Privacy policy

Effective date: 3 October 2026
Last updated: 3 October 2026

This Privacy Policy explains how Benealth collects, uses, shares and protects your personal data when you visit benealth.com, join our waitlist, contact us, buy from us or work with us as a creator.

1. Who we are

Benealth, a subsidiary of United Sciences Limited, a company incorporated in Hong Kong, China ("Benealth", "we", "us" or "our"), operates this site. We are the data user responsible for your personal data.

  • Registered office: 5th Floor, Manulife Place, 348 Kwun Tong Road, Kowloon, Hong Kong, China
  • Email: hello@benealth.com

2. Laws we follow

We handle personal data in line with the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO") and its Data Protection Principles. Where the Personal Information Protection Law of the People's Republic of China ("PIPL") applies to us (for example, when we sell to customers in mainland China through RedNote), we also follow it.

3. What we collect

Information you give us

  • Waitlist and newsletter sign-ups: your email address.
  • Contact form and emails: your name, email address, phone number (optional) and the content of your message.
  • Orders (once sales open): your name, email address, phone number, billing and shipping address, order details and order history. Payments are made through Shopify's checkout, and card details are entered directly with Shopify Payments or the payment provider you choose; we do not see or store your full card number.
  • Creators and partners: your name, contact details, social media handles, audience information you share with us, the content you create for us and, if we pay you, payment and invoicing details.

Information collected automatically

  • Device and usage data: IP address, browser type, device type, approximate location, referring website, pages viewed and actions taken on our site. This is collected through cookies and similar technologies (see section 9).
  • Email engagement: whether our emails were delivered and opened, and which links were clicked.

Information from third parties

  • If you buy from us through RedNote, Instagram or another platform, that platform shares with us the order and delivery details we need to fulfil your order.

Health information: we do not ask for health information. If you choose to share it with us (for example, in an email about whether Deep Sea Three suits you), we use it only to reply to you and delete it when it is no longer needed. We do not give medical advice.

4. How we use your data

We use your personal data to:

  • add you to our waitlist and tell you when Deep Sea Three is available;
  • send you a welcome email when you sign up, and launch news, offers and updates if you have agreed to receive them;
  • reply to your questions and requests;
  • process, deliver and support your orders, including returns and refunds;
  • manage creator and partner collaborations;
  • run, secure and improve our website and understand how it is used;
  • prevent fraud and misuse; and
  • meet our legal, tax and accounting obligations.

We only use your data for these purposes or directly related purposes. If we want to use it for a new purpose, we will ask for your consent first.

5. Direct marketing

Under Part 6A of the PDPO, we must get your consent before we use your personal data for direct marketing.

  • What we use: your email address and, if you have given it to us, your name.
  • What we send: information, offers and news about Benealth products (food supplements and related health and wellness products), launches, promotions and events.
  • How you consent: by entering your email address in a waitlist or newsletter sign-up form on our site after being told how we will use it. When you sign up, Shopify Messaging sends you an automated welcome email from hello@benealth.com.
  • Opting out: you can unsubscribe at any time, free of charge, using the unsubscribe link in every marketing email, or by emailing hello@benealth.com. We will stop sending you marketing emails promptly after receiving your request. We may still send you service emails about orders or requests you have made.

We do not sell, rent or provide your personal data to third parties for their own direct marketing.

6. Who we share your data with

We share personal data only with service providers who help us run our business, and only as far as they need it:

  • Shopify (website hosting, online store, checkout, customer records and email marketing through Shopify Messaging). Your waitlist sign-up is stored in Shopify as a subscribed customer.
  • Google Workspace (our business email).
  • Payment processors: Shopify Payments and the other payment methods shown at Shopify's checkout, to process payments and prevent fraud.
  • Delivery and logistics companies and customs authorities, to ship and deliver your orders in Hong Kong, China, mainland China, the United States, Australia and other destinations.
  • Sales platforms such as RedNote, where you choose to buy from us there.
  • Professional advisers such as accountants, auditors and lawyers, where needed.
  • Authorities, where required by law, court order or to protect our legal rights.

If our business, or part of it, is sold or reorganised, personal data may be transferred to the new owner, who must keep protecting it in line with this policy.

We do not sell your personal data.

7. Transfers outside Hong Kong, China

Our service providers may store and process your personal data outside Hong Kong, China. For example, Shopify stores data on servers in Canada, the United States and other countries, and Google may process email data in several countries.

When we ship your order to mainland China, the United States, Australia or another destination, we share your name, delivery address, phone number and order details with delivery companies and customs authorities in Hong Kong, China and in the destination country or region, so that your order can be shipped and delivered. If you buy from us through RedNote, your order data will also be stored and processed in mainland China.

When we transfer your data, we take reasonable steps to make sure it is protected to a standard similar to the PDPO, including by using reputable providers with contractual data protection commitments. Where the PIPL applies, we will meet its requirements for cross-border transfers, including getting your separate consent where required.

8. How long we keep your data

We keep personal data only as long as we need it:

  • Waitlist and marketing data: until you unsubscribe or ask us to delete it. We also review and remove inactive subscribers at least every two years.
  • Enquiries and contact messages: up to two years after our last contact with you.
  • Order, payment and tax records: seven years, as required for business records under the laws of Hong Kong, China.
  • Creator and partner records: for the length of the collaboration and up to seven years afterwards for accounting purposes.
  • Website analytics data: in line with Shopify's standard retention periods.

When we no longer need your data, we delete or anonymise it securely.

9. Cookies

Cookies are small files stored on your device. We and Shopify use cookies and similar technologies to:

  • make the site work (for example, your cart, checkout and security);
  • remember your preferences;
  • understand how visitors use the site (analytics); and
  • measure the performance of our marketing.

You can control or delete cookies in your browser settings, and through our cookie banner where shown. Blocking essential cookies may stop parts of the site, such as checkout, from working. Embedded content from social media sites such as Instagram or RedNote may set their own cookies, which are governed by those sites' policies.

10. Your rights

Under the PDPO, you have the right to:

  • ask whether we hold personal data about you;
  • request a copy of your personal data (a data access request);
  • ask us to correct personal data that is inaccurate (a data correction request); and
  • withdraw your consent to direct marketing at any time.

You may also ask us to delete your personal data where we no longer need it. If the PIPL applies to you, you also have rights to request an explanation of how we handle your data, to obtain a copy in a portable format, and to ask us to delete it, as provided by that law.

To make a request, email our Data Privacy Officer at hello@benealth.com. We will acknowledge your request within 2 working days and respond in full within 40 days, as required by the PDPO. We may need to verify your identity first. We may charge a fee that is not excessive for a data access request, as permitted by the PDPO; we will tell you the amount before processing it.

11. Security

We use reasonable technical and organisational measures to protect your personal data, including encrypted (HTTPS) connections, secure providers with strong access controls, two-step verification on our business accounts and limiting access to staff who need it. Payments are handled by PCI DSS-compliant processors.

No method of transmission or storage is completely secure. If a data breach is likely to cause you real harm, we will tell you and the Office of the Privacy Commissioner for Personal Data as soon as practicable.

12. Children

Our website and marketing are not directed at children under 15, and we do not knowingly collect personal data from them. You must be 15 or over to join our waitlist or place an order, and if you are under 18 you must have the consent of a parent or guardian. Deep Sea Three may be suitable for children aged 8 and over, but for children under 15 it must be bought by a parent or guardian. If you believe a child under 15, or a person under 18 without a parent's or guardian's consent, has given us personal data, please contact us and we will delete it.

13. Third-party sites

Our site links to and embeds content from third-party sites, such as RedNote and Instagram. We are not responsible for their privacy practices. Please read their privacy policies before sharing personal data with them.

14. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and change the "Last updated" date. If we make significant changes, we will tell you by email or by a notice on our site before they take effect.

15. Contact us

For any question or request about privacy, contact our Data Privacy Officer:

  • Email: hello@benealth.com
  • Post: Data Privacy Officer, United Sciences Limited, 5th Floor, Manulife Place, 348 Kwun Tong Road, Kowloon, Hong Kong, China

We reply within 2 working days. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner for Personal Data in Hong Kong, China (www.pcpd.org.hk).

16. Language

This policy is written in English. If we publish a Chinese version and there is any difference between the two, the English version prevails.