Privacy Policy

Last updated: 31 July 2026

Nutraceutical Ingredients Pte. Ltd. (“NCI”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal data entrusted to us.

This Privacy Policy explains how we collect, use, disclose, store and protect your personal data when you:

• visit or use our website at www.nci-health.com;

• create or use a customer account;

• purchase our products;

• subscribe to our marketing communications;

• participate in our promotions, events or membership programmes;

• contact us through email, telephone, messaging platforms or social media; or

• otherwise interact with NCI.

This Privacy Policy should be read together with our Conditions of Use and any other terms that apply to the products or services you use.

1. About NCI

This website is operated by:

Nutraceutical Ingredients Pte. Ltd.
3021 Ubi Avenue 2
#01-169
Singapore 408897

In this Privacy Policy, “personal data” means data, whether true or not, about an individual who can be identified from that data alone or together with other information to which NCI has or is likely to have access.

2. Personal Data We Collect

The personal data we collect depends on how you interact with us and may include the following:

Identity and contact information

• name;

• billing and delivery address;

• email address;

• telephone or mobile number;

• username or customer-account details; and

• information you provide when communicating with us.

Order and transaction information

• products ordered or purchased;

• order and transaction history;

• billing and delivery information;

• payment status and transaction references;

• discount, promotion or membership information;

• returns, exchanges and refund records; and

• customer-service correspondence relating to your purchase.

Payment information may be collected and processed directly by Shopify, payment gateways, financial institutions or other payment service providers. NCI may not receive or retain your complete payment-card details.

Marketing and membership information

• marketing preferences;

• newsletter subscriptions;

• membership or rewards-programme information;

• promotion, contest or event participation;

• survey responses; and

• records of your consent, withdrawal or unsubscribe requests.

Enquiries and communications

• enquiries, requests, complaints and feedback;

• reviews, comments and suggestions;

• correspondence with our customer-service staff; and

• information voluntarily submitted through our website, email, telephone, social-media channels or messaging platforms.

Technical and usage information

When you visit our website, certain information may be collected automatically, including:

• Internet Protocol address;

• browser type and version;

• device type;

• operating system;

• device identifiers;

• referring website or source;

• pages viewed and links selected;

• date, time and duration of visits;

• shopping-cart activity;

• cookie and similar identifiers;

• approximate location derived from technical data; and

• website performance, security and error information.

3. How We Collect Personal Data

We may collect personal data:

• directly from you when you place an order, register an account or contact us;

• when you subscribe to marketing communications;

• when you enter a promotion, contest, survey or event;

• when you join or use a membership or rewards programme;

• automatically through cookies and similar technologies;

• through Shopify and other service providers acting on our behalf;

• from payment, delivery, logistics and customer-service providers;

• through our authorised distributors, retailers or business partners; and

• from publicly available sources, where permitted by law.

Where you provide personal data relating to another individual, such as a delivery recipient, you confirm that you are authorised to provide the information and have informed that individual of the purposes for which it will be used.

4. Purposes for Collecting, Using and Disclosing Personal Data

We may collect, use and disclose personal data for purposes including the following:

Orders and transactions

• creating and administering customer accounts;

• processing and confirming orders;

• processing payments, refunds, returns and exchanges;

• arranging delivery, fulfilment and order tracking;

• communicating with you about your order;

• verifying your identity or transaction details;

• maintaining transaction and purchase records;

• preventing fraudulent, unauthorised or duplicate transactions; and

• providing warranties and after-sales support.

Customer service and enquiries

• responding to enquiries, requests, feedback and complaints;

• investigating product, order or delivery issues;

• providing product information;

• verifying customer information;

• administering product returns or recalls;

• communicating safety notices or important product updates; and

• improving our customer-service processes.

Marketing, membership and promotions

Where you have provided consent or where otherwise permitted by law, we may:

• send newsletters, promotions and product updates;

• inform you about new products, offers and events;

• administer membership and rewards programmes;

• administer contests, giveaways, redemptions and surveys;

• personalise marketing content and product recommendations; and

• measure the performance of our marketing campaigns.

Website administration and improvement

• operating and maintaining our website;

• providing shopping-cart, account and checkout functions;

• remembering website preferences;

• analysing visitor behaviour and website traffic;

• diagnosing technical problems;

• monitoring website performance;

• maintaining website security;

• detecting and preventing fraud or misuse;

• improving website content, functionality and user experience; and

• conducting statistical and business analysis.

Legal and business purposes

• complying with applicable laws, regulations and regulatory requirements;

• maintaining accounting, tax, audit and business records;

• responding to lawful requests from government or regulatory authorities;

• establishing, exercising or defending legal claims;

• enforcing our agreements and website terms;

• investigating suspected unlawful activity or misconduct;

• protecting the rights, property and safety of NCI, our customers and others;

• supporting internal audits, risk management and business continuity; and

• facilitating a merger, acquisition, restructuring, financing or transfer of all or part of our business, subject to appropriate safeguards.

We will not collect, use or disclose personal data for a materially different purpose unless we have notified you and obtained any consent required by law, or the collection, use or disclosure is otherwise permitted or required by law.

5. Consent

Where consent is required, we will notify you of the purposes for which your personal data will be collected, used or disclosed.

When you provide personal data that is reasonably necessary to complete an order, arrange delivery, process payment, handle a return or respond to an enquiry, you consent to our use of that information for the relevant purpose.

For optional purposes such as marketing or membership communications, we will seek your consent or provide you with an appropriate opportunity to opt out.

Consent will not be treated as given merely because you continue browsing the website where the law requires more specific notification or consent.

6. Withdrawal of Consent

You may withdraw your consent to our continued collection, use or disclosure of your personal data by contacting us at:

Email: sales@nci-health.com
Address: Nutraceutical Ingredients Pte. Ltd., 3021 Ubi Avenue 2, #01-169, Singapore 408897

Please provide sufficient details for us to identify you and understand the scope of your request.

We will process your request within a reasonable period and inform you of any likely consequences of withdrawing consent.

Depending on the nature and extent of your request, we may no longer be able to provide certain goods or services to you. For example, we require your delivery and contact information to fulfil an online order.

Withdrawal of consent will not:

• affect the lawfulness of any collection, use or disclosure that occurred before the withdrawal was processed; or

• prevent us from collecting, using or disclosing personal data where permitted or required by law.

7. Marketing Communications

Where you have provided consent or where otherwise permitted by law, we may contact you by email, telephone, text message, messaging service or other communication channels regarding our products, promotions and events.

You may unsubscribe or withdraw your marketing consent by:

• selecting the unsubscribe link in a marketing email;

• following the opt-out instructions in the relevant communication;

• updating your customer-account preferences, where available; or

• contacting us at sales@nci-health.com.

Please allow a reasonable period for your request to be processed.

You may continue to receive essential non-marketing communications, including order confirmations, delivery notifications, account-security notices, product-safety notices and responses to your enquiries.

Marketing messages sent to Singapore telephone numbers will be managed in accordance with applicable Do Not Call requirements.

8. Disclosure of Personal Data

Access to personal data within NCI is restricted to authorised staff who require the information to perform their duties.

We do not sell or rent personal data.

Where reasonably necessary, we may disclose personal data to selected third parties, including:

• Shopify and providers supporting our e-commerce website;

• payment gateways, banks and financial institutions;

• delivery, courier, logistics and fulfilment providers;

• website hosting, information-technology and cloud-service providers;

• customer-service, email and communication platforms;

• analytics and website-performance providers;

• marketing and advertising service providers;

• fraud-prevention and cybersecurity providers;

• auditors, insurers, accountants, lawyers and professional advisers;

• authorised distributors and business partners where relevant to your request; and

• government, judicial, regulatory or law-enforcement authorities where permitted or required by law.

These parties will receive only the information reasonably necessary for them to perform the relevant services or comply with legal obligations.

Where service providers process personal data on our behalf, we require them to protect the information appropriately and not use it for unrelated purposes.

9. Shopify

Our online store is hosted on Shopify.

Shopify provides the e-commerce platform that enables us to display products, maintain customer accounts, process orders and operate our online store.

Information submitted through our website may be processed through Shopify’s systems and services. Shopify may also engage its own service providers and infrastructure providers in different jurisdictions.

NCI remains responsible for determining why and how personal data collected through our store is used. Requests relating specifically to purchases made from NCI, including requests to access or correct your information, should therefore be directed to NCI.

Shopify’s handling of personal data is also governed by its own privacy notices and contractual arrangements.

10. Payment Processing

Payments may be processed by Shopify Payments or other appointed payment gateways and financial institutions.

Payment providers may collect information required to process your payment, including cardholder details, payment-card information, billing information, transaction identifiers and fraud-screening information.

NCI does not represent that it independently stores complete payment-card information. The collection, processing, storage and security of payment information may be handled directly by the relevant payment provider in accordance with its own terms, privacy policy and security requirements.

You should review the privacy terms of the relevant payment provider before completing a transaction.

11. Cookies and Similar Technologies

Our website uses cookies and similar technologies to operate the store, remember preferences, understand visitor behaviour, maintain security and improve the website.

Cookies are small data files placed on your device when you visit a website.

We may use the following categories of cookies:

Essential cookies

These cookies are required for core website functions, including:

• shopping-cart operation;

• checkout;

• customer login;

• account security;

• payment and fraud prevention;

• network management; and

• remembering privacy or cookie settings.

Disabling essential cookies may prevent parts of the website from functioning properly.

Functional cookies

These cookies remember preferences such as language, region, login status or previously selected settings.

Analytics cookies

These cookies help us understand:

• the number of website visitors;

• how visitors reach our website;

• which pages are viewed;

• how visitors move through the website;

• whether errors occur; and

• how the website can be improved.

Marketing cookies

Subject to your consent and applicable law, these cookies may be used to:

• measure advertising performance;

• understand responses to marketing campaigns;

• personalise advertising;

• limit repeated advertising; and

• help deliver advertisements that may be more relevant to you.

The specific cookies used by Shopify and other providers may change as their platforms and services are updated. For this reason, we do not maintain a fixed list of individual cookie names in this Privacy Policy.

You may manage non-essential cookies through any cookie-preference tool available on our website or through your browser settings. Blocking or deleting certain cookies may affect website functionality.

12. Google Analytics

We may use Google Analytics or similar analytics services to understand how visitors use our website.

These services may collect information such as:

• pages visited;

• time spent on the website;

• browser and device information;

• general geographic information;

• referring websites; and

• interactions with website features.

Analytics providers may use cookies and process information on servers located outside Singapore.

You may manage analytics cookies through our cookie-preference tool, where available, or through your browser settings.

13. Overseas Transfers

Our primary business operations are based in Singapore.

However, Shopify and certain providers supporting payments, website hosting, communications, analytics, cybersecurity, backups or other technical functions may process or store personal data outside Singapore.

Where personal data is transferred outside Singapore, we will take reasonable steps to ensure that the recipient provides a standard of protection that is comparable to the protection required under Singapore’s applicable data-protection laws.

14. Protection of Personal Data

We maintain reasonable administrative, physical and technical measures designed to protect personal data from:

• unauthorised access;

• unauthorised collection, use or disclosure;

• copying or modification;

• accidental loss;

• malicious activity;

• improper disposal; and

• other similar risks.

Our safeguards may include:

• restricting access to authorised personnel;

• applying need-to-know access controls;

• staff confidentiality obligations;

• password controls;

• encryption where appropriate;

• secure website connections;

• antivirus and security software;

• system monitoring;

• data backups;

• vendor-management procedures; and

• internal data-handling policies.

No method of electronic transmission or storage is completely secure. Although we take reasonable precautions, we cannot guarantee absolute security.

15. Customer-Account Security

Where you create a customer account, you are responsible for:

• selecting a strong and unique password;

• keeping your login details confidential;

• not sharing your password with another person;

• signing out when using a shared device; and

• notifying us promptly if you believe your account has been accessed without authorisation.

If you believe your account or password has been compromised, contact us at:

Email: sales@nci-health.com
Telephone: +65 6744 5566

16. Retention of Personal Data

We retain personal data only for as long as reasonably necessary to:

• fulfil the purposes for which it was collected;

• provide products and services;

• maintain transaction, accounting and tax records;

• handle enquiries, disputes, returns or warranty matters;

• comply with legal and regulatory obligations;

• prevent fraud and misuse; and

• establish, exercise or defend legal claims.

Different categories of personal data may be retained for different periods.

When personal data is no longer required for a legal or business purpose, we will take reasonable steps to:

• securely delete or destroy it;

• anonymise it; or

• remove the means by which it can be associated with an identifiable individual.

17. Accuracy and Correction of Personal Data

We take reasonable steps to ensure that personal data used or disclosed by us is accurate and complete where it is likely to affect you or where it is disclosed to another organisation.

We rely on you to provide accurate and current information.

Please notify us at sales@nci-health.com if your information changes or if you believe that personal data held by us is inaccurate or incomplete.

18. Access to Personal Data

Subject to the PDPA and any applicable exceptions, you may request:

• access to personal data that we hold about you; and

• information about how we have used or disclosed that personal data within the applicable period.

Access requests should be submitted in writing to sales@nci-health.com and should contain sufficient information for us to verify your identity and locate the relevant records.

We may charge a reasonable fee for processing an access request where permitted by law. If a fee applies, we will inform you of the estimated amount before processing the request.

We will respond as soon as reasonably possible. If we are unable to respond within 30 days, we will inform you in writing of when we expect to provide our response.

We may decline or limit access where permitted or required by law and will generally explain the reason unless we are legally prevented from doing so.

19. Correction Requests

Subject to the PDPA and any applicable exceptions, you may ask us to correct personal data that is inaccurate or incomplete.

Correction requests should be sent to sales@nci-health.com with:

• your name and contact details;

• details of the information to be corrected;

• the correct information; and

• any supporting documents reasonably required to verify the correction.

Where required, we will send the corrected information to organisations to which the inaccurate information was previously disclosed, unless an exception applies.

20. Data Breaches

If a personal-data breach occurs, we will:

• take reasonable steps to contain and assess the incident;

• take appropriate remedial action;

• evaluate whether the breach is notifiable under applicable law; and

• notify the Personal Data Protection Commission and affected individuals where required.

21. Children’s Personal Data

Our website is intended for use by adults.

Individuals who are not legally able to provide valid consent should use the website only with the involvement and consent of a parent or legal guardian.

Where an order relates to a child, the parent or guardian should provide the necessary information on the child’s behalf.

If we become aware that a child’s personal data has been provided without appropriate authorisation or consent, we may delete it unless we are legally required to retain it.

22. Third-Party Websites and Social Media

Our website may contain links to third-party websites, social-media platforms or external services.

NCI does not control these third parties and is not responsible for:

• their privacy practices;

• their content;

• their security;

• their availability; or

• how they collect or use personal data.

Once you leave our website or access a third-party platform, that third party’s privacy policy and terms will apply.

You should review the privacy policies of third-party websites and services before providing personal data.

23. Business Transfers

If NCI undergoes or considers a merger, acquisition, restructuring, financing, sale of assets or transfer of all or part of its business, personal data may be disclosed or transferred as part of that transaction.

Any recipient will be required to handle the personal data in accordance with applicable law and use it only for purposes consistent with this Privacy Policy, unless you are notified otherwise.

24. Changes to This Privacy Policy

We may amend this Privacy Policy from time to time to reflect changes in:

• our business practices;

• our website and services;

• the service providers we use;

• technology; or

• legal and regulatory requirements.

The updated Privacy Policy will be posted on this page with a revised “Last updated” date.

Where changes are material, we may also provide notice through the website, email or another appropriate channel.

25. Data Protection Officer and Contact Information

Questions, requests, complaints or withdrawals of consent relating to personal data may be directed to:

Data Protection Officer
Nutraceutical Ingredients Pte. Ltd.
3021 Ubi Avenue 2
#01-169
Singapore 408897

Email: sales@nci-health.com
Telephone: +65 6744 5566

Please provide sufficient information for us to verify your identity, understand your request and respond appropriately.

26. Governing Law

This Privacy Policy is governed by the laws of the Republic of Singapore.

---

© 2026 Nutraceutical Ingredients Pte. Ltd. All rights reserved.