Privacy Policy

Seonmul Nara Co., Ltd. ("we," "us," or "our") operates this online platform and provides various related services including online retail of diverse gift products, corporate gifting solutions, professional gift wrapping and presentation, customization and personalization options for gifts, subscription box services, gift registry services, curated gift selections, and gift delivery services. We are committed to protecting the privacy and security of personal information collected from users of our site.

This policy describes how we collect, use, disclose, and protect personal information in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and South Korean data protection laws.

1. Data Controller

The data controller responsible for your personal information is: Seonmul Nara Co., Ltd. 152 Teheran-ro, Floor 7 Gangnam-gu, Seoul, 06130 South Korea

2. Information We Collect

We collect information to provide our services, process transactions, and improve your experience on our site. The types of personal information we may collect include:

• **Contact Information:** Name, shipping address, billing address, phone number.
• **Account Information:** Username, password, purchase history, saved preferences.
• **Payment Information:** Payment card details (processed securely by third-party payment processors), billing address.
• **Order Information:** Details about the products you purchase, delivery instructions.
• **Gift Recipient Information:** Name, address, phone number, and any gift message for recipients of gifts you send. We collect this information solely for the purpose of fulfilling your gift order.
• **Communication Information:** Records of your correspondence with our customer service team.
• **Technical and Usage Information:** IP address, browser type, operating system, pages visited on our site, referring URL, dates and times of access. This is collected automatically as you interact with our site.
• **Marketing Preferences:** Your preferences regarding receiving marketing communications.
• **Information from other sources:** We may receive information from third parties, such as shipping providers or payment processors, related to your transactions.

3. How We Collect Information

We collect personal information in the following ways:

• **Directly from you:** When you create an account, place an order, subscribe to a service, contact customer support, or participate in promotions or surveys.
• **Automatically:** As you navigate through our site, through cookies and similar tracking technologies.
• **From third parties:** From partners involved in processing your orders, such as payment gateways and shipping companies, or other third-party services you choose to use in connection with our site.

4. Lawful Basis for Processing

We process your personal information based on the following lawful bases:

• **Performance of a contract:** To fulfill your orders, provide the services you request (e.g., gift delivery, subscriptions), and manage your account.
• **Legal obligations:** To comply with applicable laws and regulations, such as tax laws and consumer protection laws.
• **Legitimate interests:** To operate and improve our business, provide customer support, detect and prevent fraud, personalize your experience, conduct analytics, and for marketing purposes (where our legitimate interests are not overridden by your data protection rights).
• **Consent:** Where required by law, we may ask for your consent to process your data for specific purposes, such as sending marketing communications. You have the right to withdraw your consent at any time.

5. How We Use Your Information

We use the information we collect for various purposes, including:

• To process and fulfill your orders, including processing payments, packaging, and delivery.
• To provide and manage our services, including account management, customer support, and managing gift registries or subscription boxes.
• To communicate with you about your orders, account, and services.
• To personalize your shopping experience and recommend products or services that may interest you.
• To improve our site, products, and services based on usage patterns and feedback.
• To conduct marketing and promotional activities, in accordance with your preferences.
• To detect, prevent, and investigate fraudulent or illegal activities.
• To comply with legal obligations and enforce our terms and conditions.
• To process and manage corporate gifting solutions, including liaising with corporate clients and delivering gifts to recipients.

We use gift recipient information solely to process and deliver the specific gift order you have placed for them.

6. Sharing and Disclosure of Information

We do not sell your personal information. We may share your information with third parties in the following circumstances:

• **Service Providers:** We share information with third-party vendors and service providers who perform functions on our behalf, such as payment processing, shipping and delivery services, IT support, data analysis, marketing assistance, and customer service. These providers are given access only to the information necessary to perform their services and are required to protect the information.
• **Business Transfers:** In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction.
• **Legal Compliance and Protection:** We may disclose information when required by law, court order, or other governmental or law enforcement authority, or when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual illegal activity.
• **With Your Consent:** We may share your information with third parties when we have your explicit consent to do so.

When transferring data internationally, including outside the European Economic Area (EEA) or South Korea, we take appropriate measures to ensure your data is protected in accordance with applicable laws, such as relying on adequacy decisions, standard contractual clauses, or other valid transfer mechanisms.

7. Data Security

We implement technical and organizational measures designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include data encryption, firewalls, access controls, and secure data storage. While we strive to protect your personal information, no method of transmission over the internet or electronic storage is entirely secure.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The retention period varies depending on the type of data and the purpose of processing. For example, we retain order information for accounting and tax purposes.

9. Your Rights

Subject to applicable data protection laws, you may have certain rights regarding your personal information. These rights may include:

• **Right to Access:** Request access to the personal information we hold about you.
• **Right to Rectification:** Request correction of inaccurate or incomplete personal information.
• **Right to Erasure ("Right to be Forgotten"):** Request deletion of your personal information under certain conditions.
• **Right to Restriction of Processing:** Request that we restrict the processing of your personal information under certain conditions.
• **Right to Object to Processing:** Object to the processing of your personal information under certain conditions, particularly where processing is based on legitimate interests or for direct marketing purposes.
• **Right to Data Portability:** Request to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
• **Right to Withdraw Consent:** Withdraw your consent at any time where processing is based on consent.
• **Right to Lodge a Complaint:** Lodge a complaint with a supervisory authority if you believe our processing of your personal information infringes applicable law. The relevant supervisory authority in South Korea is the Personal Information Protection Commission. For EU/EEA residents, you can complain to your local Data Protection Authority.

To exercise these rights, please direct your request in writing to the physical address provided in the Data Controller section of this policy.

10. Cookies and Tracking Technologies

Our site uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and for marketing purposes. Cookies are small text files placed on your device. You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our site.

11. Third-Party Links

Our site may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices or content of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

12. Children's Privacy

Our service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on our site. We encourage you to review this policy periodically.

For questions or concerns regarding this Privacy Policy or your personal information, please contact us in writing at the address below:

Seonmul Nara Co., Ltd. 152 Teheran-ro, Floor 7 Gangnam-gu, Seoul, 06130 South Korea