Privacy Policy
Last updated: 06 October 2026
1. Introduction
This Privacy Policy explains how Blushkorea (“Blushkorea”, “we”, “us” or “our”) collects, uses, stores, shares, and protects personal information when you visit our website, create an account, place an order, communicate with us, or otherwise use our services.
As Blushkorea serves customers internationally and dispatches orders from South Korea, personal information may be processed in different countries as necessary to operate our online store, process payments, provide customer support, and arrange international delivery.
We are committed to handling personal information transparently, securely, and in accordance with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) where it applies to our processing activities.
This Privacy Policy should be read together with our Terms of Service, Shipping Policy, Refund & Return Policy, Cookie Policy, and other applicable policies published on the Blushkorea website.
2. Data Controller & Contact Information
Blushkorea is responsible for determining how and why personal information covered by this Privacy Policy is processed, except where another organization acts independently as a data controller for its own purposes.
For privacy-related questions, complaints, or requests concerning your personal information, please contact Blushkorea using the contact information published on our website.
When contacting us regarding your personal information, please provide sufficient information for us to identify your request and, where applicable, the account or order concerned.
We may request additional information where reasonably necessary to verify your identity before disclosing, correcting, or deleting personal information.
3. Personal Information We Collect
We may collect personal information directly from you, automatically when you interact with our website, and from service providers involved in operating our store, processing transactions, preventing fraud, communicating with customers, and delivering orders.
The information collected depends on how you interact with Blushkorea.
3.1 Device & Website Usage Information
When you visit or interact with the Blushkorea website, we may collect information such as:
IP address
Browser type and version
Device type
Operating system
Approximate location derived from technical information such as IP address
Time zone
Cookie and similar identifiers
Pages and products viewed
Search terms entered on our website
Referring pages or websites
Dates and times of visits
Information about interactions with our website
Technical logs, error information, and security data
We may use this information to operate and improve our website, maintain security, detect fraud or misuse, troubleshoot technical problems, understand website performance, and, where the required consent has been obtained, conduct analytics, personalization, and advertising.
This information may be collected through cookies, pixels, tags, log files, and similar technologies.
3.2 Account, Order & Checkout Information
When you create an account, begin checkout, or place an order, we may collect information including:
Payment credentials required to complete your chosen payment method are generally processed by the relevant payment provider.
Blushkorea may receive limited payment-related information from payment providers, such as payment status, transaction identifiers, payment method information, refund status, or fraud indicators.
We use order and checkout information to process purchases, manage customer accounts, arrange payments, dispatch products from South Korea, provide international shipping, manage customs-related documentation where necessary, process returns and refunds, prevent fraud, and communicate with customers regarding their orders.
Certain information is necessary for us to process and fulfill your order. If you do not provide the required information, we may be unable to complete the transaction or deliver your products.
3.3 Shipping, Customs & Delivery Information
Because Blushkorea ships internationally from South Korea, we may process and share information necessary to arrange international transportation and customs clearance.
This may include:
This information may be provided to couriers, freight providers, customs brokers, postal operators, local delivery partners, customs authorities, and other organizations involved in delivering your order.
Some information may be required by law or by customs authorities in the destination country.
3.4 Customer Support & Communications
When you contact Blushkorea, we may collect:
Your name
Contact information
Order number
Tracking number
Details of your enquiry
Messages and correspondence
Photographs, videos, or documents you provide
Information relating to returns, refunds, complaints, or delivery issues
Records of our response and actions taken
We use this information to answer questions, provide customer support, investigate delivery or product issues, process returns and refunds, resolve complaints, and maintain appropriate records of customer communications.
Please provide only information that is reasonably relevant to your enquiry.
3.5 Marketing Preferences
If you subscribe to marketing communications or make choices concerning marketing, cookies, or advertising, we may record information including:
Name
Email address
Marketing subscription status
Consent records
Date and method of consent
Unsubscribe requests
Marketing objections
Cookie preferences
Advertising preferences where applicable
We use this information to manage your choices and ensure that our marketing activities respect those preferences.
3.6 Fraud Prevention & Security Information
We may process information reasonably necessary to protect Blushkorea, our customers, and our payment systems from fraud, abuse, unauthorized transactions, cyberattacks, or other security threats.
This may include transaction information, IP addresses, device information, account activity, payment status, fraud indicators, and information supplied by payment or security providers.
4. How We Use Personal Information
Depending on the circumstances, Blushkorea may use personal information to:
Operate and maintain our website
Create and manage customer accounts
Process and confirm orders
Process payments and refunds
Dispatch orders from South Korea
Arrange international delivery
Prepare shipping and customs information
Provide tracking information
Manage returns, refunds, and complaints
Communicate about orders and services
Provide customer support
Detect and prevent fraud
Protect our website and systems
Comply with accounting, tax, customs, and other legal requirements
Maintain business and transaction records
Improve our website, products, and services
Analyze website performance where permitted
Send marketing communications where legally permitted
Personalize advertising where the required consent or other lawful basis exists
Establish, exercise, or defend legal claims
Enforce our policies and protect our legal rights
We will not use personal information for purposes that are incompatible with the purpose for which it was collected unless such use is permitted by applicable law.
5. Legal Bases for Processing
Where the GDPR or another law requiring a lawful basis applies, Blushkorea may rely on one or more of the following legal bases.
5.1 Performance of a Contract
We may process personal information where necessary to perform a contract with you, including to:
Process and fulfill orders
Process payments
Arrange delivery
Provide order tracking
Process returns and refunds
Manage your customer account
Provide support relating to your purchase
5.2 Steps Before Entering Into a Contract
We may process information to respond to enquiries or take steps requested by you before entering into a purchase contract.
5.3 Compliance With Legal Obligations
We may process personal information where necessary to comply with legal requirements, including:
Accounting and tax obligations
Customs and import/export requirements
Consumer protection obligations
Data protection requirements
Responding to legally binding requests from competent authorities
5.4 Legitimate Interests
Where permitted by law, we may process personal information based on our legitimate interests, including:
Operating and improving our business
Responding to customer enquiries
Maintaining customer service records
Protecting our website and systems
Detecting and preventing fraud
Preventing misuse of our services
Establishing, exercising, or defending legal claims
Maintaining limited records of marketing objections
Protecting Blushkorea, our customers, and our business partners
Where we rely on legitimate interests, we consider whether our interests are overridden by the individual’s rights and freedoms.
5.5 Consent
Where required, we rely on your consent for activities such as:
Sending certain promotional communications
Using non-essential analytics cookies
Using advertising or personalization technologies
Other processing activities for which applicable law requires consent
Where processing is based on consent, you may withdraw that consent at any time.
Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
6. Sharing Personal Information
Blushkorea may share personal information where reasonably necessary to operate our business and provide our services.
Recipients may include:
E-commerce and website providers, including platforms used to operate our online store
Payment service providers that process payments, refunds, fraud checks, and transactions
Shipping and logistics providers responsible for transporting orders from South Korea
Local delivery partners responsible for final delivery in the destination country
Customs brokers and clearance providers where required for international shipments
Customs, tax, or other government authorities where disclosure is legally required
Technology providers supporting hosting, communications, website functionality, security, and customer support
Analytics providers where the required consent or lawful basis exists
Advertising and marketing providers where legally permitted
Professional advisers, such as accountants, auditors, insurers, and legal advisers
Fraud-prevention and security providers
Authorities, courts, or regulators where disclosure is required by law or a valid legal request
We seek to limit personal information disclosed to what is reasonably necessary for the relevant purpose.
Where service providers process personal information on our behalf, appropriate contractual or other safeguards may be used as required by applicable law.
Certain organizations, including payment providers, couriers, customs authorities, and other entities, may process information as independent data controllers for their own purposes and legal obligations.
Blushkorea does not sell personal information in exchange for money.
Where applicable privacy laws use broader definitions of “sale,” “sharing,” or targeted advertising, additional rights or choices may be provided as required by those laws.
7. Shopify & E-Commerce Services
Where Blushkorea uses Shopify or another e-commerce platform to operate its online store, that provider may process personal information necessary to host the website, provide checkout functionality, manage orders, maintain security, and support other e-commerce features.
Such providers may operate infrastructure and service providers in multiple countries.
Their processing of personal information is also subject to their own applicable privacy documentation and contractual arrangements with Blushkorea.
8. Direct Marketing
Where permitted by applicable law and, where required, with your consent, Blushkorea may send promotional communications concerning products, offers, promotions, launches, or other updates.
You can unsubscribe from marketing emails at any time by using the unsubscribe link contained in the relevant communication or by contacting Blushkorea.
After you unsubscribe or object to direct marketing, we will stop using your personal information for the relevant direct-marketing purpose.
We may retain limited information recording your unsubscribe request or objection so that your preference continues to be respected.
Withdrawing from marketing does not prevent us from sending necessary transactional or service communications concerning orders, payments, shipping, security, returns, refunds, or customer support.
9. Analytics & Advertising
Where permitted by applicable law and subject to required consent, Blushkorea may use analytics and advertising technologies to understand how visitors use our website, measure website performance, evaluate marketing campaigns, and improve our services.
These technologies may collect information about devices, website interactions, viewed products, traffic sources, and other online activity.
Where consent is legally required, non-essential analytics or advertising technologies will not be activated until the appropriate consent has been provided.
Users may subsequently change or withdraw their choices through the cookie or privacy controls made available on our website.
10. International Data Transfers
Because Blushkorea operates an international online store and ships products from South Korea, personal information may be processed or transferred between different countries.
For example, personal information may need to be transferred to or accessed by:
E-commerce providers
Payment providers
Technology providers
Customer service providers
Logistics providers in South Korea
International couriers
Customs brokers
Local delivery partners
Other service providers involved in fulfilling an order
Some recipients may be located outside the European Economic Area (“EEA”).
Where GDPR applies and personal information is transferred outside the EEA, Blushkorea will use an appropriate transfer mechanism where required.
Depending on the circumstances, this may include:
A valid adequacy decision;
Approved Standard Contractual Clauses;
Other legally recognized transfer mechanisms; or
Another lawful basis permitted under applicable data protection legislation.
Where necessary, additional safeguards may also be implemented based on the circumstances of the transfer.
Customers may contact Blushkorea for additional information concerning applicable international data-transfer safeguards, subject to appropriate protection of confidential information and the rights of other persons.
11. Data Retention
Blushkorea retains personal information only for as long as reasonably necessary for the purposes for which it was collected and to satisfy applicable legal, accounting, tax, customs, reporting, dispute-resolution, and compliance requirements.
Retention periods may vary depending on the type of information and the reason it is processed.
Factors considered include:
Account information: Whether the account remains active and whether the information remains necessary to provide requested services.
Orders and transactions: The period necessary to fulfill purchases, manage returns and refunds, maintain financial records, and comply with applicable accounting and tax obligations.
Shipping and customs records: The period necessary to manage delivery, customs matters, disputes, and applicable legal obligations.
Customer support records: The nature of the enquiry, whether it has been resolved, and whether the records may be required for subsequent disputes.
Marketing records: Whether consent remains valid and whether limited information should be retained to document consent, withdrawal, or objection.
Security records: The period reasonably necessary to detect, investigate, and prevent security incidents or fraudulent activity.
Privacy requests: The period necessary to document our handling of requests and demonstrate compliance.
Information may be retained for a longer period where required by law or where reasonably necessary in connection with an ongoing dispute, investigation, or legal claim.
When personal information is no longer required, we will take reasonable steps to delete, anonymize, or otherwise securely dispose of it.
12. Data Security
Blushkorea uses reasonable and appropriate technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, destruction, misuse, or loss.
These measures may include access controls, authentication mechanisms, secure systems, restricted access to information, service-provider safeguards, and other measures appropriate to the nature and risks of the processing.
Access to personal information is limited to individuals and service providers who reasonably require access to perform their responsibilities.
However, no method of electronic transmission, online communication, or digital storage can be guaranteed to be completely secure.
If a personal data breach occurs, Blushkorea will assess the incident and make notifications to affected individuals or relevant authorities where required by applicable law.
13. Your Data Protection Rights
Depending on your location and applicable data protection law, you may have rights concerning your personal information.
Where GDPR applies, these may include the right to:
Access: Request confirmation of whether we process your personal information and obtain a copy.
Rectification: Request correction of inaccurate information and completion of incomplete information.
Erasure: Request deletion of personal information where the applicable legal conditions are satisfied.
Restriction: Request that processing be limited in certain circumstances.
Object: Object to certain processing based on legitimate interests.
Object to direct marketing: Object to the use of your personal information for direct marketing at any time.
Data portability: Receive eligible information in a structured, commonly used, machine-readable format and, where applicable, request its transfer to another controller.
Withdraw consent: Withdraw consent where processing is based on consent.
Automated decision-making protections: Exercise applicable rights concerning qualifying decisions based solely on automated processing.
Complaint: Submit a complaint to a competent data protection supervisory authority.
These rights are subject to applicable conditions, limitations, and exceptions.
For example, Blushkorea may be required to retain certain transaction records even if you request deletion because of tax, accounting, customs, fraud-prevention, or other legal obligations.
14. How to Exercise Your Privacy Rights
To exercise an applicable privacy right, please contact Blushkorea using the contact information published on our website.
Your request should describe the right you wish to exercise and provide enough information for us to identify the relevant records.
No specific form is required unless applicable law provides otherwise.
If we have reasonable doubts regarding the identity of the person making the request, we may request additional information reasonably necessary to verify identity.
We will not request more information than is reasonably necessary for verification.
Requests will generally be handled free of charge.
Where permitted by applicable law, we may charge a reasonable administrative fee or refuse to act on requests that are manifestly unfounded or excessive. If this occurs, we will explain the basis for our decision.
15. Response Times
Where GDPR applies, Blushkorea will respond to qualifying data protection requests without undue delay and generally within one calendar month after receiving the request.
Where reasonably possible, we aim to acknowledge privacy-related requests within five business days.
If a request is particularly complex or multiple requests have been submitted, the response period may be extended where permitted by applicable law.
Where GDPR permits an extension, this may be for up to two additional months. We will inform you within the initial response period and explain the reason for the extension.
For purposes of internal service targets, business days generally mean Monday through Friday, excluding applicable public holidays.
The five-business-day acknowledgement target does not replace or extend any statutory response deadline.
If we cannot act on a request, we will provide the explanation and information concerning available complaint or legal remedies where required by applicable law.
16. Automated Decision-Making
Blushkorea or its service providers may use automated systems for activities such as fraud detection, payment security, account protection, or transaction risk assessment.
Where GDPR applies, you may have the right not to be subject to a decision based solely on automated processing, including profiling, where that decision produces legal effects concerning you or similarly significantly affects you, subject to applicable exceptions.
Where qualifying automated decision-making occurs, we will provide the information and safeguards required by applicable law.
17. Cookies & Similar Technologies
The Blushkorea website may use cookies and similar technologies to provide website functionality, remember preferences, maintain security, understand website usage, and support advertising where permitted.
Cookies may include:
Strictly necessary cookies: Used for essential functions such as checkout, shopping carts, account security, and privacy preferences.
Preference cookies: Used to remember optional settings or choices.
Analytics and performance cookies: Used to understand how visitors interact with our website and improve performance.
Advertising and social media cookies: Used for advertising, campaign measurement, personalization, and social media functionality where permitted.
Strictly necessary cookies may be used without consent where legally permitted because they are required to provide services requested by the user.
Non-essential cookies and similar tracking technologies will be used only after the required consent has been obtained where applicable law requires consent.
Customers can accept or reject applicable non-essential cookies and may subsequently change or withdraw their consent through the cookie or privacy settings available on the Blushkorea website.
Rejecting non-essential cookies should not prevent you from making a purchase, although certain optional website functionality may be affected.
You may also manage cookies through your browser settings.
18. Children’s Privacy
The Blushkorea website and services are not specifically directed toward young children.
We do not knowingly seek to collect personal information from children in circumstances where parental or guardian consent is legally required and has not been obtained.
If you believe that a child has provided personal information to Blushkorea contrary to applicable law, please contact us so that we can review the situation and take appropriate action.
19. Business Transfers
If Blushkorea or the business operating it is involved in a merger, acquisition, restructuring, financing, sale of assets, transfer of business, insolvency proceeding, or similar corporate transaction, personal information may be disclosed or transferred as part of that transaction where legally permitted.
Any recipient will be required to handle personal information in accordance with applicable data protection requirements.
Where legally required, affected individuals will be provided with appropriate notice.
20. Third-Party Websites & Services
The Blushkorea website may contain links to independent websites, payment providers, social media platforms, delivery services, or other third-party services.
Blushkorea does not control the privacy practices of independent third parties.
When you leave our website or interact directly with another provider, that organization’s own privacy policy and terms may apply.
We recommend reviewing the privacy information provided by third parties before submitting personal information to them.
21. Updates to This Privacy Policy
Blushkorea may update this Privacy Policy from time to time to reflect changes in our business, website, services, technology, data-processing practices, or applicable legal requirements.
The current version will be published on the Blushkorea website with the latest revision date displayed at the top.
Where changes materially affect how personal information is processed, we will provide additional notice where required by applicable law.
If a new processing activity requires consent, we will obtain the required consent before carrying out that processing.
22. Privacy Complaints
If you have concerns regarding the way Blushkorea collects, uses, shares, stores, or otherwise processes your personal information, please contact us using the contact information published on our website.
We will review privacy complaints and respond in accordance with applicable data protection requirements.
Where GDPR applies, you also have the right to lodge a complaint with a competent data protection supervisory authority, including, where applicable, an authority in the EU or EEA country where you habitually reside, work, or believe an infringement of data protection law occurred.
You do not necessarily need to contact Blushkorea before exercising a statutory right to complain directly to a competent supervisory authority.
23. Contact Information
For privacy questions, requests to exercise data protection rights, complaints, or other enquiries concerning this Privacy Policy, please contact Blushkorea using the contact information provided on our website.
When contacting us regarding an existing customer account or order, please provide enough information for us to identify the relevant records while avoiding unnecessary sensitive personal information.
