Legal
Privacy Policy
Last updated: May 5, 2026
1. Information We Collect
- ·Account information: name, email address, password (stored encrypted)
- ·Skin profile: quiz responses and skin type classification results
- ·Shipping information: delivery address, recipient name, phone number
- ·Payment information: payments are processed by third-party payment processors (e.g. PayPal). SSA does not store sensitive card data.
- ·Usage data: site visit logs, IP address, browser information (collected via Google Analytics)
2. How We Use Your Information
- ·Providing and personalizing the subscription service
- ·Processing payments and billing
- ·Shipping notifications and tracking
- ·Responding to customer inquiries
- ·Statistical analysis to improve the service
- ·Sending promotional emails (only with your consent)
3. Cookies and Tracking Technologies
- ·Essential cookies: required for login sessions and core service operation
- ·Functional cookies: theme preference (ssa-theme), shopping cart (ssa-cart)
- ·Analytics cookies: Google Analytics 4 (_ga, _gid, _ga_ZWC3S4C1GQ) to understand how visitors use our site. These cookies are only activated after your consent.
- ·To opt out of Google Analytics data collection, visit: https://tools.google.com/dlpage/gaoptout
4. Third-Party Sharing
- ·Supabase (database & authentication): stores account and subscription data
- ·Payment processors (PayPal, Toss Payments, etc.): for payment processing
- ·Google LLC (Google Analytics): anonymized site usage statistics
- ·Shipping carriers: delivery address shared for fulfillment purposes
- ·We do not sell your personal information to third parties for promotional purposes.
5. Data Retention
Account data is retained for the duration of your subscription and deleted within 30 days of an account deletion request, except where required by law. Google Analytics data is retained for 26 months per Google's policy.
6. Your Rights
- ·Right to access, correct, or delete your personal data
- ·Right to data portability
- ·Right to restrict or object to processing
- ·Right to withdraw service notice consent (via unsubscribe link or contact@seoulskinarchive.com)
- ·EU/EEA residents have the right to lodge a complaint with a supervisory authority under GDPR.
- ·California residents have the right to opt out of the sale of personal information (we do not sell data).
7. Security
We apply industry-standard security measures including SSL encryption and access controls. No method of internet transmission is 100% secure, and we cannot guarantee absolute security.
8. Children's Privacy
Our service is not directed at children under the age of 16. If we become aware that we have collected personal data from a child under 16, we will delete it promptly.
9. Changes to This Policy
We may update this policy. Significant changes will be communicated by email or site notice. Continued use of the service after changes constitutes acceptance of the revised policy.
10. Contact
Privacy inquiries: contact@seoulskinarchive.com / Seoul Skin Archive, Seoul, Republic of Korea