Privacy Policy
Last Updated: April 14, 2026
Seoul Beauty Global ("we," "us," or "our") operates a beauty booking platform connecting international travelers with beauty service providers in Korea. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Platform (the "Platform") and related services (the "Services").
By using our Platform, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein. You have the right to refuse consent to the collection and use of your personal information; however, in such cases, you may be unable to use the Platform's booking services.
If you have any questions, please contact us at support@seoulbeautyglobal.com.
1. Information We Collect
1.1 Account Information
When you create an account:
- Email address
Social Media Authentication (Login with Google):
When you choose to register or log in using your Google account, we collect your Google email address and may access other information you have made publicly available through your Google profile, such as your first and last name and profile picture. We use this information to create and manage your account, authenticate your identity when you log in, and provide you with access to our Services. Please review Google's Privacy Policy and Terms of Service for more information on how they handle your personal data.
Profile Settings:
Your registered account in Seoul Beauty Global may include:
- Name (first and last name)
- Phone number
- Date of birth
- Gender
- Nationality
- State/province of residence
- Postal address
- Social media contact
1.2 Booking Information
When you book appointments:
- Service type and Partner selected
- Appointment date and time
- Name (first and last name)
- Phone number
- Date of birth
- Gender
- Nationality
- State/province of residence
- Social media contact
- Special requests, notes, and health-related information voluntarily provided for the service
1.3 Payment Information
We use third-party payment gateways (such as PayPal) to process payments securely. We store:
- Transaction amount, date, and currency
- Transaction ID provided by the payment gateway
- Payment status (e.g., pending, completed, failed)
We do not collect or store your credit/debit card numbers, security codes, or other sensitive payment credentials. This information is processed directly by the respective payment gateway.
1.4 Usage Information
We automatically collect:
- IP address, browser type, and device information
- Pages visited and features used
- Referring website
- Date and time of visits
1.5 Reviews and Communications
- Reviews: Your ratings, written reviews, and first name
- Support messages: Your inquiries and our responses via email or chat
2. How We Use Your Information
We collect and process your personal information only where we have a lawful basis to do so under applicable law, including performance of a contract, compliance with legal obligations, our legitimate business interests, or your consent.
Service Delivery. We use your personal information to create and maintain your account, process and confirm bookings, handle payments and refunds, and send booking confirmations, reminders, and other transactional communications necessary to deliver the Services you have requested.
Platform Improvement. We analyze how users interact with our Platform to identify and fix technical issues, understand usage patterns, and develop new features and improvements. This processing is based on our legitimate interest in providing a well-functioning and improving service.
Communication. We use your information to respond to your inquiries, send important service updates, and notify you of changes to our policies. Where you have provided consent, we may also send promotional offers, marketing communications, and newsletters. You may opt out of marketing communications at any time.
Marketing and Advertising. We may use your personal information, including identifiers such as your email address, for marketing and advertising purposes. This includes sending marketing communications by email or other channels where you have given consent, displaying personalized content and advertisements on our Platform and on third-party platforms, and sharing certain identifiers with advertising partners such as Meta Platforms, Inc. and Google LLC to deliver targeted advertisements and measure their effectiveness. For users who have previously completed a booking through our Platform, we may use your information for retargeting purposes based on our legitimate interest in promoting our Services to existing customers. EU/EEA residents may object to this processing at any time (see Section 6).
Security and Fraud Prevention. We use your personal information to detect, investigate, and take action regarding fraudulent, illegal, or unauthorized activity. This processing is based on our legitimate interests in maintaining the security of our Platform and protecting our users.
Legal Compliance. We process your personal information to comply with applicable legal obligations, respond to lawful requests from authorities, enforce our Terms of Service, and protect our rights and the rights of our users.
3. Sharing Your Information
3.1 Provision to Third-Party Partners (Beauty Service Partners)
When you make a booking, we share your contact and booking information with your chosen Partner so that they can prepare for and facilitate your appointment. The information shared includes your name, email, phone number, date of birth, gender, nationality, state/province, social media contact (if provided), and any special requests or notes you have submitted.
Partners may access your booking information from the time your booking is confirmed. Access is automatically revoked after your appointment date. Each Partner operates independently and is responsible for their own data practices. Partners are prohibited from using your information for any purpose other than facilitating your booked appointment, and from sharing your information with third parties. For questions about how a Partner uses your data, please contact them directly.
3.2 Entrustment of Personal Information (Domestic)
We entrust the processing of personal information to the following domestic service providers to ensure stable platform operation and efficient customer support.
| Trustee (Service Provider) | Task & Purpose of Entrustment | Retention & Use Period |
|---|---|---|
| Naver Cloud | SMS and KakaoTalk notification services | Until account deletion or termination of the entrustment contract |
| Channel Corp. | Real-time customer support chat services | 3 years after the purpose is achieved |
3.3 Overseas Entrustment and Transfer of Personal Information
The following tasks are entrusted to overseas entities for specialized functions such as global payment processing, web analytics, and advertising. This transfer is necessary for the provision of our Services.
| Trustee (Recipient) | Purpose of Transfer | Location | Method & Timing of Transfer | Retention & Use Period |
|---|---|---|---|---|
| Amazon Web Services, Inc. | Cloud hosting and data storage | USA | Frequent transmission via network during service usage | Until account deletion or termination of the entrustment contract |
| PayPal | Payment/Refund processing and fraud prevention | USA | Electronic transmission at the time of payment or refund | 5 years in accordance with relevant laws (e.g., Act on Consumer Protection in Electronic Commerce) |
| Google LLC | Website usage analysis, marketing performance measurement, and personalized advertising | USA | Frequent transmission via network during service usage | Until the analysis/marketing purpose is achieved or the log retention period expires |
| Meta Platforms, Inc. | Targeted and personalized advertising, including Custom Audience creation, Lookalike Audience targeting, and retargeting of existing customers | USA | Electronic transmission upon booking completion and during service usage | Until the advertising purpose is achieved, consent is withdrawn, or opt-out is exercised |
All international transfers are conducted in compliance with the Korean Personal Information Protection Act (PIPA) and, where applicable, the General Data Protection Regulation (GDPR), using appropriate safeguards including Standard Contractual Clauses (SCCs).
3.4 Marketing and Advertising Partners
To provide you with personalized advertising and to promote our Services, we may share certain identifiers — such as hashed email addresses and device identifiers — with media agencies and advertising partners, including Meta Platforms, Inc. (Facebook/Instagram) and Google LLC. These partners may use this information to show you relevant advertisements on their platforms and third-party websites, create Custom Audiences based on our existing customer base, and build Lookalike Audiences to reach new users with similar characteristics.
These partners operate under their own privacy policies. You are encouraged to review them:
You may opt out of this sharing at any time (see Section 6).
3.5 Legal Disclosures
We may disclose information when required by law or to respond to court orders or legal requests, investigate fraud or security issues, protect our rights and safety, or comply with regulatory requirements.
3.6 Business Transfers
If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.
4. Cookies and Tracking Technologies
We use cookies and similar technologies to improve your experience, analyze Platform usage, and deliver relevant advertising.
Essential Cookies are required for login, security, and core Platform functionality and cannot be disabled without affecting Platform performance.
Analytics Cookies help us understand how users interact with our Platform, such as which pages are visited most often and how users navigate the site. We use Google Analytics for this purpose. You may opt out via the Google Analytics Opt-out Browser Add-on.
Functional Cookies allow the Platform to remember your preferences and settings to provide a more personalized experience.
Advertising / Targeting Cookies are used to deliver advertisements relevant to your interests on our Platform and on third-party platforms, to limit the number of times you see an advertisement, and to measure the effectiveness of advertising campaigns. We currently use the following advertising technologies:
- Meta Pixel (Facebook Pixel): We use Meta Pixel to measure the effectiveness of our advertising, understand how users interact with our Platform after viewing an ad, and deliver personalized advertisements on Meta platforms (Facebook and Instagram). The collected data is processed by Meta in accordance with Meta's Data Policy. You may manage your Meta ad preferences at Facebook Ad Preferences.
- Google Ads Conversion Tracking: We use Google Ads Conversion Tracking to measure the effectiveness of our Google Ads campaigns. You may opt out via Google's Ad Settings.
You can manage or remove cookies through your browser settings. Please note that disabling essential cookies may affect the availability or performance of certain features. Third parties such as Meta and Google may set their own cookies subject to their respective privacy policies.
5. International Data Transfers
5.1 Primary Storage and Location
Our primary servers and databases are located in the United States (AWS US Region). By using our Platform, you acknowledge that your personal information will be transferred to and processed in the United States and the Republic of Korea.
5.2 Compliance and Safeguards
We ensure that all international transfers are conducted in compliance with the Korean Personal Information Protection Act (PIPA) and, where applicable, the General Data Protection Regulation (GDPR). We implement industry-standard encryption (SSL/HTTPS) and appropriate organizational security measures to protect your data during transit and at rest. Where required, we rely on Standard Contractual Clauses (SCCs) or other legally recognized transfer mechanisms.
You may request to suspend the overseas transfer of your personal information; however, please note that this may limit your ability to use our booking services, as these transfers are essential for Platform operation.
6. Your Rights and Choices
6.1 General Rights
Depending on where you live, you may have some or all of the following rights in relation to your personal information. You may access and update your information in Account Settings, or contact us at support@seoulbeautyglobal.com. We will respond within 30 days.
You have the right to:
- Request access to and a portable copy of the personal information we hold about you
- Request correction of inaccurate or incomplete information
- Request deletion of your account and associated data
- Object to certain data processing activities
- Request restriction of how we use your data
- Withdraw consent for optional data processing at any time, without affecting the lawfulness of processing carried out before withdrawal
6.2 Opt-Out of Marketing Communications
You may opt out of receiving promotional emails at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at support@seoulbeautyglobal.com. Opting out of marketing communications does not affect transactional communications such as booking confirmations and reminders.
6.3 Opt-Out of Advertising Data Sharing
You may opt out of the sharing of your personal information with advertising partners for targeted advertising purposes at any time by emailing support@seoulbeautyglobal.com with the subject line "Advertising Opt-Out," or by managing your preferences directly with the relevant advertising platform (see Section 4).
6.4 Additional Rights for EU/EEA Residents (GDPR)
If you are located in the EU or EEA, you have full rights under the General Data Protection Regulation (GDPR), including the right to data portability, the right to restriction of processing, and the right to lodge a complaint with your local data protection authority (find your authority here).
Where we process your personal information for advertising purposes on the basis of legitimate interests, you have the right to object to such processing at any time. Upon receiving an objection, we will cease processing for that purpose unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. Where advertising cookies or the sharing of your data with advertising partners requires your consent, we will seek your explicit consent separately.
6.5 Additional Rights for California Residents (CCPA/CPRA)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
Categories of personal information we have collected in the preceding 12 months:
- Identifiers: name, email address, phone number, IP address
- Commercial information: booking and transaction records
- Internet or network activity information
- Geolocation data: nationality, state/province of residence
- Inferences drawn from the above to create a profile of user preferences
This information has been disclosed to:
- Service providers: payment processors, cloud hosting, customer support
- Advertising partners and analytics providers, including Meta and Google
- Beauty service Partners, upon booking
We do not sell your personal information for monetary consideration. However, we may share certain identifiers, such as hashed email addresses, with advertising partners for targeted advertising purposes, which may constitute "sharing" under the CPRA. You have the right to opt out of this sharing. To exercise this right, email support@seoulbeautyglobal.com with the subject line "Do Not Sell or Share My Personal Information," or manage your preferences directly with the relevant advertising platform.
To exercise your rights to access, correct, or delete your data, please email support@seoulbeautyglobal.com. We will respond within 45 days. If we require additional time, we will notify you in writing. We will not discriminate against you for exercising any of your CCPA/CPRA rights.
6.6 Korean Residents
Korean residents may contact the Personal Information Protection Commission (PIPC) at www.pipc.go.kr or by calling 118 with any concerns.
7. Data Security
We protect your information using SSL/HTTPS encryption for all data transmission, encrypted storage for sensitive data, role-based access controls and authentication, and regular security audits and threat detection. Payments are processed through PayPal's PCI DSS-compliant infrastructure.
No internet transmission or electronic storage is 100% secure. While we strive to maintain the highest level of protection, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for reporting any suspected unauthorized access to support@seoulbeautyglobal.com.
In the event of a data breach affecting your personal information, we will notify you within 72 hours in accordance with applicable law.
8. Data Retention
We retain your personal information only as long as necessary for the purposes described in this Privacy Policy or as required by applicable law.
| Data Category | Retention Period |
|---|---|
| Account information | Until account deletion |
| Booking and payment records | 5 years (required by Korean tax and consumer protection laws) |
| Customer support communications | 3 years |
| Internal system operation logs | 1 month |
| Marketing and advertising data | Until opt-out is exercised or advertising purpose is achieved |
| Reviews | Until deletion is requested |
After account deletion, most data is deleted within 30 days. Transaction records required by law (5 years) are isolated in secure, restricted storage and accessed only if legally required. Backup systems are purged within 90 days.
9. Children's Privacy
Our Platform is intended for users 18 and older. We do not knowingly collect personal information from anyone under 18. If we discover that a minor has provided us with personal information, we will delete it immediately. Parents or guardians who believe their child has provided information to us should contact support@seoulbeautyglobal.com.
10. Reviews and Public Information
When you leave a review, your first name and review content are publicly visible on the Platform. Your last name, contact details, and booking history remain private. Reviews remain visible after account deletion unless you request removal. To request removal of a review, email support@seoulbeautyglobal.com with the review details. We will respond within 14 days.
11. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. Minor changes will be posted on this page with an updated date. Material changes — such as new purposes for data processing, new categories of third-party recipients, or changes that may affect your rights — will be communicated by email at least 30 days before taking effect. Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.
12. Contact Us
If you have any questions or need further clarification, please contact us at support@seoulbeautyglobal.com
Last Updated: April 14, 2026
Seoul Beauty Global ("we," "us," or "our") operates a beauty booking platform connecting international travelers with beauty service providers in Korea. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Platform (the "Platform") and related services (the "Services").
By using our Platform, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein. You have the right to refuse consent to the collection and use of your personal information; however, in such cases, you may be unable to use the Platform's booking services.
If you have any questions, please contact us at support@seoulbeautyglobal.com.
1. Information We Collect
1.1 Account Information
When you create an account:
- Email address
Social Media Authentication (Login with Google):
When you choose to register or log in using your Google account, we collect your Google email address and may access other information you have made publicly available through your Google profile, such as your first and last name and profile picture. We use this information to create and manage your account, authenticate your identity when you log in, and provide you with access to our Services. Please review Google's Privacy Policy and Terms of Service for more information on how they handle your personal data.
Profile Settings:
Your registered account in Seoul Beauty Global may include:
- Name (first and last name)
- Phone number
- Date of birth
- Gender
- Nationality
- State/province of residence
- Postal address
- Social media contact
1.2 Booking Information
When you book appointments:
- Service type and Partner selected
- Appointment date and time
- Name (first and last name)
- Phone number
- Date of birth
- Gender
- Nationality
- State/province of residence
- Social media contact
- Special requests, notes, and health-related information voluntarily provided for the service
1.3 Payment Information
We use third-party payment gateways (such as PayPal) to process payments securely. We store:
- Transaction amount, date, and currency
- Transaction ID provided by the payment gateway
- Payment status (e.g., pending, completed, failed)
We do not collect or store your credit/debit card numbers, security codes, or other sensitive payment credentials. This information is processed directly by the respective payment gateway.
1.4 Usage Information
We automatically collect:
- IP address, browser type, and device information
- Pages visited and features used
- Referring website
- Date and time of visits
1.5 Reviews and Communications
- Reviews: Your ratings, written reviews, and first name
- Support messages: Your inquiries and our responses via email or chat
2. How We Use Your Information
We collect and process your personal information only where we have a lawful basis to do so under applicable law, including performance of a contract, compliance with legal obligations, our legitimate business interests, or your consent.
Service Delivery. We use your personal information to create and maintain your account, process and confirm bookings, handle payments and refunds, and send booking confirmations, reminders, and other transactional communications necessary to deliver the Services you have requested.
Platform Improvement. We analyze how users interact with our Platform to identify and fix technical issues, understand usage patterns, and develop new features and improvements. This processing is based on our legitimate interest in providing a well-functioning and improving service.
Communication. We use your information to respond to your inquiries, send important service updates, and notify you of changes to our policies. Where you have provided consent, we may also send promotional offers, marketing communications, and newsletters. You may opt out of marketing communications at any time.
Marketing and Advertising. We may use your personal information, including identifiers such as your email address, for marketing and advertising purposes. This includes sending marketing communications by email or other channels where you have given consent, displaying personalized content and advertisements on our Platform and on third-party platforms, and sharing certain identifiers with advertising partners such as Meta Platforms, Inc. and Google LLC to deliver targeted advertisements and measure their effectiveness. For users who have previously completed a booking through our Platform, we may use your information for retargeting purposes based on our legitimate interest in promoting our Services to existing customers. EU/EEA residents may object to this processing at any time (see Section 6).
Security and Fraud Prevention. We use your personal information to detect, investigate, and take action regarding fraudulent, illegal, or unauthorized activity. This processing is based on our legitimate interests in maintaining the security of our Platform and protecting our users.
Legal Compliance. We process your personal information to comply with applicable legal obligations, respond to lawful requests from authorities, enforce our Terms of Service, and protect our rights and the rights of our users.
3. Sharing Your Information
3.1 Provision to Third-Party Partners (Beauty Service Partners)
When you make a booking, we share your contact and booking information with your chosen Partner so that they can prepare for and facilitate your appointment. The information shared includes your name, email, phone number, date of birth, gender, nationality, state/province, social media contact (if provided), and any special requests or notes you have submitted.
Partners may access your booking information from the time your booking is confirmed. Access is automatically revoked after your appointment date. Each Partner operates independently and is responsible for their own data practices. Partners are prohibited from using your information for any purpose other than facilitating your booked appointment, and from sharing your information with third parties. For questions about how a Partner uses your data, please contact them directly.
3.2 Entrustment of Personal Information (Domestic)
We entrust the processing of personal information to the following domestic service providers to ensure stable platform operation and efficient customer support.
Naver Cloud
SMS and KakaoTalk notification services
Retention: Until account deletion or termination of the entrustment contract
Channel Corp.
Real-time customer support chat services
Retention: 3 years after the purpose is achieved
3.3 Overseas Entrustment and Transfer of Personal Information
The following tasks are entrusted to overseas entities for specialized functions such as global payment processing, web analytics, and advertising. This transfer is necessary for the provision of our Services.
Amazon Web Services, Inc.
Cloud hosting and data storage
Location: USA
Transfer: Frequent transmission via network during service usage
Retention: Until account deletion or termination of the entrustment contract
PayPal
Payment/Refund processing and fraud prevention
Location: USA
Transfer: Electronic transmission at the time of payment or refund
Retention: 5 years in accordance with relevant laws (e.g., Act on Consumer Protection in Electronic Commerce)
Google LLC
Website usage analysis, marketing performance measurement, and personalized advertising
Location: USA
Transfer: Frequent transmission via network during service usage
Retention: Until the analysis/marketing purpose is achieved or the log retention period expires
Meta Platforms, Inc.
Targeted and personalized advertising, including Custom Audience creation, Lookalike Audience targeting, and retargeting of existing customers
Location: USA
Transfer: Electronic transmission upon booking completion and during service usage
Retention: Until the advertising purpose is achieved, consent is withdrawn, or opt-out is exercised
All international transfers are conducted in compliance with the Korean Personal Information Protection Act (PIPA) and, where applicable, the General Data Protection Regulation (GDPR), using appropriate safeguards including Standard Contractual Clauses (SCCs).
3.4 Marketing and Advertising Partners
To provide you with personalized advertising and to promote our Services, we may share certain identifiers — such as hashed email addresses and device identifiers — with media agencies and advertising partners, including Meta Platforms, Inc. (Facebook/Instagram) and Google LLC. These partners may use this information to show you relevant advertisements on their platforms and third-party websites, create Custom Audiences based on our existing customer base, and build Lookalike Audiences to reach new users with similar characteristics.
These partners operate under their own privacy policies. You are encouraged to review them:
You may opt out of this sharing at any time (see Section 6).
3.5 Legal Disclosures
We may disclose information when required by law or to respond to court orders or legal requests, investigate fraud or security issues, protect our rights and safety, or comply with regulatory requirements.
3.6 Business Transfers
If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.
4. Cookies and Tracking Technologies
We use cookies and similar technologies to improve your experience, analyze Platform usage, and deliver relevant advertising.
Essential Cookies are required for login, security, and core Platform functionality and cannot be disabled without affecting Platform performance.
Analytics Cookies help us understand how users interact with our Platform, such as which pages are visited most often and how users navigate the site. We use Google Analytics for this purpose. You may opt out via the Google Analytics Opt-out Browser Add-on.
Functional Cookies allow the Platform to remember your preferences and settings to provide a more personalized experience.
Advertising / Targeting Cookies are used to deliver advertisements relevant to your interests on our Platform and on third-party platforms, to limit the number of times you see an advertisement, and to measure the effectiveness of advertising campaigns. We currently use the following advertising technologies:
- Meta Pixel (Facebook Pixel): We use Meta Pixel to measure the effectiveness of our advertising, understand how users interact with our Platform after viewing an ad, and deliver personalized advertisements on Meta platforms (Facebook and Instagram). The collected data is processed by Meta in accordance with Meta's Data Policy. You may manage your Meta ad preferences at Facebook Ad Preferences.
- Google Ads Conversion Tracking: We use Google Ads Conversion Tracking to measure the effectiveness of our Google Ads campaigns. You may opt out via Google's Ad Settings.
You can manage or remove cookies through your browser settings. Please note that disabling essential cookies may affect the availability or performance of certain features. Third parties such as Meta and Google may set their own cookies subject to their respective privacy policies.
5. International Data Transfers
5.1 Primary Storage and Location
Our primary servers and databases are located in the United States (AWS US Region). By using our Platform, you acknowledge that your personal information will be transferred to and processed in the United States and the Republic of Korea.
5.2 Compliance and Safeguards
We ensure that all international transfers are conducted in compliance with the Korean Personal Information Protection Act (PIPA) and, where applicable, the General Data Protection Regulation (GDPR). We implement industry-standard encryption (SSL/HTTPS) and appropriate organizational security measures to protect your data during transit and at rest. Where required, we rely on Standard Contractual Clauses (SCCs) or other legally recognized transfer mechanisms.
You may request to suspend the overseas transfer of your personal information; however, please note that this may limit your ability to use our booking services, as these transfers are essential for Platform operation.
6. Your Rights and Choices
6.1 General Rights
Depending on where you live, you may have some or all of the following rights in relation to your personal information. You may access and update your information in Account Settings, or contact us at support@seoulbeautyglobal.com. We will respond within 30 days.
You have the right to:
- Request access to and a portable copy of the personal information we hold about you
- Request correction of inaccurate or incomplete information
- Request deletion of your account and associated data
- Object to certain data processing activities
- Request restriction of how we use your data
- Withdraw consent for optional data processing at any time, without affecting the lawfulness of processing carried out before withdrawal
6.2 Opt-Out of Marketing Communications
You may opt out of receiving promotional emails at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at support@seoulbeautyglobal.com. Opting out of marketing communications does not affect transactional communications such as booking confirmations and reminders.
6.3 Opt-Out of Advertising Data Sharing
You may opt out of the sharing of your personal information with advertising partners for targeted advertising purposes at any time by emailing support@seoulbeautyglobal.com with the subject line "Advertising Opt-Out," or by managing your preferences directly with the relevant advertising platform (see Section 4).
6.4 Additional Rights for EU/EEA Residents (GDPR)
If you are located in the EU or EEA, you have full rights under the General Data Protection Regulation (GDPR), including the right to data portability, the right to restriction of processing, and the right to lodge a complaint with your local data protection authority (find your authority here).
Where we process your personal information for advertising purposes on the basis of legitimate interests, you have the right to object to such processing at any time. Upon receiving an objection, we will cease processing for that purpose unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. Where advertising cookies or the sharing of your data with advertising partners requires your consent, we will seek your explicit consent separately.
6.5 Additional Rights for California Residents (CCPA/CPRA)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
Categories of personal information we have collected in the preceding 12 months:
- Identifiers: name, email address, phone number, IP address
- Commercial information: booking and transaction records
- Internet or network activity information
- Geolocation data: nationality, state/province of residence
- Inferences drawn from the above to create a profile of user preferences
This information has been disclosed to:
- Service providers: payment processors, cloud hosting, customer support
- Advertising partners and analytics providers, including Meta and Google
- Beauty service Partners, upon booking
We do not sell your personal information for monetary consideration. However, we may share certain identifiers, such as hashed email addresses, with advertising partners for targeted advertising purposes, which may constitute "sharing" under the CPRA. You have the right to opt out of this sharing. To exercise this right, email support@seoulbeautyglobal.com with the subject line "Do Not Sell or Share My Personal Information," or manage your preferences directly with the relevant advertising platform.
To exercise your rights to access, correct, or delete your data, please email support@seoulbeautyglobal.com. We will respond within 45 days. If we require additional time, we will notify you in writing. We will not discriminate against you for exercising any of your CCPA/CPRA rights.
6.6 Korean Residents
Korean residents may contact the Personal Information Protection Commission (PIPC) at www.pipc.go.kr or by calling 118 with any concerns.
7. Data Security
We protect your information using SSL/HTTPS encryption for all data transmission, encrypted storage for sensitive data, role-based access controls and authentication, and regular security audits and threat detection. Payments are processed through PayPal's PCI DSS-compliant infrastructure.
No internet transmission or electronic storage is 100% secure. While we strive to maintain the highest level of protection, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for reporting any suspected unauthorized access to support@seoulbeautyglobal.com.
In the event of a data breach affecting your personal information, we will notify you within 72 hours in accordance with applicable law.
8. Data Retention
We retain your personal information only as long as necessary for the purposes described in this Privacy Policy or as required by applicable law.
After account deletion, most data is deleted within 30 days. Transaction records required by law (5 years) are isolated in secure, restricted storage and accessed only if legally required. Backup systems are purged within 90 days.
9. Children's Privacy
Our Platform is intended for users 18 and older. We do not knowingly collect personal information from anyone under 18. If we discover that a minor has provided us with personal information, we will delete it immediately. Parents or guardians who believe their child has provided information to us should contact support@seoulbeautyglobal.com.
10. Reviews and Public Information
When you leave a review, your first name and review content are publicly visible on the Platform. Your last name, contact details, and booking history remain private. Reviews remain visible after account deletion unless you request removal. To request removal of a review, email support@seoulbeautyglobal.com with the review details. We will respond within 14 days.
11. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. Minor changes will be posted on this page with an updated date. Material changes — such as new purposes for data processing, new categories of third-party recipients, or changes that may affect your rights — will be communicated by email at least 30 days before taking effect. Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.
12. Contact Us
If you have any questions or need further clarification, please contact us at support@seoulbeautyglobal.com