Privacy Policy

Last updated: 7 September 2026

This Privacy Policy describes how we collect, use and protect your personal data when you visit koreabeautyofficial.com and buy from our store.

1. Data Controller

Capi and Sons LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, USA — operating koreabeautyofficial.com.
Email: contact@koreabeautyofficial.com

2. What Data We Collect

Order data: name, email, billing and shipping address, phone number, order history.
Payment data: processed by Stripe — we never see or store card details.
Technical data: IP address, browser, pages visited (analytics and advertising cookies, only with your consent).
Communication data: emails you send us.
Marketing data: newsletter preferences, if you subscribe.

3. How We Use Your Data

To process, ship and track your orders;
To send order confirmations and shipping updates;
To answer your questions and handle returns;
To send marketing emails, only with your consent (unsubscribe at any time);
To measure and improve the website (with your consent for cookies);
To meet our legal and tax obligations.

4. Legal Basis (GDPR)

Performance of the contract (orders), legitimate interest (security, fraud prevention), consent (marketing, non-essential cookies) and legal obligation (accounting records).

5. Who Receives Your Data

Order fulfilment: your name, delivery address and phone number are shared with our supply partner CJdropshipping and the carrier, so that your parcel can be shipped, cleared through customs and delivered.
Payment: Stripe (stripe.com/privacy).
Analytics and advertising (with consent): Google Analytics, Meta Pixel, TikTok Pixel.
Email: Brevo (brevo.com/privacy-policy) for transactional and marketing emails.
Tidio (live chat): processes the messages and contact details you choose to send through the chat window.
Instagram / Meta Platforms: the Instagram feed shown on the site loads images from Instagram, which receives your IP address and browser data.
Consent management: CookieYes.
Hosting: our website host, located in the EU/US under standard contractual clauses where applicable.

Some of these providers are located outside the European Union; transfers rely on the European Commission’s Standard Contractual Clauses or an adequacy decision.

6. Cookies

Essential cookies (cart, checkout, security) are always active. Analytics and advertising cookies are set only after you accept them in the cookie banner; you can change your choice at any time from the banner. Refusing them does not affect your ability to buy.

7. Data Retention

Order and invoice data: 10 years (legal obligation). Account data: while your account is active. Newsletter data: until you unsubscribe. Analytics data: up to 26 months.

8. Your Rights

You may access, rectify, erase or export your data, restrict or object to its processing, and withdraw consent at any time, by writing to contact@koreabeautyofficial.com. We answer within 30 days. You may also lodge a complaint with your national data-protection authority (UODO in Poland, ANSPDCP in Romania, NAIH in Hungary).

9. Security

The website is served over HTTPS; payments are handled by PCI-DSS-certified providers; access to order data is limited to the people who need it to serve you.

10. Changes

We may update this policy; the date at the top always shows the latest version.