Privacy Policy

Updated: July 9, 2026

Introduction

EFG US Corporation and our affiliates (“Company”, “we”, or “us”) respect your privacy and are committed to protecting your personal information and privacy through our compliance with this Privacy Policy.

This Privacy Policy describes how and why we may collect, store, use, and/or share (“process”) your personal information when you visit our website at https://hinok.us/, platform, all other websites, mobile application, services, applications, and other tools where this Privacy Policy appear or is linked (collectively, the “Site”).

Please read this Privacy Policy carefully to understand our practices regarding your personal information and how we handle it. If you do not agree with our Privacy Policy, you may choose not to use our Site. By accessing or using our Site, you agree to the terms of this Privacy Policy. This Privacy Policy may change from time to time. Your continued use of the Site after any changes constitutes your acceptance of the updated policy. Please review this Privacy Policy periodically for any updates.

Information We Collect About You and How We Collect It

Information You Provide to Us

The information we may collect about you on or through our Site includes:

● Personal Identifier and Contact Information: your name, postal address, e-mail address, phone number, account name, username, account password, region, date of birth, and other similar identifiers.

● Order and Payment Information: Recipient’s name, billing address, shipping address, contact information, email address, payment information. Payment information may include your credit card number, expiration date, and CVC, which will be processed through a payment gateway (PG).

● Commercial Information: the products you have purchased, returned or considered, your product preferences, and your purchase history.

● Communication Records: your communications with us and any other content you provide, including photographs, images, videos, reviews, articles, survey responses and comments.

● Internet or Other Network Activity: information about your interactions with our Site, such as pages visited, time and date of your visit, links or buttons clicked, or information about your browsing and search history, such as your views of products, shopping cart additions and other related information.

● Demographic information: information about your age, date of birth, sex, and gender

● Health and medical information: skincare concerns, skin conditions, diagnoses, medical reports and history.

● Geolocation information: information that permits us to determine your location, such as if you manually provide location information or enable your mobile device to send us precise location information.

● Other Information You Provide: other information you may provide to us or in other ways, such as responses or opinions you provide if you participate in our events or surveys, feedback you provide about our products or services, request support, interact with social media accounts or otherwise communicate with us.

Information We Collect through Automatic Means

When you access, visit or use our Site, we receive the following technical information automatically (“Technical Information”) about your device, browsing actions, and usage patterns, including:

● Log and Troubleshooting Information: We collect information about how our Site is performing and the information that your browser or device automatically sends when you use the Site. Log files include your Internet Protocol (“IP”) address, browser type and settings, the date and time of your request, and how you interact with our Site. If you or your device experience an error, we may collect information about the error, the time the error occurred, the feature being used, and any communications or content provided at the time the error occurred.

● Usage Information: We collect information about your use of the Site, such as the dates and time of access, browsing history, search, the features you use and the actions you take, pages you view, and other information about how you use the Site, and technology on the devices you use to access the Site.

● Device and Connection Information: We collect information about the device you use to access the Site, such as the name of the device, operating system, device identifiers, browser information, connection information, IP address, time zone setting.

From Social Media Platforms and Networks

If you interact with us on social media platforms or networks such as Instagram, Facebook and Google or choose to log-in to our Sites using your social media credentials, we may obtain your information that you disclose to us, or that the social media platform discloses to us.

From Other Sources

We may obtain your information from other sources, such as data analytics providers, marketing or advertising service providers, fraud prevention service providers, vendors that provide services on our behalf, or publicly available sources.

Cookies and Similar Technologies

We use cookies and similar technologies like beacons, tags, and scripts to operate and manage our Site, to collect information about you and your use of the Site, and to improve your service experience. Cookies are small text files sent by us to the hardware of your computer or mobile device that enable the features and functionality of our Site. These technologies help us to recognize you, customize or personalize your experience, market additional products or services to you, understand your preferences, improve your Site experience, and analyze the use of our Site to make them more useful to you.

You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting, you may be unable to access certain parts of our Site. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Site.

Third-Party Use of Cookies and Other Tracking Technologies

Our Site may include content, advertisements, or features provided by third parties, such as advertisers, ad networks, analytic providers, or application providers. These third parties may use cookies, web beacons or other tracking technologies to collect information about your activity on our Site and across other websites or online services over time. This information may include personal information or details about your browsing behavior and may be used to provide personalized advertising, analytics, or other tailored content.

We do not control the collection or privacy protection of these third parties. For more information about their practices or to opt out of certain types of tracking, please review the privacy policies of these third parties or adjust your browser settings. If you have any questions about specific advertisements or content, we encourage you to contact the responsible third-party provider directly.

How We Use and Process Your Information

We may use your personal information for the following purposes:

● To provide products and service, such as to fulfill your orders and/or complete the transactions you request, to process your payments, to create, maintain, or otherwise manage your account, and to provide a forum of asking questions, posting photos and reviews, and sharing experiences.

● To communicate with you, including to respond to and/or follow-up on your requests, inquiries, issues, or feedback, and to provide customer service.

● To administer your participation in special events, surveys promotions or product reviews.

● For marketing and advertising, such as sending marketing, advertising, and promotional communications by email, text messages, postal mail, push notifications or other messages, show you advertisements for products and/or services tailored to your interests on social media and other websites.

● To conduct research and analytics, including to improve our Site and our offerings, understand how you interact with our Site, advertisements, and communications with you, determine which of our products or services are the most popular, understand your preferred method of purchasing with us, and to better understand our customers’ needs.

● To personalize your experience of our Site.

● To detect, prevent, and prosecute harmful, fraudulent, or illegal activity, loss prevention, and to comply with applicable legal requirements, relevant industry standards and our policies.

● To improve and operate our business, including to provide quality assurance and process adverse event or product related claims, conduct research and development, and perform accounting, auditing and other internal business functions.

● To audit our interactions with you to ensure compliance with applicable law and to measure the effectiveness of our Site, products, services, and advertisements.

● To identify and repair bugs on our Site.

● To send you notices, updates, support and administrative messages.

● To comply with legal obligations and to protect the rights, privacy, safety, or property of our users, us, or any third party.

● To enforce our Terms of Use and similar terms and agreements, including our policies.

● To post your content and reviews on the Site, our social media pages, and related-third party sites that retail or feature our brands and products.

Disclosure of Your Information

We may share and disclose your personal information in the following circumstances:

· Third-party service providers, partners and contractors: we may engage third-party companies or individuals as service providers or business partners to process your information and support our business. These third parties are contractually obligated to keep your information confidential, have limited access to your information, may use your information only to perform agreed tasks, and prohibited from disclosing or using your information for other purposes. Below is a list of third-party service providers and contractors we engage with to process your information:

- Shopify Payments, Inicis, and PortOne Payment for payment processing and security services

- CJ Logistics courier, FedEx, DHL and other transportation services for packaging, international/domestic transportation of goods, and tracking delivery

- Shopify and Klaviyo Mailing Services for sending emails, SMS or notices to users

- Loox for collecting and displaying product reviews

- Gorgias for customer support services

- Amazon Cloud Services for storing data

· Business transfer: if we are involved in strategic transactions, reorganization, bankruptcy, receivership, or transition of service to another provider (collectively, “Transaction”), your information may be disclosed in the diligence process with counterparties and others assisting with the Transaction and transferred to a successor or affiliate as part of that Transaction along with other assets.

· Affiliates: we may disclose personal information to our affiliates, meaning an entity that controls, is controlled by, or is under common control with the Company. Our affiliates may use this personal information in a manner consistent with this Privacy Policy.

· Professional advisors, accountants, consultants, authorities, regulators, government agencies or other entities: we may share your information with our advisors, accountants, consultants, authorities, regulators, government agencies, or other entities as reasonably necessary to:

- comply with any court order, law, or other legal process, and also to response to any government or regulatory requests;

- detect, investigate, prevent, or address actual or suspected fraud, violation of Terms of Use, and other illegal activity or security and technical issues; or

- protect the safety, rights, or property of you, our customers, or others including to prevent harm or loss.

· Social media platforms and networks: Some of our websites have features such as plugins, widgets, and/or other tools made available by social media platforms and networks that may result in information being collected or disclosed between us and such parties. Their use of your information is not governed by this Privacy Policy.

· With your consent or instructions: we may share and disclose your information in accordance with your instructions and with appropriate consent.

How Long We Keep Your Information

We will retain your personal information for so long as your account is active, you engage with us, as needed you to access and use our Site, to fulfill your requests, as necessary to comply with legal obligations, enforce agreements, to manage our rights, and for other legitimate and lawful business purposes. When the personal information collected is no longer necessary for us, or otherwise upon your request, we will dispose of, erase, or delete your information in a secure manner. If there is any information that we are unable, for technical reasons, to delete entirely from our systems, we will implement appropriate measures to prevent any further use of such information.

Children Under the Minimum Age

Our Site is not directed to, or intended for, children under the age of thirteen (13) or any other age considered a minor by applicable laws (the “Minimum Age”).

If you are under the Minimum Age, you must not use or provide any information on the Site or through its features. This includes, but is not limited to:

· Registering for an account

· Making purchases and using our Site

· Submitting any personal information, such as your name, address, telephone number, email address, or any username

If we learn or become aware that we have collected personal information from a child under the Minimum Age without verified and eligible parental or guardian consent, we will promptly delete that information.

If you have reason to believe that a child under the Minimum Age has provided personal information to us through the Site, please contact us immediately at hello@hinok.us. We will investigate the matter and, if appropriate, delete that personal information from our system.

By accessing or using the Site, you confirm that you meet the Minimum Age requirement or that you have obtained the necessary consent from a parent or a legal guardian. If you do not meet the Minimum Age, your parent or legal guardian must review and agree to this Privacy Policy on your behalf.

Data Security

We prioritize the security, integrity, and confidentiality of your information. To safeguard your information, we have implemented technical, administrative, and physical security measures designed to protect personal information from unauthorized access, disclosure, use, and modification. Our security procedures are regularly reviewed and updated to incorporate advancements in technology and best practices. However, please note that no security measures or systems are completely perfect or impenetrable.

International Transfer

When you access our Site, we may transfer your information to countries other than the country in which your information originates. These countries may have data protection laws that are different from the laws of your country.

If you live in the European Economic Area (“EEA”) and your information is transferred to countries outside the EEA and the UK, we ensure that such transfers comply with applicable data protection laws. This includes implementing safeguards such as the EU Standard Contractual Clauses (SCC) under Article 46 of the GDPR or ensuring the recipient is covered by a positive adequacy decision under Article 45 of the GDPR.

For transfers to other countries, we adopt appropriate measures, such as approved contractual clauses, to ensure that your personal information is treated securely and in accordance with applicable privacy laws. In all cases, your rights and protections remain with your personal data regardless of its location.

Your Privacy Rights and Choices

Your Privacy Rights

Depending on where you live and the laws that apply in your country of residence, you may have certain statutory rights in relation to your personal information. For example, you may have the right to:

· Know what personal information we process about you

· Access and obtain a copy of your information

· Request correction of inaccurate information

· Request update or deletion of your information

· Request that we transfer your information to a third party

· Object to our processing of your information, withdraw your consent, or ask us to restrict the processing of your information

· Where our processing of your personal information is based on consent, opt out of certain disclosures of your information to third parties, including targeted advertising purposes

We also have the right not to be discriminated against for exercising any of these rights. If you would like to exercise any of your rights, such as access, correction, or deletion of your information, you may do so through your account settings on our website or you can contact us at the contact details provided under the How to Contact Us section below.

Your Choices

We are committed to providing you with choices or control over your personal information. Below are the options available to manage how your information is used and shared:

● Disclosure of Your Information with Third-Parties for Advertising: you may opt-out of us sharing your personal information with unaffiliated or non-agent third parties for promotional purposes by adjusting your preferences in your account settings or by sending a request to us at hello@hinok.us.

● Targeted Advertising. If you do not want us to use information for targeted advertising, you can opt-out by adjusting your user preferences in your account settings or emailing us at hello@hinok.us.

Jurisdiction Specific Provisions

EEA and UK Residents

If you are located in the EU or UK, the following protection rights under GDPR apply to you:

· Right to Access: You have the right to request a copy of your personal information

· Right to Rectification: You have the right to request that we correct any information you believe is inaccurate

· Right to Erasure (right to be forgotten): You have the right to request that we erase your personal information, which may lead to deleting your account and ending your use of our Site

· Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal information under specific circumstances such as if you contest the accuracy of the data or object to its processing

· Right to Withdraw Consent: You have the right to withdraw your consent, which may lead to deleting your account and ending your use of our Site

· Right to Data Portability: You have the right to request we transfer your personal information to another organization or to you

· Right to Object: You have the right to object to the processing of your personal data in certain circumstances

· Right to Submit a Complaint to a Supervisory Authority: Should you wish to report a complaint or if you feel that we have not addressed your concern in a satisfactory manner, you may contact the Information Commissioner’s Office (https://ico.org.uk/for-the-public/)

To exercise your rights, please contact us at hello@hinok.us (see How to Contact Us below).

We also rely on several legal bases in accordance with applicable data protection laws to process your personal information for the purposes set out in this Privacy Policy. These legal bases are as follows:

● Your consent. Where we rely on your consent to process your personal information, you have the right to withdraw your consent at any time.

● It is necessary to perform a contract with you when we provide and maintain the Site. If you do not provide this information, we may not be able to provide the Site to you.

● Legitimate interest which includes but not limited to provide, develop, improve, or promote the Site.

● In some cases, we may have a legal obligation to process your personal information to comply with relevant laws.

U.S. Residents

If you are a California resident, the California Consumer Privacy Act (“CCPA”) and other state laws provide you with the following rights with respect to your personal information:

• Right to Know: You have the right to request that we disclose to you the categories of personal information we have collected about you, as well as the sources of such personal information, the purposes, and the categories of third parties with whom such personal information is shared.
• Right to Access: You have the right to request access to categories and specific pieces of personal information about you that we collect, use, and disclose.
• Right to Delete: You have the right to request that we delete personal information that we collect from you, subject to applicable legal exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information that we maintain about you, subject to applicable legal exceptions.
• Right to Opt Out of Sale or Sharing of Personal Information: you have the right to “opt out” of the “sale” or “sharing” of your “personal information” to or with “third parties” (as those terms are defined by applicable law).
• Right to Control over Sensitive Personal Information (including consumer health data): depending on your state of residence, you have the right to ask that we limit our use and disclosure of sensitive personal information to certain purposes permitted by law and/or to revoke consent to our processing of sensitive personal information. Residents of Washington and Nevada have the right to withdraw consent in connection with our processing of consumer health data.
• Right not to Receive Discriminatory Treatment: We will not discriminate against you because of your exercise of any of the foregoing rights, or any other rights under the California Consumer Privacy Act. We may, however, charge different prices or rates, or provide a different level or quality of goods or services, if that difference is reasonably related to the value provided to us by your personal information.

Under California’s “Shine the Light” law (Civil Code Section § 1798.83), California residents who provide us certain personal information are entitled to request and obtain from us, free of charge, information about the personal information (if any) we have shared with third parties for their direct marketing purposes. To make such a request, please contact us at hello@hinok.us.

To exercise any of your rights explained in this Privacy Policy, you can do so by contacting us at hello@hinok.us.

Financial Incentives

We may offer incentives, such as a coupon or discount on a purchase in exchange for personal information including contact information and identifiers such as your name, email address and/or mobile phone number. We may also offer other programs, such as sweepstakes, contests, or other similar promotional campaigns (collective, the “Programs”). These Programs may be considered “financial incentive” program under California law or a “bona fide loyalty program” under Colorado law.

When you sign up for one of these Programs, email lists or other discounts and special offers, you provide your opt-in consent to participate in a financial incentive. You may withdraw from a financial incentive at any time by opting out from the emails you initially signed-up for or closing your loyalty member account.

Generally, we do not assign monetary or other value to personal information, however, we provide a good-faith estimate of the value of the personal information we collect and use in connection with these Programs. This valuation helps us offer you benefits that are reasonably related to the value of the information you provide to us.

We do not discriminate against consumers for exercising their privacy rights. This means we will not deny you goods or services, charge different prices, or provide a different level or quality of goods or service merely for exercising your rights under privacy laws. However, if your exercise of a privacy right prevents us from providing the benefits of a specific Program, your participation in that Program may be affected or terminated.

Changes to Our Privacy Policy

We may make changes or updates to this Privacy Policy from time to time. When we do, we will publish an updated version and effective date on this page. We will include a prominent notice on this page or our Site if we make any material changes, but we encourage you to stay informed by reviewing this page periodically.

How to Contact Us

To ask questions, concerns, or feedback about this Privacy Policy and our privacy practices, please email us at hello@hinok.us or contact the person in charge below:

Jeewoo Park /Data Protection Officer

jw.park@efg.earth

Jeewoo Park /Privacy Office

jw.park@efg.earth

Postal address: EFG US Corporation, 95 3rd St, 2nd Fl, PMB 1782, San Francisco, CA 94103, United States