Privacy and Security

StyleKorean.com (hereinafter referred to as the "Company" or "StyleKorean") values the protection of users' personal information and complies with applicable laws and regulations, including the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, and the General Data Protection Regulation (GDPR).

The Company implements technical and administrative safeguards to prevent loss, theft, leakage, alteration, or damage of users' personal information and strives to manage such information securely.

This Privacy Policy explains the types of personal information collected by the Company, the purposes of use and processing, the retention and use period, and users' rights and how to exercise them.

1. The Company collects only the minimum personal information necessary to provide its services. If additional personal information is required to offer personalized services based on users’ preferences and interests, the Company will obtain prior consent.

2. Members may refuse consent for optional items without restriction on basic service use; however, some features may be limited. Non-members may refuse consent to the collection and use of personal information, but this may restrict product purchases and service use.

3. The Company does not collect sensitive personal information, including race or ethnicity, religion or philosophical beliefs, country of origin, political opinions, criminal records, health or medical information, or sexual orientation. However, in the course of providing global services, if information classified as “Sensitive Personal Information” under the definitions of local laws (e.g., CPRA) is processed, the Company complies with the protective measures required by such laws. Specific details regarding such processing are clearly provided in the country-specific notices (e.g., Article 8) of this Privacy Policy.

The Company collects and processes the following personal information for the provision of its services.

(1) Categories of personal information processed without the consent of the data subject

(2) Categories of personal information processed with the consent of the data subject

Personal information processed in accordance with Article 15(1)1 and Article 22(1)7 of the Personal Information Protection Act

2. Legal Basis for Processing Personal Information

The Company processes personal information based on the following legal grounds:

The Company transfers personal information overseas to ensure the smooth provision of services. In accordance with Article 28-8(2) of the Personal Information Protection Act and other applicable laws and regulations, details regarding overseas transfers are provided below.

Data subjects may refuse the overseas transfer of their personal information; however, refusal may restrict the use of certain services, such as payment processing, delivery, personalized services, and the provision of advertisements.

If a data subject does not wish for their personal information to be transferred overseas, they may withdraw from membership through My Page > Account Settings > Membership Withdrawal. Membership withdrawal is at the user's discretion.

1. Legal Basis for Overseas Transfer

Article 28-8(1)3 of the Personal Information Protection Act

(Where entrustment or storage of personal information is necessary for the performance of a contract)

The data subject's explicit consent

2. Status of Overseas Transfer of Personal Information

① Overseas Transfer Related to Payment Processing and Contract Performance

② Overseas Transfer Related to Delivery Services

③ Overseas Transfer Related to Service Operations, Analytics, and Marketing

1. The Company shall promptly destroy personal information once the purpose of collection and use has been fulfilled, or within 30 days from the date of membership withdrawal.

However, if applicable laws require the retention and processing of personal information for a certain period, or in the following cases, the Company shall securely retain such personal information for the required period and use it only within the scope of the stated purpose:

2. Notwithstanding Paragraph 1, personal information that the Company is required to retain under applicable laws shall be retained until the end of the applicable period as follows:

① Act on Consumer Protection in Electronic Commerce, etc.

② Protection of Communications Secrets Act

③ Framework Act on National Taxes

3. In order to minimize potential loss or damage caused by repeated membership withdrawal and re-registration, and to enable account reactivation upon the user's request, personal information that is not subject to statutory retention obligations shall be destroyed immediately upon membership withdrawal.

The minimum information necessary for preventing re-registration abuse and protecting accounts may be retained for a limited period and then destroyed.

4. The procedures and methods for the destruction of personal information are as follows:

① Destruction Procedure

The Company selects personal information for which a reason for destruction has arisen and destroys such personal information upon approval by the Company's Chief Privacy Officer.

② Destruction Methods

This Article applies to users who reside in the State of California and explains how StyleKorean collects, uses, and shares personal information, as well as the rights of users, in accordance with the California Consumer Privacy Act of 2018 and the California Privacy Rights Act of 2020 (CPRA).

This notice is based on the Company's personal information processing activities during the current period and the preceding twelve (12) months.

1. Categories of Personal Information Collected

StyleKorean may collect and process the following categories of personal information:

※ For detailed information regarding specific data elements collected and their sources, please refer to the sections titled "Personal Information Collected" and "Purposes of Use" in this Privacy Policy. In principle, each category of personal information is destroyed without delay upon the achievement of the purpose of collection or upon membership withdrawal. However, where retention is required by applicable laws, the information is retained for the period prescribed by such laws. Specific retention periods for each item can be found in Article 6.

2. Categories of Recipients of Personal Information (Past 12 Months)

StyleKorean has disclosed personal information to the following categories of recipients for business purposes:

3. Rights of California Residents

California residents have the following rights:

① Right to Know/Access

California residents may request information regarding the personal information that StyleKorean has collected, used, or shared.

② Right to Correct

California residents may request the correction of inaccurate personal information.

③ Right to Delete

Unless an exception applies under applicable laws, California residents may request the deletion of personal information collected and retained by StyleKorean.

④ Right to Opt-Out of Sale or Sharing

⑤ Right to Limit Use and Disclosure of Sensitive Personal Information

⑥ Right to Non-Discrimination

California residents shall not be discriminated against for exercising any of the rights described above.

This Article applies to residents of the European Economic Area (EEA). StyleKorean processes personal information based on the following legal grounds in accordance with the GDPR.

1. Legal Bases for Processing Personal Information

2. Rights of EEA Residents

EEA residents have the following rights:

① Right of Access

The right to obtain confirmation as to whether personal information concerning them is being processed and whether such processing is lawful.

② Right to Data Portability

The right to receive a copy of personal information in an electronic format and to request its transfer to another service provider.

③ Right to Rectification

The right to request correction of inaccurate personal information.

④ Right to Erasure (Right to be Forgotten)

The right to request the erasure of personal information when conditions for erasure under the GDPR are met.

⑤ Right to Withdraw Consent

The data subject has the right to withdraw consent at any time regarding processing based on consent.

⑥ Right to Restriction of Processing

The right to request restriction of processing in the following cases:

⑦ Right to Object

The right to object to processing for legitimate interests or direct marketing purposes.

⑧ Right not to be Subject to Automated Decision-making

The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or similarly significantly affects the data subject.

⑨ Right to Lodge a Complaint

The right to lodge a complaint regarding the processing of personal information with the supervisory authority of the Member State of the data subject's habitual residence, place of work, or place of the alleged infringement.

3. Designation of EU Representative

The Company has designated a representative to handle inquiries regarding personal information protection for EEA residents as follows:

4. Cookies

For EEA residents, analytical cookies and marketing/advertising cookies (excluding cookies essential for service provision) or similar technologies are used only with the user's prior consent. Users may change or withdraw their consent to the use of cookies at any time through the methods described in Article 9. Such withdrawal applies only to processing after the withdrawal and does not affect processing that has already occurred.

5. Basis for Overseas Transfer for EEA Residents

When personal information of EEA residents is transferred to a third country outside the Republic of Korea or the European Union, the Company transfers personal information based on one of the following lawful bases in accordance with GDPR Chapter V:

1. Operation of Automatic Data Collection Devices (Cookies)

StyleKorean uses cookies to provide more personalized services to users.

Cookies are small text files stored on a user's device (PC, smartphone, tablet, etc.) during website use, allowing the website to recognize the user upon return visits.

Information collected through cookies does not include personally identifiable information. Cookies may be deleted when the browser is closed or the user logs out.

Collected cookie information is used for the following purposes:

Users may choose to allow all cookies, receive notifications when cookies are set, or block all cookies.

■ How to Block Cookies by Browser

① Internet Explorer (IE 11)

② Microsoft Edge

③ Chrome

■ Mobile Cookie and Tracking Opt-Out

※ Menu paths and names may vary depending on device and OS version.

2. Use of Web Analytics Tools

StyleKorean uses web analytics tools such as Google Analytics to analyze website usage records for service improvement and optimization of the user experience.

No personally identifiable information is processed during this process, and Google's handling of information is governed by Google's Privacy Policy.

Users who do not wish to use Google Analytics may opt out by installing the browser add-on provided at the links below:

Google Analytics opt-out and privacy information:

1. The Company collects and uses behavioral information generated during service use to analyze users' interests and tendencies, and to provide personalized services.

2. The Company collects behavioral information as follows:

3. The Company may allow the following online customized advertising providers to collect and process behavioral information:

If users do not wish to have their behavioral information collected or to receive customized advertisements, they may opt out through the links below:

4. Contact for Behavioral Information Requests:

The Company provides personal information to third parties only with the user's consent or where permitted by the Personal Information Protection Act or other applicable laws.

The Company implements the following technical, administrative, and physical safeguards to prevent loss, theft, leakage, forgery, alteration, or damage of personal information.

1. Technical Safeguards

2. Administrative Safeguards

3. Physical Safeguards

1. The Company appoints a Chief Privacy Officer to oversee personal information processing and to handle complaints, inquiries, and remedies related to personal information protection, as follows:

2. Users may contact the Chief Privacy Officer or the relevant department regarding any inquiries, exercise of rights, complaints, or remedies related to personal information protection arising from the use of the Company's services.

If consultation or reporting related to personal information infringement is required, assistance may be obtained from the following institutions:

※ These institutions are independent from the Company and provide general consultation related to personal information infringement.

1. The Company may amend this Privacy Policy in accordance with changes in applicable laws or services. Any revisions or updates will be announced on the Company's website. In the case of material changes, prior notice will be provided at least seven (7) days in advance.

2. This Privacy Policy shall take effect as of January 1, 2026.

3. Previous versions of the Privacy Policy may be reviewed below: