Privacy policy

Last updated: October 7, 2026

This Privacy Policy describes how NOBLEFLOW PTE. LTD., operating the Glonyx brand ("Glonyx", "we", "us", or "our"), collects, uses, discloses, stores, and protects personal information when you visit glonyx.com, use our services, make a purchase or other transaction, create an account, submit a product review, contact us, or otherwise interact with us (collectively, the "Services"). NOBLEFLOW PTE. LTD. is the current store operator and, unless stated otherwise, the controller of the personal information described in this Policy.

Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read this Policy and understand the collection, use, and disclosure of your information as described below. If this Privacy Policy conflicts with our Terms of Service regarding the processing of personal information, this Privacy Policy controls.

Personal Information We Collect or Process

"Personal information" means information that identifies or can reasonably be linked to you or another person. It does not include information that has been collected anonymously or de-identified so that it cannot reasonably be linked to an individual. Depending on how you interact with the Services, where you live, and what applicable law permits or requires, we may collect or process:

  • Contact details, including your name, billing and shipping addresses, phone number, and email address.
  • Payment and transaction information, including payment method, payment confirmation or status, products viewed or purchased, cart activity, returns, exchanges, cancellations, and transaction history. Complete payment-card details are generally processed by Shopify and authorized payment providers rather than stored by Glonyx.
  • Account information, including your username, login credentials, account preferences, settings, and information used to create, secure, and manage your account.
  • Customer support and product-support information, including messages, product model or serial details, installation information, photos, water-source or test information, troubleshooting records, warranty details, and other files or information you choose to submit.
  • Product reviews and other user-generated content, including your rating, review title and text, display name, email address, product association, photos, videos, submission date, moderation status, replies, and other information you include.
  • Device and usage information, including device, browser, and network information, IP address, unique identifiers, cookie data, pages viewed, referring source, and information about how and when you interact with the Services.
  • Marketing information, including your communication preferences and responses to newsletters, surveys, promotions, or advertising.

Personal Information Sources

We may collect personal information:

  • Directly from you, including when you create an account, place an order, submit a review, contact us, or otherwise provide information;
  • Automatically through the Services, including from your device and through cookies, pixels, and similar technologies;
  • From service providers, including Shopify, Judge.me, payment processors, logistics providers, analytics providers, and customer-support tools; and
  • From business partners or other third parties, as permitted by law.

How We Use Personal Information

We may use personal information to:

  • Provide and improve the Services, including processing payments and orders, arranging shipping, handling returns and warranty requests, managing accounts, remembering preferences, providing product or installation support, and improving website and product performance.
  • Operate reviews and user-generated content, including authenticating review access, associating a review with the relevant product and reviewer record, verifying authenticity where available, publishing and displaying reviews and media, calculating real aggregate ratings, moderating spam or inappropriate content, responding to concerns, and processing access, correction, or deletion requests.
  • Market and advertise, including sending promotional communications where permitted and showing or measuring advertising based on interactions with the Services.
  • Protect security and prevent fraud, including authenticating accounts and detecting, investigating, or responding to fraudulent, illegal, unsafe, or malicious activity.
  • Communicate with you, including customer service, order notices, product support, review-related communications, and responses to privacy requests.
  • Comply with legal obligations, respond to valid legal process, maintain required records, enforce our terms and policies, and protect the Services, our rights, and the rights of users or others.

Cookies, Analytics, and Privacy Choices

We and our service providers use cookies and similar technologies for essential store functions, account and preference features, analytics, fraud prevention, personalization, and advertising. You can use browser controls to remove or block cookies, although doing so may cause parts of the Services to function incorrectly.

Cookie consent and preferences. Where a cookie consent banner is provided for your region, use its Accept, Decline, or Manage preferences controls to choose which non-essential cookies and similar technologies you allow. Where available, reopen Cookie preferences in the store's policies or footer to change your choices or withdraw consent. The availability of these controls depends on your region and the store's applicable privacy settings. If you cannot find a control or need help with a privacy choice, contact us using the details below. Essential technologies needed to operate the Services may remain active.

Cookie preferences and a sale/sharing opt-out serve different purposes. Blocking or deleting cookies in your browser does not necessarily submit a sale/sharing opt-out request. Your choices may be specific to a browser or device; if you clear cookies or use another browser or device, you may need to set them again.

We do not sell personal information for money. Some analytics, advertising, or partner disclosures may be considered a "sale", "sharing", or targeted advertising under certain U.S. state privacy laws. Where this right applies, you can opt out through Your Privacy Choices. When applicable, we also treat a recognized Global Privacy Control signal as an opt-out request for the browser or device that sends it and, where we can associate it, for the relevant Shopify account. Other "Do Not Track" signals may not be recognized.

How We Disclose Personal Information

We may disclose personal information for the purposes described in this Policy:

  • To Shopify for ecommerce hosting, customer accounts, checkout, fraud prevention, analytics, and related platform services;
  • To Judge.me for collecting, storing, verifying, moderating, and displaying product reviews and review media;
  • To payment processors, logistics and warehouse providers, customer-support tools, cloud-storage providers, IT providers, data analytics providers, and other vendors that perform services for us;
  • To business and marketing partners that provide marketing, measurement, or advertising services, subject to applicable privacy choices;
  • When you direct, request, or consent to the disclosure, such as for shipping, social-media features, or login integrations;
  • Within our corporate group or with professional advisers when reasonably necessary to operate the business; and
  • In connection with a financing, reorganization, merger, sale, or bankruptcy; to comply with applicable law or valid legal process; to enforce applicable terms or policies; or to protect the Services, our rights, and the rights of users or others.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services. Information you submit to the Services is transmitted to Shopify and may be shared with providers located outside the country where you live.

We currently use Shopify enhanced features that may combine information from your interactions with our store, other merchants, and Shopify to provide fraud-prevention, personalization, analytics, and advertising services. For this processing, Shopify is responsible for responding to applicable rights requests concerning Shopify's own use of that information. Learn more in the Shopify Consumer Privacy Policy or use the Shopify Privacy Portal.

Reviews and User-Generated Content

On our storefront, you must be signed in to a Glonyx customer account before opening the product-review form. The review is displayed under the name associated with the review submission by default, and you can choose the Anonymous option before submitting if you prefer not to display that name.

Choosing Anonymous changes the public name shown with the review; it does not make the submission anonymous to Glonyx, Shopify, or Judge.me. We and these service providers may still process your account or reviewer name, email address, account or order signals, IP address or device information, and review details to operate the feature, prevent abuse, verify and manage reviews, and respond to privacy requests. Judge.me may create a reviewer profile associated with the email address used for the review.

If published, your rating, review title and text, selected display name or Anonymous label, product association, submission or update date, photos, videos, and our public reply may be visible to anyone. Your email address is not displayed publicly unless you include it yourself in the review text or media. Do not upload private or sensitive information, or content featuring another person, unless you have the right and permission to make it public.

Reviews may be screened or moderated before or after publication for authenticity, spam, safety, legal, or content-policy reasons. You can manage an eligible review through your Judge.me reviewer profile or submit a request through the Glonyx contact form. Judge.me's processing is also governed by its Privacy Policy.

Review invitations. If we send a review invitation through Judge.me, we use relevant order information and contact details, such as your name, email address, and purchased product, to request feedback. You can use the unsubscribe control provided in the invitation or contact us to request that review invitations stop. This does not prevent necessary messages about an order, account, support request, or privacy request.

Third-Party Websites and Links

The Services may link to websites or online platforms operated by third parties. If you follow a link to a service we do not control, review its privacy and security policies and other terms. We do not guarantee and are not responsible for the privacy, security, accuracy, or reliability of third-party services. Information you post in public or semi-public areas may be viewed and used by others.

Children's Data

The Services are not intended for children, and we do not knowingly collect personal information from children under the age of majority in their jurisdiction. If you are a parent or guardian and believe a child provided personal information, contact us to request deletion. We do not have actual knowledge that we "sell" or "share", as those terms are defined by applicable law, personal information of individuals under 16 years of age.

Security and Retention

We use reasonable administrative, technical, and organizational safeguards, but no system is perfectly secure. Information sent through insecure channels may be exposed in transit, so do not send sensitive or confidential information through an inappropriate channel.

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, using the following category-based periods or criteria:

  • Account and profile information is generally retained while the account is active and afterward as reasonably needed for security, fraud prevention, privacy requests, and legal compliance.
  • Order, payment-status, shipping, return, warranty, and tax records are retained for the periods required by applicable tax, accounting, consumer-protection, warranty, and recordkeeping laws, and while reasonably needed to resolve disputes.
  • Customer support and product-support records are retained while the request is active and for a reasonable follow-up period, or longer when connected to an order, warranty, safety issue, or legal obligation.
  • Reviews and uploaded media are generally retained while the review remains published or available to the reviewer, until the reviewer deletes it, it is removed under applicable policies, or it is no longer needed for the purposes described above. Service-provider backup, fraud-prevention, and deletion-processing periods may continue for a limited time.
  • Marketing preferences are retained until you opt out, after which we may keep a minimal suppression record so that we can honor your choice.
  • Usage and security logs are retained for a reasonable period based on security, analytics, fraud-prevention, troubleshooting, and legal needs.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights. These rights are not absolute, may apply only in certain circumstances, and may be denied where permitted by law:

  • Access / Know. Request access to personal information we hold about you and information about how we use or disclose it.
  • Delete. Request deletion of personal information we maintain about you.
  • Correct. Request correction of inaccurate personal information.
  • Portability. Request a portable copy of certain personal information.
  • Opt Out. Opt out of a sale, sharing, or targeted advertising where applicable through Your Privacy Choices or an applicable Global Privacy Control signal.
  • Restrict or Withdraw Consent. Request restriction of certain processing or withdraw consent where consent is the legal basis for processing. Withdrawing consent does not affect processing that was lawful before withdrawal. Where applicable, you may also object to processing, including processing for direct marketing. We will assess other objections under the law that applies to your request.
  • Appeal. Appeal our decision on a privacy request where applicable law provides that right.
  • Manage Communications. Opt out of promotional emails through the unsubscribe link. We may still send non-promotional messages about accounts, orders, support, or other transactions.

You can exercise applicable rights through the Glonyx contact form. For a Judge.me reviewer profile or review, you may also use the controls in your Judge.me reviewer profile. To appeal a decision, reply to the decision or submit an appeal through the contact form.

We will not discriminate against you for exercising a protected privacy right. We may need to verify your identity using information such as your email address, account details, order number, or review details. Where permitted, you may designate an authorized agent. We may require proof of the agent's authority and may ask you to verify your identity directly. We will respond within the time required by applicable law.

Complaints

If you have a complaint about our processing of personal information, contact us using the details below. Depending on where you live, you may have the right to appeal our response or lodge a complaint with your local data-protection authority.

International Transfers

NOBLEFLOW PTE. LTD. is based in Singapore and the store serves customers in the United States. We and our service providers, including Shopify and Judge.me, may transfer, store, and process personal information in Singapore, the United States, and other countries outside the state or country where you live. Those countries may have data-protection laws that differ from those in your location.

If personal information is transferred from the European Economic Area or the United Kingdom, we rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses, an applicable UK transfer mechanism, or another lawful basis, unless the destination has been recognized as providing adequate protection.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our practices, providers, Services, or legal requirements. We will post the revised Policy, update the "Last updated" date, and provide any additional notice required by law.

Contact

Privacy Contact — NOBLEFLOW PTE. LTD. Please use the contact form or email below for personal-data questions, complaints, and requests. To help us identify your message, use the subject “Privacy request” and describe the right or concern involved. Provide only the information reasonably needed to identify the relevant account, order, or review; do not send passwords or complete payment-card details.

For privacy questions, complaints, or rights requests, submit the Glonyx contact form or email support@glonyx.com. We may request information needed to verify and process your request.

Current store operator and data controller:
NOBLEFLOW PTE. LTD.
60 Paya Lebar Road
#04-16 Paya Lebar Square
Singapore 409051

This is the registered administrative address of the current Singapore entity. It is not a product return address.