At Nokite Eco Smart Water Heating Systems (Guangdong) Co., Ltd. (collectively referred to as "NOKITE", the "Company", "we", or "us"), we are committed to protecting your personal data and privacy. We appreciate your interest in our products and your visit to our website or use of our web services. Your trust is important to us, and we want you to feel confident and secure when engaging with us online.

This Privacy & Cookies Policy ("Privacy Policy") explains how we collect, use, and protect your personal data, including information gathered through cookies. It also outlines the purpose of this data collection, the security measures we apply, and your rights in relation to your personal information.

Controller and Pressors
The controller under the relevant data protection laws and regulations is the specific NOKITE company identified in the website's imprint. Your personal data may be transferred to NOKITE and its related companies or to third-party service providers (“data processors”) for purposes such as servicing, processing, storage, or other business-related functions.
When transferring personal data between NOKITE and related companies — including across borders — we apply appropriate safeguards in line with applicable privacy laws. This includes the use of recognized legal frameworks, such as standard contractual clauses or other lawful mechanisms, to ensure a consistent and adequate level of data protection.
We also require all data processors acting on our behalf to adhere to contractual or equivalent safeguards that provide a level of privacy protection aligned with our own standards and the requirements of applicable data protection legislation.

Personal Date
"Personal Data" refers to any information relating to an identified or identifiable natural person. An identifiable person is someone who can be identified, directly or indirectly, particularly by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.
Examples of Personal Data include your first and last name, address, email address, telephone number, and date of birth. Personal Data can exist in any format, including paper records, electronic files, video, or audio.
NOKITE is committed to ensuring that all Personal Data we process is handled fairly, lawfully, and transparently. All employees, data processors, and third-party service providers with access to Personal Data are required to keep your data safe and comply with this Privacy Policy, as well as applicable data protection laws.
We only collect Personal Data when you provide it to us. This may occur through actions such as filling out forms, registering on our website, sending us emails, placing orders, making inquiries, or requesting information about our products or services.
Personal Data is stored and maintained by NOKITE or by data processors and server providers who act on our behalf and under our direction. We retain control over and remain responsible for the use of any Personal Data you provide to us.
Some data may be stored or processed on servers located in jurisdictions outside your country of residence. Where this is the case, we ensure that appropriate safeguards are in place — such as contractual agreements or legally recognized mechanisms — to ensure that your data is protected to a standard equivalent to that required in your home jurisdiction.

Collection and Processing of Personal Data
You are not required to provide personal information to use our website, unless it is necessary to deliver a product or service you have requested or to respond to communications you initiate. You may also choose to provide us with additional personal data to help improve our services. Please note that your personal data may be processed globally.
The following explains how we collect, process, and use your personal data on our website:
Data when visiting our website
When you visit our website, certain technical data is automatically processed to enable communication with the site and ensure its security. This includes, for example, preventing unauthorized access, troubleshooting, and system testing.
The types of data we collect may include:
•    Your IP address
•    The name of your internet service provider
•    The website you visited before arriving at ours
•    Date and time of your visit
•    Pages you visit on our website
This processing is necessary either to provide our services or based on our legitimate interests, which we believe also align with your interest in accessing a functional and secure website. You may object to this processing at any time with future effect; however, please note that certain technical processing cannot be disabled on an individual basis due to the nature of how websites function. If you wish to avoid this entirely, we recommend refraining from using the website.
Unless otherwise specified (e.g., in the “Use of Cookies” section), this data is deleted after your session ends, unless a security incident requires extended storage for investigation or legal documentation.

Data for Setting Up a Customer Account/Leaving Message
If you choose to register a customer account or leaving message, we will process the personal information you provide (such as name, address, email address, phone number, title, and login credentials) to manage your account and fulfill related services. This data is processed either for the performance of a contract or to provide a service to you.
You may deactivate your account and/or object to the continued use of your personal data at any time by contacting us via the details provided below. Upon such a request, we will promptly delete your account and all associated personal data, unless legal retention obligations apply.

Contact via Contact form or Email
If you contact us through a form or email, we will store and process the data you voluntarily provide for the purpose of responding to your inquiry and managing the technical administration related to it.
This processing is necessary either for the performance of a contract, pre-contractual measures, or based on our legitimate interest in managing communications efficiently. If applicable, we may use third-party services to prevent spam, as described in the “Use of Cookies” section.
Once your inquiry is resolved, we retain correspondence only as long as legally required or if necessary to assert, exercise, or defend legal claims.

User surveys
Participation in user surveys is entirely voluntary. We may use functional cookies to enable surveys. The technical data collected during surveys is the same as what is typically collected when visiting the website (see earlier section). Survey responses are not linked to personal identifiers such as your IP address.

Disclosure to Third Parties
We may share your personal data with third parties under the following circumstances:
•    To enforce our Privacy Policy and other agreements
•    To protect the rights, property, or safety of NOKITE, our customers, or others
•    For fraud prevention or credit risk reduction
•    To facilitate payment processing via third-party payment gateways
We may also disclose data to regulatory authorities, government bodies, or legal institutions if required by law or in support of a task carried out in the public interest or based on legitimate interest. In such cases, you may object to the processing, although we may continue processing if we demonstrate overriding legitimate grounds or for legal claim purposes.

No Sale of Your Personal Data
We do not sell, rent, or trade your personal data to third parties for monetary or other valuable consideration. Your personal information is used solely for the purposes outlined in this Privacy Policy, such as providing our services, improving user experience, and complying with legal obligations.

Children's Information
Protecting children’s privacy online is a priority. We encourage parents and guardians to actively monitor their children’s internet use.
Our website and services are not directed to children and NOKITE does not knowingly collect personally identifiable information from children. If you believe that your child has provided such data through our website, please contact us immediately. We will take all reasonable steps to promptly remove this data from our records.

Use of Cookies and Similar Technologies
Our website uses cookies and similar tracking technologies to enhance your experience and improve our services. For example, cookies help us personalize content and advertisements, provide social media features, and analyze site traffic. Some of these cookies are placed by third parties (such as analytics, advertising, or social media providers).
Details of these third-party tools, and other services embedded on our website, are explained further in the section “Third-Party Services, Content, and Providers” below.
We categorize cookies into the following groups, in line with European Data Protection Board (EDPB) and China guidance:
•    Necessary Cookies – Essential for the website to function and cannot be switched off. They are usually only set in response to actions such as logging in, filling in forms, or setting your privacy preferences. Without them, parts of the site may not work properly.
•    Statistics Cookies – Help us understand how visitors use our site, so we can measure and improve performance. The data is aggregated and anonymous (e.g., page visits, traffic sources). If disabled, we cannot monitor site usage effectively.
•    Preferences Cookies – Enable the site to remember your settings and choices (e.g., language, region, customization). If you disable these, some services may not function correctly.
•    Marketing Cookies – Used by us and third parties to deliver interest-based advertising and measure the effectiveness of campaigns. They may also be used for remarketing (showing our ads on other sites).
•    Social Media Cookies – Set by social media services (e.g., LinkedIn and so on) to enable sharing and interaction with our content. These cookies can track your browser across other sites to build a profile of your interests and personalize content or ads. If you disable them, certain social media features may not work.
Some cookies are placed by third-party providers whose services appear on our website. The full list of cookies, including provider, purpose, duration, and category, is shown in our Cookie Declaration Table, which is automatically updated through our consent management tool.

Cookie List
A cookie is a small piece of data (text file) that a website – when visited by a user – asks your browser to store on your device in order to remember information about you, such as your language preference or login information. Those cookies are set by us and called first-party cookies. We also use third-party cookies – which are cookies from a domain different than the domain of the website you are visiting – for our advertising and marketing efforts. More specifically, we use cookies and other tracking technologies for the following purposes:

Necessary
These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.

Links to Other Websites
Our site may contain links to partner networks, dealers, affiliates, or other third-party websites. This Privacy Policy is not intended to be applicable to any linked, non-Nokite Group website. Please consult the privacy notices of those websites.

Social Media Plugins and Sharing Features
Our website may offer social media plugins or sharing buttons (e.g., LinkedIn etc.). These features are deactivated by default and will not send data until you choose to activate them. Once activated, the respective platform may collect information about your visit and associate it with your user account if you are logged in. If you prefer not to share this information, log out of the relevant social network before activating a plugin. Please refer to the privacy notices of each social media provider for more details.

Processors and Service Providers
We engage trusted service providers and business partners (“processors”) to perform certain tasks on our behalf, such as technical hosting, payment and delivery services, fraud prevention, analytics, or intra-group processing. These providers may access personal data only to the extent necessary to perform their services, and they are contractually obliged to protect your data and use it solely for our specified purposes.
In accordance with Article 28 GDPR and comparable provisions under other data protection laws (such as the UK GDPR, the Swiss Federal Act on Data Protection (revDSG), Brazil’s LGPD, China’s PIPL, and similar frameworks), we have written agreements in place with all processors. These agreements require processors to follow our documented instructions, maintain confidentiality, apply appropriate technical and organizational security measures, and assist us in fulfilling our legal obligations, including support for data subject rights.

Security
NOKITE is a cross-nation organization with related legal entities, business processes, management structures, and technical systems that operate across borders. Our privacy practices are designed to ensure the protection of personal data worldwide.
Access to personal data is restricted to authorized employees, agents, contractors, entities, and processors who have a legitimate need to access such information in order to fulfill their responsibilities. NOKITE and its service providers implement appropriate technical and organizational security measures to protect the personal data you provide against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.
These security measures are continuously reviewed and improved in line with technological advancements. However, while we take reasonable steps to safeguard your personal data, we cannot guarantee absolute security. To the fullest extent permitted by law, NOKITE disclaims all liability for any damage or loss caused by unauthorized access, misuse, disclosure, alteration, or destruction of your personal data.
We encourage you to take precautions to protect the personal data you submit on this website. Where we have provided you (or where you have chosen) a password to access certain parts of our site, it is your responsibility to keep this password confidential. Please do not share your password with anyone.

Data Retention
Unless specific retention periods are stated elsewhere in this policy, the following general rules apply:
We retain your personal data only for as long as it is necessary to fulfill the purposes for which it was collected, unless you withdraw your consent or object to a processing activity based on our legitimate interests and we have no compelling overriding grounds to continue processing.
In certain cases, we may retain your data for a longer period where:
•    It is required by applicable legal obligations (e.g., tax, accounting, or commercial laws), or
•    The data is needed for the establishment, exercise, or defense of legal claims.
Once the applicable retention period has expired, your personal data will either be deleted or anonymized in accordance with legal requirements.

Your Rights
Depending on the data protection laws applicable to you, you may have the right to exercise one or more of the following rights. To do so, please use the Data Subject Rights Form provided in the section “Contact”.
•    Right of Access
You may request confirmation as to whether we process your personal data and, where applicable, request access to such data. This includes information about the categories of personal data, the purposes of processing, the recipients or categories of recipients, and the envisaged retention period. Where applicable, you may also have the right to request a copy of your data or to exercise your right to data portability.
•    Right to Rectification and Erasure
You may request the correction of inaccurate or incomplete personal data. Under certain conditions, you may also request the deletion or restriction of your personal data — for example, if the data is no longer necessary for the purposes for which it was collected, or if you have withdrawn your consent.
•    Right to Withdraw Consent
Where the processing of your personal data is based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
•    Right to Object to Processing
You may object to the processing of your personal data on grounds relating to your particular situation, where we process your data based on our legitimate interests. In such cases, we will assess your request and either cease processing or demonstrate compelling legitimate grounds to continue.
•    Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection authority if you believe that the processing of your personal data violates applicable data protection laws.
Assessment: In the event you make a request, we may verify your identity before proceeding. We will respond within the timeframes required by the applicable laws. Please note that we may reject requests that are manifestly unfounded, excessive, or abusive. In some cases, we may limit our response where we are legally entitled to retain your data or have overriding legitimate interests.

Localized Addenda
This section supplements the Global Privacy & Cookies Policy and applies specifically to users accessing our services from China, the United States, and Russia. These localized statements ensure compliance with country-specific laws and provide clarity regarding your rights, and our data handling practices in those jurisdictions.
United States Addendum (CCPA/CPRA – California and Similar State Laws)
This section applies to residents of California and other U.S. states with similar privacy laws.
Notice at Collection
We collect personal information for the business purposes outlined in our Global Notice. This may include:
•    Identifiers (e.g., name, email, IP address)
•    Commercial information (e.g., transaction records)
•    Internet activity (e.g., browsing behavior)
•    Geolocation data (where applicable)
We do not sell your personal data, but we may share it for cross-context behavioral advertising (targeted ads). To opt out of the “sharing” of personal information for cross-context behavioral advertising, you may reject our cookies.

Consumer Rights
You have the right to:
•    Know what personal information we collect and use.
•    Request deletion of your personal information.
•    Correct inaccurate personal information.
•    Opt-out of sharing personal data for advertising.
•    Limit the use of sensitive personal data (if applicable).
You may also use an authorized agent to make requests on your behalf, subject to identity verification.

Non-Discrimination
We will not discriminate against you for exercising your privacy rights.
To exercise your rights, please use the Data Subject Rights Form provided in the section “Contact.”

China Addendum (Personal Information Protection Law – PIPL)
This section applies to individuals located in the People’s Republic of China (excluding Hong Kong, Macau, and Taiwan) and supplements the Global Privacy & Cookie Notice.

Legal Basis for Processing
We process your personal information based on your consent, as required under the PIPL, unless another legal basis applies, such as fulfilling a contract or complying with legal obligations.

Cross-Border Transfers
Where your personal information is transferred outside of China (e.g., to our servers or processors located abroad), we ensure such transfers comply with PIPL requirements, including:
•    Conducting a data transfer impact assessment.
•    Obtaining your separate consent.
•    Implementing contractual safeguards with the recipient.

Sensitive Personal Information
If we process any sensitive personal information (e.g., ID card numbers, biometric data, precise location), we will notify you separately and obtain your explicit consent.
Your Rights under PIPL
You have the right to:
•    Know and decide about the processing of your personal information.
•    Access, correct, or delete your personal data.
•    Request explanation and limit or refuse processing.
•    Withdraw consent at any time (note: this does not affect prior lawful processing).
To exercise your rights, please use the Data Subject Rights Form provided in the section “Contact.”

Russia Addendum (Federal Law 152-FZ on Personal Data)
This section applies to users located in the Russian Federation.

Local Data Storage Requirement
If you are located in Russia, personal data collected from you will be initially stored and processed in databases located within the territory of the Russian Federation, in accordance with Article 18(5) of Federal Law No. 152-FZ.
We may transfer your personal data abroad only after complying with localization requirements and ensuring that the foreign recipient guarantees adequate data protection measures.

Consent to Data Processing
By using our services, you consent to:
•    The collection and use of your personal data as described in the Privacy Policy.
•    The cross-border transfer of your data in compliance with Russian law.

Your Rights under Russian Law
You have the right to:
•    Access, correct or delete your personal data.
•    Withdraw consent at any time (without affecting prior lawful processing).
•    File a complaint with the Russian data protection authority (Roskomnadzor).
To exercise your rights, please use the Data Subject Rights Form provided in the section “Contact.”

CHANGES TO THIS POLICY
We reserve the right to update or modify this Privacy Policy from time to time to reflect changes in our practices regarding the use of personal data or to comply with evolving legal and regulatory requirements. Any updates will be published on this website, and where appropriate, we will notify you of significant changes.

Contact
If you have any queries or complaints about our compliance with this Privacy Policy, or if you would like to exercise your rights described above, please contact us or submit a request via our Data Subject Rights Form.
The controller under the relevant data protection laws and regulations is the specific NOKITE company identified in the website's imprint.
Last Updated: 25th June 2026