Privacy Policy

Last updated: 24 July 2026

1. About This Privacy Policy

The websites and online store covered by this Privacy Policy are operated by Fung & Goh Pharmaceutical Products Pte Ltd, trading as Immunocal Singapore (“Immunocal”, “we”, “us” or “our”).

This Privacy Policy explains how we collect, use, disclose, store and protect your personal data when you:

• visit immunocal.com.sg, immunocal.sg or immunotec.com.sg;
• create an online account;
• purchase Immunocal products;
• subscribe to our marketing communications;
• contact our customer service team; or
• otherwise interact with our website and online services.

Our online store is hosted on Shopify, which provides the e-commerce platform that enables us to offer and sell our products online.

We handle personal data in accordance with Singapore’s Personal Data Protection Act 2012 (“PDPA”) and other applicable Singapore laws.

“Personal data” means data about an individual who can be identified from that data, or from that data together with other information to which we have or are likely to have access.

2. Personal Data We Collect

The personal data we collect depends on how you interact with our website and services.

Contact and delivery information

We may collect your:

• name;
• email address;
• telephone or mobile number;
• billing address;
• delivery address; and
• country or region.

Account information

When you create an account, we may collect:

• your username or login details;
• communication preferences;
• saved addresses; and
• order history.

You are responsible for keeping your account credentials confidential.

Order and transaction information

When you place an order, we may collect:

• products viewed or purchased;
• shopping-cart information;
• order number;
• transaction amount;
• payment method;
• payment confirmation;
• delivery status;
• returns, exchanges or refunds; and
• previous transaction history.

Payment card details are processed by Shopify or another authorised payment service provider. We generally do not receive or store your complete payment card number. We may receive limited payment information, such as the payment method, transaction status and the last few digits of the payment card.

Consultant, referral and commission information

Where an order is associated with an authorised Immunocal consultant, consultant identification number, referral code or sponsor code, we may collect:

• the consultant’s name and identification number;
• the referral or sponsor code used for the order;
• information linking the order to the relevant consultant, referral code or sponsor code;
• order and transaction information required to attribute the online sale;
• commission calculation, adjustment and verification records; and
• enquiries, supporting records and correspondence relating to commission queries or discrepancies.

Communications with us

We may collect personal data contained in:

• customer service enquiries;
• product enquiries;
• complaints and feedback;
• return or refund requests;
• email or telephone communications; and
• other content you choose to submit.

Please do not provide health, medical or other sensitive information unless it is necessary for us to address your enquiry. If you voluntarily provide health or medical information in connection with a product enquiry, complaint or adverse-event report, we will use it only for the relevant enquiry, safety assessment, regulatory reporting or customer-service purpose. Access will be restricted to personnel and service providers who reasonably require the information.

Product review information

Where you submit a product review, we may collect:

• the display name you choose to provide;
• your product rating;
• your review comments; and
• any images or other content submitted with the review.

Your review content, including your display name, rating and comments, may be published on our website and made visible to other users. You may choose to submit your review anonymously. Please do not include personal data or sensitive information that you do not wish to make public.

Website and device information

When you use our website, certain information may be collected automatically, including:

• Internet Protocol address;
• device type;
• browser type;
• operating system;
• pages viewed;
• links selected;
• referring website;
• date and time of access;
• duration of your visit;
• shopping-cart activity; and
• cookie or similar technology information.

Marketing information

Where you subscribe to marketing communications, we may collect:

• your marketing preferences;
• your consent or subscription status;
• your interaction with our emails or advertisements; and
• products or promotions that may interest you.

3. How We Collect Personal Data

We may collect personal data:

• directly from you when you place an order, create an account, complete a form, enter a consultant identification number, referral code or sponsor code, or contact us;
• automatically through cookies and similar technologies when you use our website;
• from Shopify and applications connected to our Shopify store;
• from payment processors, delivery companies and other service providers;
• from social media platforms when you interact with our official pages or advertisements;
• from Immunotec, authorised Immunocal consultants, sponsors, referral partners or related parties where reasonably necessary to validate a consultant identification number, referral code, sponsor code or sales attribution; and
• from business partners where you have authorised the disclosure or where it is otherwise permitted by law.

We may also generate records internally when we attribute an online sale, calculate or verify a commission, reconcile transaction records or investigate a commission-related discrepancy.

If you provide us with personal data about another individual, such as a recipient of an order, you should ensure that you are authorised to provide the information and that the individual has been informed of the relevant purposes.

4. How We Use Personal Data

We may use and process personal data for the following purposes.

Processing and fulfilling orders

We may use personal data to:

• receive and process your order;
• verify and process payment;
• arrange packing and delivery;
• provide delivery updates;
• process returns, exchanges and refunds;
• issue invoices or receipts; and
• communicate with you about your order.

Sales attribution and commission administration

Where an order is associated with an authorised Immunocal consultant, consultant identification number, referral code or sponsor code, we may use consultant, referral and transaction information to:

• associate the order with the relevant consultant, referral code or sponsor code;
• attribute the online sale;
• calculate, administer and verify commissions;
• reconcile sales, transaction and commission records;
• investigate and resolve commission-related queries or discrepancies; and
• maintain accounting, audit and compliance records relating to commissions.

Managing customer accounts

We may use personal data to:

• create and maintain your account;
• authenticate your identity;
• save your preferences;
• show your order history;
• facilitate future purchases; and
• notify you of important account-related matters.

Providing customer service

We may use personal data to:

• respond to enquiries;
• provide information about products;
• resolve complaints;
• process warranty, return or refund requests;
• investigate delivery or payment issues; and
• improve our customer service.

Operating and improving our website

We may use personal data to:

• operate and maintain the website;
• provide website features;
• remember your shopping-cart contents;
• improve website performance and usability;
• understand how customers use our website;
• diagnose technical problems;
• conduct analytics and reporting; and
• develop or improve our products and services.

Marketing and promotions

Where you have consented, or where otherwise permitted by law, we may use personal data to:

• send product information, promotions and special offers;
• notify you of new products;
• send abandoned-cart reminders;
• personalise website content;
• recommend products that may interest you; and
• measure the performance of our marketing campaigns.

Security and fraud prevention

We may use personal data to:

• verify transactions;
• detect and prevent fraudulent activity;
• protect customer accounts;
• investigate suspicious or unauthorised activity;
• protect our website and information systems; and
• enforce our website terms and policies.

Legal and regulatory purposes

We may use personal data to:

• comply with applicable laws and regulations;
• respond to lawful requests from courts, regulators or government authorities;
• maintain business and accounting records;
• investigate or defend legal claims; and
• protect our legal rights and those of our customers.

We will not use personal data for a purpose that is materially different from the purposes described above without first notifying you and obtaining consent where required.

5. Shopify and Other Service Providers

Our online store is hosted by Shopify. Shopify processes personal data when you visit, use or make a purchase through our store in order to provide and improve its e-commerce, checkout, payment, security, fraud-prevention and customer-account services.

Information submitted through our store may be disclosed or transmitted to Shopify and its service providers, including service providers located outside Singapore.

Shopify’s processing of your personal data is also governed by Shopify’s Consumer Privacy Policy. Further information about Shopify’s privacy practices and available privacy controls can be found through Shopify’s Privacy Portal.

We may also engage service providers for:

• payment processing;
• order fulfilment and delivery;
• website and cloud hosting;
• customer service;
• email and SMS communications;
• analytics;
• fraud prevention; and
• information technology support.

6. Disclosure of Personal Data

We may disclose personal data, where reasonably necessary, to:

• Shopify and Shopify-related service providers;
• payment gateways, banks and payment processors;
• courier, delivery, warehouse and fulfilment providers;
• information technology and website service providers;
• customer service and communications providers;
• professional advisers such as lawyers, auditors and accountants;
• government agencies, regulators, courts or law-enforcement authorities;
• our parent company or related companies, where reasonably necessary to administer our e-commerce operations, provide customer service, fulfil orders or comply with legal and regulatory requirements;
• Immunotec, authorised Immunocal consultants, sponsors, referral partners or other relevant parties, where reasonably necessary to attribute online sales, administer or verify commissions, reconcile sales or transaction records, or resolve commission-related discrepancies; and
• a purchaser or successor in connection with a merger, acquisition, restructuring or sale of our business.

Where personal data is disclosed for sales attribution or commission administration, we will limit the disclosure to information reasonably necessary for that purpose. Recipients are expected to use the information only for the relevant attribution or commission-administration purpose and to protect it appropriately.

Service providers processing personal data on our behalf are expected to use the information only for the services they provide and to protect it appropriately.

We do not sell customers’ personal data for monetary consideration. Where personal data is shared or processed for advertising, analytics or Shopify Enhanced Services, we will disclose the relevant processing and provide applicable privacy choices.

We will not disclose personal data to unrelated third parties for their own marketing purposes without your consent.

7. Marketing Communications

Where you have consented or where permitted by law, we may send marketing communications through:

• email;
• SMS;
• telephone calls;
• instant messaging applications; or
• postal mail.

Marketing communications may include information about Immunocal products, promotions, events and special offers.

You may unsubscribe at any time by:

• selecting the unsubscribe link in a marketing email;
• following the opt-out instructions in the message;
• updating your account preferences; or
• contacting us using the details in Section 16.

When sending marketing messages to Singapore telephone numbers, we will comply with the Do Not Call provisions of the PDPA, including applicable requirements relating to consent, checking the Do Not Call Registry, identifying the sender and providing contact information.

Where applicable, commercial electronic messages will also be sent in accordance with the Spam Control Act 2007. We will provide an appropriate unsubscribe method and process valid opt-out requests within the period required by applicable law.

After you unsubscribe, we may still send non-marketing communications relating to:

• your orders;
• delivery updates;
• payments;
• returns or refunds;
• your account;
• product safety; or
• customer service enquiries.

8. Cookies and Similar Technologies

We use cookies and similar technologies to operate our website and improve your shopping experience.

Cookies are small data files stored on your computer, mobile device or browser.

We may use the following types of cookies.

Necessary cookies

These cookies are required for functions such as:

• website security;
• account login;
• shopping-cart operation;
• checkout;
• payment processing; and
• fraud prevention.

The website may not function properly if these cookies are disabled.

Functionality cookies

These cookies remember information such as:

• your preferred language;
• location;
• account preferences;
• saved settings; and
• previous website selections.

Analytics cookies

These cookies help us understand:

• how visitors use the website;
• which pages are most frequently visited;
• how customers reach our website; and
• whether website errors occur.

Advertising cookies

Where enabled, advertising cookies may be used to:

• measure advertising performance;
• show advertisements that may be relevant to you;
• limit the number of times you see an advertisement; and
• understand your interaction with our marketing campaigns.

We will provide appropriate notice and obtain consent for non-essential cookies where required.

You may manage optional cookies through our cookie-preference tool, where available. You may also block or delete cookies through your browser settings. Disabling cookies may affect certain website features, including account login, shopping-cart and checkout functions.

9. Overseas Transfers of Personal Data

Shopify and some of our service providers may operate or process personal data outside Singapore. Your personal data may therefore be transferred to, stored in or accessed from countries outside Singapore.

When transferring personal data outside Singapore, we will take reasonable steps to ensure that the recipient is bound by legally enforceable obligations to provide a standard of protection comparable to that required under the PDPA.

These measures may include contractual data-protection obligations, security requirements, vendor assessments and other transfer arrangements permitted under Singapore law.

10. Protection of Personal Data

We implement reasonable administrative, physical and technical measures to protect personal data in our possession or under our control against:

• unauthorised access;
• unauthorised collection, use or disclosure;
• copying or modification;
• accidental loss;
• misuse;
• destruction; and
• similar risks.

These measures may include:

• restricted access to personal data;
• password and authentication controls;
• secure website connections;
• encryption where appropriate;
• staff confidentiality requirements;
• cybersecurity monitoring;
• regular system maintenance; and
• service-provider security requirements.

No website or electronic transmission is completely secure. You should use secure communication methods and avoid sending sensitive information through unsecured channels.

If a data breach occurs, we will assess and manage the incident and notify the Personal Data Protection Commission and affected individuals where required by law.

11. Retention of Personal Data

We retain personal data only for as long as reasonably necessary to:

• fulfil your orders;
• maintain your account;
• provide customer service;
• attribute online sales and administer or verify commissions;
• comply with legal, tax and accounting requirements;
• prevent fraud;
• resolve disputes; and
• enforce our agreements and policies.

When personal data is no longer required for a legal or business purpose, we will securely delete, anonymise or cease retaining it, subject to technical and legal limitations.

12. Accuracy of Personal Data

We take reasonable steps to ensure that personal data used to make a decision affecting you, or disclosed to another organisation, is accurate and complete.

You should ensure that information provided to us is accurate and notify us when your contact, delivery or account information changes.

Account information may also be updated through your online account, where this function is available.

13. Access, Correction and Withdrawal of Consent

Subject to the PDPA and applicable exceptions, you may request:

• access to personal data about you that is in our possession or under our control;
• information about the ways in which your personal data has been or may have been used or disclosed by us within one year before the date of your request;
• correction of inaccurate or incomplete personal data; or
• withdrawal of your consent to our continued collection, use or disclosure of personal data.

Requests must be submitted in writing to our Data Protection Officer. We may require information to verify your identity and locate the relevant records.

We will respond as soon as reasonably possible. If we are unable to respond within 30 calendar days after receiving your request, we will inform you in writing of the time by which we expect to respond.

We may charge a reasonable fee for processing an access request where permitted by law. We will inform you of the estimated fee before processing the request.

Where required under the PDPA, we will take reasonable steps to send the corrected personal data to other organisations to which the relevant personal data was disclosed.

If you withdraw consent, we will inform you of the likely consequences. Depending on the personal data concerned, we may no longer be able to process or deliver an order, maintain your account or provide certain services.

Withdrawal of consent will not affect any collection, use or disclosure of personal data that took place before the withdrawal. We may also continue to retain, use or disclose personal data where this is permitted or required under the PDPA or another applicable law.

14. Children

Our website and online purchasing services are not directed to individuals below 18 years of age.

If you are below 18 years of age, you should use our website or make a purchase only with the involvement and permission of a parent or legal guardian.

We do not knowingly collect personal data from children below 13 years of age without appropriate parental or guardian consent. If we become aware that such personal data has been collected without appropriate consent, we will take reasonable steps to delete it.

A parent or guardian who believes that a child has provided personal data to us without appropriate permission may contact our Data Protection Officer.

15. Third-Party Websites

Our website may contain links to websites, applications or social media platforms operated by third parties.

We do not control and are not responsible for the privacy, security or content of third-party websites. You should review the privacy policy of the relevant third party before providing personal data.

16. Contact Us

Questions, feedback, complaints and requests concerning personal data may be directed to:

Data Protection Officer

Company: Fung & Goh Pharmaceutical Products Pte Ltd

UEN: 200506924N

Address: 28 Tai Seng Street, #06-01 Sakae Building, Singapore 534106

Email: enquiry@funggohpharma.com.sg

Please provide sufficient information for us to identify you and understand your request. We may contact you to request additional information or verify your identity.

We will investigate privacy complaints and respond within a reasonable period.

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to:

• our website or e-commerce services;
• our business practices;
• Shopify or other service providers;
• technology; or
• applicable laws and regulatory requirements.

The latest version will be published on this website with the revised “Last updated” date.

Where a change materially affects how we collect, use or disclose personal data, we will provide additional notice or obtain consent where required.