Privacy Policy
This Privacy Policy is formulated in accordance with the Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
1. Data Collection
When you place an order or interact with our storefront (https://koreangloww.in), we collect essential information required solely for transaction fulfillment and delivery:
- Customer Identity: Full Name, Email Address, and Mobile Number.
- Delivery Information: Flat/House No., Street/Area, Landmark, City, State, and Pincode.
- Device & Browsing Data: IP Address, browser type, and transaction timestamp for fraud prevention and rate limiting.
- Payment Information: We do NOT store your bank accounts, UPI PIN, or debit/credit card numbers. All payments are processed securely via authorized, PCI-DSS Level 1 compliant payment gateways (including Cashfree Payments).
2. Purpose of Data Processing
Your data is processed strictly for the following lawful commercial purposes:
- Processing your prepaid order for the Korean D-Tan Removal Cream (Pack of 2).
- Generating dispatch labels and automated tracking updates via trusted courier partners (Delhivery, Blue Dart).
- Responding to customer support inquiries and resolving order or delivery queries.
- Complying with statutory tax, invoicing, and auditing requirements under Indian law.
3. Data Sharing & Third-Party Disclosure
We do NOT sell, rent, or trade your personal data to any marketing aggregators. Data is shared strictly on a need-to-know basis with trusted operational service providers:
- Payment Gateways: Cashfree Payments (for processing UPI payments securely).
- Logistics Partners: Delhivery, Blue Dart, and integrated courier networks (for pan-India parcel delivery).
- Cloud Infrastructure: Cloudflare edge network (ensuring end-to-end TLS 1.3 encryption and DDoS protection).
4. Security & Data Retention
All sensitive communications between your browser and our store are protected by industry-standard 256-bit SSL encryption. Personal data is retained only as long as necessary to fulfill the order, honor replacement guarantees, and satisfy statutory tax obligations, after which it is safely purged.
5. Your Rights under DPDP Act 2023
As a data principal, you have the right to request access to the personal data we maintain about you, request corrections, or request deletion of data that is no longer required for legal obligations.
6. Grievance Officer & Contact Information
In accordance with the Information Technology Act, 2000 and Rules made thereunder, the contact details of the Grievance Officer are provided below:
Brand: Korean Glow™
Website: https://koreangloww.in
Grievance & Support Email: [email protected]
Operating Hours: Monday – Saturday, 10:00 AM – 6:00 PM IST
Country of Operations: India