HIRONIC

1. Introduction
HIRONIC Co., Ltd. ("HIRONIC," "we," "us," or "our") respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains what personal data we collect through our international website(s) and related services, why we collect it, how we use, disclose, and protect it, how long we retain it, and the rights available to you. This policy applies to visitors and customers of HIRONIC's global website(s) and to individuals who contact us through inquiry forms, product/purchase inquiries, customer support, or demo/clinical-inquiry requests. Where HIRONIC operates a separate, locally-governed website or business unit with its own privacy policy (for example, our Korean-market site), that local policy applies to that site instead of, or in addition to, this one.

2. Who is responsible for your data
The data controller responsible for the personal data described in this policy is:
HIRONIC CO., LTD.
• CEO: Jin Woo Lee
• Business Registration Number: 206-86-2135919F
• Registered address: U-Tower, 767 Sinsu-ro, Suji-gu, Yongin-si, Gyeonggi-do, 16827, Korea
• Tel: +82-31-525-7000
• Fax: +82-31-525-7010
For visitors in the European Union, a separate EU privacy page governs data collected through our EU-directed services; this global policy does not cover EU-specific requirements (including any EU representative). Please refer to that page for EU-specific terms.

3. Personal data we collect
3.1 Information collected automatically
When you visit our website, the following information is collected automatically:
• Your internet service provider domain and the address of the website you came from
• Your browser type and operating system
• Date and time of your visit, pages viewed, and similar usage data
This information is used to improve and maintain the website, to analyze usage through statistics, and to support communication between you and HIRONIC. It may occasionally need to be disclosed where legally required.

3.2 Information you provide directly
You may contact HIRONIC by post, phone, email, or through an online form. Information you submit through these channels may be shared with other organizations where a legal basis requires or permits it, and may be used to develop or implement related policies.

3.3 Information collected for product and service inquiries
When you use website features such as a product purchase inquiry, customer support, or a demo/clinical-inquiry request, HIRONIC collects the minimum personal data necessary, and asks for your consent to do so. The categories collected are:
• Name
• Hospital / clinic name
• Email address
• Phone number
• Product name / product of interest
While HIRONIC takes administrative and technical measures to secure the website, please avoid submitting sensitive personal data (e.g., health information about yourself, government ID numbers) through these forms unless a specific, secured form explicitly asks for it.

3.4 Cookies
A cookie is a small text file sent by our web server to your browser and stored on your device. We use cookies to operate and improve our website.

4. Why we process your data, and our legal basis
We only collect and hold personal data based on your consent or another applicable legal basis. The table below sets out our current processing activities as described in our source policy, mapped to an international legal-basis framework:
- General contact information (name, phone number, email, address) is collected for after-sales service (A/S) management, based on consent / performance of a contract.
- Product information (product serial number) is also collected for after-sales service (A/S) management, based on consent / performance of a contract / legitimate interest.
- Inquiry-form data (name, hospital/clinic name, email, phone, product name) is collected to respond to product, demo, and support inquiries, based on consent.
- Automatically collected browsing data (domain, browser/OS, visit timestamps) is collected for website security, statistics, and service improvement, based on legitimate interest.

5. How long we keep your data
Personal data is destroyed without undue delay once the purpose for which it was collected has been achieved. Where data must be kept for a defined period after that (for example, to meet internal policy or legal recordkeeping obligations), it is transferred to a separate, access-restricted store, held only for that period, and then destroyed. Data in electronic form is deleted using methods that prevent the record from being recovered.

6. How we share your data
We process your personal data only within the purposes described above and do not process it beyond that scope, or disclose it to third parties, without your prior consent — except where:
• You have given prior consent to the disclosure
• Disclosure is required by law
• Disclosure is necessary to perform a contract with you and obtaining ordinary consent is impracticable for economic or technical reasons or
• The data has been processed so that no specific individual can be identified from it.

7. International data transfers
HIRONIC is headquartered in the Republic of Korea. If you are located outside Korea, your personal data may be transferred to, stored, and processed in Korea and in other countries where HIRONIC or its service providers operate.

8. Your privacy rights
8.1 All users
You, or your legal guardian if you are under the applicable age of consent, may at any time exercise the following rights over your personal data held by HIRONIC:
• Access — request a copy of the personal data we hold about you
• Correction — request that inaccurate or incomplete data be corrected
• Deletion — request that your data be deleted
• Restriction — request that we stop processing your data in certain circumstances
• Withdraw consent — where processing is based on consent, withdraw it at any time
Requests can be made in writing, by email, or through the appropriate government form where applicable, and HIRONIC will act on them without undue delay. Requests may be made on your behalf by a legal representative or authorized agent, subject to proof of authorization. These rights may be limited in specific circumstances set out by applicable law (for example, where another law requires the data to be kept, or where access would seriously prejudice a third party's rights).

8.2 Additional rights for individuals in the EEA / UK (GDPR / UK GDPR)
• Data portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interests, including profiling
• Right not to be subject to solely automated decision-making with legal or similarly significant effects
• Right to lodge a complaint with your local supervisory authority

8.3 Additional rights for California residents (CCPA / CPRA)
• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information, subject to exceptions
• Right to correct inaccurate personal information
• Right to opt out of the sale or sharing of personal information
• Right to limit use of sensitive personal information
• Right to non-discrimination for exercising any of these rights

9. How we protect your data
HIRONIC takes administrative and technical measures to secure this website, including monitoring network traffic and running detection tools against unauthorized attempts to alter information. No online service can guarantee absolute security, so please avoid submitting sensitive information through forms that are not specifically designed and secured to collect it.

10. Data breach notification
If a breach involving your personal data occurs that is likely to result in a risk to your rights and freedoms, HIRONIC will notify the relevant supervisory authority and affected individuals as required by applicable law, and will take reasonable steps to contain and remediate the incident.

11. Children's privacy
HIRONIC's website is not directed at children, and we do not knowingly collect personal data from children under 16 without appropriate parental/guardian consent. If a parent or guardian believes a child has provided us with personal data, please contact us using the details in Section 2 and we will take steps to delete it.

12. Third-party links
Our website may contain links or banners to other websites. If you click through to another site, that site's own privacy policy applies to you there — please review it, as HIRONIC is not responsible for the privacy practices of external sites.

13. Misuse of others' personal data
You must not collect, harvest, or otherwise obtain identifiable personal data (such as email addresses) about other users through HIRONIC's website. Obtaining or disclosing such data by unlawful means may result in liability under applicable law.

. 14. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. We will post the revised policy on this page with an updated effective date, and where changes are material, we will provide additional notice as required by applicable law.

15. How to contact us
If you believe your privacy rights have been violated, or you want to exercise any of the rights described above, request a correction, or withdraw from HIRONIC's services, please contact:
• Jin Woo Lee — Privacy Officer
• Email: marketing@hironic.com
• Phone: +82-31-525-7000
• Fax: +82-31-525-7010
• Postal address: HIRONIC CO., LTD., U-Tower, 767 Sinsu-ro, Suji-gu, Yongin-si, Gyeonggi-do, 16827, Korea

Version
Privacy Policy version: v.20260814.1 Effective date: August, 14, 2026