Privacy Policy

1. Scope of This Policy

This Policy applies to personal data we process about visitors to our Website, business prospects, customers, suppliers, and other individuals who interact with Veritas in the course of our B2B activities as a manufacturer and supplier of sustained-release pellets (NADH & NMNH) and liposomal delivery ingredients. It does not apply to the internal handling of employee data, nor to third-party websites we may link to.

2. Information We Collect

Because we operate a business-to-business model, most of the personal data we handle is business contact information provided voluntarily when you make an inquiry. We collect the following categories of data:

2.1 Information You Provide Directly

• Contact details — your name, business email address, company name, job title, telephone number, and country, submitted through our inquiry or contact form.
• Inquiry content — the message, product interest, target market, order volume, and any specifications you choose to share.
• Correspondence — records of emails, quotations, and other communications exchanged with our sales and technical teams.

2.2 Information Collected Automatically

• Technical data — IP address, browser type and version, device type, operating system, and referring URL.
• Usage data — pages viewed, time spent, links clicked, and general navigation patterns, collected via cookies and analytics tools.

We do not intentionally collect sensitive personal data (such as health, biometric, or financial account information) through the Website. Please do not submit such information in inquiry forms.

3. How We Collect Data

• Directly from you when you complete our contact/inquiry form, email us, or communicate with our team.
• Automatically through cookies, server logs, and analytics services when you browse the Website.
• From publicly available business sources (e.g., company directories, trade platforms) where permitted by law, to verify business relationships.

4. How We Use Your Data

We use your personal data only for legitimate business purposes, including to:

• Respond to your inquiries, provide quotations, samples, and technical documentation.
• Establish, manage, and fulfill B2B commercial relationships and orders.
• Communicate about products, order status, and after-sales support.
• Improve our Website, products, and customer experience.
• Send you relevant business updates or marketing communications, where you have consented or where permitted by applicable law (you may opt out at any time).
• Comply with legal, regulatory, tax, and export-control obligations.
• Protect our rights, prevent fraud, and ensure the security of our systems.

5. Legal Basis for Processing (GDPR)

Where the GDPR applies, we rely on one or more of the following legal bases:

• Consent — where you have given clear consent, e.g., for marketing emails or non-essential cookies.
• Performance of a contract — to process an order or take steps at your request prior to entering a contract.
• Legitimate interests — to operate and grow our business, respond to inquiries, and maintain security, provided these interests are not overridden by your rights.
• Legal obligation — to comply with applicable laws and regulations.

6. Cookies & Tracking Technologies

Our Website uses cookies and similar technologies to function correctly and to understand how visitors use the site. Cookies fall into the following categories:

• Essential cookies — required for the Website to operate; cannot be switched off.
• Analytics cookies — help us measure traffic and improve content (e.g., Google Analytics).
• Functional cookies — remember your preferences.

You can control or delete cookies through your browser settings. Disabling certain cookies may affect the functionality of the Website. Where required by law, we will request your consent before placing non-essential cookies.

7. Sharing & Disclosure

We do not sell your personal data. We may share it only in the following limited circumstances:

• Service providers — trusted third parties who process data on our behalf (e.g., web hosting, email delivery, CRM, analytics, and logistics partners), bound by confidentiality and data-processing obligations.
• Legal & regulatory — where disclosure is required by law, court order, or competent authority, including export-control and customs authorities.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to appropriate safeguards.

8. International Data Transfers

Veritas is headquartered in China and serves customers in over 60 countries. Consequently, your data may be transferred to, stored in, or accessed from countries other than your own, including China. Where we transfer data from the EEA, UK, or other regulated jurisdictions, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms recognised under GDPR and PIPL to ensure your data receives an adequate level of protection.

9. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, including to satisfy legal, accounting, tax, or reporting requirements. Inquiry and customer records are generally retained for the duration of the business relationship and for a reasonable period thereafter as required by applicable law. When data is no longer needed, we securely delete or anonymise it.

10. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS/TLS), access controls, and staff confidentiality obligations. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

11. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data. To exercise any right, please contact us using the details in Section 15.

We will respond to verified requests within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

12. Children's Privacy

Our Website and services are intended for business professionals and are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

13. Third-Party Links

Our Website may contain links to third-party websites, platforms, or resources. This Policy does not apply to those external sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last Updated" date at the top of this page indicates when it was last revised. Material changes will be highlighted on the Website. We encourage you to review this Policy periodically.