Privacy Policy

Overview

Hanah One Co., Ltd. (“HOCL”) and Hanah One America Inc. (“HOAI”) (collectively, “we,” “us,” or “our”) respect your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal and consumer health information, whether within the United States or internationally. This Privacy Policy also applies to promotional landing pages, including those accessed via QR codes or e-mail campaigns. While HOAI is the seller of record, certain services—including customer support, fulfillment, data processing, and policy enforcement—may be performed by HOCL, acting as a data processor on our behalf. HOAI is the data controller responsible for the processing of personal data under this Privacy Policy.

By engaging with our website, e-mails, or content, or placing an order (“services”), you acknowledge that you have read, understood, and agreed to this Privacy Policy. We reserve the right to modify this Privacy Policy at any time. Changes will be posted on this page with an updated effective date.

Scope

This Privacy Policy applies to all individuals who engage with our services..

Notice at Collection

At the time of collection, we disclose the categories of personal information we collect and the purposes for which it will be used, as required by applicable law. This includes providing this Privacy Policy through our website and checkout process.

Information We Collect

We may collect the following categories of information:

• identifiers, such as name, address, phone number, and e-mail address;
• commercial information, such as purchase history and product preferences;
• internet/device information, such as IP address, device ID, cookies, and session activity;
• inferred data, such as preferences related to wellness or product needs; and
• sensitive and consumer health data, such as, where applicable, inferred or direct information relating to physical health, dietary habits, or conditions addressed by our products.

We collect this information directly from you, automatically through cookies and similar technologies, and from third-party platforms (e.g., Shopify, Amazon, TikTok, etc.) that facilitate our product sales.

Some promotional offers may require account authentication (e.g., login) to verify eligibility or confirm identity. This is permitted under applicable privacy laws to ensure secure delivery of personalized offers.

Cookie and Tracking

We use cookies and similar tracking technologies to operate and improve our website, analyze traffic, and for advertising purposes. For more detailed information about the specific technologies we use, why we use them, and how you can control them, please see our full Cookie Policy.

Use of Information

We use the information we collect, including personal and health-related data, for the following purposes:

• fulfill orders and respond to customer service inquiries;
• improve and personalize our products and services;
• serve personalized ads (where consented); and
• comply with applicable legal obligations.

We may use your purchase history, visit patterns, or login status to direct you to relevant promotional offers or landing pages. This redirection is designed to improve your user experience and is based solely on your interactions with our services.We may also use your information to personalize your user experience, including by tailoring promotional messaging based on your interactions with QR codes, e-mails, product usage history, or site activity. We may use e-mail interaction data (such as whether you opened or clicked on a campaign) to personalize your experience or deliver promotional content. You may opt out of promotional communications at any time by using the unsubscribe link in our e-mails.

We do not engage in automated decision-making that produces legal or similarly significant effects. However, we may use limited profiling (such as redirecting logged-in customers to a promotional page) to enhance your experience.

If you order our products from outside the United States, we process your information to fulfill your international order. This includes transmitting relevant data to third-party vendors and platforms like Shopify to calculate duties, shipping, and taxes, and to facilitate delivery.

For individuals located in the European Economic Area (“EEA”) or United Kingdom (“UK”), you may also have the right to object to processing personal information based on lawful grounds such as your consent, the performance of a contract, or our legitimate business interests.

Sharing of Information

Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products to you. Your data is stored through Shopify’s data storage, databases, and general Shopify application. For more details on Shopify’s privacy practices, please visit https://www.shopify.com/legal/privacy.

We may transfer personal information to countries outside your home jurisdiction, including where our service providers operate. While these countries may not offer the same level of data protection, we take steps to ensure your data remains secure and processed in accordance with applicable law.

We may share your information with third parties such as advertising platforms, analytics providers, fulfillment partners, and payment processors, subject to applicable privacy laws. These parties may assist with functions such as order fulfillment, marketing, data analysis, and website hosting. For example, we may use services such as Shopify, Amazon, Meta (Facebook/Instagram), TikTok, and Google Analytics.

Additionally, personal information collected by us may be accessed by affiliated personnel located outside the United States and, in some cases, may be stored on servers or systems outside the United States, solely for purposes consistent with this Privacy Policy. These purposes may include customer service, operational support, and product development.Such access and storage are protected by appropriate safeguards consistent with applicable data protection standards. We comply with applicable privacy laws governing cross-border data access. By providing your information, you consent to the transfer of your data to countries that may not have the same data protection laws as your jurisdiction. We do not “sell” personal information for monetary value, but we may “share” it with third parties for cross-context behavioral advertising. You may opt out of such sharing as described below.

Your Rights

Depending on your state or country of residence, you may have additional rights regarding:

• accessing, correcting, or deleting your information;
• limiting the use of sensitive data (e.g., health or dietary preferences);
• opting out of data “sales” or cross-context behavioral advertising; and/or
• requesting data portability or lodging complaints with a regulatory authority.

You may submit requests to exercise your rights by contacting us at support@odd.us. To protect your information, we will need to verify your identity (and, if applicable, your state of residence) before fulfilling your request. We will respond within the timeframes required by applicable law

Additional Information for Certain Jurisdictions

Residents of Washington or Nevada:

Washington residents may request the following:

• a list of consumer health data collected;
• deletion of such data; and/or
• a ban on selling or sharing such data without consent.

Nevada residents may request the following:

• know what consumer health data is collected;
• opt out of the sale of consumer health data; and/or
• request deletion of such data.

Residents of the EEA or UK:

If you are in the EEA or UK, our lawful basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.

However, we will normally collect personal information from you only where we need the personal information to perform a contract with you (e.g., to fulfill your order), where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms (e.g., for our marketing or to improve our services), or where we have your consent to do so (e.g., for non-essential cookies).

If you are in the EEA or UK, you have the right to object to certain processing activities, request restrictions on processing, or lodge a complaint with your local data protection authority.

We have appointed representatives in the EEA and UK as a point of contact for data protection authorities and individuals.

EEA

Rickert Rechtsanwaltsgesellschaft mbH
Re: Hanah One America Inc.

Colmantstraße 15

53115 Bonn

Germany

art-27-rep-hanahone@rickert.law

UK
Rickert Services Ltd UK

Re: Hanah One America Inc.

PO Box 1487

Peterborough

PE1 9XX

United Kingdom

art-27-rep-hanahone@rickert-services.uk

Retention of Information

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including to comply with legal obligations, resolve disputes, and enforce our agreements. This applies regardless of whether the information is stored in the United States or in another jurisdiction. When no longer needed, information is securely deleted or de-identified.

Children's Privacy

Our products and services are not directed to individuals under the age of 16, and we do not knowingly collect personal information from them. If you are under 16, you may not use our website or provide us with any personal information.

If we learn that we have collected personal information from an individual under 16, we will delete it promptly. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at support@odd.us to request its deletion.

User-Generated Content

If you submit product reviews or other content in public areas of our website, this information will be publicly accessible. We are not responsible for how others may use, access, or share this publicly available content. Please use discretion when sharing personal information.

Promotional Offers and Vouchers

We may offer promotional discounts, vouchers, or reward programs in connection with your purchase or continued use of our products. If you receive a voucher or incentive (e.g., for completing a usage ritual), the program details—including value, conditions, applicable products, and expiration—will be disclosed at the time of the offer.Applicable voucher discounts will be clearly displayed prior to checkout. Redeeming a voucher does not obligate you to complete a purchase.Participation in such promotions is voluntary.

Third-Party Sites and Social Media

Our services may contain links to third-party websites or use social media widgets. These third parties may collect information about your interaction with our services. We are not responsible for the privacy or security of such third-party platforms. Please review their respective privacy policies.

Security Practices

We implement reasonable security measures to protect your personal information, including secure data hosting, access controls, and encryption where appropriate. However, no method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.

Updates to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the date at the top of the policy. If we make material changes, we will notify you by updating the Privacy Policy on our website and, where required by law, by providing additional notice. If you require this policy in an accessible format, please contact us at support@odd.us.