01
Who is responsible
Seoulumi is responsible for the storefront information described in this policy. Separate providers, including Google and PayPal, also act under their own privacy terms for the services they provide.
Controller
Seoulumi
Customer accounts, order records, support communications, rewards, and storefront preferences.
02
Information we collect
The information depends on whether you browse, sign in, contact Seoulumi, or place an order.
Account and profile
Name, email address, login provider, provider identifier, profile image when supplied, phone number, default country, saved products, coupons, stamps, and account preferences.
Order and delivery
Recipient and contact details, delivery address, destination, ordered products, quantities, prices, discounts, gifts, shipping method, tracking, status, and customer support history.
Payment record
Order amount, currency, payment method, payment status, PayPal order or capture reference, refund status, and transaction timing. Full card numbers and card security codes are entered with PayPal and are not stored by Seoulumi.
Technical and security
IP-related and server logs, browser and device information, authentication events, essential cookies or local storage, and a country-level network signal used to suggest a delivery destination.
Where it comes from
Information comes from you, your Google sign-in when selected, checkout and payment events, the carrier, and ordinary website or security logs. Seoulumi does not receive your Google password.
03
Why we use it
Seoulumi does not sell customer personal information. Processing is limited to operating the store, fulfilling orders, meeting obligations, and protecting the service.
Contract
Shop & deliver
Create accounts, keep a cart or wishlist, take payment, process orders, ship products, track delivery, provide rewards, and handle returns or support.
Legal obligation
Required records
Keep payment, tax, accounting, refund, consumer-rights, and authority records where applicable law requires them.
Legitimate interests
Secure operations
Prevent fraud and misuse, protect accounts, diagnose failures, maintain the storefront, and resolve complaints or disputes.
Consent
Optional use
Used where the law requires permission for an optional feature. Consent can be withdrawn without affecting earlier lawful processing.
Information needed for account access, payment, delivery, or legal records may be necessary to enter into or perform an order. Without it, Seoulumi may be unable to create the account, accept payment, or deliver the order.
04
Who receives information
Only the information needed for each service is shared. Providers may also process data as independent controllers for parts of their service.
Supabase
Auth & database
Account authentication, session handling, customer profiles, orders, rewards, and store records.
PayPal
Payment
PayPal account, card payment, capture, refund, fraud checks, billing information, and payment dispute handling.
Vercel
Hosting
Website delivery, server requests, deployment, operational logs, and country-level request headers.
Cloudflare R2
Product media
Public product and campaign images. Customer payment card details are not stored in the media bucket.
Operations
Email & delivery
Email service providers, Korea Post EMS, local delivery partners, advisers, and authorities receive information only where needed for their role or required by law.
Google sign-in
If you choose Google sign-in, Google provides basic identity data needed to create or access the Seoulumi account. Google handles the Google account and sign-in service under its own privacy terms.
05
Cookies, local storage, and country suggestion
Seoulumi uses essential browser storage so the storefront can remember the session and shopping choices.
Essential storage
Authentication, cart contents, recent searches, delivery region, destination country, currency, and necessary security state can be kept in cookies or local browser storage.
Country-level signal
Hosting or network headers may suggest a country for international delivery. Precise GPS location is not requested for ordinary shopping, and you can correct the destination in the storefront or cart.
At the update date above, Seoulumi does not use optional advertising pixels or non-essential marketing cookies. If that changes, this policy and any legally required consent controls will be updated before use.
06
Retention, transfers, and security
Information is kept only for the purpose and period reasonably needed, including legal retention where it applies.
Account
While active
Profile and preference data is generally kept while the account is active and then deleted or anonymised when eligible.
Orders
Legal period
Order, payment, tax, refund, warranty, fraud, and dispute records may remain for the period required or justified by applicable law.
Support & logs
Need-based
Support messages and technical logs are retained according to their operational, security, and dispute purpose.
Providers can process information outside your country. Where data protection law requires it, Seoulumi relies on an applicable legal transfer mechanism and reasonable contractual, organisational, and technical safeguards. No internet service can promise absolute security, but access is limited to people and systems that need it.
07
Your privacy rights
Rights depend on your location. EU and EEA customers may have the rights listed below, subject to lawful conditions and exceptions.
Access a copy of eligible personal information.
Correct inaccurate or incomplete information.
Request deletion or restriction where the law allows it.
Object to processing based on legitimate interests.
Receive portable data where the portability right applies.
Withdraw consent for future optional processing.
Complain to the data-protection authority for your habitual residence, workplace, or the alleged infringement.
Ask about safeguards used for an applicable international transfer.
No significant automated decision
Seoulumi does not currently use solely automated decision-making that produces a legal or similarly significant effect. Country suggestions, coupon rules, and free-gift thresholds are storefront automation and can be reviewed or corrected through checkout or support.