Privacy Policy
1. Introduction
PeptiFuse BioTech (Hong Kong) Limited ("PeptiFuse", "we", "us", or "our") is committed to protecting the privacy and personal data of our customers, business partners, website visitors, and all individuals who interact with us. This Privacy Policy describes how we collect, use, disclose, store, and protect your personal information in compliance with the Personal Data (Privacy) Ordinance (PDPO) of Hong Kong, and where applicable, the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) for our international clients.
This policy applies to all personal data processed by PeptiFuse in the course of our business operations, including through our website (www.peptifuse.com
), email communications, trade show interactions, and B2B commercial engagements.
2. Scope & Applicability
This Privacy Policy covers:
Visitors to our corporate website and product inquiry portals
Prospective and existing B2B customers (cosmetic brands, contract manufacturers, distributors, R&D labs)
Suppliers, service providers, and professional advisors
Job applicants and candidates
This policy does not cover the practices of third-party websites linked from our site. We encourage you to review the privacy policies of those parties independently.
3. What Personal Data We Collect
Depending on your interaction with PeptiFuse, we may collect the following categories of personal data:
3.1 Business Contact Information
Full name, job title, and department
Company / organization name
Business email address and phone number
Business mailing address
3.2 Commercial & Transactional Data
Inquiry details, product specifications requested, and order history
Quotations, contracts, and purchase orders
Shipping and billing information (for sample or bulk shipments)
Payment and invoicing records
3.3 Technical & Website Usage Data
IP address, browser type, device information
Pages visited, time spent, referral sources
Cookies and similar tracking technologies (see Section 8)
3.4 Research & Collaboration Data
R&D project details shared under NDA
Formulation feedback, stability test results
Confidential technical correspondence
3.5 Job Applicant Data
CV/resume, cover letter, educational and professional background
References and interview notes
⚠️ We do NOT knowingly collect sensitive personal data (such as health status, biometric data, or political/religious beliefs) unless explicitly required for a specific R&D collaboration and with your express consent.
4. How We Collect Your Data
We collect personal data through:
Direct interactions: Inquiry forms, emails, phone calls, trade show meetings, contract negotiations.
Automated technologies: Cookies, server logs, analytics tools on our website.
Third parties: Verified B2B lead platforms, trade fair organizers, logistic partners (only as necessary for fulfillment).
5. Legal Basis for Processing (GDPR Context)
For visitors/clients in the EEA, we process personal data under the following legal bases:
| Purpose | Legal Basis |
| Fulfilling B2B inquiries, quotations, and orders | Contractual necessity |
| Compliance with export control, REACH, FDA documentation | Legal obligation |
| Marketing communications (with opt-in) | Legitimate interest / Consent |
| Website analytics & security | Legitimate interest |
| Job application processing | Pre-contractual steps |
PeptiFuse processes your data for the following purposes:
Responding to inquiries and providing technical documentation (PDS, COA, MSDS).
Processing and fulfilling orders – including sampling, bulk supply, and logistics coordination.
Regulatory compliance – maintaining records required by EU REACH, U.S. FDA, and Hong Kong trade regulations.
Business communication – sending order updates, formulation advice, and industry newsletters (opt-out anytime).
R&D collaboration – managing NDAs, joint development projects, and stability testing programs.
Website improvement – analyzing usage trends to optimize content and user experience.
Recruitment – evaluating candidates for open positions.
We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling that produces legal effects.
7. Data Sharing & Disclosure
We only share personal data with:
Group companies / affiliates (for operational purposes)
Service providers (logistics, IT hosting, CRM platforms, payment processors) – under strict confidentiality agreements
Regulatory authorities – where legally required (e.g., customs, export control)
Professional advisors – legal, audit, compliance consultants
All third-party processors are contractually bound to protect your data and process it only on our instructions.
🌐 International Transfers: As a Hong Kong-based company serving global clients, your data may be transferred to regions outside your country of residence (e.g., EU → HK, or HK → US). Where such transfers occur, we rely on Standard Contractual Clauses (SCCs) or adequacy mechanisms to ensure an equivalent level of protection.
8. Cookies & Tracking Technologies
Our website uses cookies to:
Ensure basic site functionality
Analyze traffic (e.g., Google Analytics)
Remember user preferences
You can manage cookie preferences via your browser settings. Essential cookies cannot be disabled as they are required for site operation. For non-essential cookies, we will request your consent via a banner upon first visit.
9. Data Retention
We retain personal data only as long as necessary for the purposes collected, or as required by law:
| Data Type | Retention Period |
| Active customer records | Duration of relationship + 7 years (HK tax/commerce law) |
| Inquiry/prospect data | 3 years from last contact |
| Job applications | 12 months (unless consent for longer) |
| Website logs | 12 months |
After the retention period, data is securely deleted or anonymized.
10. Data Security
PeptiFuse implements appropriate technical and organizational measures (TOMs), including:
Encrypted email and file transfer for confidential documents
Access controls and role-based permissions on internal systems
Regular backups and secure cloud hosting (with reputable providers)
Staff training on data protection and confidentiality
NDAs with all employees and key partners
However, no method of transmission over the internet is 100% secure. We encourage clients to also use encrypted channels when sharing sensitive formulation data.
11. Your Rights
Depending on your jurisdiction, you may have the following rights:
Access – request a copy of your personal data we hold
Correction – rectify inaccurate or incomplete data
Deletion – request erasure ("right to be forgotten")
Restriction – limit how we process your data
Portability – receive your data in a structured, machine-readable format
Objection – object to processing based on legitimate interest
Withdraw consent – at any time (for consent-based processing)
To exercise these rights, contact us at [email protected]. We will respond within 30 days.
For Hong Kong residents: You may also lodge a complaint with the Privacy Commissioner for Personal Data (PCPD) if you believe your data has been mishandled.
12. Children's Privacy
PeptiFuse operates in a B2B biotech space. Our website and services are not directed to children under 16. We do not knowingly collect data from minors. If you believe a child has provided us data, please contact us and we will delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in law, business practice, or technology. The latest version will always be posted on our website with a revised "Last Updated" date. Material changes will be notified via our homepage or direct communication where appropriate.
14. Contact Us
For any privacy-related questions, data requests, or to report a concern:
PeptiFuse BioTech (Hong Kong) Limited
Attn: Data Protection Officer
📧 Email: [email protected]
📍 Address: Belgian Bank Building 721-725 Nathan Road, Mong Kok, Kowloon, Hong Kong