KOSURAN — Privacy Policy
Effective: 1 July 2026
Plain-language summary (not a substitute for the Policy below). To buy Korean products for you and ship them internationally, we collect the information you give us (account, delivery address, order details) and some information collected automatically (device and usage data, cookies). We share it only with the partners needed to run the Service — our payment provider, cloud hosting, email, shipping carriers, and the Korean sellers we buy from — and, for advertising and analytics, with providers such as Meta. We do not sell your personal information for money. You can access, correct, or delete your data, opt out of marketing, and (for California residents) opt out of "sharing" for advertising. Contact us any time at support@kosuran.com.
This Privacy Policy explains how KOSURAN Inc., a company incorporated under the laws of the Republic of Korea ("KOSURAN," "we," "us," or "our"), collects, uses, shares, and protects personal information in connection with the KOSURAN website, applications, and services (the "Service"). KOSURAN is the controller of your personal information. Terms not defined here have the meaning given in our Terms of Service.
1. Scope
This Policy applies to personal information we process about visitors, account holders, and customers of the Service. It does not apply to third-party sites, sellers, or services that we link to or that process your payment, each of which has its own privacy practices.
2. Information we collect
2.1 Information you provide.
- Account information — name, email address, password (stored in hashed form), and language/market preference.
- Order and delivery information — recipient name, shipping address, phone number, the Products you order, order and settlement details, and (for group orders) the handle or identifier you use with an Organizer.
- Communications — messages you send us (e.g., customer-service emails), and photos or details you submit for a claim (e.g., a damaged-item report).
- Marketing preferences — your consent choices and subscription status.
2.2 Payment information. When you pay, your card or payment details are collected and processed directly by our third-party payment provider (currently Stripe; we may add or change providers, such as Airwallex). We do not receive or store your full card number. We receive limited information such as a payment confirmation, a token, and the last four digits or card type.
2.3 Information collected automatically. When you use the Service we collect, through cookies and similar technologies (see §5): device and browser type, IP address (from which we may infer approximate location), pages viewed, referring/exit pages, search queries within the Service, and interaction and usage data.
2.4 Information from third parties. We may receive information from: Sellers and shipping carriers/forwarders (to fulfill and track your Order); our payment provider (payment status, fraud signals); and analytics and advertising providers (see §5 and §6).
We do not intentionally collect special/sensitive categories of information beyond your account credentials, and we do not knowingly collect information from children (see §12).
3. How we use your information
We use personal information to:
- provide the Service — create and manage your account; purchase Products on your behalf as your buying agent; consolidate, ship, and provide customs information; and process settlements and refunds;
- communicate — send transactional messages (order confirmations, shipping and customs updates, refund and Store Credit notices) and respond to your inquiries;
- process payments and prevent, detect, and investigate fraud, abuse, and chargebacks;
- operate and improve the Service, including analytics and product development;
- market — with your consent, send you promotional messages and show you relevant advertising, and measure the performance of our marketing (see §5–§6); and
- comply with law — meet tax, customs, accounting, and record-keeping obligations, and respond to lawful requests.
Legal bases (where applicable, e.g., for EEA/UK visitors). We rely on: performance of a contract (to provide the Service you request); your consent (for marketing and non-essential cookies); our legitimate interests (to secure, operate, and improve the Service and prevent fraud); and compliance with legal obligations.
4. How we share your information
We share personal information only as needed to run the Service:
- Service providers / processors acting on our behalf:
- Payment — Stripe (and, in future, Airwallex);
- Cloud hosting and infrastructure — our database, storage, and content delivery (Supabase) and compute (Google Cloud Platform), hosted in the Tokyo region;
- Email and customer-service tools;
- Shipping carriers and forwarders — to whom we provide the recipient and address to deliver your Order;
- Analytics and advertising providers (see §5–§6).
- Korean Sellers — to the extent necessary for us to purchase and have a Product delivered to our warehouse for you (typically the delivery is to our warehouse, not to your personal address).
- Legal and safety — where required by law, legal process, or to protect the rights, safety, or property of KOSURAN, our users, or others.
- Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
We do not sell your personal information for money. For advertising, we may "share" certain information for cross-context behavioral advertising as described in §6; California residents can opt out (§11.2).
5. Cookies and similar technologies
We use, or are implementing, cookies, pixels, SDKs, and similar technologies for the following purposes:
- Strictly necessary — sign-in, security, cart and checkout, and load balancing. These are required for the Service to work.
- Analytics — to understand how the Service is used and to improve it.
- Advertising and measurement — to deliver and measure marketing, including the Meta (Facebook/Instagram) pixel and Conversions API (CAPI), and similar tools. These may set identifiers used to build audiences and measure conversions.
Your choices. You can manage cookies through your browser settings and, where offered, through our cookie/consent controls. You can opt out of advertising cookies as described in §6 and §11.2. Where required, non-essential cookies are set only with your consent. We honor recognized opt-out preference signals such as Global Privacy Control (GPC) for opt-outs of "sharing"/"sale" where applicable.
6. Advertising and analytics
As part of our marketing, we use, or are implementing, advertising and analytics services (for example, Meta) that may collect identifiers and usage information through the technologies in §5, including via the Meta pixel and Conversions API, so that we can measure campaigns and show relevant ads. This activity may constitute "sharing" (for cross-context behavioral advertising) under certain U.S. state laws even though no money is exchanged for your information. You can opt out (§11.2), use GPC, and adjust ad settings with the relevant provider.
7. International data transfers
KOSURAN is based in the Republic of Korea; our infrastructure is hosted in Japan (Tokyo); and some of our providers (e.g., payment, analytics, advertising) are located in the United States or elsewhere. Our customers are located worldwide. As a result, your personal information may be transferred to, stored in, and processed in countries other than your own, which may have different data-protection laws. Where required, we use appropriate safeguards for such transfers (for example, contractual protections with our providers).
8. Data retention
We keep personal information for as long as your account is active and as needed to provide the Service. We retain transaction and related records for the periods required by applicable law — for example, under Korean e-commerce law, records of contracts and withdrawal-of-offer and of payment and supply of goods are generally retained for five (5) years, and records of consumer complaints or dispute handling for three (3) years — and thereafter we delete or anonymize the information unless a longer retention is required by law or needed to resolve disputes or enforce our agreements.
9. Security
We take reasonable technical and organizational measures to protect personal information, including encryption in transit, hashed passwords, access controls, and use of reputable infrastructure providers. No method of transmission or storage is completely secure; we cannot guarantee absolute security, and you are responsible for keeping your account credentials confidential.
10. Your choices about marketing
- Transactional messages (order, shipping, customs, refund, and account notices) are part of the Service and are sent regardless of marketing preferences.
- Marketing messages are sent only with your consent (opt-in). You can withdraw consent or unsubscribe at any time using the link in the message or by contacting support@kosuran.com. Unsubscribing from marketing does not stop transactional messages.
11. Your privacy rights
Subject to applicable law, you may have the rights below. To exercise them, contact support@kosuran.com; we will verify your request and respond within the time required by law. You will not be discriminated against for exercising your rights.
11.1 General rights. Depending on where you live, you may have the right to: access the personal information we hold about you; correct inaccurate information; delete your information; object to or restrict certain processing; withdraw consent; and receive a copy of certain information in a portable format.
11.2 California residents (CCPA/CPRA). In the past 12 months we collect (and disclose to service providers to run the Service) the following categories of personal information; the sources are you, your device, and our providers; and the purposes are those in §3:
| Category (CCPA) | Examples | "Shared" for advertising? |
|---|---|---|
| Identifiers | name, email, address, phone, account ID, IP address | Yes (identifiers/online IDs, see §6) |
| Customer records | name, address, phone, payment status | No |
| Commercial information | Orders, purchase and settlement history | No |
| Internet/network activity | pages viewed, searches, interactions | Yes (see §6) |
| Geolocation (approximate) | inferred from IP | Limited (see §6) |
| Inferences | preferences derived from activity | Limited (see §6) |
| Sensitive personal information | account log-in credentials | No — used only to provide the Service |
You have the right to know/access, delete, and correct your personal information; to opt out of the "sale" or "sharing" of personal information (we do not sell for money; we "share" for advertising as in §6 — you may opt out via our cookie controls, GPC, or by contacting us); and to limit the use of sensitive personal information (we already use it only to provide the Service). You may use an authorized agent to submit requests. We do not knowingly sell or share the personal information of consumers under 16.
11.3 Republic of Korea (PIPA). You may request access, correction, deletion, and suspension of processing of your personal information, and may lodge a complaint with the Personal Information Protection Commission (PIPC) or the Korea Internet & Security Agency (KISA).
11.4 Japan (APPI). You may request disclosure, correction, addition, deletion, and cessation of use or provision of your retained personal data, in accordance with the Act on the Protection of Personal Information. Contact us at support@kosuran.com.
12. Children's privacy
The Service is intended for users who are at least 18 years old (or the age of majority in their place of residence). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact support@kosuran.com and we will delete it.
13. Third-party links
The Service links to third-party sites and sellers. We are not responsible for their privacy practices. Please review the privacy policies of any third-party site you visit.
14. Changes to this Policy
We may update this Policy from time to time. We will post the updated Policy with a new "Last updated" date and, for material changes, provide additional notice (e.g., by email or in-Service notice) where required. Your continued use after the effective date of changes constitutes acceptance.
15. Contact us
KOSURAN Inc. — a company incorporated under the laws of the Republic of Korea, operating the "KOSURAN" service.
- Privacy and support contact: support@kosuran.com
- Website: kosuran.com
This Policy reflects KOSURAN's intended data practices, including analytics and advertising that are being implemented as part of its launch marketing. It is not legal advice. KOSURAN should have this Policy reviewed by qualified privacy counsel (Korea PIPA, and U.S./Japan market requirements including CCPA/CPRA and APPI) before launch, and should confirm the specific providers and cookie inventory in place at go-live.