Controller

Bee Health Ltd, Lancaster Road, Carnaby, Bridlington, East Yorkshire, YO15 3QY, United Kingdom
Email: Privacy@beehealth.com

1. Introduction

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our websites [www.beehealth.com](https://www.beehealth.com), [www.thefoodsupplementcompany.com](https://www.thefoodsupplementcompany.com) and [www.beehealthpropolis.com](https://www.beehealthpropolis.com). We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation and the UK General Data Protection Regulation (together, the “GDPR”).

2. What Data We Collect

We may collect and process the following categories of personal data:

• Identity Data: Name, username, or similar identifier.
• Contact Data: Email address, phone number, and billing and shipping addresses.
• Technical Data: IP address, browser type, operating system, device information.
• Usage Data: Information about how you use our website.
• Marketing Data: Preferences in receiving marketing communications.
• Communication Data: Content of messages sent via forms or email.
• Transaction Data: Details about payments from you and other details of products you have purchased from us.
• Financial Data: Payment information (such as payment card details), which may be processed by our third-party payment providers. We do not store full payment card details where not necessary.
• Account Data: Login credentials and account preferences (where you create an account).

3. How We Collect Your Data

We collect data through:

• Direct interactions (e.g., contact forms, newsletter sign-ups, account creation, and purchases).
• Automated technologies (e.g., cookies, server logs).
• Third-party services (e.g., analytics providers, payment processors, and delivery providers).

Any third parties that process your data on our behalf act as data processors under written agreements consistent with applicable regulations.

4. Purpose and Legal Basis for Processing

We process your personal data for the following purposes:

• To provide and maintain our website: Legitimate interests to operate and secure our online services.
• To respond to inquiries: Consent (opt-in and right to opt out at any time) or contractual necessity.
• To improve user experience: Legitimate interests to analyze and enhance site performance.
• To send marketing communications: Consent (opt-in and right to opt out at any time).
• To comply with legal obligations: Legal obligation.
• To maintain security and prevent fraud: Legitimate interests to ensure network and information security.
• To process and fulfill orders: Contractual necessity, including payment processing, delivery, and related customer support.

5. Data Sharing

We may share your data with:

• IT service providers.
• Analytics and marketing platforms.
• Payment processors and payment service providers.
• Shipping, delivery, and logistics providers.
• Legal and regulatory authorities (if required).

We ensure all third parties respect the security of your data and comply with GDPR. All processors act under written contracts that require them to process data only on our instructions and implement appropriate security measures.

6. International Transfers

If we transfer your data outside the European Economic Area (EEA) or the United Kingdom, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) and the UK International Data Transfer Agreement (IDTA). Bee Health Ltd currently does transfer personal data internationally. If data is transferred, this may include transfers to the United States, where our IT service providers and group entities are located. You can request a copy of these safeguards or further details by contacting Privacy@beehealth.com.

7. Data Retention

Your personal information will only be retained for as long as necessary to fulfil the purposes for which it was collected, including for purposes of satisfying any legal, accounting, or reporting requirements. Sometimes we might have a Legitimate Interest to hold your data for longer than normal, such as in the case of a dispute or where it is necessary to retain account and order information for any periods required by law (including local tax requirements). To determine the appropriate retention period for personal data, we follow the guidelines where they are available, including from the supervisory authorities in the relevant country. We take into consideration additional factors such as legal requirements, type of data, the purpose for which it was collected, exceptions, and the potential risk of retaining your personal data.

8. Your Rights

Under the GDPR, you have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Erase your data (“right to be forgotten”).
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time (where processing is based on consent).

To exercise your rights, contact us at privacy@beehealth.com. You have the right to make a complaint at any time to the relevant data protection authority if you believe we have not handled your data properly. Exercising these rights is free of charge. Providing your personal data through this website is voluntary, but some features (such as contact forms, newsletter subscriptions, or the ability to place orders) may not function without it.

9. Security

We implement appropriate technical and organizational measures to protect your data, including encryption, access controls, and regular audits. We limit access to personal data to those employees and service providers who need it for legitimate business purposes and ensure they are bound by confidentiality obligations.

10. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects for individuals.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website. We will indicate the date of the most recent update and, if substantial changes are made, notify you via a banner or email (if appropriate).

12. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website, analyse traffic, and personalize content, including to support core website functionality such as shopping cart features and checkout.

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help us remember your preferences and understand how you interact with our site.

Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly (e.g., session management, security, and shopping cart/checkout functionality).
• Analytics Cookies: Help us understand website usage and improve performance.
• Marketing Cookies: Used to deliver relevant ads and track campaign effectiveness.
• Preference Cookies: Remember your settings and choices (e.g., language, region).

Cookie Consent

When you first visit our website, you will be presented with a cookie banner asking for your consent to use non-essential cookies. You can:

• Accept all cookies.
• Reject non-essential cookies.
• Customize your preferences.

You can change your cookie settings at any time via our Cookie Settings or your browser settings.

Legal Basis for Cookies

• Essential cookies: Legitimate interests (Article 6(1)(f) GDPR).
• Non-essential cookies: Consent (Article 6(1)(a) GDPR).

Third-Party Cookies

We may use third-party services (e.g., Google Analytics, Meta Pixel) that place cookies on your device. These providers may process your data outside the EEA under appropriate safeguards.

Cookie Retention Periods

Cookies are stored on your device for different lengths of time depending on their purpose:

• Session cookies are temporary and expire once you close your browser.
• Persistent cookies remain on your device for a defined period, which typically ranges from a few days up to 12 months (for example, analytics and preference cookies), or until you delete them manually.

We retain cookie-related data only as long as necessary for the purpose for which it was collected and in accordance with applicable data-protection laws.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:

Responsible Person
Email: Privacy@beehealth.com
Address: East Yorkshire, YO15 3QY, United Kingdom