We know that you care about your personal data and how it is used, and we want you to trust that BX5 Health (“BX5”) uses your personal data carefully and only for legitimate purposes. This Privacy Notice explains what personal data we collect, why we collect it, and what we do with it.

This Notice also constitutes a privacy policy for the purposes of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and applies to all BX5 group entities (being BIOIMMUNIX WELLNESS LLP and any company directly or indirectly owned and/or controlled by them).

If you have any questions, please contact us at: support@bx5health.com

Key Terms

Below are definitions of key terms used in this Notice:

Consent

A freely given, specific, informed and unambiguous indication by which you agree to the processing of your personal data, whether by a written declaration or affirmative action.

Cookies

Small text files stored on your device by a website, enabling the web server to recognize your browser and track activity across sessions.

Data Fiduciary

The entity (here, BX5) that determines the purposes and means of processing your personal data.

Personal Data

Any information that can directly or indirectly identify you including your name, email address, phone number, location, purchase history, or device identifiers.

Personal Data Breach

Any accidental or unlawful destruction, loss, alteration, or unauthorized disclosure of, or access to, personal data.

Processor

A third party that processes personal data on BX5’s behalf, subject to our instructions and this Notice.

Special Categories of Personal Data

Personal data revealing racial or ethnic origin, political opinions, religious beliefs, health data, biometric data, genetic data, financial data, or data concerning sex life or sexual orientation.

What Personal Data We Collect

You are not required to provide the personal data we request. However, if you choose not to do so, we may not be able to provide you with our products or services or respond to your queries effectively.

Personal Data You Give Us Directly

When you create an account, place an order, complete a survey, or contact our support team, we may collect:

•       Full name, gender, and date of birth

•       Postal address, email address, and phone number

•       Health-related information (e.g. any allergies or sensitivities relevant to supplement use) collected only with your explicit consent

•       Any other information you voluntarily share with us

Personal Data We Collect Automatically

When you interact with our website or app, we automatically collect:

•       IP address and device identifiers

•       Browser type, version, and operating system

•       Pages visited, time spent, and click behavior

•       Purchase and browse history on our platform

•       Location data (where enabled and permitted)

Personal Data from Third Parties

We may receive personal data about you from trusted third-party partners, social media platforms where we advertise, and analytics providers, in order to improve the relevance of our communications and services.

Why We Collect and Use Your Data

BX5 collects and processes your personal data only for specific, legitimate, and limited purposes:

•       To process and fulfil your orders, including delivery and payment confirmation

•       To create and manage your customer account

•       To respond to your enquiries and provide customer support

•       To send you relevant product information, offers, and updates (where you have opted in)

•       To improve our products, website, and overall customer experience

•       To comply with legal and regulatory obligations

•       To detect and prevent fraud or security vulnerabilities

•       To conduct internal analytics and quality assurance

Where we rely on your consent as the legal basis for processing, you have the right to withdraw that consent at any time by contacting us at support@bx5health.com.

We do not collect, store, or process your payment card or banking details. All payments are processed by secure third-party payment providers in accordance with their own privacy policies.

Profiling and Personalization

BX5 may analyze your browsing and purchasing behaviour to build a profile of your interests and preferences. This allows us to:

•       Show you personalized product recommendations on our website

•       Send you tailored communications and offers that are relevant to your interests

•       Display relevant BX5 advertising on third-party platforms

For example: if you frequently browse our testosterone support or energy products, we may send you targeted content about related formulations or new launches. This profiling is based on your activity and, where required, your consent.

How We Use Cookies

BX5 uses cookies and similar tracking technologies to:

•       Understand how visitors use our website

•       Keep you logged in during a session

•       Remember your cart and preferences

•       Measure the effectiveness of our marketing campaigns

You can accept or decline cookies through your browser settings. Declining cookies may affect your ability to use certain features of the BX5 website.

Who We Share Your Data With

BX5 shares your personal data only where necessary and always in a manner consistent with this Notice:

Service Providers

We share data with trusted partners who support our operations, including logistics and delivery providers, payment processors, customer service platforms, and website hosting and analytics providers. These parties are contractually bound to process your data only for the purpose for which it was shared.

Marketing and Advertising Partners

With your consent, we may share limited data (such as age, gender, or interest segments) with advertising networks and social media platforms to deliver relevant BX5 content. We do not sell your personal data.

Legal Disclosure

We may disclose your personal data to authorities or third parties where required to: comply with applicable law or regulation; respond to a court order or government request; enforce our Terms of Use; detect or prevent fraud; or protect the rights, property, or safety of BX5, its customers, or the public.

Business Transfers

If BX5 undergoes a merger, acquisition, or asset sale, your personal data may be transferred as part of that transaction. We will notify you in advance if your data is subject to a new privacy policy as a result.

International Data Transfers

BX5 primarily processes and stores your data in India. Where data is transferred internationally (for example, to technology providers based outside India), we ensure it is protected to a standard equivalent to Indian law requirements, and only where permitted by applicable regulations.

How We Protect Your Data

BX5 takes the security of your personal data seriously. Our measures include:

•       Access controls limiting who can view your data within our organisation

•       Encryption of data in transit and at rest wherever technically feasible

•       Regular security assessments of our platforms and third-party providers

•       Immediate breach response procedures in the event of a security incident

Access to your personal data is granted only on a need-to-know basis, and strict confidentiality obligations bind all third parties processing your data on our behalf.

How Long Do We Keep Your Data

We retain your personal data for as long as is necessary to fulfil the purpose for which it was collected. For example:

•       Order and transactional data is retained for the period required to fulfil your purchase and handle any subsequent queries or returns

•       Marketing preferences are retained until you opt out or withdraw consent

•       Account data is retained for as long as your account remains active, and for a reasonable period thereafter to handle any queries

When personal data is no longer required, we delete or anonymize it securely in accordance with applicable law.

Your Rights

As a BX5 customer, you have the following rights over your personal data:

•       Right to be Informed to receive clear information about how your data is used (as set out in this Notice)

•       Right to Access to request a copy of the personal data we hold about you

•       Right to Rectification to correct any inaccurate or incomplete personal data

•       Right to Erasure to request deletion of your data where we no longer have a lawful basis to retain it

•       Right to Object to object to certain types of processing, including direct marketing

•       Right to Withdraw Consent to withdraw consent at any time for processing activities based on consent

•       Right to Nominate to nominate another individual to exercise your data rights in the event of death or incapacitation

•       Right to Grievance Redressal to raise a complaint regarding the processing of your personal data

To exercise any of these rights, contact us at: support@bx5health.com

Children’s Privacy

BX5 products are designed for adult men. Our website is not intended for use by anyone under the age of 18. If we become aware that we have collected personal data from a minor without appropriate consent, we will delete that data promptly.

How to Contact BX5

If you have any questions, concerns, or requests relating to your personal data, or wish to exercise any of your rights, please get in touch with our Data Privacy team:

Email: support@bx5health.com

Website: www.bx5health.com/contact

Address: 9, Rajvi Sapphire, South Bopal, Ahmedabad – 380058, Gujarat, India.

We aim to acknowledge all privacy queries within 5 business days and resolve them within 30 days. If you are dissatisfied with our response, you have the right to lodge a complaint with the relevant Supervisory Authority under applicable Indian law.

Updates to This Notice

BX5 will update this Privacy Notice periodically to reflect changes in our practices, legal requirements, or the scope of our services. We will revise the “Last Updated” date at the top of this Notice whenever changes are made. For significant changes, we will notify you by email or via a prominent notice on our website.

Your continued use of the BX5 website or services after any update constitutes your acceptance of the revised Notice.