Get in touch:
Text via WhatsApp or call
WhatsApp
Phone

Privacy Policy

Last updated 12 May, 2025

At TrustedStemCells (“we,” “our,” or “TrustedStemCells”), we take the protection of your personal data seriously. This Privacy Notice explains what data we collect, how we use it, where it is stored, and the measures we take to keep it secure when you use our website (the “Website”).

1. Purpose

This Privacy Notice outlines what personal data we collect when you use the TrustedStemCells Website, how that data is processed and protected, and your rights in relation to your personal information.
You can browse our Website without providing personal data. However, to access certain features and services, including appointment booking and consultations, we may need to collect specific personal details. If you do not agree with this Notice or the Terms of Service, we ask that you refrain from using the Website.
We will never share your data for third-party advertising purposes. If we require your consent for specific types of processing, we will ask for it clearly and in advance.

2. Data Controller Information

The data controller is TrustedStemCells Limited, located at 14/F Golden Centre, 188 Des Voeux Road Central, Hong Kong.

For general inquiries, contact info@trustedstemcells.com.
For privacy-related questions or to exercise your data rights, email info@trustedstemcells.com.

Designation of a data protection officer as mandated by law
We have appointed a data protection officer for our company.
Adilya Satybaldiyeva
E-mail: info@trustedstemcells.com

Information about the responsible party (referred to as the “controller” in the GDPR)
The data processing controller on this website is:
MedSputnik TOO
Almaty, Kazakhstan
108 Karasay Batyr Street, Almaty
info@trustedstemcells.com

TrustedStemCells is the data controller for the personal data of visitors, clients, and partners. For representatives (e.g., clinic staff), we act as a data processor. Our partners, such as medical clinics, act as independent data controllers when providing services. We also operate under HIPAA as a business associate when managing personal health information (PHI) on behalf of healthcare entities.

SSL and/or TLS encryption

For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption programme. You can recognise an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.
If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.

Contact form

If you submit inquiries to us via our contact form, the information provided in the contact form as well as any contact information provided therein will be stored by us in order to handle your inquiry and in the event that we have further questions. We will not share this information without your consent.

Hence, the processing of the data entered into the contact form occurs exclusively based on your consent (Art. 6 Sect. 1 lit. a GDPR). You have the right to revoke at any time any consent you have already given us. To do so, all you are required to do is sent us an informal notification via e-mail. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

The information you have entered into the contact form shall remain with us until you ask us to eradicate the data, revoke your consent to the archiving of data or if the purpose for which the information is being archived no longer exists (e.g. after we have concluded our response to your inquiry). This shall be without prejudice to any mandatory legal provisions – in particular retention periods.

3. How We Collect and Use Personal Data

We categorize our users into four types: Visitors, Clients, Partners, and Representatives.
We collect three types of data: data collected automatically, data you provide to us directly, and data we receive from third-party sources.

Automatically collected data

includes information like your device type, browser, operating system, IP address, geolocation based on IP, pages you visit, your activity on the site, and usage patterns. We also collect data via cookies and similar technologies for analytical and service improvement purposes. You can disable cookies in your browser settings.

Data you provide to us

includes the information you submit when you contact us, register for an account, customize your profile, submit medical inquiries, request appointments, or consult with us. This may include:

  • Your name, email, phone number, and country
  • Profile picture, age, preferred communication channels
  • Comments, feedback, and reviews you publish
  • Scans, diagnosis information, medical history, and other medical documents
  • Guardian and patient data when acting on behalf of another person
  • Call records, if applicable (with prior notification)

Data from Partners and Representatives may include clinic and staff registration details, such as:

  • Contact information for clinic representatives
  • Professional profiles of doctors or specialists, including qualifications, certifications, work history, education, awards, and scientific activities
Other sources may include:

  • Social media platforms you link to your account
  • Information provided by healthcare providers, including treatment details, travel arrangements, flight data, and billing information
Sensitive medical data is only processed when necessary to provide you with services. The legal basis for this is the performance of a contract between you and TrustedStemCells.

4. Why and How We Use Your Data

We use your personal data for several key purposes:
  • To provide you access to the Website and its features
  • To deliver our services in a personalized and efficient manner
  • To respond to your inquiries and support requests
  • To inform you of updates, features, and changes to our services
  • To conduct research and improve our website functionality
  • To ensure security and prevent fraudulent activity
  • To fulfill our legal obligations and maintain records
  • To send marketing communications, where you have given consent
If we ever intend to use your data for a new purpose, we will notify you and request your consent before doing so. If your consent is the legal basis for processing, you may opt in or opt out at any time by contacting info@trustedstemcells.com.

We never use your medical data for marketing purposes and only process it to deliver the services you requested.

5. Cookies and Tracking Technologies

Cookies are small files stored on your device to enhance your user experience. We use session and analytical cookies to remember your preferences and gather statistics about how the Website is used.

These cookies may collect information such as your referral site, viewed pages, browser preferences, ads you clicked, and language settings. We also use tracking pixels (“web beacons”) for analytics purposes.
You can manage your cookie preferences through your browser settings. Disabling cookies may affect your experience on the Website.

6. Data Sharing and Transfers

We may share your data under specific circumstances:

  • With authorized third-party service providers (e.g., hosting, analytics)
  • For legal compliance or at the request of authorities
  • With medical partners to deliver your chosen care
  • With your consent
  • During corporate transitions like mergers or acquisitions
All third-party service providers are vetted to ensure they meet strict security and data protection standards.
Some of our service providers are located outside the European Economic Area. When transferring data internationally, especially to Kazakhstan, we use Standard Contractual Clauses approved by the European Commission to ensure compliance with GDPR.

Our medical partners receive your data under strict data sharing and data processing agreements. They act as independent controllers for the services they provide.

7. How We Protect and Retain Your Data

We use industry-standard technical, physical, and organizational safeguards to protect your personal data from unauthorized access, disclosure, or destruction. This includes encryption, access controls, secure servers located in Germany, and internal policies that restrict employee access to sensitive data.

Despite our efforts, no digital system is entirely immune to breaches. If you suspect your data has been compromised, please notify us immediately at info@trustedstemcells.com.

We retain your data only for as long as necessary to fulfill the purposes outlined in this Notice or as required by law. In some cases, we may retain data for longer periods to meet legal, tax, or regulatory obligations.

8. Minors’ Data

We do not knowingly collect personal data from children under the age of 16. If you are a parent or guardian and believe your child’s data was submitted to us without proper consent, please contact us. We only process data from minors with verifiable parental or legal guardian authorization.

9. Your Rights

If you have provided personal data to TrustedStemCells, you have the right to:

  • Access your personal information
  • Correct inaccurate or incomplete data
  • Request deletion of your data
  • Limit or object to how your data is processed
  • Request a copy of your data or transfer it to another service
  • Withdraw consent at any time
  • File a complaint with the relevant data protection authority
For EEA and UK Residents:We will respond to your request within one month. If your concerns are not resolved, you can contact your local Data Protection Authority or the UK Information Commissioner’s Office.

For U.S. Residents:Your rights may vary depending on your state of residence. In many U.S. states, you have rights to access, correct, delete, or transfer your data, and to opt out of the sale or use of your data for advertising. You may also request that we limit processing of sensitive information or automated decision-making.

If you reside in California, you may opt out of the sale of personal data—even though TrustedStemCells does not sell your data. We support your right to formally express this preference.

To exercise any of your rights, contact us via info@trustedstemcells.com. We typically respond within 30 to 60 days, depending on local regulations.

10. HIPAA Rights

As a HIPAA-compliant business associate, we uphold your rights regarding PHI (Personal Health Information), which include:

  • Requesting restrictions on certain uses and disclosures
  • Accessing and reviewing your PHI
  • Requesting amendments to inaccurate medical records
  • Receiving disclosures of PHI shared over the past six years
  • Being informed in the event of a data breach
  • Filing complaints with your provider or with Health and Human Services (HHS)
We process such requests within 30 days of receipt.

11. GDPR Rights

Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)
In the event that data are processed on the basis of Art. 6 Sect. 1 lit. e or f GDPR, you have the right to at any time object to the processing of your personal data based on grounds arising from your unique situation. This also applies to any profiling based on these provisions. To determine the legal basis, on which any processing of data is based, please consult this Data Protection Declaration. If you log an objection, we will no longer process your affected personal data, unless we are in a position to present compelling protection worthy grounds for the processing of your data, that outweigh your interests, rights and freedoms or if the purpose of the processing is the claiming, exercising or defence of legal entitlements (objection pursuant to Art. 21 Sect. 1 GDPR).

If your personal data is being processed in order to engage in direct advertising, you have the right to at any time object to the processing of your affected personal data for the purposes of such advertising. This also applies to profiling to the extent that it is affiliated with such direct advertising. If you object, your personal data will subsequently no longer be used for direct advertising purposes (objection pursuant to Art. 21 Sect. 2 GDPR).

13. Additional Services that we use:

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called cookies. Cookies are text files, which are stored on your computer and that enable an analysis of the use of the website by users. The information generated by cookies on your use of this website is usually transferred to a Google server in the United States, where it is stored.
The storage of Google Analytics cookies and the utilization of this analysis tool are based on Art. 6 Sect. 1 lit. f GDPR. The operator of this website has a legitimate interest in the analysis of user patterns to optimize both, the services offered online and the operator’s advertising activities.

IP anonymization

On this website, we have activated the IP anonymization function. As a result, your IP address will be abbreviated by Google within the member states of the European Union or in other states that have ratified the Convention on the European Economic Area prior to its transmission to the United States. The full IP address will be transmitted to one of Google’s servers in the United States and abbreviated there only in exceptional cases. On behalf of the operator of this website, Google shall use this information to analyse your use of this website to generate reports on website activities and to render other services to the operator of this website that are related to the use of the website and the Internet. The IP address transmitted in conjunction with Google Analytics from your browser shall not be merged with other data in Google’s possession.

Browser plug-in

You do have the option to prevent the archiving of cookies by making pertinent changes to the settings of your browser software. However, we have to point out that in this case you may not be able to use all of the functions of this website to their fullest extent. Moreover, you have the option prevent the recording of the data generated by the cookie and affiliated with your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Objection to the recording of data

You have the option to prevent the recording of your data by Google Analytics by clicking on the following link. This will result in the placement of an opt out cookie, which prevents the recording of your data during future visits to this website: Google Analytics deactivation.

For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.

Contract data processing
We have executed a contract data processing agreement with Google and are implementing the stringent provisions of the German data protection agencies to the fullest when using Google Analytics.

Demographic parameters provided by Google Analytics

This website uses the function “demographic parameters” provided by Google Analytics. It makes it possible to generate reports providing information on the age, gender and interests of website visitors. The sources of this information are interest-related advertising by Google as well as visitor data obtained from third party providers. This data cannot be allocated to a specific individual. You have the option to deactivate this function at any time by making pertinent settings changes for advertising in your Google account or you can generally prohibit the recording of your data by Google Analytics as explained in section “Objection to the recording of data.”

Archiving period

Data on the user or incident level stored by Google linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) will be anonymized or deleted after 14 month.

Google Web Fonts

To ensure that fonts used on this website are uniform, this website uses so-called Web Fonts provided by Google. When you access a page on our website, your browser will load the required web fonts into your browser cache to correctly display text and fonts.

To do this, the browser you use will have to establish a connection with Google’s servers. As a result, Google will learn that your IP address was used to access our website. The use of Google Web Fonts is based on our interest in presenting our online content in a uniform and appealing way. According to Art. 6 Sect. 1 lit. f GDPR, this is a legitimate interest.

If your browser should not support Web Fonts, a standard font installed on your computer will be used.
For more information on Google Web Fonts, please follow this link: https://developers.google.com/fonts/faq and consult Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.

Google Maps

Via an API, this website uses the mapping service Google Maps. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To enable the use of the Google Maps features, your IP address must be stored. As a rule, this information is transferred to one of Google’s servers in the United States, where it is archived. The operator of this website has no control over the data transfer.
We use Google Maps to present our online content in an appealing manner and to make the locations disclosed on our website easy to find. This constitutes a legitimate interest as defined in Art. 6 Sect. 1 lit. f GDPR.

For more information on the handling of user data, please review Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on our websites. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

The purpose of reCAPTCHA is to determine whether data entered on our websites (e.g. information entered into a contact form) is being provided by a human user or by an automated program. To determine this, reCAPTCHA analyses the behaviour of the website visitors based on a variety of parameters. This analysis is triggered automatically as soon as the website visitor enters the site. For this analysis, reCAPTCHA evaluates a variety of data (e.g. IP address, time the website visitor spent on the site or cursor movements initiated by the user). The data tracked during such analyses are forwarded to Google.
reCAPTCHA analyses run entirely in the background. Website visitors are not alerted that an analysis is underway.

The data is processed on the basis of Art. 6 Sect. 1 lit. f GDPR. It is in the website operators legitimate interest, to protect the operator’s web content against misuse by automated industrial espionage systems and against SPAM.

For more information about Google reCAPTCHA and to review the Data Privacy Declaration of Google, please follow these links: https://policies.google.com/privacyhl=en and https://www.google.com/recaptcha/intro/android.html.

Tilda

Tilda is a no-code website builder for creating all kinds of websites: online stores, landing pages, blogs, portfolios, membership websites, etc. Our easy-to-use module editor allows anyone to build an outstanding website.

Legal Basis: Art. 6 para. 1 s. 1 lit. a GDPR
Data Purposes: Account Management, Website security, Payment, Answering user request, Administrative purposes, Administration of tags and scripts

Data Collected: Contact information, Bank details, Account information, Account preferences, Invoice information, Transaction information, Country, Payment card information, Credit and debit card number, Unique ID, Partner ID, Cookie information, Content interaction information

Data Recipients: Tilda Publishing

Technologies Used: Session-Cookie, CookiesScripts, REST-API, JavaScript, APIs

Data Transfer to Third Countries: Worldwide

Yandex

Description of Service: This is a service which collects, evaluates and stores statistical analyses of user behaviour for optimisation and marketing purposes.

Legal Basis: Art. 6 para. 1 s. 1 lit. a GDPR

Data Purposes: Analytics

Data Collected: IP address, Browser information, Usage data, Device information, Date and time of visit, Geographic location

Data Recipients: Yandex LLC.

Data Transfer to Third Countries, Russia, EU, Kazakhstan

14. Changes to This Privacy Notice

We may update this Privacy Notice to reflect changes in the law or our business practices. Any updates will be posted on the Website. If material changes are made, you will be notified or asked to consent, as required by applicable laws.

We recommend checking this Notice regularly to stay informed of how we protect your personal information.

15. Legal Address and Economic activity Jurisdiction

LLC "MEDSPUTNIK"
ID: 140240004403
Almaty, Kazakhstan
108 Karasay Batyr Street
info@trustedstemcells.com

Madrid, Spain
Ronda de Segovia, 14
Almaty, Kazakhstan
108 Karasay Batyr Street, Almaty
Copyright © 2025 | trustedstemcells.com
The content on this website is intended for informational purposes only and should not be interpreted as medical advice or a recommendation for treatment.

Testimonials, patient experiences, and articles shared on this site are meant to provide general insights and should not be seen as guarantees of outcome. Treatment results can vary based on the individual’s medical condition, diagnosis, and treatment plan. Stem cell therapies aim to support tissue regeneration, and in some cases, symptoms may lessen or resolve.