Privacy Policy

① When using social login (Google, Kakao, Apple): email address, name, and profile image.

② When placing an order: recipient's name, contact number, delivery address, and Personal Customs Clearance Code (PCCC). Card payment information is processed by the payment gateway (Stripe), and the Company does not store card numbers.

③ Collected automatically: access logs and device/browser information.

Identifying and managing members; confirming orders and card payments, placing orders, and arranging delivery; using the Personal Customs Clearance Code solely for import customs declaration purposes; responding to customer inquiries; and providing transaction-related notices and fulfilling statutory obligations.

The Company installs and operates devices that automatically collect personal information, such as cookies, in order to provide personalized services to users and to analyze and measure how the Service is used. A cookie is a small piece of information that the server operating the website sends to the user's browser and that is stored on the user's device.

① Usage analysis: The Company uses Google Analytics 4 (Measurement ID G-P113SDY7MK) to analyze statistics on Service usage, including visit frequency, page usage behavior, and referral sources. ② Advertising performance measurement: The Company uses Google Ads to measure advertising performance, including impressions, clicks, and conversions, and to run remarketing advertisements to encourage repeat visits. For these purposes, cookies and advertising identifiers (such as advertising IDs and client IDs) are collected, and this information is transmitted to Google LLC (United States), which processes it.

Users have a choice regarding the installation and operation of cookies. Through web browser settings, users may allow all cookies to be stored, be prompted for confirmation each time a cookie is stored, or refuse to allow any cookies to be stored (for example, in Chrome: Settings › Privacy and security › Cookies and other site data; Edge, Safari, and other browsers provide similar options). Users may also separately opt out of collection for analytics and advertising purposes through Google Ads Settings (https://adssettings.google.com) and the Google Analytics Opt-out Browser Add-on (https://tools.google.com/dlpage/gaoptout).

However, if a user refuses to allow the storage of all cookies, this may cause limitations in the use of some Service features, such as staying logged in, the shopping cart, and personalized services.

The minimum information necessary for delivery may be provided to, or its processing outsourced to, courier companies for delivery and to suppliers/forwarding agents in Japan for overseas sourcing, and the Personal Customs Clearance Code is provided to the Korea Customs Service and to customs-clearance agents for import customs declarations. Personal information is not otherwise provided to third parties without consent.

The Company transfers personal information overseas as follows (Article 28-8 of the Personal Information Protection Act).

Recipient: Stripe, Inc. (payment gateway) · Country of transfer: United States · Items transferred: order amount and payment-method authorization information (the Company does not directly store or transmit sensitive information such as card numbers) · Timing/method of transfer: transmitted immediately over the network when the payment request is made · Purpose of transfer: authorization, acquiring, and settlement of card payments · Retention/use period: the period set by Stripe's own privacy policy and applicable law (separate from the Company's own retention period).

Recipient: Cloudflare, Inc. (hosting, content delivery (CDN), and security infrastructure provider) · Country of transfer: United States · Items transferred: online identifiers such as IP address, cookies, and device/browser information processed when the Service is accessed, and data users enter into or transmit through the Service · Timing/method of transfer: processed and routed continuously over the network whenever users access and use the Service · Purpose of transfer: website hosting, content delivery, and traffic security (blocking DDoS attacks and abnormal access) · Retention/use period: the period necessary to achieve the purpose of providing the Service, and the period set by Cloudflare's own privacy policy and applicable law (separate from the Company's own retention period).

Recipient: suppliers and forwarding agents in Japan · Country of transfer: Japan · Items transferred: recipient's name, contact number, delivery address, and Personal Customs Clearance Code (PCCC) · Timing/method of transfer: transmitted by email/system when the order is confirmed · Purpose of transfer: local order placement, export customs clearance, and international shipping · Retention/use period: destruction is requested once the retention period under the Korean E-Commerce Act (5 years for payment and product-supply records) has elapsed following completion of delivery.

The overseas transfers described above constitute processing outsourced/entrusted and storage strictly necessary to perform the overseas purchasing-agency service contract (sourcing, ordering, settlement, customs clearance, and payment) and to operate the Service, pursuant to Article 28-8, Paragraph 1, Item 3 of the Personal Information Protection Act. Users have the right to refuse the overseas transfer of their personal information, and may notify the Company of such refusal via the Data Protection Officer's contact information in item 9. However, if you refuse, the order, payment, ordering, and delivery process cannot proceed, given the nature of an overseas purchasing-agency service.

Personal information is retained in accordance with the Korean E-Commerce Act and other applicable law: records of contracts and withdrawal of offer for 5 years, records of payment and product supply for 5 years, and records of consumer complaints/dispute resolution for 3 years. It is destroyed without delay once its purpose has been fulfilled.

This Service uses Google, Kakao, and Apple login, and receives information from each provider within the scope the member has consented to (email address and profile).

Members may request to view, correct, delete, or suspend the processing of their own information at any time, and upon withdrawal of membership, the information is destroyed except for information the Company is required to retain under applicable law.

Inquiries regarding the exercise of these rights and the handling of personal information may be directed to the Company's Data Protection Officer. The Company's Data Protection Officer is Jaehoon Jeong (Position: CEO), and the contact information is as stated in item 9.

In accordance with Article 22-2 of the Personal Information Protection Act, the Company, in principle, does not collect personal information from children under the age of 14. Membership registration presupposes providing account information through social login (Google, Kakao, Apple); where a child under 14 seeks to register as a member or place an order, the consent of a legal representative is required, and the Company may request confirmation of that consent where necessary. A legal representative may request that the Company (see the contact information in item 9) allow access to, correction of, deletion of, or suspension of processing of that child's personal information. If it is confirmed that a child under 14 has registered as a member or made a payment without a legal representative's consent being confirmed, the Company will destroy the related personal information without delay and cancel and refund the relevant transaction.