Privacy policy

Effective Date: May 1, 2025

IRUM Designskin ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and disclose your personal information when you visit or make a purchase from designskin.com (the "Site"), use our services, or otherwise interact with us.

1. Information We Collect

We collect information from you when you visit our Site, create an account, place an order, subscribe to our newsletter, participate in a contest or promotion, respond to a survey or marketing communication, surf the website, or use certain other site features in the following ways:

• Personal Information: This includes your name, email address, shipping address, billing address, phone number, and payment information.
  
  
• Order Information: When you place an order, we collect information about the products you purchase, the price, billing and shipping address, and payment information.
  
  
• Account Information: This includes your username, password, and security questions and answers.
  
  
• Usage Data: This includes information about how you use our Site and services, such as your IP address, browser type, device information, pages visited, and interactions with our website features.
  
  
• Cookies and Similar Technologies: We use cookies and similar technologies to collect Usage Data and improve your experience on our website.

[Information Processing and Retention Period] We process and retain personal information within the period of personal information retention and use agreed upon at the time of collection. When the purpose of personal information processing has been achieved, or when the data subject requests termination of the service, the personal information will be destroyed without delay. The processing and retention periods for each type of personal information are as follows:

• Personal Information, Account Information: Until [membership withdrawal].
  
  
• Order Information: 5 years from the date of [completion of goods/services supply and payment/settlement].
  
  
• Usage Data, Cookies and Similar Technologies: Until [membership withdrawal].

However, if preservation is required by relevant laws and regulations, we store member information for a certain period as stipulated by those laws, as follows:

• Records on contracts or withdrawal of offers, etc.
  
  
  • Reason for preservation: Act on Consumer Protection in Electronic Commerce, etc.
    
    
  • Preservation period: 5 years
    
    
• Records on payment and supply of goods, etc.
  
  
  • Reason for preservation: Act on Consumer Protection in Electronic Commerce, etc.

• • Preservation period: 5 years
    
    
• Records on consumer complaints or dispute resolution
  
  
  • Reason for preservation: Act on Consumer Protection in Electronic Commerce, etc.
    
    
  • Preservation period: 3 years
    
    
• Records on display and advertising
  
  
  • Reason for preservation: Act on Consumer Protection in Electronic Commerce, etc.
    
    
  • Preservation period: 6 months
    
    
• Service visit records
  
  
  • Reason for preservation: Communication Secret Protection Act
    
    
  • Preservation period: 3 months

2. How We Use Your Information

We use your information for the following purposes:

• To provide and improve our services: This includes processing your orders, fulfilling your requests, providing customer support, and enhancing your shopping experience.
  
  
• To personalize your experience: We may use your information to recommend products and personalize your interactions with our website.
  
  
• To communicate with you: This includes sending you order updates, promotional offers, and responding to your inquiries.
  
  
• To protect our interests: We may use your information to prevent fraud, protect our legal rights, and ensure the security of our website and services.

3. How We Share Your Information

We process personal information only within the scope specified in Article 2 (How We Use Your Information) and may share your information with the following third parties only when it falls under Article 17 and 18 of the Personal Information Protection Act, such as with the consent of the data subject or special provisions of the law.

• Service providers: We share personal information collected for specific purposes with service providers who assist us with payment processing (PayPal, PortOne, PayLetter, PaymentWall), shipping (Easyship, FedEx, UPS, Yamato, AcrossB), marketing, and other essential functions, until the purpose is achieved.
  
  
• Legal authorities: We may disclose your information to legal authorities when required by law or to comply with legal processes.

4. Data Security

We implement appropriate and reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction in accordance with applicable data protection laws, including GDPR, CCPA, and the Korean Personal Information Protection Act. These measures include, but are not limited to, encryption, access control, regular security audits, and employee training.

Despite our efforts, no method of transmission over the Internet or method of electronic storage is completely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms or a significant risk to personal information or security, we will notify you and relevant authorities without undue delay, as required by legal obligations.

5. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights:

• Access: You can request access to your personal information.
  
  
• Correction: You can request correction of inaccurate or incomplete information.
  
  
• Deletion: You can request deletion of your personal information.
  
  
• Objection: You can object to the processing of your personal information.
  
  
• Restriction of processing: You can request restriction of processing of your personal information.
  
  
• Data portability: You can request to receive your personal information in a structured, commonly used, and machine-readable format.
  
  
• Withdraw consent: You can withdraw your consent to the processing of your personal information at any time.

[Personal Information Destruction Procedures and Methods] We destroy personal information without delay when it becomes unnecessary, such as when the personal information retention period has expired or the purpose of processing has been achieved.

• Destruction Procedure: If personal information needs to be continuously preserved in accordance with other laws and regulations, despite the expiration of the personal information retention period agreed upon by the data subject or the achievement of the processing purpose, the personal information will be transferred to a separate database (DB) or stored in a different location. Personal information transferred to a separate DB will not be used for any purpose other than those permitted by law.
  
  
• Destruction Method: Information in electronic file format is destroyed using technical methods that prevent the record from being reproduced. Personal information printed on paper is shredded with a shredder or incinerated.

6. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including jurisdictions that may not have the same level of data protection. When we do so, we ensure that such transfers comply with applicable data protection laws, including GDPR, CCPA, and the Korean Personal Information Protection Act.

Where required by law, we will obtain your explicit and separate consent before internationally transferring your personal information. We will also provide clear information about the recipient (if a legal entity, its name and contact information), the destination country, the time and method of transfer, the purpose of transfer, the categories of personal data to be transferred, the recipient's purpose of using the information and retention and use period, and how to refuse the transfer of personal information, the procedure, and the effect of refusal.

For transfers from the EU/EEA, we rely on adequacy decisions, Standard Contractual Clauses (SCCs), or other legitimate transfer mechanisms as required by GDPR. Where these safeguards are not available, we will request your explicit consent to the transfer after informing you of the potential risks.

7. Children's Privacy

Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13.

8. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post any changes on our website.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@designskin.com.

10. Data Protection Officer

Our Data Protection Officer is Kevin Lee (VP), who can be contacted at privacy@designskin.com.

11. Marketing and Analytics

We use third-party analytics and marketing tools, including Meta Pixel and Google Analytics, to collect information about your website interactions, such as pages visited, time spent, and actions taken. This information helps us understand usage patterns, improve our services, and provide personalized advertising.

Where required by applicable laws, including GDPR, CCPA, and the Korean Personal Information Protection Act, we obtain your prior consent before using cookies or similar tracking technologies for these purposes.

These third-party tools may collect information such as your IP address, device identifiers, and browsing behavior, and may combine it with information independently collected from other websites or services. We may also share certain usage data with these third parties to facilitate personalized advertising.

You have the right to object to this data collection and processing. Under GDPR, you can withdraw your consent at any time. Under CCPA, you can opt out of the sale or sharing of your personal information by visiting our "Do Not Sell or Share My Personal Information" page. Under Korean law, you can object to the use of tracking technologies, and we will inform you of any disadvantages that may arise from doing so.

For more information about how these tools work and your options, please refer to our Cookie Policy.