Privacy Policy
Privacy policy
This Privacy Policy ("Policy") describes how Nanoshine Group Corp. ("we", "us", "our") collects, protects, and uses the personally identifiable information ("Personal Information") you may provide on the ceramic-pro.com website ("Website" or "Service") and any of its related products and services (collectively, "Services"). It also describes the choices available to you regarding our use of your Personal Information and how you can access and update this information.
The controller responsible for your Personal Information is Nanoshine Group Corp., 1F, No. 68, Dunhuang Road, Datong District, Taipei City, 103048, Taiwan, email legal@nanoshine-group.com.
Our representative in the European Union
Because we are established in Taiwan and do not have an establishment in the European Union or the United Kingdom, we have appointed a representative in the European Union under Article 27 of the EU GDPR.
Our representative in the European Union is: K.V.C. Choose Ceramic Pro Ltd, registration number HE 390428, Vasili Michailidi 9, 3026 Limassol, Cyprus (email: info@nanoshine-group.com).
For data-protection matters concerning the United Kingdom, you may contact our representative in the European Union named above, or contact us directly at legal@nanoshine-group.com.
You may contact our representative on all matters relating to the processing of your Personal Information and the exercise of your rights under the EU GDPR or UK GDPR, in addition to or instead of contacting us directly.
Information we collect automatically
When you open the Website, our servers automatically record information that your browser sends. This data may include information such as your device's IP address, browser type and version, operating system type and version, language preferences or the webpage you were visiting before you came to the Website and Services, pages of the Website and Services that you visit, the time spent on those pages, information you search for on the Website, access times and dates, and other statistics.
Information collected automatically is used only to identify potential cases of abuse and to establish statistical information regarding the usage and traffic of the Website and Services. This statistical information is not otherwise aggregated in such a way that would identify any particular user of the system.
Personal information you provide
You can access and use the Website and Services without telling us who you are or revealing any information by which someone could identify you as a specific, identifiable individual. If, however, you wish to use some of the features on the Website, you may be asked to provide certain Personal Information (for example, your name and email address). We receive and store any information you knowingly provide to us when you create an account, submit a dealer or partner application, contact us, or fill in any online forms on the Website. When required, this information may include:
- Personal details such as name and country of residence.
- Contact information such as email address, postal address, and telephone number.
- Business details where you apply to become a dealer or partner (for example company name, business address, and role).
- Account details such as user name, unique user ID, and password.
- Any other materials you willingly submit to us, such as messages, feedback, or images.
We do not ask for, and do not wish to receive, special categories of data (such as data revealing health, racial or ethnic origin, religious or philosophical beliefs, or biometric data). Please do not include such data in free-text fields, messages, or images you submit to us. If you choose to provide it, you consent to our processing it for the sole purpose of handling your request (Art. 9(2)(a) GDPR).
How we use information, and our legal bases
In order to make the Website and Services available to you, or to meet a legal obligation, we need to collect and use certain Personal Information. If you do not provide the information that we request, we may not be able to provide you with the requested products or services. We may use the information we collect for the following purposes:
- Create and manage user accounts; respond to inquiries and offer support.
- Process and manage dealer, partner, and product enquiries.
- Deliver, operate, and improve the Website, products, and Services.
- Send marketing and promotional communications where permitted.
- Request user feedback and post customer testimonials with your consent.
- Enforce our terms and policies, and protect against abuse and malicious users.
- Respond to legal requests and prevent harm.
Where the EU GDPR or UK GDPR applies, our legal bases for the purposes above are:
Providing the Website, creating and managing accounts, offering support, and responding to your enquiries (including dealer and partner applications) — performance of a contract with you or steps taken at your request before entering into a contract (Art. 6(1)(b)).
Operating, securing, and improving the Website, products, and Services, and preventing abuse, fraud, and misuse — our legitimate interests (Art. 6(1)(f)), provided these are not overridden by your rights and interests.
Sending marketing and promotional communications, publishing testimonials, and setting analytics and advertising technologies — including Google Analytics 4, Microsoft Clarity, and the Meta (Facebook) Pixel — your consent (Art. 6(1)(a)). You may withdraw your consent at any time, without affecting processing carried out before withdrawal.
Complying with legal obligations and responding to lawful requests from public authorities — compliance with a legal obligation (Art. 6(1)(c)).
Cookies and similar technologies
Our Website uses cookies and similar technologies (such as web beacons, pixels, and local storage) to operate the site, remember your language preference, analyse how the site is used, and — with your consent — to measure the effectiveness of marketing. The analytics and advertising technologies we use are Google Analytics 4 and Microsoft Clarity (analytics) and the Meta (Facebook) Pixel (advertising measurement); these load only after you give consent and are not active beforehand. For a full description of the cookies and similar technologies we use, including their purpose, retention period, and the third parties that may receive data through them, please see our Cookie Policy.
Where required by applicable law (including the EU ePrivacy Directive 2002/58/EC and the UK Privacy and Electronic Communications Regulations 2003), we ask for your consent before placing any non-strictly-necessary cookie on your device. You may withdraw or change your consent at any time using the "Cookie preferences" link in the site footer. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
Managing your information
You are able to access and delete certain Personal Information we hold about you. The Personal Information you can delete may change as the Website and Services change. When you delete Personal Information, we may maintain a copy of the unrevised Personal Information in our records for the period necessary to comply with our legal obligations and for the purposes described in this Policy.
Disclosure of information
Depending on the requested Services, or as necessary to complete any transaction or provide any service you have requested, we may share your information with trusted service providers, affiliates, and subsidiaries that assist in operating the Website and Services. We do not sell your Personal Information for money, and we do not share it with unaffiliated third parties for their own direct-marketing purposes. However, certain analytics and advertising technologies (such as the Meta Pixel) may be considered a "sale" or "sharing" under some U.S. state privacy laws; see the "United States privacy rights" section for how to opt out. Service providers are given only the Personal Information they need to perform their designated functions, and are not authorized to use or disclose it except as necessary to perform services on our behalf or to comply with legal requirements.
We will disclose Personal Information if required or permitted by law, such as to comply with a subpoena or similar legal process, and where we believe in good faith that disclosure is necessary to protect our rights, protect your safety or that of others, investigate fraud, or respond to a government request. In the event of a business transition, such as a merger, acquisition, or sale of assets, your information may be among the assets transferred.
Retention of information
We will retain and use your Personal Information for the period necessary to comply with our legal obligations, resolve disputes, and enforce our agreements, unless a longer retention period is required or permitted by law. We may use aggregated data derived from your Personal Information after you update or delete it, but not in a manner that would identify you personally. Once the retention period expires, Personal Information is deleted.
As a guide, we retain: contact and quote enquiries for up to 24 months after our last interaction with you; dealer and partner application data for the duration of the relationship plus the applicable statutory limitation period; account data until you delete your account; and records of marketing consent until you withdraw consent, plus a short period to evidence the consent. Where tax, accounting, or other law requires a longer period, we keep the data for that legally required period and then delete or anonymise it.
International transfer of information
Because we are established in Taiwan — a country that is not the subject of an adequacy decision by the European Commission or the UK government — your Personal Information may be transferred to, and stored in, Taiwan and may be accessed from there. Where we transfer Personal Information out of the EEA or the UK to a country without an adequacy decision, we put in place appropriate safeguards under Article 46 GDPR (and the equivalent UK GDPR provisions), together with any supplementary measures required following a transfer impact assessment. Specifically, we rely on the European Commission's Standard Contractual Clauses for transfers from the EEA, and on the UK International Data Transfer Addendum (IDTA) for transfers from the United Kingdom, as the legal mechanism for these transfers. You may obtain a copy of the safeguards we use by contacting us using the details in the "Contacting us" section. You are entitled to learn about the legal basis of such transfers and the security measures we take; you can inquire using the details in the "Contacting us" section.
Your rights
Subject to applicable law, you may exercise certain rights regarding the information we process about you, including: the right to withdraw consent where processing is based on consent; the right to object to processing carried out on a legal basis other than consent; the right to access information about processing and obtain a copy of your information; the right to have inaccurate information corrected; the right, in certain circumstances, to restrict processing; the right, in certain circumstances, to have your Personal Information erased; and, where applicable, the right to receive your information in a structured, commonly used, and machine-readable format and to have it transmitted to another controller.
The right to object to processing
Where Personal Information is processed for our legitimate interests, you may object to such processing on grounds relating to your particular situation. Where your Personal Information is processed for direct marketing, you may object at any time without providing any justification.
Data protection rights under the GDPR and UK GDPR (EEA / UK)
If you are in the European Economic Area or the United Kingdom, you have the rights described in "Your rights" above under the EU General Data Protection Regulation and the UK GDPR respectively. References in this Policy to the GDPR should be read to include the UK GDPR where applicable.
We do not use your Personal Information for solely-automated decision-making (including profiling) that produces legal effects concerning you or similarly significantly affects you.
You also have the right to lodge a complaint with a supervisory authority — in the EEA, your local data protection authority; in the UK, the Information Commissioner's Office (ICO).
Taiwan privacy rights (PDPA)
Nanoshine Group Corp. is headquartered in Taipei, Taiwan, and the Taiwan Personal Data Protection Act ("PDPA") applies to our processing of Personal Information. Under Article 3 of the PDPA, and subject to the exceptions set out in the Act, you may exercise the following rights with regard to your Personal Information, and these rights may not be waived or limited by contract in advance:
- The right to make an inquiry of and to review your Personal Information.
- The right to request a copy of your Personal Information.
- The right to request supplementation or correction of your Personal Information.
- The right to demand the cessation of the collection, processing, or use of your Personal Information.
- The right to request the erasure of your Personal Information.
To exercise any of these rights, please contact us using the details in the "Contacting us" section below. We may ask you to verify your identity before responding. In addition, you have the right to lodge a complaint with the competent data protection authority in Taiwan. For the digital-economy sector this is currently the Ministry of Digital Affairs; this function is expected to be consolidated into the Personal Data Protection Commission once the 2025 amendments to the Personal Data Protection Act take effect.
United States privacy rights (California and other states)
This section applies to residents of U.S. states that have enacted comprehensive consumer privacy laws, including California (the California Consumer Privacy Act as amended by the California Privacy Rights Act, "CCPA/CPRA"), Virginia, Colorado, Connecticut, Texas, and others. We provide the rights below to the extent these laws apply to our processing of your Personal Information.
Subject to applicable law and verification of your identity, you have the right to:
- Know or access the categories and specific pieces of Personal Information we have collected, the sources, the purposes, and the categories of third parties to whom we disclose it (covering the preceding 12 months).
- Delete Personal Information we have collected from you, subject to legal exceptions.
- Correct inaccurate Personal Information.
- Opt out of the "sale" or "sharing" of your Personal Information. We do not sell your Personal Information for money. However, certain analytics and advertising technologies (such as the Meta Pixel) may constitute "sharing" for cross-context behavioral advertising. You can exercise this right using the "Do Not Sell or Share My Personal Information" link in the site footer, or by enabling a recognized opt-out preference signal.
- Limit the use of sensitive Personal Information, where we process such information.
- Non-discrimination — we will not discriminate against you for exercising any of these rights.
We honor the Global Privacy Control (GPC) browser signal as a valid request to opt out of the sale or sharing of Personal Information for the browser or device on which it is enabled. At or before the point of collection (for example, on our forms), we identify the categories of Personal Information collected and the purposes for which they are used.
You may submit a request using the details in the "Contacting us" section, or via any request form we provide. You may use an authorized agent to submit a request on your behalf. We will acknowledge your request and respond within the timeframes required by applicable law (in California, generally within 45 days, extendable as permitted).
Residents of other jurisdictions
If you reside outside Taiwan, the EEA, the United Kingdom, or a U.S. state listed above, you may nevertheless have rights under the data protection or privacy laws of your country, state, or region — for example, the Brazilian Lei Geral de Proteção de Dados (LGPD), Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Japan's Act on the Protection of Personal Information (APPI), and similar legislation. If you wish to exercise any right available to you under your local law, please contact us using the details in the "Contacting us" section, and we will respond to legitimate requests to the extent required by applicable law.
How to exercise your rights
Any request to exercise your rights can be directed to Nanoshine Group Corp through the contact details in this Policy. We may ask you to verify your identity before responding. Your request must provide sufficient information to allow us to verify that you are the person you claim to be (or an authorized representative) and to understand and respond to the request. We cannot respond to your request or provide you with Personal Information unless we first verify your identity or authority and confirm that the Personal Information relates to you.
Privacy of children
We do not knowingly collect any Personal Information from children. You must be at least 16 years of age (or such other age of digital consent as applies in your country) to use the Website and Services or to consent to the processing of your Personal Information; in some countries we may allow your parent or guardian to do so on your behalf. If you are under that age, please do not submit any Personal Information through the Website and Services. We encourage parents and legal guardians to monitor their children's Internet usage. If you believe that a child has provided Personal Information to us, please contact us, and we will take steps to delete it. In the United States, we comply with the Children's Online Privacy Protection Act (COPPA) and do not knowingly collect Personal Information from children under 13.
Do Not Track and Global Privacy Control signals
Some browsers offer a "Do Not Track" (DNT) signal. There is no industry consensus on how to respond to DNT signals, and we do not currently respond to them. We do, however, honor the Global Privacy Control (GPC) signal as an opt-out of the sale or sharing of Personal Information, as described in the "United States privacy rights" section.
Advertising
We may permit third-party advertising and analytics partners to collect information about your use of the Website over time, subject to your cookie choices, so that they can display advertising and measure its effectiveness. The use of such technologies is governed by your consent and the choices described in our Cookie Policy.
Email marketing
We may send you marketing communications where permitted. You can opt out at any time using the unsubscribe link in our emails or by contacting us. We comply with applicable anti-spam legislation, including the U.S. CAN-SPAM Act for U.S. recipients and, where applicable, Canada's Anti-Spam Legislation (CASL).
Links to other resources
The Website and Services may contain links to other resources that are not owned or controlled by us. We are not responsible for the privacy practices of these third parties, and we encourage you to review their privacy policies.
Information security
We secure information you provide on computer servers in a controlled, secure environment, and maintain reasonable administrative, technical, and physical safeguards to protect against unauthorized access, use, modification, and disclosure of Personal Information in our control. However, no data transmission over the Internet or a wireless network can be guaranteed; you acknowledge the inherent security and privacy limitations of the Internet and that the security, integrity, and privacy of information exchanged with the Website cannot be guaranteed.
Data breach
If we become aware that the security of the Website and Services has been compromised or that users' Personal Information has been disclosed to unrelated third parties as a result of external activity, we will take reasonably appropriate measures, including investigation and reporting, and notification to and cooperation with the relevant authorities. Where there is a risk of harm to your rights and freedoms or where notice is otherwise required by law, we will notify affected individuals and supervisory authorities without undue delay, and in no case later than 72 hours after becoming aware of the breach, or as otherwise required by applicable law.
Changes and amendments
We may modify this Policy from time to time at our discretion and will notify you of any material changes to the way we treat Personal Information by revising the "last updated" date below and, where appropriate, by other means. Any updated version is effective immediately upon posting unless otherwise specified. We will not, without your consent, use your Personal Information in a manner materially different from what was stated at the time it was collected.
Acceptance of this policy
You acknowledge that you have read this Policy. By accessing and using the Website and Services, you agree to this Policy. If you do not agree, you are not authorized to access or use the Website and Services.
Contacting us
If you have any questions, concerns, or complaints regarding this Policy or our handling of your Personal Information, or if you wish to exercise your rights, you may contact us at legal@nanoshine-group.com, or by post at Nanoshine Group Corp., 1F, No. 68, Dunhuang Road, Datong District, Taipei City, 103048, Taiwan.
This document was last updated on June 5, 2026.