Privacy Policy

01. Who is responsible

This Privacy Policy applies to the From Korea, With Love! website and customer account application at fromkoreawithlove.com, its customer accounts and the personal shopping services offered under the name From Korea With Love.

경기도 부천시 원미구 소향로 225, 디아뜨갤러리3 B동 709호, 14548, 대한민국

Email: info@fromkoreawithlove.com

Jeon Jinsoo operate From Korea With Love and are the contacts responsible for personal information processed through this website and service. Contact either through the email above for questions or requests concerning your information.

02. Information we handle

• Account: name, email, account identifier and login records. An email account uses a password hash; Google sign-in uses a linked provider identity.
• Requests: service choice, product links, quantities, sizes, colours, budget, preferred timing, descriptions, reference pictures and messages.
• Taste Match and gifts: interests, preferences, exclusions, recipient details and gift-card text you choose to provide.
• Delivery: recipient name, address, country, telephone number, shipping choice and tracking details.
• Transactions: quotes, approvals, amounts, order history, payment status, PayPal transaction references, cancellations and refunds.
• Technical information: IP address, browser/device details, access times, session identifiers and security logs, depending on the website and hosting configuration.

We obtain information from you, from Google if you choose Google sign-in, and from payment and delivery providers as they process your transaction. For a gift, we may receive the recipient’s details from the person placing the request.

Please avoid including unrelated people, identity documents or payment credentials in uploads. Describe product exclusions without medical details where possible. If sensitive health information is genuinely needed, we must establish a separate appropriate legal basis and collection process first.

03. Why we use it

Legal bases

Where the GDPR applies, we use account, enquiry and order information to take steps at your request before entering into a contract and to perform that contract (Article 6(1)(b)). We retain legally required accounting and transaction records to comply with legal obligations (Article 6(1)(c)).

Our legitimate interests in protecting accounts, preventing fraud, responding to enquiries and establishing or defending legal claims support processing necessary for those purposes (Article 6(1)(f)), subject to your rights and interests. For gifts, we use recipient details supplied by the purchaser to arrange delivery on the basis of our and the purchaser’s legitimate interest in fulfilling the gift request. Recipients can contact us for information or to exercise their rights.

Optional analytics processing requiring consent is based on your consent (Article 6(1)(a)). You can withdraw it at any time. Agreeing to our terms does not constitute consent to optional tracking. Processing is also subject to the applicable requirements of the Korean Personal Information Protection Act.

04. Google sign-in and Google user data

Optional account access

You can use Google to create or access your customer account at fromkoreawithlove.com. Nextend Social Login connects your Google identity to your website account so you can access your own enquiries, quotes and orders. Email and password registration is also available.

Information received from Google

When you choose Google sign-in and authorise the connection, Google provides basic account information through the permissions requested during sign-in. This includes your name, email address and Google account identifier. Basic profile information may also include your profile-picture URL. Nextend Social Login may store an access token associated with the connection.

We do not receive your Google password. This sign-in connection does not request access to your Gmail messages, Google Drive files, contacts or calendar.

How the information is used

• Your Google account identifier connects your Google identity to the correct website account.
• Your email identifies your account and is used for service communications about your enquiries and orders.
• Your name is used in your account profile and customer communications.
• If enabled, your profile picture is used as your account avatar.
• Authentication information supports the sign-in connection and investigation of account-access problems.

Storage and access

Information retained by the sign-in integration is stored with the website’s WordPress account and plugin records and may be included in website backups. Access is limited to authorised people and service providers who need it to operate, support or secure the website.

Sharing

Google processes authentication under its own Privacy Policy. Hosting and technical providers process stored account information as necessary to operate the website. Relevant information may also be disclosed when required by law or necessary to investigate misuse.

Shops and shipping companies do not need Google authentication identifiers or tokens to fulfil an order. Order fulfilment uses the relevant customer and delivery information described in this policy.

Disconnecting Google and requesting deletion

You can revoke the connection through your Google Account connections . Revoking access stops future access through that authorisation; it does not automatically delete information already stored in your website account.

To request removal of the Google connection, associated sign-in information or customer account, email info@fromkoreawithlove.com . We may verify your identity before processing the request. Account information is retained while needed to provide your account and service, unless deletion is requested or the information is no longer necessary. Records needed for legal obligations or claims may be retained separately for those purposes. Backup retention is addressed in the retention section.

Before disconnecting Google, ensure you have another working sign-in method if you want to keep accessing your account.

Protection of Google user data

From Korea, With Love! protects Google sign-in information through HTTPS connections and restricted access to website account records. Access is limited to authorised operators and technical service providers who need the information to operate, maintain or secure the customer account service. We do not receive or store your Google password.

Limits on use and disclosure

We use information received from Google sign-in only to create and authenticate your customer account, display your account profile and provide the account-related services described in this policy, including service communications about your enquiries and orders.

We do not sell Google user data or use it for targeted advertising, credit assessments or training general-purpose artificial intelligence or machine-learning models. Google authentication identifiers and tokens are not shared with shops or shipping companies.

Stored Google account information is processed by our hosting provider, Hostinger, as part of hosting the website. Other disclosures are limited to authorised technical support, legal requirements and protection against misuse, as described in this policy. Where your Google-provided name or email is also used as customer contact information, it is processed for the account and service purposes described above.

Retention and deletion of Google user data

We retain the Google account identifier and associated profile information for as long as needed to maintain your linked customer account. You can request deletion of this information or removal of the Google connection by emailing info@fromkoreawithlove.com .

Removing the connection in your Google Account stops future authorised access but does not automatically delete information already stored on our website. Following a deletion request, information no longer needed is deleted or anonymised. Legally required transaction records are retained separately, and backup copies expire through the backup cycle described in section 08.

Google API Services policy

Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy , including the Limited Use requirements where applicable.

05. Providers and sharing

We use WordPress, WooCommerce and Forminator to operate accounts, requests and orders. Installed software is not necessarily a separate recipient: disclosure depends on whether a plugin connects to an external service.

• PayPal: processes payment-related details and returns transaction information. Full card credentials entered into PayPal are handled by PayPal, rather than collected in our enquiry form. See PayPal’s Privacy Statement .
• Google: provides the optional account sign-in described above and the Google Analytics service described in section 07.
• Hostinger — website hosting: hosts this website and processes the website database, account and order records, uploaded files, technical logs and backups as necessary to provide hosting and support. See Hostinger’s Privacy Policy .
• Email and technical support: authorised providers and support personnel process the relevant communications and technical records where needed to deliver messages, maintain the website or resolve service issues.
• Shops, carriers and customs: receive the details necessary to fulfil the relevant purchase or delivery. A local shop does not need your full customer profile merely because we buy an item from it.
• Professional advisers or authorities: may receive relevant information where needed for legal duties or claims.

06. International processing

The service is operated from the Republic of Korea. Your requests, account information and order details are accessible to the operators in Korea. Delivery information is sent to the carrier and destination-country customs authorities where necessary for international shipping.

Hostinger, Google and PayPal use international infrastructure and may process information outside your country, including in Europe, the Republic of Korea and the United States. The countries used for a particular provider service depend on the relevant service and infrastructure; these are not a statement of the location of this website’s specific hosting server.

Where international-transfer restrictions apply, transfers require an applicable legal mechanism, such as an adequacy decision within its scope, contractual safeguards or another ground permitted by law. You can contact us for information about recipients, processing locations and safeguards applicable to your information. Where Korean law requires a separate overseas-transfer notice or consent, that information is provided for the relevant processing.

07. Cookies and Google Analytics

Essential cookies

WordPress, WooCommerce and the login integration use cookies or similar storage to support account sessions, security, shopping-cart functions and checkout. Essential storage is needed for the functions you request. Blocking it can prevent those functions from working.

Cookie choices with Complianz

We use Complianz to manage cookie preferences. You can accept or reject optional cookies and change your choice using the website’s cookie-preference controls. Optional analytics cookies require your consent where applicable. Withdrawal does not affect processing that was lawful before withdrawal.

For cookie names, purposes and lifetimes, see the Cookie Policy and the cookie information available through the consent banner. Cookie settings are separate from Google sign-in and account deletion.

Google Analytics

We use Google Analytics to understand how visitors use fromkoreawithlove.com and to improve the website. The service measures page visits, navigation and interactions, traffic sources, visit times, browser and device characteristics and approximate location. Depending on the consent choice and configuration, it uses cookies and pseudonymous identifiers to distinguish visits.

Google processes this information to provide website-usage reports. Google Analytics 4 uses an IP address at collection to derive approximate location and discards it before logging the data; it does not log or store the IP address. Analytics data may be processed on Google’s international infrastructure, including in the United States.

Where consent is required, the legal basis for optional analytics is your consent under Article 6(1)(a) GDPR and the applicable rules for access to information on your device. You can refuse analytics consent while continuing to use our shopping service, and change your preference through the cookie controls.

Analytics user and event data are retained according to the property’s configured retention period. Cookie lifetimes are described in the Cookie Policy. Aggregated reports may have different retention characteristics. Withdrawing consent stops future consent-based collection; it does not automatically erase previously collected information.

Google Analytics and Google sign-in serve separate purposes. Google sign-in links your Google identity to your customer account; Analytics measures website use. You can contact us about the data associated with either service.

Read Google’s Privacy Policy and how Google uses information from sites and apps using its services . You can also use the Google Analytics opt-out browser add-on .

08. Retention and deletion

We retain information only for the relevant purpose, a binding record-keeping duty or a justified claim. Closing an account does not require us to erase records that must legally be retained; those records should be restricted to their retained purpose.

Where the Korean electronic-commerce retention rules apply, contract and cancellation records are retained for five years, payment and supply records for five years, consumer complaint/dispute records for three years, and advertising records for six months. Other applicable duties may require a different period for a particular record.

Account and linked Google sign-in information are retained while needed to provide your account and service. Enquiries, reference pictures and correspondence are retained for handling the request, relevant aftercare and any applicable dispute or record-keeping period. Technical logs are retained for operational and security purposes only as long as necessary.

When information is no longer needed, we delete it or irreversibly anonymise it. Where deletion is requested, we review account records, form submissions, uploaded files and order records separately. Legally required records are retained for the applicable period with access limited to that purpose. Backup copies remain until replaced or deleted through the backup cycle and are not used for ordinary service processing. Paper records are securely destroyed.

09. Your choices and rights

Depending on applicable law, you can request access, correction, deletion, restriction or suspension of processing, and portability, and object to certain processing. You can withdraw consent without affecting earlier lawful processing. Some records must be retained despite a deletion request.

Email info@fromkoreawithlove.com with your request. We may seek proportionate identity verification and will respond within the applicable legal period. Providing essential account or delivery details is necessary for the relevant service; optional analytics consent is not a condition of shopping.

You can complain to the Korean Personal Information Protection Commission or, where relevant, your local data-protection authority.

10. Security, children and changes

Account ownership checks limit customer access to their own requests. Security also depends on the live hosting, administrator access, plugins, backups and upload configuration; no online system can guarantee absolute security.

The service is intended for adults able to enter a binding contract. We do not intend to collect children’s account information. If you believe a child has supplied personal information, contact us so we can review and address it.

Product selections are reviewed by people. We do not make decisions producing legal or similarly significant effects solely through automated processing. Material changes to this policy will be communicated appropriately; a revised date will appear on this page.