Privacy Policy

Information we collect

We collect the information needed to operate Seoulumi as a K-beauty storefront, process customer orders, support manual payment, and provide account access.

• Account information such as name, email address, login provider, and basic profile details provided by email sign-up or Google sign-in.
• Order information such as selected products, quantity, customer name, email, phone number, destination country, shipping address, order memo, and order status.
• Manual payment information such as transfer reference, payment confirmation status, and any payment proof a customer chooses to send to us.
• Customer support messages, contact form details, and communications about orders, shipping, returns, or product questions.
• Technical and security information such as browser/device details, IP-related logs, authentication records, country-level location signals, and basic cookies or local storage required for the website to work.

How we use information

We use customer information for practical store operations and customer support. We do not sell customer personal information.

• Create and manage customer accounts, sign-in sessions, wishlists, carts, and order history.
• Review orders, reserve or adjust stock, confirm manual bank transfers, prepare delivery or shipping, and provide order status updates.
• Estimate the customer's country at a country level, show a suitable market, language, currency, and shipping options, and let the customer correct the country before checkout.
• Respond to customer questions, handle returns or refunds, investigate delivery issues, and prevent misuse or fraud.
• Maintain accounting, tax, operational, security, and legal records where required.
• Improve Seoulumi's storefront, product selection, and customer experience using limited operational signals.

Social login

When customers sign in with Google, Google may send Seoulumi basic account information such as name, email address, provider ID, and profile image if available. Seoulumi does not receive the customer's Google password. Google may also process information under its own privacy policy.

Sharing and service providers

We share information only when needed to run the store, complete an order, or meet legal and security obligations.

• Authentication, database, and hosting providers used to run Seoulumi and keep customer sessions active.
• Email or SMTP providers used to send account verification, order, support, or operational emails.
• Shipping, delivery, or handover partners when needed to deliver an order.
• Banks or payment-related records for manual bank transfer confirmation.
• Professional advisers, authorities, or platforms where required for accounting, legal compliance, security, fraud prevention, or dispute handling.

Cookies and analytics

Seoulumi currently uses essential website storage for features such as authentication, cart behavior, country or market selection, and security. Seoulumi may infer a visitor's country from hosting or network headers, but the customer can correct the destination country before checkout. Precise GPS location is not required for ordinary shopping. If non-essential analytics, advertising cookies, or marketing pixels are introduced later, this policy and the customer consent flow should be updated before public use.

Legal basis for EU/EEA customers

For customers in the EU or EEA, Seoulumi generally processes personal information to prepare or perform an order contract, comply with legal obligations, protect legitimate business and security interests, and use consent where required for optional features such as non-essential marketing.

Retention

We keep personal information only as long as reasonably needed for the purpose collected, including account access, order support, accounting, tax, legal, fraud prevention, and dispute handling. Account profile data may be deleted or anonymized after a valid deletion request, while some order and payment records may need to be retained for legal or accounting reasons.

Customer rights

Depending on location, customers may request access, correction, deletion, restriction, portability, or objection to certain processing of their personal information. Customers can also remove Seoulumi access from their Google account settings.

International processing

Seoulumi may use service providers or operational tools located outside the customer's country. When this happens, information is handled for the store purposes described in this policy and protected through reasonable technical and organizational measures.

Contact

For privacy questions or requests, contact Seoulumi at hello@seoulumi.com. Customers who want account data deleted can also use the data deletion instructions page.