King Technology, Inc. Privacy Policy

Effective Date: May 11, 2026

King Technology, Inc. (“KTI”; “us”, “we”, or “our”) owns and operates the following websites:

• https://www.kingtechnology.com
• https://www.frogproducts.com
• https://partners.kingtechnology.com
• https://newwaterproducts.com
• https://ahhsome.com

KTI also provides the FROG Water Care® mobile application. Through these websites, mobile application, by phone, and via email (collectively “Services”), KTI gathers certain types of information, including personal data.

This page informs you of our policies regarding the collection, use, disclosure, and retention of personal data when you use our Services and the choices you have associated with that data. We use your data to provide and improve the Services. By using the Services, you agree to the collection and use of information in accordance with this policy and the Cookie Policy Addendum attached hereto. Your use of the Services is subject to this Privacy Policy. Where required by applicable law, we will obtain your consent or provide an opt-out mechanism, including through our cookie consent management platform, before collecting, using, or sharing your information in ways not described herein.

1. Definitions

Services

KTI’s websites, mobile application, internal data storage systems, email system, and telephone system..

Personal Data

Personal Data means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

Usage Data

Usage Data is data collected automatically either generated by the use of the Services or from the Services’ infrastructure itself (for example, the duration of a page visit).

Cookies

Cookies are small text files used to store small pieces of information on your device (computer or mobile device) when a website loads in your browser. For detailed information about the cookies we use and how to manage your cookie preferences, see the Cookie Policy Addendum to this Privacy Policy.

Data Controller

Data Controller is for the purposes of this Privacy Policy, KTI is a Data Controller of your Personal Data.

Data Processors (or Service Providers)

Data Processor (or Service Provider) means any natural or legal person who processes the data on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more effectively.

Data Subject (or User)

A Data Subject is any living individual who is using our Services and is the subject of Personal Data.

2. Social Media Platforms

KTI maintains official pages on third party social media platforms. When you interact with us through those platforms, your interactions are subject to the privacy policies of the applicable platform provider. We may receive personal data from social media platforms depending on your interactions, communications, and privacy settings (for example, if you send us a direct message or comment on our content). Any personal data that we receive and process outside of the social media platform will be handled by KTI in accordance with this Privacy Policy.

3. Information We Collect, Why We Collect It, and How We Use It

In this section, we describe the categories of Personal Data we collect, the purposes for which we use it, and the legal basis for processing.

a. Notice of Collection. At or before the point when Personal Data is collected from you, KTI endeavors to notify you about the categories of data collected, purposes for collection, and your privacy rights. This Policy provides such notice with respect to all categories of Personal Data collected as a supplement to notices provided by KTI in its Terms of Use and in other places and forms.

Category of Personal Data	Purpose of Collection	Retention Period
Identifiers (e.g., name, email, address, phone number, IP address, device identifiers)	To provide and maintain Services, provide customer support, send marketing communications, and for security.	7 years after last interaction, unless required otherwise by law.
Customer Records Information (e.g., name, address, phone number)	To fulfill orders, provide warranty support, and for customer service.	7 years after last interaction.
Commercial Information (e.g., products purchased, preferred dealer)	To provide tailored recommendations, improve Services, and for marketing.	7 years after last interaction.
Internet or Network Activity (e.g., Usage Data, browser type, pages visited)	To monitor and analyze usage, improve Services, and for advertising.	24 months.
Geolocation Data (if permission is granted)	To provide location-based services, such as finding a local dealer.	For the duration of the session or until permission is revoked.
Sensitive Personal Information (e.g., precise geolocation from the mobile app)	To provide specific features of the mobile application.	For the duration of the session or until permission is revoked.
Verification Data (e.g., contact information, state or country of residence, purchase or interaction history, and other identifying information reasonably requested for verification)	To verify your identity when you submit a privacy rights request.	Duration of the request, then promptly deleted.

b. Types of Data Collected in Detail.

• Personal Data: While using our Services, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personal Data may include, but is not limited to:
  • Email address
  • First name and last name
  • Phone number
  • Post Office or Street Address
  • City, State, Province, ZIP/Postal code
  • Information about your pool and/or spa and ancillary products
  • Your preferred dealer
  • Cookies and Usage Data
    
• Usage Data: We may also collect information that your browser sends whenever you visit our Services or when you access the Services by or through a mobile device. This Usage Data may include information such as your computer’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Services that you visit, the time and date of your visit, the time spent on those pages, and other diagnostic data.
  
• Location Data: We may use and store information about your location if you give us permission to do so (“Location Data”). We use this data to provide features of our Services and to improve and customize our Services. You can enable or disable location services when you use our Services at any time through your device settings.
  
• Tracking & Cookies Data: We use cookies and similar tracking technologies to track the activity on our Services, including first-party and third-party cookies categorized as Necessary, Functional, Analytics, Performance, and Advertisement. We use a cookie consent management platform to obtain and manage your cookie preferences when you visit our websites. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. You may also update or withdraw your cookie consent at any time using the consent preferences button available on our websites. Our Services also respond to Global Privacy Control signals. For a complete list of cookies we use and instructions on managing your preferences, see the Cookie Policy Addendum to this Privacy Policy.

c. Use of Data and Legal Basis for Processing. KTI’s purposes for using the data collected is supported by various legal bases, as shown below.

Purpose of Use	Legal Basis
To provide and maintain our Services	Performance of a contract; Legitimate Interest
To notify you about changes to our Services	Legitimate Interest
To allow you to participate in interactive features	Consent; Performance of a contract
To provide customer support	Performance of a contract; Legitimate Interest
To improve our Services	Legitimate Interest
To monitor usage and for security	Legitimate Interest; Legal Obligation
To provide you with news and marketing	Consent; Legitimate Interest

4. Retention of Data

KTI will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy and our internal data retention schedules. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

Following the termination or deletion of your account, we will delete your Personal Data as required by applicable law and such information will no longer be available to you. However, we may retain certain Personal Data for a limited period as necessary to:

• Comply with our legal and regulatory obligations, including for tax and accounting purposes;
• Fulfill the terms of our product warranties or conduct product recalls;
• Establish, exercise, or defend against legal claims, including to enforce our intellectual property rights;
• Resolve disputes and enforce our agreements; and
• Prevent fraud, protect the security of our platforms, and ensure the integrity of our services.

The information retained will be limited to what is strictly necessary for these purposes, such as transaction history, contact information, and records of communication. We will retain this information only for the period required to fulfill the purposes outlined above, in accordance with applicable statutes of limitation and record-keeping laws. All retained data remains subject to the security measures and confidentiality protections described in this policy.

5. Transfer of Data

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ.

If you are located outside the United States, please note that we transfer the data to the United States and process it there. We use geotargeting to tailor our consent mechanisms based on your location, including presenting opt-in cookie consent banners to visitors in Canada and the European Union (see Cookie Policy Addendum, Section A.4). For transfers of Personal Data from the European Economic Area (EEA) to the US, we rely on approved legal mechanisms, such as the EU-US Data Privacy Framework (where applicable), Standard Contractual Clauses (SCCs), or other approved transfer mechanisms under GDPR Chapter V, to ensure your data is afforded a level of protection consistent with EU law. We conduct Transfer Impact Assessments where required to evaluate the legal framework of the destination country and implement supplementary measures as appropriate. You may request a copy of the applicable safeguards, incorporated here, by contacting us.

6. Disclosure of Data

KTI may disclose your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation
• Protect and defend the rights or property of KTI
• Prevent or investigate possible wrongdoing in connection with the Services
• Protect the personal safety of users of the Services or the public
• Protect against legal liability
• Complete a merger, acquisition, divestiture, sale of assets, financing, reorganization, or similar business transaction involving all or a portion of KTI’s assets; in such event, the acquiring entity will be subject to the terms of this Privacy Policy with respect to any Personal Data transferred

7. Security of Data

The security of your data is important to us. We have implemented and maintain reasonable administrative, technical, and physical security measures to protect your Personal Data from unauthorized access, use, or disclosure. These measures are described in greater detail in KTI’s Written Information Security Program and include, but are not limited to, data encryption, access controls, and regular security assessments. However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

8. Your Data Protection Rights

Depending on your jurisdiction, you may have the following rights regarding your Personal Data. We will respond to requests within the time period required by applicable law.

• The right to know and access the Personal Data we have collected about you.
• The right to request correction of inaccurate Personal Data.
• The right to request deletion of your Personal Data, subject to certain exceptions.
• The right to data portability, allowing you to obtain and reuse your Personal Data for your own purposes across different services.
• The right to opt-out of the sale or sharing of your Personal Data.
• The right to limit the use and disclosure of Sensitive Personal Information.
• The right to object to processing of your Personal Data in certain circumstances.
• The right to request restriction of processing of your Personal Data.
• The right to withdraw consent at any time where we relied on your consent to process your Personal Data.
• The right to non-discrimination for exercising your privacy rights.
• The right to opt out of automated decision-making, including profiling, where such processing produces legal or similarly significant effects.
• The right to appeal a denial of your privacy rights request. If we deny your request, we will inform you of the reason and provide instructions for submitting an appeal.

To exercise any of these rights, please contact us by email at dataprivacy@kingtechnology.com or by calling 1-800-222-0169. You may also submit a request using our Personal Data Access Request (PDAR) Form. If you wish to opt out of the sale or sharing of your Personal Data, you may also use our Do Not Sell or Share My Personal Information Form.  We will verify your identity and, where applicable, your authority to act on another person’s behalf, before processing your request.  We may request information reasonably necessary to verify your request, such as contact information, state or country of residence, purchase or interaction history, or other identifying information.

If you reside in the European Economic Area (EEA), you have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For a list of EEA Data Protection Authorities and their contact information, please visit https://edpb.europa.eu/about-edpb/about-edpb/members_en.

9. Your US State Privacy Rights

a. General. KTI is committed to complying with applicable US state privacy laws, including those of California, Virginia, Colorado, Connecticut, Oregon, Texas, Montana, Iowa, Indiana, Tennessee, Delaware, New Hampshire, New Jersey, Nebraska, Maryland, Minnesota, Kentucky, Rhode Island, and other states that have enacted comprehensive consumer privacy laws. The rights described in Section 8 above apply to residents of all such states to the extent required by applicable law. In addition, the following state-specific provisions apply:

b. b. Sale and Sharing of Personal Information. KTI does not “sell” your Personal Data in the traditional sense for monetary value. However, we may “share” your information with third-party advertising partners for cross-context behavioral advertising, which may be considered a “sale” or “sharing” under applicable state law. You have the right to opt-out of this activity. To opt-out, please use our Do Not Sell or Share My Personal Information Form or manage your cookie preferences through our cookie consent banner (see Cookie Policy Addendum, Section A.4). We also honor universal opt-out mechanisms, including the Global Privacy Control (GPC), as a valid request to opt out of the sale or sharing of your personal information, to the extent required by applicable law.

c. Sensitive Personal Information. We do not use or disclose sensitive personal information for purposes other than those specified in the CCPA regulations. If this changes, we will provide you with the right to limit its use.

d. California-Specific Provisions. The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides California residents with specific rights regarding their Personal Data. In addition to the rights described in Section 7, California residents have the right to request that we disclose the categories and specific pieces of Personal Data we have collected, the categories of sources from which we collected it, our business purpose for collecting or selling it, and the categories of third parties with whom we share it.

e. Minnesota-Specific Provisions. The Minnesota Consumer Data Privacy Act (MCDPA), effective July 31, 2025, provides Minnesota residents with additional rights, including: the right to obtain a list of the specific third parties to whom KTI has disclosed their Personal Data; the right to question the results of profiling, including profiling facilitated by artificial intelligence, that produces legal or similarly significant effects; and the right to be informed of the reason that profiling produced a particular result and what actions might have changed the outcome. Processing of sensitive data (including precise geolocation and data from consumers aged 13–16) requires opt-in consent under the MCDPA. To exercise these rights, contact us using the methods described in Section 8.

10. Service Providers

We may employ third-party companies and individuals to facilitate our Services (“Service Providers”). These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. All Service Providers are bound by written agreements that meet the requirements of the GDPR, CCPA, and other applicable privacy laws.

11. Children’s Privacy

As a consumer, you have certain data protection rights. KTI strives to be compliant with all current anOur Services do not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

In accordance with the Children’s Online Privacy Protection Act (COPPA), as amended:

• We maintain a written data retention policy for any Personal Data collected from children under 13. Such data is retained only as long as reasonably necessary to fulfill the purpose for which it was collected, and is then securely deleted. We do not retain children’s Personal Data indefinitely.
• We maintain a written information security program that includes safeguards appropriate to the sensitivity of children’s Personal Data, including risk assessments and service-provider oversight.
• Before disclosing a child’s Personal Data to any third party, we obtain separate verifiable parental consent. We do not disclose children’s Personal Data for advertising or AI/machine learning training purposes.
• For the purposes of COPPA, “personal information” includes biometric identifiers (such as fingerprints, voiceprints, and facial patterns templates, gait patterns, retinal patterns, iris patterns, genetic data,) and government-issued identifiers, in addition to the categories described in Section 3.

If you believe we have collected Personal Data from a child under 13 without proper parental consent, please contact us immediately at dataprivacy@kingtechnology.com or 1-800-222-0169. We will promptly investigate and delete any data that was collected in violation of COPPA.

12. Changes to This Privacy Policy

We may update our Privacy Policy and the Cookie Policy Addendum from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will let you know via email or a prominent notice on our Services at least 30 days prior to the change becoming effective and will update the “effective date” at the top of this Privacy Policy.

13. Accessibility

We are committed to ensuring this Privacy Policy is accessible to individuals with disabilities. If you wish to access this policy in an alternative format, please contact us.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us at 1-800-222-0169 or dataprivacy@kingtechnology.com, or by mail at:

King Technology, Inc.
Attn: Data Governance
6000 Clearwater Drive
Minnetonka, MN 55343.

Addendum A: Cookie Policy

This Cookie Policy Addendum (“Addendum”) supplements the King Technology, Inc. Privacy Policy (“Privacy Policy”) and provides additional detail regarding our use of cookies and similar tracking technologies across our Services. Capitalized terms not defined in this Addendum have the meanings set forth in the Privacy Policy. This Addendum was last updated as of the Effective Date of the Privacy Policy.

A.1. What Are Cookies

Cookies are small text files used to store small pieces of information. They are stored on your device when a website loads in your browser. These cookies help ensure that the website functions properly, enhance security, provide a better user experience, and help us analyze performance to identify what works and where improvements are needed.

A.2. How We Use Cookies

Like most online services, our websites use both first-party and third-party cookies for various purposes. First-party cookies are primarily necessary for the website to function properly and do not collect any personally identifiable data. Third-party cookies used on our websites primarily help us understand how the website performs, track how you interact with it, keep our services secure, deliver relevant advertisements, and improve your overall user experience.

A.3. Types of Cookies We Use

Cookies on our websites are grouped into the following categories based on their purpose. You may choose which categories to allow through our cookie consent banner.

Necessary. Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data. Necessary cookies include:

• cookielawinfo-checkbox-necessary (duration: 1 year) — Records user consent for cookies in the “Necessary” category.
• cookielawinfo-checkbox-functional (duration: 1 year) — Records user consent for cookies in the “Functional” category.
• cookielawinfo-checkbox-performance (duration: 1 year) — Stores user consent for cookies in the “Performance” category.
• cookielawinfo-checkbox-analytics (duration: 1 year) — Records user consent for cookies in the “Analytics” category.
• cookielawinfo-checkbox-advertisement (duration: 1 year) — Records user consent for cookies in the “Advertisement” category.
• cookielawinfo-checkbox-others (duration: 1 year) — Stores user consent for cookies in the “Others” category.
• wpEmojiSettingsSupports (duration: session) — Determines if the browser can display emojis properly.

Functional. Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features. Functional cookies include:

• _dc_gtm_UA-* (duration: 1 minute) — Used by Google Analytics to load the Google Analytics script tag.

Analytics. Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, and similar data. Analytics cookies include:

• _ga (duration: 1 year 1 month 4 days) — Calculates visitor, session, and campaign data and tracks site usage for analytics reports. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors.
• _ga_* (duration: 1 year 1 month 4 days) — Stores and counts page views.
• _gid (duration: 1 day) — Stores information on how visitors use the website and creates an analytics report of website performance.
• _gat_gtag_UA_* (duration: 1 minute) — Stores a unique user ID for analytics purposes.

Performance. Performance cookies are used to understand and analyze the key performance indexes of the website, which helps in delivering a better user experience for visitors.

Advertisement. Advertisement cookies are used to provide visitors with customized advertisements based on the pages visited previously and to analyze the effectiveness of ad campaigns.

A.4. Cookie Consent Management

We use a cookie consent banner powered by CookieYes to obtain and manage your cookie preferences when you first visit our websites. The banner allows you to accept all cookies, reject non-essential cookies, or customize your preferences by category.

We use geotargeting to tailor the consent experience based on your location. Visitors in the United States are presented with an opt-out consent banner, while visitors in Canada and the European Union are presented with an opt-in consent banner, as required by applicable law.

Your consent preferences are retained for 180 days. After that period, the consent banner will reappear so you can confirm or update your preferences.

When a visitor has not accepted the cookies needed for certain embedded content (such as videos or maps), that content is blocked and a placeholder message is displayed explaining why the content is not available and how to update cookie preferences to view it.

A.5. Updating Your Cookie Preferences

You can modify your cookie settings at any time by clicking the “Consent Preferences” button available on our websites. This will allow you to revisit the cookie consent banner and update your preferences or withdraw your consent immediately.

Additionally, you can manage cookies through your browser settings. Below are links to support documents for major web browsers:

• Chrome: https://support.google.com/accounts/answer/32050
• Safari: https://support.apple.com/en-in/guide/safari/sfri11471/mac
• Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox
• Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09

If you are using a different web browser, please refer to its official support documentation.

A.6. Google Consent Mode

Our websites use Google Consent Mode to integrate the cookie consent banner with Google services, including Google Analytics and Google Ads. When you make a choice on the cookie banner, Google Consent Mode communicates your preferences to Google. If you consent to tracking cookies, Google tracks as usual. If you do not consent, Google respects your choice and does not store tracking cookies on your device.