Privacy Policy

2. How We Use Information

Collected information is used only for the following purposes.

· Member management: identity and business verification, member services, prevention of fraudulent use

· Transactions: orders, payments and delivery; group orders and supply pricing; tax invoice issuance

· Customer support: handling inquiries, complaints and disputes; delivering notices

· Improvement and marketing: announcing new services, event information (where consented), usage analytics

3. Data Retention

Personal data is destroyed without delay once its purpose is achieved. Where required by law, the following records are retained.

· Records on contracts or withdrawal of subscription: 5 years (E-Commerce Act)

· Records on payment and supply of goods: 5 years (E-Commerce Act)

· Records on consumer complaints or disputes: 3 years (E-Commerce Act)

· Records on advertising: 6 months (E-Commerce Act)

· Service access logs: 3 months (Protection of Communications Secrets Act)

4. Third-Party Sharing

The Company does not provide personal information to third parties beyond the scope stated in this policy, except in the following cases.

· Where you have given prior consent

· Where required by law or requested by an investigative agency through lawful procedures

· Where the minimum information needed for delivery is provided to supplier brands and logistics partners to fulfill a transaction

5. Outsourcing of Processing

To provide services smoothly, the Company may outsource processing as listed below, and stipulates the measures needed to keep personal information secure under applicable laws.

· Payment processing: PayPal (membership subscription payments)

· Delivery and logistics: international carriers/freight forwarders designated per shipment — as a rule, shipments are handled by the forwarder designated by the buyer, in which case consignee/customs details are transferred at the buyer's request. Where no forwarder is designated, the Company arranges a suitable carrier for the destination country. Information shared is limited to the minimum required for customs clearance and transport (consignee, contact, delivery address, customs documentation).

· Cloud infrastructure: Amazon Web Services (data storage and hosting)

· Email and notifications: Resend, Inc. (email delivery)

6. Your Rights

You may request to access, correct, delete, or suspend the processing of your personal information at any time.

Requests can be made via the 'Account Settings' menu or by emailing privacy@k-koreastyle.com. The Company will act without delay.

7. Cookies

The Company uses cookies to provide personalized services, such as maintaining login sessions and analyzing usage patterns.

You can refuse cookie storage through your browser settings, but blocking cookies may limit some services such as logging in.

8. Destruction of Data

Data whose retention period has expired or whose purpose has been achieved is securely destroyed per internal policy and applicable law.

· Electronic files: permanently deleted using methods that make recovery impossible

· Printed materials: shredded or incinerated

9. Security Measures

· Administrative: internal management plan, regular staff training

· Technical: access control, encrypted password storage, transport encryption (SSL/TLS), access-log retention and tamper prevention

· Physical: access control to data processing systems

10. Data Protection Officer

The Company has designated a Data Protection Officer to oversee processing and to handle complaints and remedies for users.

· Data Protection Officer: Kim Sangyong / CEO

· Email: privacy@k-koreastyle.com

· Phone: +82-10-8740-9627

11. Remedies

If you need to report or consult on a personal information breach, you may contact the organizations below.

· Personal Information Dispute Mediation Committee (www.kopico.go.kr / 1833-6972)

· Privacy Infringement Report Center (privacy.kisa.or.kr / 118)

· Supreme Prosecutors' Office Cyber Investigation (www.spo.go.kr / 1301)

· National Police Agency Cyber Bureau (ecrm.cyber.go.kr / 182)

12. Changes to This Policy

This policy may be amended in line with changes in laws, policies, or security technology. Changes and their effective date will be announced in advance via notices within the service.

Effective Date

This Policy is effective from July 9, 2026.