This Privacy Policy explains how NanoH2O Co., Ltd. (“NanoH2O”, “the Company,” “we”, “our”, or “us”) collects your personal information as you use nanoh2owater.com (the “Website”), how we use this personal information, with whom we share this personal information, and your choices in connection with this.
This Policy consists of the following contents:
- What data do we collect and how we use it?
- Procedures and Methods for Destruction of Personal Information
- With whom do we share with your data?
- Where do we transfer your data?
- What are your rights?
- Collection and use of information from children
- How do we protect your data?
- Data Breach Notification
- How to contact us
- How to contact the supervisory authority
- Changes to our Privacy Policy
- Appendix. – Addendum to Privacy Policy for California
What data do we collect and how we use it?
A. Information we collect from you
If you choose to engage in the services offered on our Website, we will collect personal information from you when you contact us through the submission of your personal identifiers. We use this personal information to respond to your questions or inquiries, and provide consultation. We may also use the personal information we collect as described in this section to comply with the law or for the purpose of the legitimate interests, and for other limited circumstances as described in With Whom do we share your information?
Information from You
| Categories of Service/Information | Description | Purpose and Legal Basis | Retention Period |
|---|---|---|---|
| 1:1 Inquiry and provide consultation | – Required: Name, email, Country, message, referral sources, type of inquiry – Optional: company, position(title), phone number | Preventing service interference and cooperating in the investigations of illegal users | 1 year from the date of processing the inquiry |
Personal information may be retained in accordance with relevant laws and regulations in the following cases:
- records regarding transactions, such as labeling, advertising, contract details, and performance, pursuant to Article 6 of the Act on the Consumer Protection in Electronic Commerce, Etc.
– records of contract or withdrawal of subscription, payment settlement, and supply of goods, etc.: 5 years
– records of consumer complaints or dispute resolution: 3 years - retention of communication confirmation data pursuant to Article 15-2 of the Protection of Communications Secrets Act
– computer communication, internet log records, and access location tracking data: 3 months
– records of consumer complaints or dispute resolution: 3 years
B. Information Collected Automatically
In addition to the personal information you provide, when you use our Website, NanoH2O automatically collects the usage, device, and location information via cookies and similar technologies. We use cookies to collect information on your use of the Website to improve our Website. We do not combine the information collected through cookies with personally identifiable information. The retention period of cookies used on the Website is notified in the Cookie Setting. You can configure settings such as allowing or blocking cookies through option settings in your web browser.
- Allowing/Blocking Cookies in Web Browsers
– Chrome: Web Browser Settings > Privacy & Security > Clear Browsing History
– Edge: Web Browser Settings > Cookies & Site Permissions > Manage and Delete Cookies & Site Data - Allowing/Blocking Cookies in Mobile Browsers
– Chrome: Mobile Browser Settings > Privacy & Security > Clear Browsing History
– Safari: Mobile Device Settings > Safari > Advanced > Block All Cookies
– Samsung Internet: Mobile Browser Settings > Browsing History > Clear Browsing History
Usage information
This includes information such as: your time of visit to the Website, pages visited, search terms, actions taken, how much time you spend on each page, transactions and payment method and amount, or customer objects throughout the Website and frequency of access. We use this personal information to: (i) conduct analytics; (ii) enhance user experience; (iii) prevent fraudulent use of the Website; and (iv) diagnose and repair errors.
Device information
This includes information about the device you use to access our Website, such as browser type, browser language, hardware model, operating system, and your preferences. We use this personal information to: (i) conduct analytics; (ii) enhance user experience; (iii) prevent fraudulent use of the Website; (iv) diagnose and repair errors; and (v) provide enhanced functionality.
Location information
This includes information about your location, which may be determined through your IP address.
We use Google Analytics to collect information on your use of the Website to improve our Website. In order to collect this information, Google Analytics may set cookies on your browser, or read cookies that are already there. Google Analytics may also receive information about you from applications you have downloaded that partner with Google. You may choose not to allow analytical cookies in the Cookie Setting on our Website. To see a list of all cookies we use and to control your cookie preferences, please follow the instructions in the What are your rights? section.
- Google’s ability to use and share information collected by Google Analytics about your visits to our Website or to another application which partners with Google is restricted by the Google Analytics Terms of Use and the Google Privacy Policy available here.
- To prevent your data from being used by Google Analytics, you can download the Google Analytics opt-out browser add-on for Google Analytics which can be found here.
Procedures and Methods for Destruction of Personal Information
We destroy personal information without delay when the personal information becomes unnecessary owing to the expiry of the retention period, attainment of the purpose of processing the personal information, etc.
If personal information must be retained pursuant to other statutes despite the expiry of the retention period, attainment of the purpose of processing the personal information, etc., the relevant personal information will be transferred to a separate database (DB) or stored in a different location.
The procedures and methods for the destruction of personal information are as follows:
- Destruction Procedure
We select the personal information for which a reason for destruction has arisen and destroy such personal information after obtaining approval from our Chief Privacy Officer. - Destruction Method
We destroy personal information recorded and stored in the form of electronic files in a manner that prevents such personal information from being reproduced, and destroy personal information recorded and stored in paper documents by shredding or incinerating them.
With whom do we share with your data?
NanoH2O may need to make the personal information identified in this Privacy Policy available within NanoH2O subsidiaries, with its service provider, or with other third parties.
Provision of Personal Information to Third Parties
We may provide personal information to the following third parties in order to respond to customer inquiries and provide product and service consultation.
| Recipients | Purpose of Use | Items Provided | Retention and Use Period | Right to Refuse and Disadvantages |
|---|---|---|---|---|
| NanoH2O Holdings Inc. (USA) | Responding to customer inquiries, providing product and service consultation, sales support, and customer support | Name, email address, company name, country, contact information, and inquiry details submitted by the user | Up to 3 years after completion of inquiry handling or as required by applicable laws | Users have the right to refuse consent to the provision of personal information. However, refusal may result in limitations in submitting inquiries or receiving responses. |
| NanoH2O America, LLC (USA) | ||||
| 耐诺水科技(上海) 有限公司 (China) | ||||
| NanoH2O Europe S.L.U. (Spain) |
Entrustment of Personal Information Processing
We may entrust the processing of personal information to external service providers as follows in order to provide our services efficiently.
- Delegatee: STUDIO-JT
- Delegated Works and Purpose of Use: Website operation and management
- Retention Period: Until the termination of the delegation agreement
We supervise and manage such service providers to ensure that personal information is processed securely in accordance with applicable laws and contractual obligations.
For legal purposes
NanoH2O will share your personal information where legally required, in response to court orders, law enforcement or legal process, including for national security purposes; to establish, protect, or exercise our legal rights, as required to contracts; to defend against legal claims or demands; to detect, investigate, prevent, or take action against illegal activities, fraud, or situations involving potential threats to the rights, property, or personal safety of any person; or to comply with the requirements of any applicable law.
Provision of personal information to third parties
In principle, we do not provide personal information to third parties except in each of the following cases:
- prior consent by a data subject has been obtained
- pursuant to special statutes in other laws
Where do we transfer your data?
As a global company, we, our subsidiaries, and service providers may need to transfer your information outside the country where you are located. This includes transferring your information outside the European Economic Area, if this is where you are located.
We transfer your personal information in connection with providing this manner in order to provide you with our Website. You will need to provide your consent to this in order to use the Website. NanoH2O located in Republic of Korea (“Korea”) and the EU and Korea formally adopted an adequacy agreement on transfers of personal information.
This adequacy decision means that the Korea ensures an adequate level of protection with regard to the protection of personal information. You should also bear in mind that the data protection laws in many of these countries may not offer the same level of protection as those in the country where you are located.
However, before transferring your Personally Identifiable Information we will take steps to ensure that safeguards are put in place aimed at ensuring such information will be afforded the same level of protection.
Transferee / Country / Contact
- NanoH2O America, LLC / United States / nasales@nanoh2owater.com
- NanoH2O Europe S.L.U. / Spain / euafsales@nanoh2owater.com
- 耐诺水科技(上海) 有限公司 / China / cnsales@nanoh2owater.com
Personal information items transferred
- Required: Name, email, Country, message, referral sources, type of inquiry
- Optional: company, position(title), phone number
Method used for transfer
- Once the inquiry is registered on the website, it is automatically sent out to the regional representative mail, which leads to multiple regional sales managers’ individual corporate mails.
Transferee’s purpose of using personal information; period of using/keeping it
- Purpose: Share the information of submitter
- Period: 1 year
Legal Basis for Transfer
- [Article 28-8, Paragraph 1, Subparagraph 5 of the Personal Information Protection Act] An adequacy (equivalence) decision
Method, Procedure, and Effect of Refusing Transfer
- You may refuse overseas transfer by cancelling your membership with us. In such case, we will not be able to provide our services to you. You can request to cancel your membership with us at Website.
What are your rights?
You have all applicable data protection rights under relevant laws including the following:
- The right to access: You have the right to request us for copies of your personal information.
- The right to rectification: You have the right to request that we correct any information that is inaccurate. You also have the right to request us to complete information that is incomplete.
- The right to erasure: You have the right to request that we erase your personal information, under certain conditions.
- The right to restriction of processing: You have the right to request that we restrict the processing of your personal information, under certain conditions.
- The right to request transfer: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
- The right to object: You have the right to object the processing of your personal information which we process in connection with website under the conditions given under applicable law. If in exceptional cases the data processing is based on your consent, your consent can be revoked at any time with effect for the future. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the revocation.
Do Not Track
We do not respond to Do Not Track (“DNT”) requests. Do Not Track is a preference you can set in your web browser to inform the Website that you do not want to be tracked. You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.
To the extent applicable, please also refer to the “Addendum to Privacy Policy for your country or region” hereto.
If you make a request, we will respond to you without undue delay, but at any rate within the timeframe as stipulated by law if such exists. If you would like to exercise any of these rights, please contact us by using the information in the How to contact us section below
Collection and use of information from children
Our Website is designed for a general audience and is not directed towards children. In connection with our Website, we do not knowingly collect or maintain personal information from anyone under the age of fourteen (14) or knowingly allow such persons to use our Website. If you are under the age of fourteen (14), please do not attempt to register for our Website or provide us with any personal information. If we learn that a person under the age of fourteen (14) has provided us with any personal information, we will promptly delete such personal information. If you believe that a child under the age of fourteen (14) may have provided us with personal information, please contact us using the information specified in the How to contact us section.
How do we protect your data?
To protect your personal information, we apply appropriate technical, administrative, and physical protective measures, including the following:
- Administrative measures: Establishment and implementation of internal management plans, operation of a dedicated department, and regular employee training.
- Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of personal information, and installation and update of security programs.
- Physical measures: Access control to computer rooms, data storage rooms, etc.
Our website operates in a secure server environment and prevents unauthorized access, leakage, damage, and misuse of personal information through encrypted communication (HTTPS), access right management, and the operation of security systems.
However, as data transmission over the Internet cannot be perfectly secure, we cannot guarantee the absolute security of personal information.
Data Breach Notification
In the event of loss, theft, or leakage of personal information (the “Personal Information Infringement”), we shall notify you of such facts without delay in accordance with relevant laws and regulations.
The notification shall include the following:
- Items of personal information leaked
- Time and circumstances of the leakage
- Measures the user can take
- Our response measures and plans to minimize damage
- Contact information for inquiries and reports
Furthermore, we will report to the supervisory authority in accordance with relevant laws and regulations and promptly take necessary measures to prevent further damages.
How to contact us
If you have any questions or concerns on this Privacy Policy, please contact us at:
- Chief Privacy Officer
– Name: Yongsang Choi
– Position: Business support division director
– Contact: (+82(2) 3458- 4320, choiys130@nanoh2owater.com) - Department in charge of personal information protection
– Department name: Marketing Strategy Team
– Contact: connect@nanoh2owater.com
How to contact the supervisory authority
Should you wish to report a complaint or if you feel that the Company has not addressed your concern in a satisfactory manner, you may contact the responsible supervisory authority using the contact details:
- Supervisory authority
– KISA : 118
Changes to our Privacy Policy
NanoH2O keeps this Privacy Policy under regular review and places any updates on this web page. This Privacy Policy was last updated on May 06, 2026
Appendix.
Addendum to Privacy Policy for California
This Addendum to Privacy Policy for California (this “Addendum”) applies to the processing of personal information collected from the California residents. This addendum explains the categories of personal data that we collect from you and how we collect and use personal data that is subject to the California Privacy Rights Act (the “CPRA”). It further describes the rights that California residents have with respect to their personal data. This addendum should be read together with the Privacy Policy, and in case of any conflict the terms of this addendum will prevail as to personal data of California residents that is subject to the CPRA. For purposes of this addendum, the term “personal data” includes all “personal information” as defined in the CPRA.
A. Your legal rights
In addition to the rights explained in the Privacy Policy, under certain circumstances, California residents have the following rights in relation to their personal data:
- Right to opt-out
– You have the right to opt out of any sale or “sharing” of your personal information (as the term “sharing” is defined under California law, which means a disclosure to a third party for purposes of cross-context behavioral advertising). - Right to non-discrimination
– You have the right to exercise any of the rights listed above (and any other rights under CPRA) without discrimination by us. - Right to limit the use and disclosure of sensitive information
– To exercise your right to access or delete your personal information, you may submit a request via telephone at 82-1644-7119 or via email in How to contact us.
For requests submitted via telephone, you must provide us with sufficient information that allows us to reasonably verify you are the person about whom we collected the personal information and describe your request with sufficient detail to allow us to properly evaluate and respond to it. If we are not able to verify your identity for access and deletion requests with the information provided, we may ask you for additional pieces of information.
Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf may make a request related to your personal information. If you are an authorized agent making a request on behalf of another individual, you must provide us with signed documentation that you are authorized to act on behalf of that individual.
B. Sources of, purposes for collecting, and categories of personal data collected and disclosed
We obtain your personal data mainly from or via you, and we collect and process personal data for a business purpose.
In the preceding twelve (12) months, we have collected the following categories of personal data from California residents. Please note that the following list represents categories of personal data across all California residents whose personal data we may have collected or received and does not necessarily represent information we have collected specifically about you. Please also note that the definition of “personal information” under CPRA is subject to certain exceptions as set forth therein and does not include information that is publicly available or has been aggregated or deidentified in accordance with CPRA.
- Identifiers
– This includes information such as name, email address, telephone number, national identification number (or unique identification data equivalent thereto) and other similar identifiers. - Personal information as defined by Cal. Civ. Code § 1798.80(e)
– The types of personal data in this category include several of the identifiers described above but also includes, among other things, information such as corporate credit card number. - Certain protected classifications
– Information under this category may include medical history. - Professional or employment-related information
– This includes information such as name of company/department and job title. - Education Information
– Educational background including majored fields of study. - General information
– Such as date of birth, age, sex, height, and weight. - Internet or network activity
– The types of information in this category includes information that relates to IP address and access records.
In the preceding 12 months, we may have disclosed or shared to service providers and our subsidiaries for a business purpose the categories of personal data listed above.
C. Sales of personal data
We do not sell your personal data for monetary consideration.
Last Updated: 2026-05-18