Privacy Policy

This Privacy Policy explains how the online store homemade bath bombs collects, uses, and protects your personal information when you use our site or service. We are committed to protecting your privacy and handling your data transparently and in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

Information We Collect

We collect information you provide directly to us when you use our site, such as when you place an order, create an account, or contact us. This may include:

Identity and Contact Data: your name, shipping address, billing address, email address, and phone number.
Transaction Data: details about products you purchase, order number, and payment information. Please note we do not store your full payment card details; these are handled securely by our payment processor.
Communications Data: information you provide when you communicate with us, such as customer service inquiries.
Account Data: if you create an account, we collect your login credentials and profile information.

We also automatically collect certain information when you visit, use, or navigate our online platform. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our site, and other technical information. This information is primarily needed to maintain the security and operation of our site, and for our internal analytics and reporting purposes.

How We Use Your Information

We use the information we collect for various purposes, including:

To process and fulfill your orders, including processing payments and shipping products.
To manage your account and provide you with customer support.
To communicate with you about your orders, products, services, and offers.
To improve our site, products, and services.
To comply with legal obligations and prevent fraudulent transactions.
To analyze usage trends and monitor the effectiveness of our marketing efforts (where applicable).

Our legal basis for collecting and using your personal information depends on the specific context in which we collect it. We will normally collect personal information from you where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms, where we have your consent to do so, or where we need the personal information to perform a contract with you (e.g., to process your orders).

Sharing Your Information

We may share your information with trusted third parties necessary to provide our services. These may include:

Payment processors to securely process your payments.
Shipping carriers to deliver your orders.
Service providers who assist us with website hosting, data analysis, and customer service.
Law enforcement or government officials if required by law or to protect our rights or the safety of others.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The criteria used to determine the retention periods include the length of our relationship with you, your purchases, and our legal obligations.

Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, please remember that we cannot guarantee that the internet itself is 100% secure. Although we do our best to protect your personal information, transmission of personal information to and from our site is at your own risk. You should only access the services within a secure environment.

Your Rights

In accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR), you have rights regarding your personal data. These rights may include:

The right to access your personal data.
The right to request correction of inaccurate data.
The right to request erasure of your personal data.
The right to restrict the processing of your personal data.
The right to object to the processing of your personal data.
The right to data portability.
The right to withdraw consent (where processing is based on consent).
The right to lodge a complaint with a supervisory authority.

To exercise any of these rights, please contact us using the information provided below. We will respond to your request in accordance with applicable data protection laws.

Cookies and Tracking Technologies

We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is outlined in our Cookie Policy (if applicable) or within the settings of your browser.

Third-Party Links

Our site may contain links to third-party websites that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of these third-party sites before providing any personal information.

Children's Privacy

Our service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and you believe that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from a child under age 16 without verification of parental consent, we take steps to remove that information from our servers.

Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated date and the updated version will be effective as soon as it is accessible. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information.

Contacting Us

If you have questions or comments about this Privacy Policy, you may contact us at the following physical location:

homemade bath bombs
Online store
Seoul
downtown