Privacy Policy


1. Policy Introduction & Service Purpose

This Privacy Policy is formulated to standardize the collection, use, storage, protection, and management of user personal information by our premium Hanbang Korean skincare e-commerce platform, fully protecting the personal privacy rights and information security of all global registered users and shopping customers. As a professional cross-border e-commerce platform dedicated to providing authentic traditional Korean Hanbang natural skincare products, we attach great importance to user information security and privacy protection, and strictly abide by international privacy protection norms and e-commerce industry information security standards in all operational links.
This policy clearly defines the types of user information collected by the platform, the scope of information use, information storage rules, user privacy protection measures, and user rights and interests protection methods, covering all links of user registration, browsing, order placement, payment, logistics delivery, and after-sales service. The purpose of collecting user information is only to provide more accurate, efficient, and personalized skincare e-commerce services for users, optimize platform product experience and service quality, and ensure the safe and stable operation of online transaction businesses.
This Privacy Policy applies to all users who access, browse, register, and consume on the platform, with unified global applicable standards and no differentiated privacy management rules for different regional users. We promise to take strict technical and management measures to protect user personal information, never illegally disclose, sell, or transfer user private information, and fully safeguard user information security and privacy autonomy.

2. Types of Collected User Information

In the process of providing e-commerce services, the platform will collect necessary user information in a legal, legitimate, and necessary principle, which is divided into basic registration information, transaction service information, and platform use behavior information. Basic registration information includes user account authentication information submitted during platform registration, which is used to complete user identity authentication and establish exclusive user account credentials to ensure the uniqueness and security of user accounts.
Transaction service information is the core information collected to complete skincare product transaction services, including order information generated by users during shopping, product browsing records, purchase preferences, payment information, delivery address information, and after-sales service application records. This information is mainly used to process user orders, complete product delivery, provide after-sales refund and return services, and verify transaction validity, which is an essential basis for the platform to complete e-commerce transaction services.
Platform use behavior information includes user access time, browsing page track, operation habits, device access information, and network environment information generated during the use of platform services. This information is used for platform operational data analysis, product optimization, service experience improvement, and risk control identification, helping us better understand user demand for Hanbang skincare products, optimize product display and service process, and provide more targeted skincare product recommendations and service experiences for users.

3. Legal Basis for Information Collection & Use

All user information collected by the platform is based on the user’s voluntary authorization and the actual needs of e-commerce service execution. Users independently submit relevant personal information during account registration and order placement, and confirm to authorize the platform to collect and use the information by agreeing to relevant policy terms and completing subsequent shopping behaviors. Without user voluntary authorization, the platform will not actively collect any sensitive personal information of users.
The use of user information is limited to the scope of platform service commitments and legal provisions. All information is only used for internal service operation, including order processing, logistics distribution, after-sales service, user account management, platform security maintenance, product optimization and recommendation, and user service notification. We will not use user information for unauthorized commercial promotion, illegal marketing, or other purposes unrelated to platform skincare e-commerce services.
For user sensitive information involving personal privacy, the platform implements stricter use restrictions. Sensitive information will only be invoked and used when necessary for transaction services and security verification, and will not be publicly displayed or casually transmitted. All information use behaviors are supervised by the platform’s internal security management system to ensure compliance and standardization of the whole process.

4. Information Storage & Security Protection Measures

The platform adopts international advanced cloud server storage technology and encrypted storage mechanisms to store all user information. All user data is stored in secure and certified data servers, with multi-layer encryption protection for sensitive information to prevent data leakage, tampering, loss, and illegal access. We have established a professional data security management team, responsible for daily maintenance, monitoring, and risk prevention of user data storage systems.
In terms of data access management, the platform implements strict hierarchical access authority control. Only authorized professional operational and technical personnel can access user information data, and all access behaviors are recorded in real time and archived permanently. Unrelated personnel have no right to query, obtain, or use user information, effectively avoiding internal data security risks. At the same time, we regularly update system security protection programs, repair potential system vulnerabilities, and resist external network attacks and data intrusion risks.
User information will be stored within the valid service cycle of the user’s platform account. After the user cancels the account or the information loses service value, we will complete safe and irreversible deletion or anonymization processing of user information in accordance with system rules and legal requirements, and will not retain user private information indefinitely. Anonymized data after processing cannot be associated with individual user identities, which can be used for platform operational data statistics and industry analysis.

5. Information Sharing & Disclosure Rules

The platform promises not to sell, rent, or trade user personal information to any third-party commercial institutions and individuals without user explicit consent. We will not disclose user private information to irrelevant third parties in any form. Under the premise of complying with user privacy protection, only in specific service scenarios, we will share necessary user information with authorized cooperative service providers to ensure the smooth completion of e-commerce services.
The limited shared information scenarios include logistics and distribution services, payment settlement services, and platform security verification services. The shared information is limited to the minimum information required for service completion, such as delivery address and recipient information required for logistics delivery, and payment credential information required for fund settlement. All cooperative service providers have signed strict privacy confidentiality agreements with the platform, and are prohibited from using shared user information for other purposes.
The platform will take the initiative to disclose user information only when required by mandatory legal provisions and official legal procedures, including responding to official legal investigations, judicial inquiries, and regulatory supervision requirements. All public disclosure behaviors will be carried out in accordance with legal procedures, and we will try our best to protect user privacy within the scope permitted by law.

6. User Privacy Rights & Operation Channels

Users enjoy complete privacy rights for their personal information on the platform, including information query right, modification right, deletion right, authorization cancellation right, and objection right to information use. Users can log in to the personal account center at any time to query the personal information stored by the platform, check order data and behavior records, and independently modify incorrect or expired personal information to ensure the authenticity and validity of account information.
Users have the right to apply for deletion of unnecessary personal information and cancel invalid information authorization. After receiving the user’s legitimate information rights application, our professional privacy management team will complete the review and processing within 3 working days, and synchronize the processing result to the user. For user behaviors that refuse personalized information recommendation and data analysis, users can close the corresponding function switch in the account settings page, and the platform will stop the corresponding information collection and analysis behaviors in real time.
If users find that their personal information is leaked, illegally used, or improperly disclosed, they can initiate privacy complaints and feedback through the official platform channel. We will verify the problem in the first time, take remedial security measures, and deal with relevant responsible parties in accordance with internal management rules to fully protect users’ legitimate privacy rights and interests.

7. Policy Update & User Recognition

With the continuous upgrading of platform business and the continuous improvement of international privacy protection standards, this Privacy Policy will be dynamically optimized and updated appropriately. When the policy terms are adjusted, the platform will publish the updated content on the official page in a prominent position, and the latest policy terms will take effect immediately after publication. We will not separately notify each user of minor policy adjustments, and users can check the latest privacy rules through the official page at any time.
Users’ continued access to the platform, browsing products, and shopping transactions after the policy update is deemed as full recognition and voluntary acceptance of the latest Privacy Policy. If users do not agree to the updated policy terms, they shall stop using all platform services in a timely manner. The platform will strictly implement the latest privacy protection rules to ensure that all user information protection work is standardized and compliant.