Privacy Policy
This Privacy Policy describes how Ручные свечи collects, uses, and protects your personal information when you use our online platform. We are committed to protecting your privacy and handling your data in a transparent manner.
Who We Are
Our company, Ручные свечи, operates this online platform for the sale of handmade candles. We are located at Сеул, Центр города. For the purposes of applicable data protection laws, including the General Data Protection Regulation (GDPR), we are the data controller responsible for the personal information we collect and process.
Information We Collect
We collect various types of information in connection with your use of our site:
Information you provide to us: This includes information you provide when you create an account, place an order, subscribe to our newsletter (if offered), or contact us. This may include your name, shipping address, billing address, email address (if provided by you during checkout or account creation), and payment information.
Information we collect automatically: When you visit our site, we may automatically collect certain information about your device and your usage. This may include your IP address, browser type, operating system, referring URLs, pages viewed, links clicked, and other browsing actions. We collect this data using cookies and similar technologies.
Information from third parties: We may receive information about you from third parties, such as payment processors, shipping carriers, or marketing partners, to fulfill orders and provide services.
How We Use Your Information
We use the information we collect for the following purposes:
To provide and manage our services: This includes processing your orders, managing your account, handling payments, shipping your products, and providing customer support. This is necessary for the performance of the contract between you and us.
To improve and optimize our site: We analyze usage patterns and trends to understand how our site is used and identify areas for improvement in performance, user experience, and content. This is based on our legitimate interest in operating an efficient and user-friendly online platform.
To communicate with you: We may use your information to respond to your inquiries, send you transactional emails related to your orders or account, and send marketing communications if you have opted-in. Processing communications is either necessary to respond to your request or based on your consent for marketing.
For security and fraud prevention: We use information to detect, prevent, and respond to potential security risks, fraud, or other malicious activity. This is based on our legitimate interest in protecting our business and our users.
To comply with legal obligations: We may process your information to comply with applicable laws, regulations, legal processes, or governmental requests.
Legal Basis for Processing (GDPR)
We process your personal data based on the following legal grounds:
Performance of a contract: We process your data when it is necessary to fulfill our obligations under a contract with you, such as processing and delivering your orders.
Legitimate interests: We process data based on our legitimate interests, provided these interests are not overridden by your data protection rights. This includes improving our services, preventing fraud, and operating our business effectively.
Compliance with a legal obligation: We process your data when necessary to comply with applicable laws and regulations.
Consent: We may process your data based on your explicit consent, such as for sending marketing communications where required. You have the right to withdraw your consent at any time.
Sharing Your Information
We may share your personal information with third parties in the following circumstances:
Service Providers: We engage trusted third-party service providers who perform functions on our behalf, such as payment processing, shipping, data hosting, and marketing assistance. These providers have access to personal information only as needed to perform their functions and are contractually obligated to protect the data.
Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity.
Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
We do not sell or rent your personal information to third parties for their marketing purposes.
Data Retention
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The retention period varies depending on the type of data and the purpose of processing. For example, order information is retained for a longer period to comply with financial and tax obligations. When we no longer need your data, we will securely delete or anonymize it.
Your Data Protection Rights (GDPR)
Under the GDPR and other applicable data protection laws, you have certain rights regarding your personal data:
Right to Access: You have the right to request access to the personal information we hold about you.
Right to Rectification: You have the right to request correction of inaccurate or incomplete personal information.
Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your personal information under certain circumstances.
Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal information under certain conditions.
Right to Object to Processing: You have the right to object to our processing of your personal information based on our legitimate interests or for direct marketing purposes.
Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
Right to Withdraw Consent: If we are processing your data based on your consent, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us using the physical address provided in this policy. We will respond to your request in accordance with applicable law. You also have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.
Data Security
We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, please be aware that no method of transmission over the internet or electronic storage is entirely secure.
Cookies and Similar Technologies
Our site uses cookies and similar technologies to collect information about your browsing activities, remember your preferences, and provide you with a better user experience. You can manage your cookie preferences through your browser settings.
Children's Privacy
Our site is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at the physical address provided.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the new policy on this page. We encourage you to review this Privacy Policy periodically.
Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at our physical address:
Ручные свечи
Сеул, Центр города