Privacy Policy
Last Updated: July 1, 2026 Effective Date: January 01, 2026
Nutra-Biotech (“we,” “us,” “our,” or “the Company”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website nutra-biotech.com (the “Site”), purchase our botanical extract and peptide ingredients, or otherwise interact with us. We comply with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and other regional privacy regulations.
1. Information We Collect
1.1 Information You Provide Directly
When you request a quote, place an order, subscribe to our newsletter, download technical documents (such as Certificate of Analysis, MSDS), or contact our sales team, we may collect:
- Business contact details — full name, company name, job title, business email address, phone number, and mailing address.
- Purchase and order data — product inquiries (e.g., EGCG, Curcumin 95%, Ashwagandha extract, BPC-157, Dihexa), requested specifications, quantities, incoterms, and shipping preferences.
- Account credentials — if you register for a customer portal or dealer account.
- Communications — the content of emails, contact-form messages, or live-chat transcripts you send to us.
- Marketing preferences — your opt-in or opt-out choices for newsletters and product updates.
1.2 Information Collected Automatically
When you visit or interact with the Site, we and our service providers automatically collect certain technical and usage data:
- Device and browser information — IP address (truncated for privacy where applicable), browser type and version, operating system, screen resolution.
- Usage data — pages visited, time spent on pages, referring URLs, click paths, and conversion events.
- Location data — approximate geographic location derived from IP address (country / region level).
- Cookies and pixels — see Section 3 below for details.
1.3 Information From Third Parties
We may receive supplemental information from trusted business partners, trade-show organizers (e.g., CPHI, SupplySide West), customs brokers, or freight forwarders for the purpose of fulfilling orders and complying with export regulations.
2. How We Use Your Information
We process your personal information for the following legitimate business purposes:
- Order processing & fulfilment — to process quotations, sample requests, purchase orders, and arrange shipping of botanical extract and peptide ingredients.
- Customer support — to respond to your inquiries about product specifications, certifications (ISO, HACCP, Kosher, Halal), and documentation requests.
- Account management — to create and manage your customer portal account and order history.
- Marketing communications — to send newsletters, product launch announcements, and exhibition invitations (only with your consent where required by law).
- Website improvement — to analyze traffic patterns and optimize site performance, navigation, and content.
- Legal compliance — to comply with export control laws, customs regulations, tax requirements, and anti-fraud measures.
- Security — to monitor and protect against unauthorized access, fraud, or misuse of the Site.
We process your data based on the following legal bases under GDPR: (a) performance of a contract (order fulfilment), (b) compliance with legal obligations, (c) our legitimate interests in operating and securing our business, and (d) your explicit consent for marketing activities.
3. Cookies and Tracking Technologies
We use cookies, web beacons, and similar tracking technologies to operate and improve the Site. You can manage cookie preferences through your browser settings or our cookie consent banner.
| Category | Purpose | Consent Required? |
|---|---|---|
| Essential | Site functionality, session management, security | No |
| Analytics | Traffic analysis (Google Analytics 4, anonymized) | Yes |
| Marketing | Retargeting, ad performance (LinkedIn, Google Ads) | Yes |
| Functional | Language preference, saved cart contents | Yes |
Most web browsers allow you to control cookies through settings. Disabling essential cookies may affect site functionality. For details on how to manage cookies in your browser, visit allaboutcookies.org.
4. How We Share Your Information
We do not sell your personal data. We may share your information with the following categories of recipients, strictly for the purposes described in this policy:
- Service providers & processors — hosting providers (AWS / cloud), email marketing platforms (Mailchimp), CRM systems (HubSpot), analytics tools (Google Analytics), and payment processors (Stripe / PayPal).
- Logistics partners — freight forwarders, customs brokers, and courier services (DHL, FedEx, UPS) for shipping coordination.
- Regulatory authorities — customs agencies, tax authorities, or other government bodies when legally required.
- Business transfers — in the event of a merger, acquisition, or asset sale, data may be transferred subject to confidentiality obligations.
- Legal compliance — where disclosure is necessary to comply with applicable law, court order, or to protect our legal rights.
5. Third-Party Links and Services
The Site may contain links to third-party websites (e.g., certification databases, trade portals, social media platforms). We are not responsible for the privacy practices or content of these external sites. We encourage you to review their respective privacy policies before providing any personal information.
6. Data Security
We implement industry-standard technical and organizational measures to protect your personal data, including:
- TLS / SSL encryption for data in transit (HTTPS across the entire site).
- Role-based access control and least-privilege principles for internal staff.
- Regular security audits and vulnerability assessments.
- Secure cloud infrastructure with firewall protection and intrusion detection.
- Staff training on data protection and confidentiality.
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this policy, comply with legal obligations (e.g., tax and customs record-keeping, typically 5–10 years depending on jurisdiction), resolve disputes, and enforce our agreements. After the retention period, data is securely deleted or anonymized.
8. International Data Transfers
Nutra-Biotech is a global B2B supplier. Your information may be transferred to and processed in countries outside your country of residence, including China, the United States, and EU member states. Where required, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs), Binding Corporate Rules (BCRs), or other legally recognized transfer mechanisms. We commit to ensuring your data receives the same level of protection regardless of where it is processed.
9. Your Privacy Rights
9.1 GDPR Rights (EU / EEA / UK Residents)
If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights:
- Right of access — request a copy of the personal data we hold about you.
- Right to rectification — request correction of inaccurate or incomplete data.
- Right to erasure (“right to be forgotten”) — request deletion of your data, subject to legal exceptions.
- Right to restrict processing — request that we limit data processing under certain conditions.
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to object — object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent — withdraw consent for processing that relies on it, at any time.
- Right to lodge a complaint — file a complaint with your local data protection authority.
9.2 CCPA / CPRA Rights (California Residents)
If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the CPRA:
- Right to know — request disclosure of the categories and specific pieces of personal information collected.
- Right to delete — request deletion of your personal information.
- Right to correct — request correction of inaccurate personal information.
- Right to opt-out — opt-out of the “sale” or “sharing” of personal information for cross-context behavioral advertising.
- Right to limit — limit the use of sensitive personal information.
- Right to non-discrimination — receive equal service and pricing regardless of exercising your rights.
To exercise any of these rights, please contact us at privacy@nutra-biotech.com. We will verify your identity before processing your request and respond within the timeframe required by applicable law (generally 30–45 days).
10. Children’s Privacy
Our Site and services are intended exclusively for B2B (business-to-business) customers and professionals aged 18 and older. We do not knowingly collect personal information from individuals under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at privacy@nutra-biotech.com, and we will take steps to delete such information.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will revise the “Last Updated” date at the top of this page and, where appropriate, provide a more prominent notice (such as on the homepage or via email). We encourage you to review this page periodically to stay informed about how we protect your information.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection team:
Nutra-Biotech — Data Protection Office
📧 Email: privacy@nutra-biotech.com
🌐 Website: www.nutra-biotech.com