Privacy Policy

Effective Date: November 18, 2025

1. Information We Collect

Personal Information

Contact Details: Name, email address, phone number, mailing address, and company affiliation to facilitate communication and service delivery
Professional Information: Professional credentials, research interests, academic background, and areas of expertise to better understand your needs and provide tailored solutions
Communication History: Records of our interactions, including emails, phone calls, meeting notes, and consultation requests to maintain continuity in our professional relationship
Account Information: Login credentials, user preferences, and account settings when you create an account on our platform

Technical Information

Device and Browser Data: IP address, browser type and version, operating system, device identifiers, and screen resolution to optimize website performance and user experience
Website Analytics: Page views, time spent on pages, click patterns, navigation paths, and referral sources to understand how visitors interact with our content
Cookies and Tracking: Session cookies, persistent cookies, web beacons, and similar tracking technologies to enhance functionality and provide personalized experiences
Performance Data: Website loading times, error reports, and technical diagnostics to maintain and improve our digital services

Research Data

Project Specifications: Detailed requirements, objectives, timelines, and technical specifications for custom research and development projects
Compound Information: Testing protocols, experimental results, efficacy data, and safety profiles related to natural compounds and formulations
Clinical Study Data: When applicable, anonymized clinical trial data, biomarker results, and patient outcomes in compliance with regulatory requirements
Intellectual Property: Research findings, proprietary methodologies, and innovative discoveries developed through our collaboration

2. How We Use Your Information

Service Delivery

Custom Research Services: Utilizing your project specifications and requirements to design, execute, and deliver tailored research and development solutions
Client Relationship Management: Maintaining comprehensive records of our professional interactions to ensure consistent, high-quality service delivery across all touchpoints
Technical Support: Providing expert consultation, troubleshooting assistance, and ongoing support throughout the duration of our professional relationship
Progress Reporting: Generating detailed reports, updates, and documentation to keep you informed about project milestones and research outcomes

Business Operations

Financial Management: Processing payments, managing invoices, tracking project budgets, and maintaining financial records in accordance with accounting standards
Service Improvement: Analyzing usage patterns, client feedback, and performance metrics to continuously enhance our research capabilities and service offerings
Market Research: Conducting industry analysis, competitive intelligence, and trend identification to stay at the forefront of anti-aging research and development
Quality Assurance: Implementing quality control measures, conducting internal audits, and maintaining compliance with industry standards and best practices

Legal Compliance

Regulatory Requirements: Meeting obligations under FDA regulations, international pharmaceutical guidelines, and other applicable laws governing research and development activities
Intellectual Property Protection: Safeguarding proprietary information, filing patent applications, and protecting trade secrets in accordance with intellectual property laws
Legal Documentation: Maintaining proper records, responding to legal inquiries, and supporting litigation or regulatory investigations when required
Contractual Obligations: Fulfilling terms and conditions outlined in service agreements, confidentiality agreements, and partnership contracts

3. Information Sharing

We Do Not Sell Personal Data

Botanicure maintains a strict policy against selling, renting, leasing, or trading personal information to third parties for commercial purposes. Your data is valuable to us precisely because it enables us to provide superior research services, not as a commodity to be monetized through external sales.

Limited Sharing Scenarios

Trusted Service Providers: We may share limited information with carefully vetted partners, subcontractors, and service providers who assist in project delivery, laboratory analysis, regulatory compliance, or technical support, all bound by strict confidentiality agreements
Legal and Regulatory Requirements: Information may be disclosed when required by law, court orders, subpoenas, regulatory investigations, or other legal processes, always limited to the minimum necessary to comply with such requirements
Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity, with appropriate safeguards to ensure continued protection of your privacy rights
Explicit Consent: We may share information when you have provided clear, informed consent for specific purposes, such as joint research collaborations, publication of anonymized research results, or participation in industry consortiums

4. Data Security

Protection Measures

Advanced Encryption: All data transmissions are protected using industry-standard SSL/TLS encryption protocols, with sensitive information encrypted both in transit and at rest using AES-256 encryption standards
Access Controls: Multi-factor authentication, role-based access permissions, and regular access reviews ensure that only authorized personnel can access sensitive information on a need-to-know basis
Security Monitoring: Continuous monitoring systems, intrusion detection software, and regular vulnerability assessments help identify and address potential security threats before they can compromise data integrity
Staff Training: Comprehensive security awareness training, regular updates on best practices, and strict adherence to data handling protocols ensure that all team members understand their responsibilities in protecting client information

Research Data Security

Proprietary Information Protection: Compound formulations, research methodologies, and experimental data are stored in encrypted databases with restricted access controls and audit trails to track all interactions
Clinical Data Compliance: All clinical study data is handled in accordance with HIPAA regulations, Good Clinical Practice (GCP) guidelines, and international privacy standards such as GDPR and ICH guidelines
Backup and Recovery: Automated backup systems with geographic redundancy, disaster recovery protocols, and business continuity plans ensure data availability and integrity even in the event of system failures or natural disasters
Intellectual Property Safeguards: Patent-pending research, trade secrets, and proprietary technologies are protected through additional security layers, including physical security measures and legal protections

5. Your Rights

Access and Control

Information Access: You have the right to request a comprehensive report of all personal information we hold about you, including the sources of that information and how it has been used
Data Correction: You may request corrections to any inaccurate, incomplete, or outdated personal information, and we will promptly update our records upon verification of the requested changes
Deletion Rights: Subject to legal and contractual obligations, you may request deletion of your personal information, though some data may need to be retained for regulatory compliance or legitimate business purposes
Communication Preferences: You can opt-out of marketing communications, modify your communication preferences, or request to be removed from specific mailing lists while maintaining essential service-related communications

Data Portability

Structured Data Export: Upon request, we will provide your personal data in a structured, commonly used, and machine-readable format such as CSV or JSON to facilitate transfer to other service providers
Transfer Assistance: Where technically feasible, we will work with you and your chosen service provider to facilitate the secure transfer of your data, ensuring continuity of your research projects and professional relationships
Data Integrity: All exported data will include verification checksums and documentation to ensure accuracy and completeness during the transfer process

6. Cookies and Tracking

Cookie Types

Essential Cookies: These cookies are necessary for basic website functionality, including user authentication, session management, security features, and core navigation capabilities that cannot be disabled without affecting site performance
Analytics Cookies: We use these cookies to collect aggregated statistics about website usage, including popular content, user flow patterns, and performance metrics to help us improve our digital services and user experience
Marketing Cookies: These cookies enable personalized content delivery, targeted communications, and customized user experiences based on your interests, research areas, and previous interactions with our services
Functional Cookies: These cookies remember your preferences, settings, and choices to provide a more personalized and efficient browsing experience across multiple visits to our website

Cookie Management

You can control cookie settings through your browser preferences, including blocking specific types of cookies or clearing existing cookies. However, disabling certain cookies may limit website functionality, prevent access to personalized features, or require repeated login authentication. We provide detailed instructions for managing cookies in all major browsers and respect your choices regarding cookie preferences.

7. International Data Transfers

When transferring personal data across international borders, we implement robust safeguards to ensure adequate protection:

Standard Contractual Clauses: We use European Commission-approved standard contractual clauses and similar mechanisms to ensure appropriate data protection standards are maintained regardless of the destination country’s privacy laws
Adequacy Decisions: We prioritize transfers to countries that have received adequacy decisions from relevant data protection authorities, indicating that their privacy laws provide essentially equivalent protection to EU standards
Additional Safeguards: For transfers to countries without adequacy decisions, we implement supplementary measures such as encryption, access controls, and regular compliance audits to ensure data protection standards are maintained
Legal Compliance: All international transfers comply with applicable data protection laws, including GDPR, CCPA, and other relevant privacy regulations in both the origin and destination jurisdictions

8. Data Retention

Personal Information: We retain personal information only as long as necessary to fulfill the purposes for which it was collected, typically for the duration of our business relationship plus a reasonable period to address any follow-up questions or legal requirements
Research Data: Scientific data, experimental results, and research findings are retained according to regulatory requirements, industry standards, and potential patent filing needs, which may extend beyond the conclusion of individual projects
Financial Records: Payment information, invoices, and financial documentation are retained in accordance with tax laws and accounting standards, typically for seven years or as required by applicable regulations
Marketing Data: Marketing communications data is retained until you opt-out, request deletion, or the information becomes obsolete, with regular reviews to ensure continued relevance and compliance with your preferences

9. Children’s Privacy

Our services are exclusively designed for and directed toward business professionals, researchers, and organizations in the pharmaceutical and nutraceutical industries. We do not knowingly collect, use, or disclose personal information from individuals under the age of 18. If we become aware that we have inadvertently collected information from a minor, we will take immediate steps to delete such information from our systems and implement additional safeguards to prevent future occurrences.

10. Updates to This Policy

We may periodically update this Privacy Policy to reflect changes in our practices, services, legal requirements, or industry standards. Material changes will be communicated through multiple channels, including email notifications to registered users, prominent website notices, and direct communication for significant policy modifications. We encourage you to review this policy regularly and will provide advance notice of any changes that materially affect how we collect, use, or share your personal information.

11. Contact Us

For privacy-related questions, requests, or concerns, please contact us through the following channels:

Botanicure Privacy Officer
Email:joanna.zhao@botanicure.com
Address:Room1297,Floor3,Building15,No.44,Qiujiawan,Songjiang，District,Shanghai
Response Time: We aim to respond to all privacy inquiries within 48 hours