Privacy Policy

This privacy policy describes how HanaCraft Cosmetics collects, uses, and protects your personal data when you visit or make a purchase from our site or use this service.

The data controller responsible for your personal data is HanaCraft Cosmetics, located at 57, Teheran-ro, Suite 302, Gangnam-gu, Seoul, 06164, South Korea.

Personal Data We Collect

We collect various types of personal data to provide and improve our services. The information we collect falls into categories such as:

Information you provide directly to us: This includes details you provide when creating an account, placing an order, signing up for newsletters or updates, contacting us, or participating in surveys or promotions. This may include your name, billing and shipping addresses, payment information (which is processed securely by third-party payment processors), product preferences, and any other information you choose to provide.

Information collected automatically: When you visit our site, we may automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse our site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to our site, and information about how you interact with our site. We refer to this automatically-collected information as "Usage Data".

Information from third parties: We may receive information about you from third parties, such as business partners, technical services, payment and delivery services, and advertising networks.

How We Use Your Personal Data

We use the personal data we collect for various purposes, including:

To fulfill orders: To process your transactions, manage payments, and deliver the products or services you have purchased.

To provide customer support: To respond to your inquiries, requests, and provide assistance.

To manage your account: To manage your registration as a user of our site and provide you with access to its features.

To improve our service: To analyze usage trends, track user interactions, and gather insights to enhance our website, products, and services.

To send communications: To send you updates about your order, service announcements, marketing communications (where you have consented or we have a legitimate interest), and other relevant information.

For business operations: For internal administrative purposes, such as data analysis, security monitoring, and auditing.

To comply with legal obligations: To comply with applicable laws, regulations, and legal processes.

Our Legal Bases for Processing Your Data

We rely on several legal bases for processing your personal data under data protection laws, such as the General Data Protection Regulation (GDPR), depending on the purpose of the processing:

Performance of a contract: We process your data when it is necessary for the performance of a contract to which you are a party, such as processing your order and delivering products.

Compliance with a legal obligation: We may process your data when it is necessary for compliance with a legal obligation, such as tax and accounting requirements.

Legitimate interests: We may process your data for our legitimate interests or those of a third party, provided these interests are not overridden by your interests or fundamental rights and freedoms. This includes improving our services, preventing fraud, and conducting marketing activities (where consent is not required).

Consent: Where required by law, we will rely on your consent to process certain types of data, such as sending you direct marketing communications. You have the right to withdraw your consent at any time.

Sharing Your Personal Data

We may share your personal data with third parties in the following circumstances:

Service Providers: We share data with third-party companies and individuals who perform services on our behalf, such as payment processing, shipping, data analysis, IT services, and customer support. These third parties are obligated to protect your data and use it only for the purposes for which it was shared.

Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity.

Legal Requirements: We may disclose your data if required to do so by law, in response to a subpoena, court order, or other legal process, or if we believe that disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of others.

With Your Consent: We may share your data with your consent or at your direction.

We do not sell your personal data to third parties.

Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The retention period varies depending on the type of data and the purpose of processing.

Data Security

We implement appropriate technical and organizational measures designed to protect your personal data from unauthorized access, use, disclosure, alteration, or destruction. While we strive to protect your information, no method of transmission over the internet or electronic storage is completely secure.

Your Data Protection Rights

Depending on your location and applicable data protection laws, you may have certain rights regarding your personal data. These may include:

The right to access: You have the right to request a copy of the personal data we hold about you.

The right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data.

The right to erasure: You have the right to request that we erase your personal data under certain conditions.

The right to restrict processing: You have the right to request that we restrict the processing of your personal data under certain conditions.

The right to object to processing: You have the right to object to our processing of your personal data under certain conditions.

The right to data portability: You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and to transmit those data to another controller under certain conditions.

The right to withdraw consent: If we rely on your consent to process your data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please submit your request in writing to the address provided in the "Contacting Us Regarding Privacy Matters" section below. We may need to verify your identity before processing your request.

Cookies and Tracking Technologies

Our site uses cookies and similar tracking technologies to improve your browsing experience, analyze site traffic, remember your preferences, and for marketing purposes. You can manage your cookie preferences through your browser settings or the cookie banner on our site.

International Data Transfers

Your personal data may be transferred to, stored, and processed in countries outside of your own, including outside the European Economic Area (EEA) or South Korea, where data protection laws may differ. When we transfer your data internationally, we take steps to ensure that appropriate safeguards are in place to protect your data in accordance with applicable laws, such as relying on standard contractual clauses approved by relevant authorities.

Children's Privacy

Our service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us so that we can take steps to remove that information.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the updated policy on this page. We encourage you to review this policy periodically.

Contacting Us Regarding Privacy Matters

If you have questions about this privacy policy or our data practices, or if you wish to exercise your data protection rights, please send your request in writing to:

HanaCraft Cosmetics
57, Teheran-ro, Suite 302
Gangnam-gu, Seoul, 06164
South Korea