Privacy Policy Information

You and your personal information are protected by various laws and guidance and we are committed to upholding these and respecting your privacy and keeping your information safe. We want you to be fully informed so this policy thoroughly describes how bbenatural.com and its parent (collectively, “BBE", "the site", “we” or "us") collects, uses, and discloses your personal information when you visit or make a purchase from japanesetaste.com

 

What Information Do We Collect and Why?

 

Data and/or Personal Information

 

We may collect certain data and/or personal information about your device, your interaction with the site, and personal information necessary to process your purchases. We collect this information when you provide it to us through your use of the bbenatural.com Services, for example when you interact with our website, place an order, or sign up for our mailing list. We may also collect additional information if you contact us for customer support.

 

One of our goals in collecting personal information from you is to provide an efficient, meaningful, and customized experience (such as to process and ship your orders, respond to customer service requests, analyze and improve the our services, and to conduct marketing). If you register for email, we will send you limited and exclusive emails about a variety of topics such as new products, special sales and promotional offers.

 

Cookies

 

A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it’s their first time visiting or if they are a frequent visitor.

 

Information You Post

All information that you share about yourself, whether of a personal nature or not, in a public open forum – such as on a social network, forums or open groups – is likely public information. Information that you provide using these features may be available to other users or the general public.

 

Minors Privacy

bbenatural.com does not sell products for purchase by children. However, we sell some children's products for purchase by adults. If you are under 18, you may use our site only with the involvement and permission of a parent or guardian. We do not knowingly collect personal information relating to anyone under the age of 18 years old unless for some reason you provide it to us.

 

Bases For Processing Your Personal Information

We will only use your personal information when the law allows us to. This means we must have one or more legal bases to use your personal information. Most of these will be self-explanatory. The most common legal bases which will apply to our use of your personal information are set out below:

• Where we need to perform the contract we have entered into with you which covers your relationship with us or to take steps to enter into that contract.

• Where we need to comply with a legal obligation which applies to us, for example complying with laws relating to the sale of products to consumers or complying with data protection laws.

• Where it is necessary for legitimate interests pursued by us or a third party and your interests and fundamental rights do not override those interests. We have set out in the section below how we use your personal information together with more details on our legitimate interests.

• You have given your consent. Generally we do not rely on or need your consent for most uses we make of your personal information, but we will need your consent to directly market our products and services to you by electronic communications channels such as email or SMS/MMS.

 

Sharing Personal Information (PI)

We are not in the business of selling, renting or trading personal information to others. We do not disclose your PI to third parties, except as follows:

• Any third party approved by you.

• Service or product providers to our business that help us provide our services and fulfill our contracts with you. For example; information technology services suppliers, third-party analytics vendors such as Google Analytics, delivery and shipping providers and fraud prevention organizations.

• When we are required to do so by our legal and other professional advisers, including our auditors or any professional advisors appointed by you, for example a legal advisor.

• When we believe disclosure is appropriate to comply with applicable law, legal process, and/or governmental authorities.

• Another company within our group of companies, especially if you have a relationship with that part of our group.

• In the unlikely event we sell all or part of our business, assets or
  shares or restructure whether by merger, re-organization or in another way.

 

How Do We Protect Your Personal Information?

We are committed to keeping your personal information safe and secure and so we have numerous security measures in place to protect against the loss, misuse, and alteration of information under our control. We will always aim to use best in class security systems implemented across our networks and hardware to ensure access and information are protected. Our security measures include:

• Take reasonable precautions and follow industry best practices to make sure your personal information is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.

• Encryption of all credit card data through the Payment Card Industry Data Security Standard (PCI-DSS). The information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption.

• Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted. All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

• We maintain physical, electronic, and procedural safeguards in connection with the collection, storage, and disclosure of customer personal information. Our security procedures mean that we may ask to verify your identity before we disclose personal information to you.

• In order to help protect personal information you provide to us, you: (i) should sign off and close your browser when finished using a shared computer, (ii) should not share your password or account information with others, (iii) should use a secure internet connection and web browser, (iv) should select a unique, complex, secure password, (v) should change your password frequently, and (vi) should not use the same password elsewhere. If you become aware of any loss, theft, or unauthorized use of a password, please contact us immediately using the contact information below.

 

How Long Do We Retain Your Personal Information?

We will not retain your personal information for longer than necessary for the purposes for which it was collected and it is being used. We will only keep the personal information we collect from you for as long as necessary to carry out the business purposes set forth in this Privacy Policy, such as providing products or services to you, supporting our business functions and operations, enabling us to communicate with you, providing marketing and personalization, and conducting research, or satisfying our legal or contractual obligations. Where required, we will dispose of the information we collect when we no longer need it for the purposes described in this Privacy Policy, in accordance with our retention policies and procedures. You can also ask us to erase your personal information. For more information on your right of erasure, please see the ‘Your Privacy Rights’ section below.

 

Your Privacy Rights

We are committed to being transparent about how we collect and use your personal information and in meeting our data protection obligations. You have the following rights with respect to the personal information we collect, subject to certain exceptions and limitations:

• GDPR: If you are a resident of the EEA, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information below.

• CCPA: If you are a resident of California, you have the right to access the Personal Information we hold about you (also known as the ‘Right to Know’), to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information below.

• You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.

• As described above, we use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here.

• As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. You can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal.

• Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.

• When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

 

Updates To This Privacy Policy

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons. If we modify this Privacy Policy, we will post the revised Privacy Policy online. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated.

 

Contact

After reviewing this policy, if you have additional questions, want more information about our privacy practices, or would like to make a complaint, please contact us at support@bbenatural.com

 

Complaints

As noted above, if you would like to make a complaint, please contact us by e-mail or by mail using the details provided under “Contact” above.

 

If you are not satisfied with our response to your complaint, you have the right to lodge your complaint with the relevant data protection authority.

 

Last updated: 15th Nov.,2022

​

Complaints Policy

Purpose

This policy explains how customers, patients, students, practitioners, or members of the public may raise concerns or complaints relating to products, communications, consultations, educational materials, administrative handling, or professional conduct connected with Bhutan Biotechnology Enterprise UK Co. Ltd.

Scope

This policy applies to:

• Website enquiries.

• Product-related service communications.

• Educational or informational content.

• Practitioner or wellness consultations, where offered.

• Administrative interactions, bookings, and aftercare communications.

 

Policy statement

Bhutan Biotechnology Enterprise UK Co. Ltd. is committed to handling complaints fairly, respectfully, and within a reasonable timeframe. The organisation aims to investigate concerns objectively and improve services where shortcomings are identified.

 

Procedure

1. Complaints should be submitted in writing by email to support@bbenatural.com.

2. The complaint should include the complainant’s full name, contact details, the date of the incident or service, and a clear description of the concern.

3. Receipt of the complaint should normally be acknowledged within 5 working days.

4. A full response should normally be issued within 20 working days, unless the matter is complex and requires more time.

5. If more time is required, the complainant will be informed of the delay and the expected response date.

6. The outcome may include clarification, corrective action, apology where appropriate, or an explanation where the complaint is not upheld.

7. A secure record of the complaint and outcome will be retained.

 

Escalation

If the complainant remains dissatisfied, they may request a further internal review by the responsible director or nominated senior representative.

2. Safeguarding Policy

 

Purpose

This policy explains how Bhutan Biotechnology Enterprise UK Co. Ltd. seeks to safeguard children and adults at risk who may come into contact with its educational, training, wellness, or practitioner-related services.

 

Scope

This policy applies where the business engages in any direct client work, teaching, mentoring, training, or practitioner support. It is particularly relevant if consultations or wellness guidance are provided beyond simple retail product sales.

 

Policy statement

The organisation takes safeguarding concerns seriously and will respond appropriately to concerns about abuse, neglect, exploitation, coercion, or serious risk of harm. Absolute confidentiality cannot be promised where someone may be at risk.

 

Procedure

1. Listen calmly and respectfully to any disclosure.

2. Do not promise total secrecy.

3. Record the concern factually, including dates, times, names, and the exact words used where possible.

4. Escalate the matter promptly to the designated safeguarding lead: [insert name/role].

5. Where there is immediate danger, contact emergency services or the relevant safeguarding authority without delay.

6. Keep a secure written record of the concern and action taken.

 

Professional boundaries

• Appropriate boundaries must be maintained in all communications.

• Contact with minors should only occur with lawful consent and suitable supervision where required.

• No practitioner, staff member, or representative should exploit a vulnerable person emotionally, financially, or professionally.

 

 

Privacy Policy and Data Protection Statement

Purpose

This policy explains how Bhutan Biotechnology Enterprise UK Co. Ltd. collects, uses, stores, and protects personal data submitted through its website, email, product enquiries, bookings, consultations, or related service activity.

Data collected

The organisation may collect:

• Name, email address, telephone number, and postal address.

• Order, booking, or enquiry details.

• Communications submitted by website, email, or contact form.

• Health-related information voluntarily provided in connection with consultations, safety screening, or practitioner support, where applicable.

• Technical website information such as IP address, browser type, and cookies where relevant.

 

Purpose of processing

Personal data may be used to:

• Respond to enquiries.

• Supply products or service information.

• Manage appointments or consultations where offered.

• Maintain records of communications and transactions.

• Meet legal, tax, insurance, compliance, and regulatory obligations.[cite:25]

 

Special category data

Where health-related or sensitive personal data is collected, it will only be used where reasonably necessary for service provision, safety review, record keeping, or lawful compliance purposes. Access will be restricted to authorised personnel only.

 

Data sharing

Bhutan Biotechnology Enterprise UK Co. Ltd. will not sell personal data. Information may be shared only where reasonably necessary with secure service providers, payment processors, booking systems, professional advisers, or where required by law or serious safety concerns.

 

Data security

Reasonable technical and organisational safeguards will be used to protect personal data, including secure passwords, restricted access, protected devices, and secure storage systems.

 

Data rights

Individuals may request access to their personal data, request correction of inaccurate information, and raise data-related concerns through support@bbenatural.com, subject to applicable legal limitations and record-keeping requirements.

 

Informed Consent Policy

Purpose

This policy applies where Bhutan Biotechnology Enterprise UK Co. Ltd. provides consultations, educational guidance, practitioner-led wellness support, or similar services that involve personal health discussion, assessment, or recommendations.

 

Policy statement

Informed consent will be obtained before any consultation or practitioner-led service begins. Consent must be voluntary, informed, and appropriately documented.

 

Minimum consent content

Before a consultation or therapeutic interaction begins, the individual should be informed about:

• The nature and purpose of the consultation or service.

• The scope and limits of the service.

• Any relevant fees, session format, and follow-up arrangements.

• Possible benefits, limitations, and uncertainties.

• The need to disclose relevant health history, medication, allergies, and current medical care.

• The person’s right to ask questions, decline recommendations, or withdraw consent.

 

Important boundary statement

Any educational, traditional medicine, herbal, or wellness-oriented service must not be presented as emergency care or as a replacement for urgent medical assessment. Individuals with serious, worsening, or unexplained symptoms should seek appropriate medical advice without delay.

 

Documentation

Consent may be recorded using intake forms, signed consent forms, and practitioner notes.

5. Cancellation and Refund Policy

 

Purpose

This policy applies where Bhutan Biotechnology Enterprise UK Co. Ltd. offers booked appointments, consultations, training sessions, or reserved practitioner time.

 

Policy statement

Reserved time is allocated specifically to each client or participant. Reasonable notice is therefore required for cancellations or rescheduling.

• At least 24 or 48 hours’ notice should be given for cancellations or rescheduling.

• Late cancellations may incur a charge.

• Missed appointments without notice are normally non-refundable.

• If the organisation cancels an appointment, the customer will be offered either rescheduling or refund of any prepaid amount for that session.

• Product returns and refunds should follow the business’s published sales and consumer terms where physical goods are supplied.

 

Confidentiality Policy

Purpose

This policy explains how confidential information is handled in relation to enquiries, consultations, practitioner communications, and service records.

Policy statement

Personal and health-related information will be treated as confidential and only accessed or shared where reasonably necessary for service delivery, administration, legal compliance, or safeguarding reasons.

Limits of confidentiality

Confidentiality may be limited where:

• There is a serious risk of harm.

• A safeguarding issue arises.

• Disclosure is required by law.

• The individual has agreed to relevant information sharing with another professional.[cite:25]

 

Website Disclaimer

Purpose

This disclaimer is designed for publication on www.bbenatural.co.uk to clarify the status of services, herbal prescriptions, herbal, traditional medicine, and educational content on the website.

 

Website disclaimer text

The information provided on this website is for general educational and informational purposes only and does not constitute medical advice, diagnosis, or treatment.

​

Bhutan Biotechnology Enterprise UK Co. Ltd. presents information relating to natural supplements, traditional medicine, herbal remedies, and wellbeing topics. Such information is not a substitute for care from a qualified medical doctor or other appropriately licensed healthcare professional.

​

No content on this website is intended to diagnose, treat, cure, or prevent disease unless expressly stated in a legally compliant context. Product descriptions, educational articles, and traditional medicine references should be read as general information only.

​

Any person who is pregnant, breastfeeding, taking prescription medication, living with a diagnosed medical condition, or receiving active treatment should seek appropriate professional advice before using supplements, herbs, or health-related recommendations.

​

Anyone with urgent, severe, or worsening symptoms should seek immediate medical attention and should not rely on website content for emergency decisions.

​

Results may vary between individuals, and no guarantee is given regarding outcomes.

 

Product and health claims policy

Purpose

This policy helps ensure that product wording on the website remains aligned with UK nutrition and health claims principles and does not overstate the role of supplements or natural products.

 

Policy statement

Bhutan Biotechnology Enterprise UK Co. Ltd. will aim to ensure that website wording, labelling, and promotional language do not make unauthorised health claims or imply medicinal outcomes beyond what is lawful and properly substantiated.

Practical rules

• Product descriptions should focus on composition, traditional context, general wellbeing framing, and any authorised claims where applicable.

• Disease treatment claims should not be made for foods or supplements unless legally authorised in the relevant product category.

• Traditional use descriptions should be clearly distinguished from proven clinical claims where appropriate.

• Educational or historical references should not be framed as guaranteed therapeutic outcomes.

 

Records and document control policy

Purpose

This policy sets out how policy documents, complaint records, consultation notes where applicable, and related compliance records are maintained.

 

Policy statement

All formal records should be dated, version controlled, stored securely, and reviewed periodically. Public-facing policies should match actual business practice and should be updated whenever material operational changes occur.

 

Version 1.0 – @2021
Reviewed by – Wai Lo