Privacy Policy

Privacy Policy of KpopStores.com

1. General Provisions
① KpopStores.com (hereinafter referred to as “the Company”) considers user privacy a top priority and strictly complies with applicable laws, including the Personal Information Protection Act, Act on Promotion of Information and Communications Network Utilization and Information Protection, and the Protection of Communications Secrets Act.

② The Company obtains users' explicit consent prior to collecting or processing personal information and does not use or share such data without prior authorization. Please note that refusal to provide consent may restrict access to some or all parts of the service.

2. Purpose of Collection and Use of Personal Information
The Company collects and processes personal data only for the following purposes. Any changes to these purposes will be accompanied by user notification and re-consent.

Category    Purpose    Collected Items
Sign Up    Service usage, points accumulation, notification delivery, user inquiries, age verification (14+)    Email (ID), Password, Name, Date of Birth
Service    Order fulfillment, delivery, returns, after-sales service    Orderer’s Name, Recipient Name, Shipping Address, Mobile Number
Payment    Payment processing and refunds    Bank Account Info, Payment Details
3. Outsourcing of Personal Information Processing
To operate services effectively, the Company outsources personal information processing to reliable third-party service providers:

4. Provision of Personal Information to Third Parties
The Company does not provide personal data to third parties without prior user consent unless required by law or explicitly permitted under personal information protection statutes.

5. Transfer of Personal Information Abroad
The Company transfers limited data to trusted overseas partners only for purposes of service optimization. Users may decline overseas transfers, but this may affect full access to services.

Transferred Data    Transfer Method    Recipient & Country    Purpose    Retention Period
IP Address, Device Info, OS Version, Service Usage Data    Real-time system transfer    Google LLC, USA<br>Email: googlekrsupport@google.com    Service optimization, usage analysis    Until account termination

6. Retention and Use Period of Personal Information
Personal information is retained only as long as necessary and in accordance with legal or contractual requirements:

Data Type    Retention Period    Legal Reference
Access Logs, IP Data, Cookies    3 Months    Protection of Communications Secrets Act
Ad Display Records    6 Months    E-Commerce Consumer Protection Act
Complaints/Disputes    6 Months    
Contract and Offer Records    5 Years    
Payment and Fulfillment Records    5 Years    

7. Destruction of Personal Information
① The Company safely deletes or destroys data upon completion of service purpose or expiration of retention period. ② Printed data is shredded or incinerated; digital data is deleted using secure, irrecoverable methods.

8. User Rights and Controls
① Users may view, update, or delete their personal information through the My Account section. ② During correction requests, the Company pauses use/sharing of affected data until updates are complete and informs any third parties accordingly. ③ Deleted information is disposed of securely and not reused.

9. Use of Cookies and Similar Technologies
① Cookies are used for authentication and session management. Users may accept or block cookies using their browser settings:

Edge: Settings > Cookies and site permissions

Chrome: Settings > Privacy and security

Safari: Preferences > Privacy

Refusing cookies may result in limited access to certain features.

10. Technical and Organizational Security Measures
① Technical Measures:

Firewalls, intrusion detection, encrypted storage, and access controls.

Data is encrypted at rest and in transit.

② Organizational Measures:

Only authorized personnel have access.

Regular employee training on data protection.

Certified security management practices are in place.

11. Data Protection Officers
Chief Privacy Officer Name: Sung Wook Jung Email: support@kpopstores.com

12. Policy Updates
Changes to this policy will be posted at least 7 days prior to implementation. For material changes affecting users’ rights, 30 days advance notice will be provided through the platform.