1. Who We Are

k-beautyproducts.com is an e-commerce platform offering Korean beauty products to customers worldwide. We act as the data controller for the personal information we collect and process. Our contact details are:

• Email: hello@k-beautyproducts.blog
• Address: N22 5SS, 12 Newnham Road, London
• Data Protection Officer: Alexander S., hello@k-beautyproducts.blog

If you have any questions about this Privacy Policy or our data practices, please contact us.

2. Information We Collect
We collect personal information to provide and improve our services, process orders, and communicate with you. The types of information we collect include:
a. Information You Provide

• Order Information: When you make a purchase or create an account, we collect your name, billing address, shipping address, email address, phone number, and payment information (e.g., credit card details processed via Stripe).
• Contact Information: If you sign up for our newsletter, contact us via forms, or engage with customer support, we collect your name, email address, and any other information you provide.
• Account Information: If you register for an account, we collect your username, password, and preferences.

b. Information Collected Automatically

• Device Information: We collect data about your device, including IP address, browser type, operating system, and browsing behavior (e.g., pages visited, time spent on site) using cookies and similar technologies.
• Analytics Data: We use tools like Google Analytics to collect data on how you interact with our website, such as page views, click patterns, and referral sources.
• Advertising Data: We use Facebook Business Tools (e.g., Facebook Pixel) to track user behavior for advertising and analytics purposes, such as retargeting campaigns.

c. Information from Third Parties

• Payment Processors: Our payment processor, Stripe, collects and processes payment information (e.g., credit card details) on our behalf. We do not store full payment details on our servers.
• Social Media Platforms: If you interact with us via Facebook or Instagram (e.g., through our store or ads), we may collect data provided by these platforms, such as your profile information or ad engagement data.

3. How We Use Your Information
We use your personal information for the following purposes, based on legal grounds such as contract fulfillment, legitimate business interests, consent, or legal obligations:

• Order Fulfillment: To process and ship your orders, issue invoices, and provide order confirmations.
• Customer Support: To respond to your inquiries, resolve issues, and provide assistance.
• Marketing and Communications: To send newsletters, promotional offers, or personalized ads, if you have opted in. You may opt out at any time.
• Website Optimization: To analyze user behavior and improve our website’s functionality and user experience (e.g., via Google Analytics).
• Advertising: To deliver targeted ads through platforms like Facebook and Google Ads, including retargeting campaigns for users who visit our site.
• Fraud Prevention: To screen orders for potential fraud or risk, using device information like IP addresses.
• Legal Compliance: To comply with applicable laws, respond to legal requests, or protect our rights, property, or safety.

4. How We Share Your Information
We may share your personal information with third parties under the following circumstances:

• Service Providers: We share data with trusted third parties that perform services on our behalf, including:
• Stripe: Processes payment information securely. See Stripe’s Privacy Policy at https://stripe.com/privacy.
• Shipping Partners: Handle order delivery (e.g., [Insert Shipping Provider Name]).
• Analytics Providers: Google Analytics helps us understand website usage. See Google’s Privacy Policy at https://policies.google.com/privacy.
• Marketing Platforms: Facebook Business Tools and Google Ads for advertising and analytics. See Facebook’s Data Policy at https://www.facebook.com/privacy/policy/.
• Legal Obligations: We may disclose your information to comply with legal processes (e.g., subpoenas, court orders) or to protect our rights, customers, or others, including for fraud prevention.
• Business Transfers: If k-beautyproducts.com is involved in a merger, acquisition, or sale, your data may be transferred to the new entity, with notice to you where required.

5. Cookies and Tracking Technologies
We use cookies and similar technologies (e.g., pixels, web beacons) to enhance your experience, analyze site performance, and deliver personalized ads. Cookies may be set by us or third parties like Google and Facebook. Types of cookies we use include:

• Essential Cookies: Necessary for website functionality (e.g., remembering items in your cart).
• Analytics Cookies: Track user behavior for site improvement (e.g., Google Analytics).
• Advertising Cookies: Enable retargeting and personalized ads (e.g., Facebook Pixel).

You can manage cookie preferences through our Cookie Consent Manager or your browser settings. For more details, see our Cookie Policy at https://k-beautyproducts.com/cookie-policy
. Note that disabling cookies may affect site functionality.

6. Payment Processing and PCI Compliance
We use Stripe to process payments securely. Stripe is compliant with the Payment Card Industry Data Security Standard (PCI DSS), ensuring that your credit card information is handled securely. We do not store full credit card details on our servers; Stripe processes and stores this data on our behalf. For recurring payments or subscriptions, we disclose that Stripe may retain payment information for future transactions, with your consent.

7. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA) or UK, we process personal data based on the following legal grounds under GDPR:

• Contract Fulfillment: To process orders and deliver products (e.g., using your name and address).
• Consent: For marketing emails, newsletters, or non-essential cookies (you may withdraw consent at any time).
• Legitimate Interests: For analytics, fraud prevention, and site optimization, where it does not override your rights.
• Legal Obligation: To comply with laws or respond to legal requests.

If you are an EEA/UK resident, your data may be transferred outside the EEA (e.g., to the US for Stripe or Google services). We ensure such transfers comply with GDPR through mechanisms like the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.

8. Your Rights
Depending on your location, you have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you.
• Rectification: Correct inaccurate or incomplete data.
• Deletion: Request deletion of your data, subject to legal retention requirements.
• Restriction: Limit how we process your data.
• Data Portability: Receive your data in a structured, machine-readable format.
• Object: Object to processing for direct marketing or legitimate interests.
• Withdraw Consent: Revoke consent for data processing (e.g., marketing emails or cookies).
• Opt-Out of Sale (CCPA): California residents may opt out of the “sale” of personal information (e.g., sharing with third-party advertisers).

To exercise these rights, contact us at hello@k-beautyproducts.blog (mailto:hello@k-beautyproducts.blog). We will respond within the legally required timeframe (e.g., 30 days for GDPR/CCPA requests). You may also file a complaint with a data protection authority (e.g., ICO in the UK, CNIL in France).

9. Children’s Privacy (COPPA)
Our website is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13 without verifiable parental consent, in compliance with COPPA. If we learn that we have collected such data without consent, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us at hello@k-beautyproducts.blog (mailto:hello@k-beautyproducts.blog).

10. Data Security
We implement technical and organizational measures to protect your data, including encryption, secure servers, and access controls. Stripe, our payment processor, adheres to PCI DSS standards to secure payment information. However, no online system is 100% secure, and we cannot guarantee absolute security. We will notify you and relevant authorities of any data breaches as required by law (e.g., within 72 hours under GDPR).

11. Data Retention
We retain personal data only as long as necessary for the purposes outlined in this policy or as required by law. For example:

• Order Information: Kept for 5 years to comply with tax and accounting laws.
• Marketing Data: Retained until you unsubscribe or request deletion.
• Analytics Data: Anonymized or deleted after 24 months for Google Analytics.

When data is no longer needed, we securely delete or anonymize it.

12. Third-Party Services
We use third-party services that may collect and process your data, including:

• Google Analytics: Tracks website usage. See Google’s Privacy Policy for details.
• Facebook Business Tools: Enables targeted advertising and analytics. As a joint controller with Facebook for certain data (e.g., Page Insights), we comply with the Page Insights Controller Addendum. See Facebook’s Data Policy for more information.
• Stripe: Processes payments securely. See Stripe’s Privacy Policy.

Links to third-party websites (e.g., social media or payment processors) are not governed by this Privacy Policy. We encourage you to review their privacy policies.

13. International Data Transfers
If you are outside the US, your data may be transferred to and processed in the United States or other countries where our service providers operate (e.g., Stripe, Google, Facebook). We ensure compliance with applicable laws, such as GDPR’s requirements for international data transfers, using mechanisms like Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

14. Updates to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices, legal requirements, or third-party services. We will notify you of significant changes via email or a prominent notice on our website. Please review this policy periodically. The “Last Updated” date at the top indicates the latest version.

15. Contact Us

For questions, concerns, or to exercise your data rights, please contact

• Email: hello@k-beautyproducts.blog
• Address: N22 5SS, 12 Newnham Road, London
• For GDPR compliance, our Data Protection Officer, Alexander S., hello@k-beautyproducts.blog, can be reached at hello@k-beautyproducts.blog. California residents may also request information about data sharing under CalOPPA/CCPA by contacting us.