Privacy Policy

Who we are and what this policy covers

Hengrui (Guangdong) Biotechnology Co., Ltd. (“Hengrui”, “we”, “us”, “our”) is a dietary-supplement contract manufacturer based in Zhuhai, Guangdong, China. This policy covers the personal information we handle through this website and through the business enquiries you send us. It applies globally to visitors from every country. It does not cover third-party websites we may link to, each of which has its own privacy policy. This is a business-to-business website intended for supplement brands, distributors and their teams, and it is not aimed at consumers or the general public.

Information you provide to us

When you contact us through our enquiry form or by email, we collect the information you choose to give us: your name, your company, your business email address, your country or target market, and the content of your enquiry. If you add a telephone number or any other detail to your message, we receive that as well. We do not ask for, and ask you not to send, sensitive or special-category information such as health, biometric, racial, religious or political data. You are responsible for making sure you have the right to share any personal information about other people that you include in a message to us.

Information we collect automatically

Like most websites, our servers automatically record basic technical information each time a page is served: your IP address, your browser type and version, your device and operating system, the page that referred you, the pages you view, and the date and time. We use this information only to keep the website secure, to diagnose problems, and to understand in aggregate how the site is used. We do not use it to build advertising profiles or to identify you personally.

Cookies and similar technologies

This website uses only the strictly necessary cookies required for the pages to work and to remember basic preferences such as your chosen language. We do not use analytics, advertising, social-media or other third-party tracking cookies. Because we set no non-essential cookies, there is nothing you need to consent to or opt out of. You can block or delete cookies through your browser settings, although some parts of the site may then not work as intended. If we ever introduce non-essential cookies, we will update this policy and, where the law requires it, ask for your consent first.

How we use your information

We use the information you provide to respond to your enquiry, to discuss and scope a possible manufacturing project, to prepare samples, quotations and documentation, and to manage any business relationship that follows. We use technical information to operate, secure, maintain and improve the website. We may also use information where it is necessary to comply with our legal obligations, to enforce our terms, or to establish, exercise or defend legal claims. We do not sell your personal information, we do not rent or trade it, and we do not use it for advertising or automated decision-making that produces legal or similarly significant effects on you.

The legal bases we rely on

Where the law of your country requires a legal basis for processing personal information, including in the European Economic Area, the United Kingdom and other regions with comparable laws, we rely on one or more of the following: our legitimate interests in responding to business enquiries and operating our business, provided those interests are not overridden by your rights; the performance of a contract with you, or steps taken at your request before entering into one; your consent, where we specifically ask for it; and compliance with our legal obligations. Where we rely on your consent, you may withdraw it at any time without affecting processing already carried out.

How we share your information

We share personal information only where it is necessary, and never in exchange for money. We may share it with trusted service providers who process it strictly on our behalf and under written contract, such as our website hosting and email providers. We may disclose information where we are required to by law, regulation, legal process or a competent authority, or where it is necessary to protect the rights, safety or property of Hengrui, our customers or others. If Hengrui is ever involved in a merger, acquisition, financing or sale of assets, personal information may be transferred as part of that transaction, and it will remain subject to this policy or a policy at least as protective.

International transfers of your information

Hengrui is a global manufacturer based in China, and we work with brands, buyers and service providers in many countries. As a result, your personal information may be stored and processed in China and in other countries whose data-protection laws may be different from, and in some cases less protective than, those where you live. Wherever we transfer personal information across borders, we take steps to protect it in line with applicable law, which may include using recognised transfer mechanisms such as standard contractual clauses and imposing contractual confidentiality and security obligations on the recipient. By contacting us, you understand that your information may be processed outside your home country for the purposes described in this policy.

How long we keep your information

We keep the personal information in your enquiry only for as long as we need it to respond to you and to manage any resulting business relationship, and for any further period required to meet our legal, tax, accounting or reporting obligations or to resolve disputes. When we no longer need it, we securely delete it or irreversibly anonymise it. Automatic technical logs are kept only for a short period for security and troubleshooting, and are then deleted or aggregated.

How we protect your information

We use appropriate technical and organisational measures to protect personal information against loss, misuse, and unauthorised access, disclosure, alteration or destruction. These include access controls, encryption of the website in transit, and limiting access to personal information to staff who need it for the purposes described here. No method of transmission over the internet or of electronic storage is completely secure, so while we work hard to protect your information, we cannot guarantee absolute security, and any transmission is at your own risk.

Your privacy rights

Depending on where you live, you may have rights over your personal information, including the right to be informed about how we use it, to access the information we hold, to have it corrected or deleted, to object to or restrict certain uses, to receive a copy in a portable machine-readable form, and to withdraw consent where we relied on it. We aim to honour these rights for every visitor wherever it is practical to do so, and we will not discriminate against you or refuse you service for exercising them.

Region-specific rights

If you are in the European Economic Area or the United Kingdom, you have the rights set out in the GDPR and UK GDPR, including the right to lodge a complaint with your local data-protection supervisory authority. If you are a resident of California, you have rights under the CCPA and CPRA, including the right to know, access, delete and correct your information and to opt out of its sale or sharing; we do not sell or share personal information as those terms are defined. If you are in mainland China, you have the rights provided under the Personal Information Protection Law (PIPL). Residents of Brazil (LGPD), Canada (PIPEDA) and other jurisdictions with data-protection laws have equivalent rights under their own law. Whichever applies to you, contact us and we will help you exercise it.

How to exercise your rights

To exercise any of these rights, or to ask a question about this policy, email us at info@hengruibiotechnology.com. To protect your information, we may need to verify your identity before we act on a request, and we may ask for enough detail to locate the information you mean. We will respond within the time required by the law that applies to you. A reasonable request is free of charge.

Children’s privacy

This is a business-to-business website and it is not directed to children. We do not knowingly collect personal information from anyone under the age of 16, and we do not target our products or this site to minors. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Links to other websites

This website may contain links to third-party websites, such as certification registers or partner sites. We provide these links for convenience only. We are not responsible for the privacy practices, security or content of any website we do not operate, and we encourage you to read the privacy policy of any site before you provide it with personal information.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our technology, or the law. When we do, we will revise the “last updated” date shown below, and where the changes are significant we will take reasonable steps to bring them to your attention. Your continued use of the website after an update means you accept the revised policy, so please review this page from time to time.

How to contact us

If you have any question, request or concern about this policy or about how we handle your personal information, please contact the data controller: Hengrui (Guangdong) Biotechnology Co., Ltd., Zhuhai, Guangdong, China, by email at info@hengruibiotechnology.com. If you are in a region that has a data-protection authority, you also have the right to contact that authority directly.