Privacy Policy

II. When can we collect your personal data?​

We may collect your personal data when you:

• fill out and submit a contact form to us;

• fill out and submit a feedback form to us;

• agree to receive personalized marketing information from us by email, phone, SMS, or mail, depending on your preferences;

• respond to surveys or questionnaires related to your satisfaction based on your customer experience;

• interact with our Brand through its official social media page, or when we offer to reuse content you have published on a social network;

• post about or mention our products on social media;

• provide information to us through social media when visiting our social media pages (such as your name, preferences, location, friends list, and other information described on the social network’s registration page);

• contact our customer support service;

• send information requests to our Company;

• participate in events that we organize;

• browse online using cookies or similar technologies, or when you click on advertisements for our products;
  Visitors to the website https://www.kkulkorea.com who browse our products, information, and offers can do so without being identified.

​

III. What personal data can we collect?

(i) As part of the services we provide, we may need to collect certain data directly from you through electronic forms on our website, limited to what is relevant and appropriate for that specific interaction.

The information we may collect includes:

• name;

• contact details (e.g., email address);

• your personal preferences regarding the products we sell or our website (e.g., language);

• information you may provide to our customer support service;

• specific health-related data if you inform us about any adverse side effects from any of our products;

• your posts/mentions of our products on social media.

The personal data we collect are important to us. If you do not fill in the required fields marked with an asterisk on the information collection forms on our website, we may not be able to respond to your request and/or provide you with the requested services. Other information is optional and allows us to get to know you better and improve our relationship and services for you.

(ii) We may collect information about the use of our website, particularly regarding your browsing activity (such as the pages you visit, the links you click, etc.). Some of this information may be collected through cookies placed in your web browser when you browse our website.
 

To learn more about cookies, please read our Cookie Policy here.

​

IV. For what purposes are your personal data collected and used?

We process your data in order to:

• respond to any information requests or handle complaints you may send us via our website, customer support service, or social media pages;

• track and manage any notifications you may send us as part of our obligations related to the sale of cosmetic products;

• manage and optimize customer interactions by improving our understanding of our clients;

• offer relevant and personalized services, especially when we improve our products and services;

• conduct statistical analysis to improve our sales, marketing, and product development;

• manage your participation in our scheduled events or activities for which you have registered;

• conduct audience analysis or gather statistics;

• analyze your preferences and habits, and anticipate your needs based on your consumer profile and your posts/comments about our products on social media;

• analyze the effectiveness of our brand on social media to conduct statistical analysis (market research, brand impact, and campaign analysis);

• to send you personalized information and use third-party services to personalize your profile, with your free, specific, informed, and unambiguous consent.

During the last interaction, when we send personalized messages or content, you have the right to withdraw your consent from receiving similar messages in the future. To do so, you have the right to withdraw your consent by unsubscribing and contacting us.
 

V. What legal grounds justify the processing of your data?

We process your personal information:

• on the basis of a contract agreed between you and the Company, for its execution, as well as for processing and tracking your orders;

• through tools from our third-party partners, to improve our products and services, to enhance our knowledge of customers, and specifically for:

• determining a personalized profile of our customers based on their interests and providing them with relevant brand offers on other websites;

• identifying audiences similar to our target audience (to offer our propositions to audiences with profiles similar to our customers);

• when you have given your consent for the processing of your data, to manage our personalized offers;

• in compliance with our legal obligations, including fiscal obligations (such as invoice retention) and cosmetic vigilance under Regulation (EU) 1223/2009 of November 30, 2009, on cosmetic products.

VI. Who are the recipients of your personal data?

Your personal data is processed by the personnel of our Company. We ensure that only authorized persons have access to your personal data, if necessary for the purposes of managing our commercial relationships or fulfilling our legal obligations.

We may also disclose your personal data in a form that does not directly identify the individual, for the following purposes:

• service providers for website hosting and maintenance, as well as providers of our electronic solutions for collecting personal data;

• payment service providers;

• logistics service providers;

• marketing solutions service providers;

• customer service providers;

• service providers for managing notifications related to cosmetic vigilance;

• event organization service providers;

• third parties who conduct statistics regarding our activities on social media on our behalf;

We may also offer you the opportunity to use your data to log into a social network and access our brand’s page. Please note that in this case, you are providing us with information about your profile. The transmission of personal data depends on the configuration of the social network platform. Please be aware that these social networks have their own privacy policies.

• your personal data may be required to be provided to third parties in order to fulfill their legal, regulatory, or contractual obligations, or to respond to requests from authorized authorities.

 

VII. How do we ensure the protection and confidentiality of your data?

The security measures we use are evaluated and updated in response to new threats and challenges, as well as new legal requirements in the countries where we operate.

We require our partners and Group companies to maintain the same level of protection for your personal data as we do. We take reasonable precautions to ensure the confidentiality and security of your data. We protect your data from distortion, damage, destruction, or unauthorized access by third parties.

Our website may contain links to third-party websites (e.g., affiliate websites), which we do not control and are governed by their own privacy policies and personal data protection practices. This Privacy Statement does not apply to third-party websites. Please review the privacy and data protection policies of the third-party websites you visit to understand how they process your data.

 

VIII. Data Transfer Abroad

As the Company operates in many countries worldwide, and in order to provide you with personalized services globally, some of your data may be collected, accessed, or stored outside of your country of residence.

Please be aware that data protection and security requirements differ depending on the location and may not provide the same level of protection as in your country.

You are aware that your data may be transferred for the purposes outlined above to companies located in countries outside the European Union that may have a lower level of data protection than the European Union. Before transferring data outside the European Union, the Company takes all necessary steps and safeguards to ensure such transfers.

Data may also be processed by staff operating outside the EEA and working on our behalf or on behalf of one of our service providers.

Before transferring data between countries, we take into account the risks that such a transfer may pose to the data; in appropriate cases, we rely on existing mechanisms such as the Privacy Shield in the United States or standard contractual clauses to ensure the protection of your rights regarding your data. If data is transferred to third parties, we require them to ensure the same level of protection for your data as we do.

 

IX. How long do we retain your data?

The retention periods defined by the Company comply with the recommendations of the National Authority of your country and/or our legal obligations.

We retain your personal data only as long as necessary to achieve the purpose for which it was collected, to meet your needs, or to fulfill our legal obligations.

In general, your personal data is stored in our database:

1) Data subject: regular customer (i.e., having a customer profile)

Duration: 5 years from the date of the first purchase or account creation

Specification: This period will be renewed each time you interact with us (for example, make a purchase or update your profile) or you provide your consent to continue interacting after the expiration of this period.

2) Data subject: potential customer (i.e., never purchased products under our brands but registered to receive our communications)

Duration: 3 years from the date of data collection

Specification: This period will be renewed each time you interact with us (for example, participate in our events) or you provide your consent to continue interacting after the expiration of this period.

3) Data subject: "Guest" customer (i.e., purchase without creating a customer account)

Duration: duration of the request processing plus 5 years.

Specification: This period will be extended each time you interact with our website (for example, making a purchase).

4) Data subject: customer service (i.e., receiving complaints or informational inquiries/letters)

To exercise rights under the GDPR, the request is stored for the processing period plus 6 years.

5) Data subject: oversight by government authorities

Duration: duration of the request processing plus 10 years

6) If cookies are stored on your computer, we retain them for a maximum of 6 months.

7) When we no longer need to use your personal data, it is deleted from our systems and records or anonymized so that it can no longer be identified, subject to retention for archival purposes, claim management, legal proceedings, and/or to fulfill our legal and/or regulatory obligations and/or to respond to requests from authorized bodies.

 

X. What are your rights and how can you exercise them?

Our Company applies the data protection and security measures described in this Privacy Policy to all individuals concerned. Additionally, we have also identified and taken into account the necessary data protection and security measures at the local or regional level. This includes, for example, those required for residents of the European Union / European Economic Area in accordance with the General Data Protection Regulation (GDPR) 2016/679.

In particular, the GDPR provides the following rights:

1) Right to information: You have the right to receive clear, transparent, and understandable information about how we use your personal data, as well as your rights.

2) Right of access: You have the right to access the personal data the Company holds about you.

3) Right to rectification: You have the right to rectify your personal data if it is inaccurate or outdated, and/or to complete it if it is incomplete.

4) Right to deletion/right to be forgotten: You have the right to delete or erase your data. However, this right may be restricted for legal reasons or our legitimate interest in retaining your personal data.

5) Right to object: You may at any time request that we no longer send you communications regarding our offers, news, and events. In particular, you may use the hyperlink provided for this purpose in every email or message we send you. You can also request non-personalized communications about our products and services.

6) Right to withdraw consent for data processing based on consent: You can withdraw your consent for us to process your data if the processing is based on consent.

7) Right to data portability: You have the right to move, copy, or transfer data from our database to another. This right applies only to data you have provided, and where the processing is based on a contract or your consent and is carried out by automated means.

8) You also have the right to lodge a complaint with the data protection authority in your country if you wish to complain about our Company’s data protection and privacy practices.

We also want to inform you of other authorities in Europe that you can find and contact on the European Data Protection Board website: Membres | European Data Protection Board (europa.eu)

9) You have the right to restrict the processing of your personal data.

These rights can be exercised directly by contacting us via the online form or by sending us a letter to info@kkul.eu.

We may require confirmation of your identity and complete information about your request before processing it.

​

XI. Contact information of the Data Protection Officer (DPO)

For any questions related to the collection and processing of your data by our Company, you can contact the Data Protection Officer at info@kkul.eu.

​

XII. How does the Company protect children's privacy?

Minors: The Company pays special attention to the privacy of minors. If the Company becomes aware that a customer is under the age of 16, it will not collect their data without the consent of their legal guardian. If you are under 16, we advise you to contact your parents or legal guardians so they can inform you about the best way to protect your privacy and allow you to browse the website and use some of our services. When you visit our website, particularly when you wish to create an account or purchase a product on our site, we process some of your personal data (such as name, surname, email address, phone number, postal address, etc.). If you are over 16, you may interact on our website. To learn more about how we process your personal data, we encourage you to read our full Privacy Policy. If you do not understand what is written on this page or if you have any doubts about the use of your personal data, we recommend that you talk to your parents or any other legal representative.

​

For individuals with parental rights: The Company may process your minor child's personal data. If you create an account on our website on behalf of your child as one of the parents or guardians, please note that your child's personal data will be processed according to this Privacy Policy. As a holder of parental rights, you are responsible for participating in your child's online activities to prevent the processing of data related to your child under the age of 16 without your consent. As a parent or guardian of a minor user, you can exercise your rights on behalf of the child and support them in doing so. In particular, you may request the deletion of your child's account. To do so, simply send us a request.

This policy is approved as of 28.04.2025 year.