policy applies to all visitors and users of the Website, regardless of location, and explains how we collect, use, disclose, transfer, and store personal data.
“Personal data” means any information relating to an identified or identifiable natural person. “Processing” means any operation performed on personal data. Processing is carried out in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and the French Data Protection Act (Loi Informatique et Libertés) as amended, including applicable ePrivacy rules.
Categories of Personal Data We Process
- Identification and contact data: name, email address, postal address, and any other details you provide when contacting us.
- Communications content: the content of messages, inquiries, feedback, or survey responses you submit.
- Technical and usage data: IP address, device and browser characteristics, operating system, referring URLs, pages viewed, time and date of visits, and similar diagnostic/log data generated by your use of the Website.
- Cookies and online identifiers: cookie identifiers, consent preferences, and similar technologies used for the purposes described in this Policy.
- Newsletter preferences: your subscription status and communication preferences if you opt into newsletters or updates.
- Health-related information you may voluntarily share: although not solicited, you might include health information in free-text fields when you contact us (see “Special Category (Health) Data”).
- Applicant/contributor data: if you apply to collaborate or contribute content, we may process CV or professional information that you provide.
Purposes of Processing and Legal Bases
- Operating and securing the Website: to deliver pages, ensure availability, monitor performance, fix errors, and prevent fraud or abuse. Legal basis: our legitimate interests in running a secure and efficient Website and, where applicable, legal obligations.
- Responding to inquiries and providing support: to communicate with you if you contact us. Legal basis: our legitimate interests in responding to requests and providing support.
- Newsletters and direct communications: to send updates if you have subscribed. Legal basis: your consent, which you may withdraw at any time.
- Analytics and audience measurement: to understand usage and improve content and user experience. Legal basis: your consent for non-essential cookies or similar technologies, in line with applicable French ePrivacy rules.
- Compliance and enforcement: to comply with legal obligations, respond to lawful requests, and establish, exercise, or defend legal claims. Legal basis: compliance with legal obligations and our legitimate interests.
- Business continuity: in the context of reorganization, merger, or transfer of assets. Legal basis: our legitimate interests.
Special Category (Health) Data
MenMed provides informational content and does not offer medical diagnosis or personalized healthcare services. We do not intentionally collect health data. Please avoid sharing health information or other special-category data (e.g., data concerning health, sex life, or sexual orientation) in free-text fields. If you nonetheless provide such information, we will process it only with your explicit consent, to the minimum extent necessary to respond to your request, and we will delete or anonymize it as soon as reasonably possible. We do not engage in automated decision-making producing legal or similarly significant effects.
Sources of Personal Data
We obtain personal data directly from you (e.g., when you contact us or subscribe), automatically through your use of the Website (technical/usage data and cookies), and from service providers that support our operations (e.g., hosting and analytics). We do not purchase personal data from data brokers.
Recipients and Disclosure of Personal Data
- Service providers (processors): hosting, maintenance, security, email delivery, analytics, and similar vendors acting under our instructions and subject to confidentiality and data protection obligations.
- Professional advisors: lawyers, accountants, or auditors bound by professional secrecy, where necessary.
- Authorities and courts: where required by law or to protect our rights, users, or the public.
- Business transactions: to a successor or acquirer in the event of a restructuring, merger, or asset transfer, subject to appropriate safeguards.
We do not sell or rent personal data.
International Data Transfers
If personal data is transferred outside the European Economic Area (EEA), we will implement appropriate safeguards, such as European Commission Standard Contractual Clauses, and additional measures where necessary, to ensure an adequate level of protection. You may request information about these safeguards by contacting us.
Retention of Personal Data
- Inquiries and correspondence: retained for up to 24 months after the last interaction, unless a longer period is necessary for legal claims or compliance.
- Newsletter data: retained until you unsubscribe or your consent is withdrawn, and for a limited period thereafter to evidence compliance.
- Technical and security logs: typically retained for up to 12 months, unless a longer period is needed for security or legal reasons.
- Cookies: retained according to their purpose and lifespan as indicated in your consent preferences; essential cookies may persist as needed for functionality.
- Special-category (health) data: if inadvertently received, processed only with explicit consent and deleted or anonymized as soon as feasible.
- Legal retention: where laws require longer retention, we will comply with those periods.
Cookies and Similar Technologies
Types of Cookies
- Strictly necessary cookies: required for core functionality (e.g., page navigation, consent management). These do not require consent.
- Functional cookies: enhance features or remember preferences, used with your consent where required.
- Analytics cookies: help us understand usage to improve content and services, used only with your consent in accordance with French ePrivacy rules.
- Advertising cookies: used for targeted advertising; we do not use these unless expressly stated and only with your prior consent.
Cookie Management
On your first visit and periodically thereafter, we present a consent mechanism allowing you to accept, refuse, or customize non-essential cookies. You may withdraw or modify your choices at any time via the same mechanism (where available) or by adjusting your browser settings to block or delete cookies. Please note that disabling cookies may affect site functionality. If you clear cookies, your preferences may be lost and you may need to set them again.
Do Not Track
Some browsers offer a Do Not Track (DNT) signal. Because there is no common industry standard for DNT, our Website currently relies on your explicit consent preferences for cookies and similar technologies.
Marketing Communications
If you subscribe to our newsletter, we will send you updates about men’s health content and site news. You may unsubscribe at any time by using the unsubscribe option provided in our communications or by contacting us. Unsubscribing will not affect the lawfulness of processing prior to withdrawal.
Your Rights Under GDPR and French Law
Subject to applicable law, you have the following rights:
- Right of access: obtain confirmation and a copy of personal data we process about you.
- Right to rectification: correct inaccurate or incomplete personal data.
- Right to erasure: request deletion of your personal data in certain circumstances.
- Right to restriction: request restricted processing in certain cases.
- Right to data portability: receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller where technically feasible.
- Right to object: object at any time to processing based on our legitimate interests and to processing for direct marketing.
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.
- Post-mortem directives (France): provide instructions regarding the retention, deletion, and communication of your personal data after your death.
- Right not to be subject to automated decision-making producing legal effects, where applicable.
- Right to lodge a complaint: with the Commission Nationale de l’Informatique et des Libertés (CNIL) or another competent supervisory authority.
Exercising Your Rights
To exercise your rights, please contact us at [email protected] or by post at the address above. We will respond without undue delay and in any event within one month of receipt of your request; this period may be extended by two further months where necessary due to complexity or number of requests. We may request additional information to verify your identity. Exercising your rights is free of charge, except where requests are manifestly unfounded or excessive.
Security Measures
We implement appropriate technical and organizational measures designed to protect personal data, including access controls, encryption in transit, regular updates, and restricted access on a need-to-know basis. However, no method of transmission or storage is entirely secure, and we cannot guarantee absolute security.
Data of Minors
The Website is intended for adults. We do not knowingly collect personal data from children under 15 years of age in France without appropriate authorization from the holder of parental responsibility. If you believe a child has provided personal data to us, please contact us so we can take appropriate action.
Third-Party Content
The Website may reference third-party content or services. We are not responsible for the privacy practices of third parties, which are governed by their own policies.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version on the Website with a revised “Last updated” date. Please review this page periodically.
Legal Basis and Applicable Law
Our processing of personal data is carried out pursuant to the GDPR (EU) 2016/679 and the French Data Protection Act (Loi Informatique et Libertés) as amended, including Article 82 regarding electronic communications and cookies, and relevant guidance issued by the CNIL.
Last updated: 15 September 2025