Privacy Policy

1. Who is responsible for your data

BioNatural Co., Ltd. (also trading as Ionfarms)
A-312, 283 Bupyeong-daero, Bupyeong-gu, Incheon 21315, Republic of Korea
info@bionatural.kr  ·  +82 32 330 9910

For the purposes of the EU and UK General Data Protection Regulation, BioNatural Co., Ltd. is the data controller for personal data collected through this website. Please use the contact details above for any privacy question or request.

2. What we collect

Information you give us

• Enquiry form. When you use our enquiry form we receive the details you enter — typically your name, email address, country or company, and your message — together with the page you submitted it from.
• Live chat. If you open the chat window, the messages you send and basic session information are processed by our chat provider so we can reply.
• Newsletter. If you subscribe, we store the email address you provide and the fact that you subscribed.
• Direct contact. If you email or call us, we keep the correspondence so we can handle your request and any follow-up.

Information collected automatically

When you browse the site, our analytics tools record technical and usage information such as your approximate location derived from IP address, device and browser type, language, the pages you view, how you arrived at the site, and interactions such as scrolling and clicks. This is used in aggregate to understand which content is useful. We do not attempt to identify individual visitors from it.

Our hosting provider and security plugin also keep server logs, including IP addresses, for the purpose of operating the site and detecting abuse.

3. Cookies and similar technologies

Cookies are small files stored by your browser. Some are needed for the site to work; others help us measure how the site is used. The main cookies set on this site are listed below.

You can delete cookies and block them in your browser settings. Blocking analytics cookies does not affect your ability to read the site or contact us. Google offers a browser add-on that opts you out of Google Analytics across all sites, and Microsoft publishes opt-out information for Clarity.

4. Why we process your data, and our legal basis

• To answer enquiries and take pre-contractual steps — where you contact us about wholesale, OEM or product support. Legal basis: steps taken at your request prior to entering into a contract, and our legitimate interest in responding to business enquiries.
• To send the newsletter — only where you subscribed. Legal basis: your consent, which you can withdraw at any time.
• To measure and improve the website — through analytics. Legal basis: consent where required in your jurisdiction, otherwise our legitimate interest in understanding how our content is used.
• To keep the site secure and available — logging, spam filtering and abuse prevention. Legal basis: our legitimate interest in protecting the site.
• To meet legal obligations — such as record-keeping duties that apply to us as a company.

5. Who else processes your data

We do not sell personal data and we do not share it for third-party advertising. We do rely on service providers who process data on our behalf, under contract and only for the purposes we set. They fall into the following categories:

• Website hosting, content delivery and security
• Website analytics and search performance reporting
• Live chat and enquiry form handling
• Email delivery and newsletter distribution
• Machine translation of pages into other languages
• Payment processing, where a purchase is made through one of our product pages — the payment provider handles the transaction directly and we never receive your card details

If you would like to know which specific providers are used in any of these categories, please contact us and we will tell you.

We may also disclose data where we are legally required to do so, or to establish or defend legal claims.

6. International transfers

We are established in the Republic of Korea, so data you send us is processed there. For transfers from the European Economic Area, the European Commission has adopted an adequacy decision recognising the Republic of Korea as providing an adequate level of data protection. In July 2026 the Commission completed its first review and confirmed that this remains the case, so data may continue to flow from the EU to Korea without additional authorisation.

Several of the service providers listed above are established in the United States or operate global infrastructure. Where personal data is transferred to them, that transfer relies on the safeguards those providers put in place, such as the European Commission's standard contractual clauses or applicable certification frameworks.

7. How long we keep data

• Enquiries and correspondence — for as long as needed to handle your request and to maintain the business relationship, after which they are deleted or archived.
• Newsletter subscriptions — until you unsubscribe.
• Chat transcripts — for a limited period as retained by our chat provider.
• Analytics data — for the retention period configured in the analytics tool, in aggregated form thereafter.
• Server and security logs — for a short rolling period.

8. Your rights

Depending on where you live, you have some or all of the following rights: to ask what data we hold about you and receive a copy; to have inaccurate data corrected; to have data deleted; to restrict or object to processing; to receive your data in a portable format; and to withdraw consent at any time without affecting processing already carried out.

To exercise any of these, email info@bionatural.kr. We will respond within the period required by the law that applies to you. If you are in the EEA or the UK and are not satisfied with our response, you may complain to your national data protection authority. If you are in Korea, you may contact the Personal Information Protection Commission.

Every newsletter we send includes an unsubscribe link, which takes effect immediately.

9. Security

This site is served over HTTPS and protected by a web application firewall and malware scanning. Access to enquiry data is limited to the staff who need it. No system can be guaranteed completely secure, but we take reasonable technical and organisational measures appropriate to the data involved.

10. Children

This website is aimed at adults and at businesses. It is not directed at children, and we do not knowingly collect data from them. If you believe a child has sent us personal data, please contact us and we will delete it.

11. Changes to this policy

We update this privacy policy when the tools or services we use change. The date at the top shows when it was last revised. Where a change is significant, we will make that clear on the page.

Questions about this policy? Email info@bionatural.kr or write to the address in section 1. See also our Disclaimer.