
PRIVACY POLICY
This Privacy Policy describes how Korean Beauty Portal (here named KBP) collects, uses, and discloses the client/prospect’s Personal Information when clients/visitors visit or make a purchase from the website.
Contact
After reviewing this policy, if the client/prospect have additional questions, want more information about our privacy practices, or would like to make a complaint, please contact us by e-mail at info@koreanbeauty.com.
Collecting Personal Information
When the client/prospect visit the website, KBP collect certain information about the client/prospect device, the client/prospect interaction with the website, and information necessary to process the client/prospect’s purchases. KBP may also collect additional information if the client/prospect contact customer support. In this Privacy Policy, KBP refer to any information about an identifiable individual (including the information below) as “Personal Information”. See the list below for more information about what Personal Information KBP collect and why.
-
Device information
-
Purpose of collection: to load the website accurately for the client/prospect, and to perform analytics on Site usage to optimize our Site.
-
Source of collection: Collected automatically when the client/prospect access our Site using cookies and pixels.
-
Disclosure for a business purpose: shared with our processor Wix and Google
-
Personal Information collected: version of web browser, IP address, time zone, cookie information, what sites or products the client/prospect view, search terms, and how the client/prospect interact with the website µ
-
-
Order information
-
Purpose of collection: to provide products or services to the client/prospect to fulfil our contract, to process the client/prospect’s payment, for shipping, and provide the client/prospect invoices and order confirmations, communicate with the client/prospect….
-
Source of collection: collected from the client/prospect.
-
Disclosure for a business purpose: shared with our processor Wix,Google…
-
Personal Information collected: name, billing address, shipping address, payment information (including credit card numbers, email address, and phone number.
-
Sharing Personal Information
KBP share the client/prospect Personal Information with service providers to help us provide our services and fulfil our contracts with the client/prospect, as described above:
-
KBP use Wix to power our online store.
-
KBP use Wix to power our provider based in Korea.
-
KBP may share the client/prospect Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information KBP receive, or to otherwise protect our rights.
-
In order to offer the client/prospect others payment methods, KBP might in the checkout pass the client/prospect personal data in the form of contact.
Behavioural Advertising
As described above, KBP use the client/prospect Personal Information to provide the client/prospect with targeted advertisements or marketing communications KBP believe may be of interest to the client/prospect. For example:
-
KBP use Google Analytics to help us understand how our customers use the website. The client/prospect can read more about how Google uses the client/prospect Personal Information.
-
KBP share information about the client/prospect use of the website, the client/prospect purchases, and the client/prospect interaction with our ads on other websites with our advertising partners. KBP collect and share some of this information directly with our advertising partners, and in some cases through the use of cookies or other similar technologies (which the client/prospect may consent to, depending on the client/prospect location).
-
KBP Google Ads cookies to personalise content, ads and to analyse our traffic. KBP also share information about the client/prospect use of our site with our advertising and analytics partners who may combine it with other information that the client/prospective provided to them or that they’ve collected from the client/prospect use of their services. The client/prospect can read more about how Google uses the client/prospect Personal Information here: https://www.google.com/intl/en/policies/privacy/.
Using Personal Information
KBP use the client/prospect personal Information to provide our services to the client/prospect, which includes: offering products for sale, processing payments, shipping and fulfilment of the client/prospect order, and keeping the client/prospect up to date on new products, services, and offers.
Lawful basis
Pursuant to the General Data Protection Regulation (“GDPR”), if the client/prospect are a resident of the European Economic Area (“EEA”), KBP process the client/prospect personal information under the following lawful bases:
-
The client/prospecter consent ;
-
The performance of the contract between the client/prospect and the website.
-
Compliance with our legal obligations.
-
For our legitimate interests, which do not override the client/prospect fundamental rights and freedoms.
Retention
When the client/prospect place an order through the website, KBP will retain the client/prospect Personal Information for our records unless and until the client/prospect ask us to erase this information. For more information on the client/prospect right of erasure, please see the ‘The client/prospect rights’ section below.
Automatic decision-making
If the client/prospect are a resident of the EEA, the client/prospect have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on the client/prospect or otherwise significantly affects the client/prospect.
KBP do not engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.
Our processor Wix uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on the client/prospect.
Services that include elements of automated decision-making include:
-
Temporary blacklist of IP addresses associated with repeated failed transactions. This blacklist persists for a small number of hours.
-
Temporary blacklist of credit cards associated with blacklisted IP addresses. This blacklist persists for a small number of days.
The client/prospect rights
GDPR
If the client/prospect are a resident of the EEA, the client/prospect have the right to access the Personal Information KBP hold about the client/prospect, to port it to a new service, and to ask that the client/prospect Personal Information be corrected, updated, or erased. If the client/prospect would like to exercise these rights, please contact us through the contact information above.
The client/prospect Personal Information will be initially processed in Ireland and then will be transferred outside of Europe for storage and further processing, including to Canada and the United States. For more information on how data transfers comply with the GDPR, see Wix’s GDPR.
Cookies
A cookie is a small amount of information that’s downloaded to the client/prospect computer or device when the client/prospect visit our Site. KBP use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make the client/prospect browsing experience better by allowing the website to remember the client/prospect actions and preferences (such as login and region selection). This means the client/prospect don’t have to re-enter this information each time the client/prospect return to the website or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it’s their first time visiting or if they are a frequent visitor.
KBP use the following cookies to optimize the client/prospect experience on our Site and to provide our services.
Cookies Necessary for the Functioning of the Store
The length of time that a cookie remains on the client/prospect computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until the client/prospect stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies KBP use are persistent and will expire between 30 minutes and two years from the date they are downloaded to the client/prospect device.
The client/prospect can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact the client/prospect user experience and parts of our website may no longer be fully accessible.
Most browsers automatically accept cookies, but the client/prospect can choose whether or not to accept cookies through the client/prospect browser controls, often found in the client/prospect browser’s “Tools” or “Preferences” menu. For more information on how to modify the client/prospect browser settings or how to block, manage or filter cookies can be found in the client/prospect browser’s help file or through such sites as: www.allaboutcookies.org.
Additionally, please note that blocking cookies may not completely prevent how KBP share information with third parties such as our advertising partners. To exercise the client/prospect rights or opt-out of certain uses of the client/prospect information by these parties, please follow the instructions in the “Behavioural Advertising” section above.
Do Not Track
Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, KBP do not alter our data collection and usage practices when KBP detect such a signal from the client/prospect browser.
Changes
KBP may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.
Complaints
As noted above, if the client/prospect would like to make a complaint, please contact us by e-mail or by mail using the details provided under “Contact” above.
If the client/prospect are not satisfied with our response to the client/prospect complaint, the client/prospect have the right to lodge the client/prospect complaint with the relevant data protection authority. The client/prospect can contact the client/prospect local data protection authority, or our supervisory authority here: [Add contact information or website for the data protection authority in the client/prospect jurisdiction.
