Registration, identity and account authentication, profile management, service notices and customer support, abuse prevention, and account security

Name, email address, encrypted password authentication information, and sign-up/login timestamps. For social sign-up: provider, account identifier, and profile information made available by the provider

Until account withdrawal. Information subject to a statutory retention duty is stored separately for the applicable legal period and then deleted.

You may refuse consent. Because these are the minimum details required to provide a customer account, refusing consent prevents registration and account use.

A birth month and day entered by the member is used to issue VIP-and-above 10% birthday coupons and retained until account withdrawal or consent withdrawal. Refusal does not affect registration or general service use; only the birthday coupon will not be provided.

For faster ordering and delivery, members may save an address label, recipient name, phone number, postal code, address, and address details. The information is retained until the member deletes it or withdraws the account; the feature is optional.

For tailored product and routine guidance, members may save skin type, skin concerns, a routine goal, and an optional mobile number. The information is retained until the member clears it or withdraws the account; refusal does not affect general service use.

To send coupon, member-benefit, new-product, and restock news through selected email or SMS channels, we use the account email, mobile number, channel preferences, and consent timestamp. Preferences can be changed at any time in My Account and are retained until withdrawn.

To process orders, delivery notices, purchase history, rewards, exchanges and returns, we use order numbers, products, amounts, recipient details, contact information, delivery addresses, carrier and tracking details, request reasons, and handling records. Data is retained for the periods required by applicable e-commerce law.

To verify purchases and operate reviews, we use the member identifier, order number, product, rating, title, body, display name, and submission and moderation records. Reviews are handled under applicable law and policy when deletion or account withdrawal is requested.

For service security, recovery, and legal compliance, we use administrator audit records, email-delivery results, error records, and access-restricted operational backups. The admin console is protected by an authorized administrator account and a second email verification step, and backups are available only to authorized administrators.

Chat support (Channel.io) and service error monitoring (Datadog) may use cookies or similar technologies needed to provide those features. Visit-statistics cookies (such as Google Analytics 4) are used only if you allow analytics cookies, and you can refuse or delete cookies in your browser settings.