Amouage Korea Privacy Policy
(Effective Date: January XX, 2026)
Amouage Korea Limited (hereinafter referred to as "Amouage Korea") protects the freedom and rights of data subjects by lawfully processing and safely managing personal information in compliance with the Personal Information Protection Act and related laws and regulations. Accordingly, pursuant to Article 30 of the Personal Information Protection Act, we have established and disclosed the following personal information processing policy to inform data subjects of the procedures and standards for processing and protecting personal information and to promptly and smoothly address any complaints related to this matter.
Table of Contents
- Purpose of personal information processing, items processed, retention and use period
- Personal information destruction procedures and methods
- Provision of personal information to third parties
- Consignment of personal information processing tasks
- International collection and transfer of personal information
- Measures to ensure personal information security
- Installation, operation, and refusal of automatic personal information collection devices
- Remedies for infringements of the data subject's rights and interests
- Changes to the personal information processing policyPurpose of Personal Information Processing, Processed Items, Retention and Usage Period
Purpose of processing personal information, items processed, retention and use period
Amouage Korea collects and uses personal information to the minimum extent necessary to provide services in accordance with the Personal Information Protection Act.
Official Online Store
|
Collection point
|
Purpose of collection and use
|
Division
|
Item
|
Retention period and basis
|
Legal basis
|
|
When signing up
|
Confirmation of identity and intent to register as a member, member identification, and provision of membership services
|
Essential
|
Name, password, mobile phone number, email address
|
Upon withdrawal of membership or within the legally required period
|
Article 15, Paragraph 1, Subparagraph 4 of the Personal Information Protection Act (Conclusion and Performance of Contracts)
|
|
Select
|
Date of birth, gender
|
When you withdraw your consent or cancel your membership
|
Article 15, Paragraph 1, Subparagraph 1 of the Personal Information Protection Act (Consent of the Data Subject)
|
|
Sending personalized advertisements through electronic transmission media, providing information on events and promotions, developing and specializing new services (products), determining access frequency, or collecting statistics on members' use of services.
|
Select
|
Name, mobile phone number, email address, date of birth, gender, and information automatically collected through cookies
|
When you withdraw your consent or cancel your membership
|
Article 15, Paragraph 1, Subparagraph 1 of the Personal Information Protection Act (Consent of the Data Subject)
|
|
Birthday benefits provided
|
Select
|
Date of birth, gender
|
When you withdraw your consent or cancel your membership
|
Article 15, Paragraph 1, Subparagraph 1 of the Personal Information Protection Act (Consent of the Data Subject)
|
|
When purchasing a website product
|
Ordering and payment, product delivery
|
Essential
|
Credit card information, bank account information, payment history, order history, address, name, mobile phone number
|
5 years / Article 6 of the Act on Consumer Protection in Electronic Commerce, etc.
|
Article 15, Paragraph 1, Subparagraph 2 of the Personal Information Protection Act (Compliance with Legal Obligations), Article 6 of the Act on Consumer Protection in E-Commerce, etc.
|
|
Select
|
Phone Number
|
|
When inquiring via email
|
Responding to inquiries, consultations, and handling of complaints
|
Essential
|
Name, email address, mobile phone number
|
3 years / Article 6 of the Act on Consumer Protection in E-Commerce, etc.
|
Article 15, Paragraph 1, Subparagraph 2 of the Personal Information Protection Act (Compliance with Legal Obligations), Article 6 of the Act on Consumer Protection in E-Commerce, etc.
|
|
When you subscribe to our newsletter
|
Provision of advertising information
|
Essential
|
Email address
|
When consent is withdrawn
|
Article 15, Paragraph 1, Subparagraph 1 of the Personal Information Protection Act (Consent of the Data Subject)
|
|
Select
|
Phone number
|
Offline store
|
Collection point
|
Purpose of collection and use
|
Division
|
Item
|
Retention period and basis
|
Legal basis
|
|
When signing up
|
Confirmation of identity and intent to register as a member, member identification, and provision of membership services
|
Essential
|
Name, mobile phone number, purchase history
|
3 years from the date of collection (deleted upon request for membership withdrawal or deletion of information)
|
Article 15, Paragraph 1, Subparagraph 4 of the Personal Information Protection Act (Conclusion and Performance of Contracts)
|
|
Sending personalized advertisements through electronic transmission media, providing information on events and promotions, developing and specializing new services (products), determining access frequency, or collecting statistics on members' use of services.
|
Select
|
Name, mobile phone number, email address
|
Article 15, Paragraph 1, Subparagraph 1 of the Personal Information Protection Act (Consent of the Data Subject)
|
|
Birthday benefits provided
|
Select
|
Date of birth, gender
|
Article 15, Paragraph 1, Subparagraph 1 of the Personal Information Protection Act (Consent of the Data Subject)
|
|
When inquiring (customer center or store)
|
Responding to inquiries, consultations, and handling of complaints
|
Essential
|
Name, email address, mobile phone number
|
3 years / Article 6 of the Act on Consumer Protection in E-Commerce, etc.
|
Article 15, Paragraph 1, Subparagraph 2 of the Personal Information Protection Act (Compliance with Legal Obligations), Article 6 of the Act on Consumer Protection in E-Commerce, etc.
|
|
When applying for a reservation
|
Store reservation service provided
|
Essential
|
Name, email address, mobile phone number, reservation information (date, time, store, application details)
|
Members: Upon cancellation of membership Non-members: 90 days from the reservation date
|
Article 15, Paragraph 1, Subparagraph 4 of the Personal Information Protection Act (Conclusion and Performance of Contracts)
|
Common for online and offline stores
|
Collection point
|
Purpose of collection and use
|
Division
|
Item
|
Retention period and basis
|
Legal Basis
|
|
When reporting inconvenience due to product use
|
Comply with legal obligations such as investigating and analyzing suspected cases, improving product safety, and reporting to regulatory agencies.
|
Essential
|
Product name, place of purchase, date of purchase, method and location of product storage, area of product application, frequency of use, date and time of first use of the product, symptoms when first using the product, number of times the product was used before the onset of symptoms, period of time required for symptoms to appear, whether symptoms appeared on the area where the product was applied, whether symptoms appeared on other areas as well, how long the symptoms lasted, level of severity of symptoms, whether symptoms subsided after stopping use of the product, whether the product was reused after symptoms subsided, whether hospital treatment was received and type of hospital visited, whether work/leave of absence occurred due to symptoms, type of examination received, other factors, history of allergies, whether medication unrelated to symptoms was taken, method of drug use/prescription
|
When the purpose of personal information retention is achieved
|
Article 15, Paragraph 1, Subparagraph 2 and Article 23, Paragraph 1, Subparagraph 2 of the Personal Information Protection Act (Compliance with Legal Obligations)
|
|
Select
|
Gender, age/year of birth, color of product used, additional details about how the product was applied, date of last product use, additional details about hospital visits, hospital diagnosis, details about medications/treatments prescribed, details of tests performed, medical reports, photos of symptoms, additional details about other factors, details about known allergies/sensitivities, information about pre-existing medical conditions and medications/supplements being taken, information about pre-existing medical conditions, known allergies, and any medications/supplements being used.
|
Article 15, Paragraph 1, Subparagraph 1 and Article 23, Paragraph 1, Subparagraph 1 of the Personal Information Protection Act (Consent of the Data Subject)
|
Procedures and methods for destruction of personal information
Amouage Korea destroys personal information without delay when the personal information becomes unnecessary, such as when the retention period for personal information expires or the processing purpose is achieved.
If the retention period for personal information agreed upon by the data subject has expired or the processing purpose has been achieved, but the personal information must be retained under other laws and regulations, the personal information will be transferred to a separate database (DB) or stored in a different location. The items of personal information retained under other laws and the basis for retention can be found in the "Purpose of Personal Information Processing, Items Processed, Retention and Use Period."
The procedures and methods for destroying personal information are as follows:
- Destruction Procedure: Amouage Korea selects personal information for which a reason for destruction has arisen and destroys the information after receiving approval from Amouage Korea's Personal Information Protection Officer.
- Destruction Method: Amouage Korea destroys personal information recorded and stored in electronic files in a manner that renders the records unrecoverable. Personal information recorded and stored in paper documents is destroyed by shredding or incineration.
Provision of personal information to third parties
Amouage Korea may transfer personal information to service providers who perform services on our behalf. Amouage Korea does not permit these service providers to use or disclose your information except as necessary to perform services on our behalf or comply with legal requirements. These service providers include, for example, companies that process credit card payments, fulfill orders, and provide website and application functionality, hosting, analytics, advertising, and marketing services.
Entrustment of personal information processing tasks
To ensure smooth processing of personal information, Amouage Korea entrusts the processing of personal information as follows.
Personal information processing entrustment
1. Schenker Korea
- Entrusted person: Schenker Korea
- Consignment work details:
- Product delivery services for customers
- Re-consignment service provider: https://www.dbschenker.com/kr-ko/meta/privacy-policy
2. Ilyang Logistics
- Entrusted person: Ilyang Logistics
- Consignment work details:
- Product delivery to customers
- Re-consignment service: https://www.ilyanglogis.co.kr/sub/policy/policy01.asp
3. KG Inicis
- Entrusted person: KG Inicis
- Consignment work details:
- Purchase price and payment, financial transaction identity verification and financial services, payment collection
- Re-trustee: https://www.inicis.com/privacy
4. SK Shielders
- Entrusted person: SK Shielders
- Consignment work details: CCTV operation and maintenance
When concluding a consignment contract, Amouage Korea, in accordance with Article 26 of the Personal Information Protection Act, specifies in the contract or other documents matters related to the prohibition of processing personal information for purposes other than the performance of the consigned work, technical and administrative protection measures, restrictions on re-consignment, management and supervision of the consignee, and liability for damages, and supervises whether the consignee safely processes personal information.
Pursuant to Article 26, Paragraph 6 of the Personal Information Protection Act, if a trustee re-entrusts our company's personal information processing tasks, we obtain Amuage Korea's consent, and the details of the re-entrusted tasks and the re-entrusted tasks are disclosed through this Privacy Policy.
If the details of the entrusted work or the trustee change, we will disclose this information without delay through this Privacy Policy.
If personal information processing is entrusted overseas, please refer to "Collection and Transfer of Personal Information Abroad."
International Collection and Transfer of Personal Information
Amouage Korea transfers personal information collected from service users overseas using a dedicated network from time to time, starting from the moment the user uses the service. Pursuant to Article 28-8, Paragraph 2 of the Personal Information Protection Act, the following information is provided regarding overseas transfers. Refusing overseas transfers will prevent you from using the service. If you do not wish to have your information transferred overseas, you may cancel your membership on the website or request withdrawal through the Customer Center (customerservice@amouage.com).
Below are the Relevant evidences against each service -
Platform provider
1. Fiduciary: Shopify Inc
-
Relevant evidence: Article 28-8, Paragraph 1, Subparagraph 3 of the Personal Information Protection Act (Processing Consignment/Storage)
-
Classification: Platform provider
-
Transfer purpose: Store hosting, payments, fraud prevention, essential cookies, and account management.
-
Personal information items transferred: IP address, device information, browsing data, order details, payment data
-
Retention and use period: Until necessary for store operation or legal obligations.
Analysis/Tracking
1. Fiduciary: Google Analytics
-
Relevant evidence: Article 28-8, Paragraph 1, Subparagraph 3 of the Personal Information Protection Act (Processing Consignment/Storage)
-
Classification: Analysis/Tracking
-
Transfer purpose: Website analytics and performance insights
-
Personal information items transferred: IP (anonymized), device/browser information, usage behavior
-
Retention and use period: Until manual deletion or opt-out
2. Fiduciary: Meta Pixel
-
Relevant evidence: Article 28-8, Paragraph 1, Subparagraph 3 of the Personal Information Protection Act (Processing Consignment/Storage)
-
Classification: Analysis/Tracking
-
Transfer purpose: Advertising Measurement & Remarketing
-
Personal information items transferred: According to Meta's holding policy
-
Retention and use period: Users can opt out via Meta settings
3. Fiduciary: Klaviyo Web Tracking
-
Relevant evidence: Article 28-8, Paragraph 1, Subparagraph 3 of the Personal Information Protection Act (Processing Consignment/Storage)
-
Classification: Analysis/Tracking
-
Transfer purpose: Email marketing analytics, behavior tracking
-
Personal information items transferred: Email, browsing interactions
-
Retention and use period: Until the user requests cancellation or deletion of subscription
Shopify Apps
1. App: Shopify Flow
-
Relevant evidence: Article 28-8, Paragraph 1, Subparagraph 3 of the Personal Information Protection Act (Processing Consignment/Storage)
-
Classification: Shopify App
-
Transfer purpose: Workflow Automation
-
Personal information items transferred: Order data, customer tags, and event triggers
-
Retention and use period: For the period of time required for automation
2. App: EG Auto Add to Cart
-
Relevant evidence: Article 28-8, Paragraph 1, Subparagraph 3 of the Personal Information Protection Act (Processing Consignment/Storage)
-
Classification: Shopify App
-
Transfer purpose: Automatically add products to cart for promotions
-
Personal information items transferred: Shopping cart contents, product identifiers
-
Retention and use period: Until the cart is empty
3. App: Instafeed
-
Relevant evidence: Article 28-8, Paragraph 1, Subparagraph 3 of the Personal Information Protection Act (Processing Consignment/Storage)
-
Classification: Shopify App
-
Transfer purpose: Show your Instagram feed
-
Personal information items transferred: No customer data processing, no IG content loading
-
Retention and use period: Not applicable
4. App: Klaviyo App
-
Relevant evidence: Article 28-8, Paragraph 1, Subparagraph 3 of the Personal Information Protection Act (Processing Consignment/Storage)
-
Classification: Shopify App
-
Transfer purpose: Email automation, segmentation, and marketing insights
-
Personal information items transferred: Email, purchase history, user activity
-
Retention and use period: Until you request cancellation or deletion of your subscription
5. App: Shopify Translate & Adapt
-
Relevant evidence: Article 28-8, Paragraph 1, Subparagraph 3 of the Personal Information Protection Act (Processing Consignment/Storage)
-
Classification: Shopify App
-
Transfer purpose: Language translation and localization
-
Personal information items transferred: No processing of customer data
-
Retention and use period: Not applicable
6. App: Shopify Checkout Blocks
-
Relevant evidence: Article 28-8, Paragraph 1, Subparagraph 3 of the Personal Information Protection Act (Processing Consignment/Storage)
-
Classification: Shopify App
-
Transfer purpose: Payment UI customization
-
Personal information items transferred: Customer input fields, session data
-
Retention and use period: In accordance with Shopify's internal policies
7. App: Shopify Search & Discovery
-
Relevant evidence: Article 28-8, Paragraph 1, Subparagraph 3 of the Personal Information Protection Act (Processing Consignment/Storage)
-
Classification: Shopify App
-
Transfer purpose: Product navigation behavior
-
Personal information items transferred: During the payment session
-
Retention and use period: In accordance with Shopify's internal policies
Marketing/Email
1. Fiduciary: Klaviyo
-
Relevant evidence: Article 28-8, Paragraph 1, Subparagraph 3 of the Personal Information Protection Act (Processing Consignment/Storage)
-
Classification: Marketing/Email
-
Transfer purpose: Email campaigns, automated marketing
-
Personal information items transferred: Email, phone (optional), order history, browsing behavior
-
Retention and use period: Until the user unsubscribes
Customer Support/Ticketing
1. Fiduciary: Atlassian Jira Service Management
-
Relevant evidence: Article 28-8, Paragraph 1, Subparagraph 3 of the Personal Information Protection Act (Processing Consignment/Storage)
-
Classification: Customer Support/Ticketing
-
Transfer purpose: Create customer support tickets, communicate, and track issues
-
Personal information items transferred: Name, email, phone (if provided), order details, support request, and any attachments
-
Retention and use period: Ticket closure + retention period required for audit/operation
ERP/Operations
1. Fiduciary: Microsoft Dynamics 365
-
Relevant evidence: Article 28-8, Paragraph 1, Subparagraph 3 of the Personal Information Protection Act (Processing Consignment/Storage)
-
Classification: ERP/Operations
-
Transfer purpose: Order management, invoicing, logistics, and inventory systems
-
Personal information items transferred: Order information, customer name, email, shipping details, and transaction data
-
Retention and use period: As required by accounting, legal and operational obligations.
Measures to Ensure the Security of Personal Information
Amouage Korea maintains administrative, technical, and physical safeguards designed to protect the personal information you provide against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use. We restrict access to personal information to employees and authorized service providers who need access to fulfill their business requirements and on a need-to-know basis.
Installation, operation, and rejection of automatic personal information collection devices
Amouage Korea uses "cookies" to store and periodically retrieve usage information to provide personalized services and convenience to users.
Cookies are small pieces of information sent by the website's operating server (http) to the user's browser. They are stored on the user's computer or mobile device and are automatically transmitted from the user's browser to the server when the website is accessed.
Users can configure their browser options to allow or block cookies.
< How to allow/block cookies >
- Allow/Block Cookies in Your Web Browser
- Chrome: Select the "⋮" icon in the top right corner of the browser > New Incognito Window (Shortcut: Ctrl+Shift+N)
- Edge: Select the "..." icon in the top right corner of the browser > New InPrivate Window (Shortcut: Ctrl+Shift+N)
- Allow/Block Cookies on Mobile Browsers
- Chrome: Select the "⋮" icon in the top right corner of the mobile browser > New Incognito Tab
- Safari: Mobile Device Settings > Safari > Advanced > Block All Cookies
- Samsung Internet: Select the ‘Tab’ icon at the bottom of the mobile browser > Turn on Secret Mode > Start
Cookies used by Amouage.kr
The cookies we create do not store your personal information, but your personal information we hold about you may be linked to information stored in or collected through cookies.
1. session
- Provider: Amouage
- First-party/third-party cookies: Company
- Purpose: Ensures that session state is maintained even when visitors navigate through multiple pages within your website.
2. PHPSESSID
- Provider: Amouage
- First-party/third-party cookies: Company
- Purpose: Ensures that session state is maintained even when visitors navigate through multiple pages within your website.
3. cookieconsent_dismissed
- Provider: Amouage
- First-party/third-party cookies: Company
- Purpose: This cookie is used to prevent users from being repeatedly presented with cookie notices on each page of the website.
Shopify Cookies
Our website also uses Shopify's standard cookies.
Amouage Korea operates on the Shopify platform and uses standard cookies and tracking technologies provided by Shopify. These cookies are used for functions such as shopping cart functionality, payment processing, storing user preferences, maintaining security, and analyzing site performance.
You can find out the types and purposes of cookies used by Shopify on the official website:
https://www.shopify.com/legal/cookies
Customers can refuse or delete cookies through their browser settings. However, please note that disabling cookies may limit your access to some services.
Google Analytics Cookies
1. _ga
- Provider: Google Analytics
- First-party/third-party cookies: 1st
- Purpose: This cookie is used to prevent users from being repeatedly presented with cookie notices on each page of the website.
2. ga[MeasurementID]
- Provider: Google Analytics
- First-party/third-party cookies: 1st
- Purpose: Stores the state of the session and persists user-specific data for Google Analytics 4 (GA4)
3. _gid
- Provider: Google Analytics
- First-party/third-party cookies: 1st
- Purpose: Used to distinguish users — but resets every 24 hours
4. _gat
- Provider: Google Analytics
- First-party/third-party cookies: 1st
- Purpose: Used to throttle request rates
Klaviyo Cookies
We use the following cookies to operate our CRM platform, Klaviyo.
1. __kla_id
- Provider: Klaviyo
- First-party/third-party cookies: 1st
- Purpose: Used to identify visitors.
2. KL_FORMS_ACTIVATED
- Provider: Klaviyo
- First-party/third-party cookies: 1st
- Purpose: Track whether a Klaviyo form is activated on a page.
3. KL_FORMS_MODAL
- Provider: Klaviyo
- First-party/third-party cookies: 1st
- Purpose: Stores behavior information for Klaviyo pop-up forms.
For more information about cookies, please see our Cookie Policy.
If you have any questions or comments regarding this Privacy Policy or wish to exercise your rights, you may contact our Personal Information Protection Officer (Lee Sang-hyeop) by sending an email to korea.privacy@amouage.com.
Remedies for Infringements of Data Subject Rights
Data subjects may seek redress for personal information infringements by filing dispute resolution or consultation requests with the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency's Personal Information Infringement Reporting Center, or other organizations. For other inquiries regarding reporting or consultation of personal information infringements, please contact the organizations listed below.
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Reporting Center: 118 (privacy.kisa.or.kr)
- National Police Agency: 182 (ecrm.police.go.kr)
- Supreme Prosecutors' Office Internet Crime Investigation Center: 1301 (https://www.spo.go.kr)
Changes to the Privacy Policy
This Privacy Policy applies from January, 2026.
If the Privacy Policy changes, the previous Privacy Policy will be posted.