Privacy Policy
Last updated: October 2026
1. Introduction
KELI Therapeutics UAB ("KELI Therapeutics", "we", "us", or "our"), located at Sukileliu ave. 15, Kaunas, Lithuania, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website and use our services related to RECARTA cartilage regeneration therapy.
By accessing or using our website, you agree to the terms of this Privacy Policy. If you do not agree with the practices described herein, please do not use our website.
2. Data controller
The data controller responsible for your personal data is KELI Therapeutics UAB. For any questions regarding this Privacy Policy or your personal data, please contact us at info@keli.eu.
3. Information we collect
We may collect the following types of personal information:
Information you provide directly
When you fill out our eligibility assessment, contact forms, or request a consultation, we collect your name, email address, phone number, and any health-related information you choose to share. This information is necessary to evaluate your eligibility for RECARTA therapy and to respond to your inquiries.
Information collected automatically
When you visit our website, we may automatically collect certain technical information, including your IP address, browser type, operating system, referring URLs, pages visited, and the dates and times of your visits. This information is collected through cookies and similar technologies as described in our Cookie Policy.
Analytics and marketing measurement
With your consent, we use Google Analytics 4 to understand website use and Meta Pixel to measure marketing interactions. These tools may record page visits and selected interactions, such as eligibility assessment submissions, article views, telephone-number clicks, and consultation-link clicks. We do not activate these tools until you choose the relevant cookie category in the consent banner.
4. How we use your information
We use the information we collect for the following purposes:
- To process and respond to your eligibility assessments and consultation requests
- To communicate with you about our services, including treatment information and follow-up care
- To improve our website, services, and user experience
- To comply with legal obligations and regulatory requirements
- To protect our rights, privacy, safety, or property
5. Legal basis for processing
Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds: your consent (for analytics cookies, marketing cookies, eligibility assessments, and marketing communications), the performance of a contract or pre-contractual measures (when you request our services), our legitimate interests (for website and service improvement), and compliance with legal obligations (for regulatory and healthcare requirements).
6. Data sharing and disclosure
We do not sell your personal information. We may share your data with trusted healthcare professionals involved in your treatment, service providers who assist us in operating our website and delivering services (subject to confidentiality obligations), analytics and marketing providers that process information after your consent (including Google and Meta), and legal authorities when required by law or to protect our rights. All third parties who process personal data on our behalf are required to maintain appropriate security measures.
7. Data retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations. Health-related data may be retained for longer periods as required by healthcare regulations. When your data is no longer needed, it will be securely deleted or anonymized.
8. Your rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may request correction of inaccurate or incomplete data.
- Right to erasure: You may request deletion of your personal data, subject to legal retention requirements.
- Right to restrict processing: You may request that we limit the processing of your data.
- Right to data portability: You may request your data in a structured, machine-readable format.
- Right to object: You may object to the processing of your data for certain purposes.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please contact us at info@keli.eu. You also have the right to lodge a complaint with the Lithuanian State Data Protection Inspectorate (VDAI) or your local supervisory authority.
9. Data security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments. However, no method of transmission over the Internet is completely secure, and we cannot guarantee absolute security.
10. International data transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data in accordance with applicable data protection laws.
11. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will post the updated policy on this page with a revised "Last updated" date. We encourage you to review this policy periodically.
12. Contact us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
