Privacy Policy

1. Who we are

Mutian Biotech (“Mutian”, “we”, “us”) operates the Mutian clinical research collaboration platform at mutian.com and related subdomains. We are the data controller for personal information collected through our platform.

Contact: [email protected]

2. What data we collect

We collect information you provide directly:

• Account data: name, email address, role (pet parent or veterinarian), language preference.
• Cat profile data: cat name, breed, birth date, weight, FIP type, treatment status, and related clinical observations you enter.
• Treatment logs: daily clinical observations, dosage records, vital signs, and notes you submit.
• Blood reports: documents you upload for clinical case tracking.
• Order data:product selections, shipping address, and the email used to issue a PayPal invoice (we never see or store raw card numbers — payment is handled entirely on PayPal's side).
• Supply-notification data: when you ask to be notified about product availability or the resumption of regional supply, we store your email address and — for regional supply notices — the country we infer from your explicit shipping-destination choice or your network location, so the notice reaches the right region.
• Veterinarian profile data: professional license number, clinic name and address, license documentation (for verified vets only).
• Media: photos and files you upload to cat profiles or treatment logs.

We also collect limited technical data automatically: IP address, browser type, locale, and interaction logs (for security and performance). We do not sell this data.

3. Why we process your data (legal bases)

• Contract performance (Art 6(1)(b)): to provide the platform services you registered for, including order fulfilment and case tracking.
• Legitimate interests (Art 6(1)(f)): platform security, fraud prevention, and service improvement.
• Legal obligation (Art 6(1)(c)): tax record retention (order data, 7 years), veterinarian credentialing records (7 years).
• Consent (Art 6(1)(a)): marketing email communications (optional, withdrawable at any time).

4. Third-party service providers

We share personal data with a small number of service providers, strictly to operate this platform. All are bound by data processing agreements (DPAs). The service-provider categories, with their processing locations, are:

• Payment processing (US)
• Transactional email delivery (US)
• File and media storage (US / EU)
• Error monitoring (US)

We do not sell personal data.

If you registered through a promoter's invitation link. Some customers reach Mutian through an invitation link shared by a promoter — an individual or clinic that takes part in our referral programme. If you registered through such a link, the promoter who shared it can see, in their own promoter centre, a limited record of the orders you place, so that the commission we owe them can be checked:

• what the promoter can see: the date you registered, the date of each order that earned commission, the value that commission was calculated on, the commission amount and its status (awaiting confirmation, on hold, available, paid, reversed), and a masked form of your email address that keeps only the first characters and the domain (for example ka***@example.com);
• what the promoter cannot see: your name, your full email address, your postal address, your phone number, what you ordered, order numbers, or any health or pet information.

The promoter may also keep a short private note about you for their own reference. That note is visible only to the promoter who wrote it and to Mutian's administrator; it is never shown to you, never included in emails, and is deleted when the promoter asks us to erase their account.

We share this limited information because it is necessary to perform the referral agreement we have with the promoter and to operate the programme fairly (our legitimate interest in checking what we owe). The promoter receives it under an obligation to use it only for that purpose.

We do not transfer your personal data to any other third parties without your explicit consent, except where required by law.

5. How long we keep your data

• Account, cat, and treatment data: retained until you request deletion. After a deletion request is approved, your account is permanently removed from our systems.
• Order records: anonymised and retained for 7 years to satisfy tax and accounting obligations. The anonymised record contains no name, email, or address.
• Veterinarian credentialing records: anonymised and retained for 7 years (business evidence and regulatory compliance).
• Marketing consent logs: retained until consent is withdrawn or account is deleted.

6. Your rights under GDPR

If you are located in the European Economic Area, you have the following rights:

• Access (Art 15): request a copy of all personal data we hold. Use the Data Export feature in your account dashboard.
• Portability (Art 20): receive your data in a machine-readable format (ZIP download via the same export tool).
• Erasure (Art 17): request deletion of your account and all associated data. Use the Delete Account page. Tax-mandatory order records are anonymised, not deleted.
• Rectification (Art 16): correct inaccurate personal data via your account settings.
• Restriction (Art 18): request that we restrict processing of your data in certain circumstances.
• Objection (Art 21): object to processing based on legitimate interests. Contact us at [email protected].
• Withdraw consent: unsubscribe from marketing emails at any time via the link in any email, or via account settings.

You also have the right to lodge a complaint with your local data protection authority.

7. Cookies and tracking

We use strictly necessary cookies to maintain your session and remember your language preference. We do not use third-party advertising cookies or cross-site tracking. Analytics cookies (if added in a future update) will be subject to prior consent. Full cookie policy details will be published when our cookie consent system is launched (planned for platform release).

One additional functional cookie, mutian_ship_to, remembers the shipping destination you explicitly choose (through the "Shipping to" selector on the shop pages or the country field at checkout) so we can show the correct regional supply status across the site. It holds only a two-letter country code, is set for 180 days, and you can change it at any time with the "Shipping to" selector.

8. Contact us

For any privacy questions or to exercise your rights, contact our privacy team:

Email: [email protected]
We aim to respond within 30 days.