This Privacy Policy (“Policy”) helps you to understand how we use your personal information, who we share it with and the rights that you have.

About SHILOH TRADING CO., LTD.

SHILOH TRADING CO., LTD. is a Korean corporation with its principal place of business at 41, CENTUM 5-RO NSN BLDG, 302HO BUSAN-SI HAEUNDAE-GU 48059, SOUTH KOREA

This site is operated by SHILOH TRADING CO., LTD.

For the purpose of data protection laws, in relation to any personal information collected from you via the Site, SHILOH TRADING CO., LTD. is the data controller.

When this Policy applies

This Policy applies:

• to your use of our website or application that directed you to this Policy, and/or the website where this Policy is published (the “Site”); or
• if you otherwise share your personal information with us, for example if you contact us with a query or ask us to send you marketing.

We may change the terms of this Policy from time to time and you should check it regularly. The last updated date is shown at the beginning of this Policy. If we make any material changes, we will post such changes on the Site.

How we use your data

We will only ever process your personal information if we have a lawful basis to do so. We use your personal information for the following purposes:

• To process orders that you place and to facilitate any returns: where you order goods from the Site, we will collect your name, email address, phone number, delivery address and payment details to process your order, deliver those goods to you and, where applicable, facilitate any product returns.
  This will include sharing your personal information with delivery companies and other subcontractors, such as payment providers, as well as credit reference agencies for the purposes of assessing fraud, credit and/or security risks.
  We collect this personal information to enter into and perform the contract for the sale of goods.
• To make the Site better: when you consent to our use of cookies, we will automatically collect the following information:
  • your email address;
  • technical information, including but not limited to the Internet protocol (IP) address used to connect your computer to the internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, screen resolution, operating system and platform; and
  • information about your visit, including but not limited to the full Uniform Resource Locators, clickstream to, through and from the Site (including date and time), page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks and mouse-overs) and methods used to browse away from the page.

We use this information:

• to provide you with a more effective user experience (such as by displaying goods we believe you will be interested in, based on your purchase history and browsing habits) associate other data with you, analyze other data we collect, and identify other potential customers (e.g. “look alike” customers);
• to help us improve the Site; and
• for the purpose of making the Site more secure, to administer the Site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes.
• To provide customer services to you: we may collect your name, email address, phone number and (if on social media) your handle in order to provide various supporting customer services to you (such as where you contact us with a question in connection with a product by phone, email or social media). We use your account information to notify you about important service messages, such as material changes to this policy, product recalls or information about your account.
  We process your personal information in these circumstances because it’s in our legitimate interests to make sure we can properly respond to your query.
• For marketing purposes: where you have opted in via the Site to receive updates on our goods and services including offers, promotions and new product releases, we will process your personal information to provide you these updates in line with the preferences you have provided.
  We will only use your personal information in this way with your consent.
  You can withdraw your consent to marketing at any time by contacting us at [samorgainsert@gmail.com] or, where relevant, by following the unsubscribe link in any marketing communication you receive from us. We also work with social networks to provide custom audience targeting, which involves uploading your email address to those platforms. We do this under our legitimate interest to promote our business.
• Where you enter a competition, promotion or survey: we will collect your name, email address and any other personal data that forms a part of the entry (this may differ depending on the competition, promotion or survey). We do this under our legitimate interest to run our promotions effectively and to award the prizes to the winner.

Who we share your data with

We do not sell, otherwise disclose, or share personal information we collect and hold about you, except as described in this Policy.

We provide personal information to the third parties listed below with prior consent from the data subject.

• Samorga if we stop running their web store: if we stop running Samorga’s web store, we will transfer the marketing database and order transaction history to them, so they can continue to support you and keep in touch where you’ve asked to hear more about their brand.
• If our business is sold/transferred: we may also share your personal information in the event that we sell or transfer any part of our business or assets, including in the event Samorga closes the Site or changes the domain, in which case we will disclose your personal information to the prospective buyer or transferee of such business or assets, including to Samorga. We process your personal information in these circumstances because it is in our legitimate interests to ensure our business/the Site can continue to be operated. If you object to our use of your personal information in this way, the relevant buyer or transferee of our business/the Site may not be able to provide services to you.
• Regulators/ Authorities/ Enforcement Agencies: we may disclose your personal information wherever required to comply with applicable laws or an order of a court of competent jurisdiction or a government or regulatory body’s lawful requests for information.

Where your personal information is shared with third parties, we will use appropriate security measures to safeguard such information against unauthorised use or accidental loss, damage or destruction. We will share the minimum amount of personal information necessary to fulfil the purposes of processing.

Cookies

The Site uses cookies to distinguish you from other users of the Site. This helps us to provide you with a good experience when you browse the Site and also allows us to improve the Site.
A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your device. We only use (and store) non-essential cookies on your browser or device if you provide your consent.

Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies and may collect information about a user’s online activities over time and across different internet websites or mobile applications. We recommend that you check the relevant third party’s privacy policies for information about any cookies which may be used.
Some Internet browsers offer what often is referred to as a “do not track” mechanism for browser users to automatically signal privacy preferences to websites that they visit. The Site does not currently respond to do-not-track-signals. If you would like to use your browser to restrict the placement of cookies on your device, you may block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of the Site.
We may use Google Analytics, a third party provider of analytics tools, or a similar third party service to analyze information about visits to the Site. For additional information about Google Analytics, how it uses information, and how you can opt-out of Google Analytics please visit: https://tools.google.com/dlpage/gaoptout.

Where we store your data

All information you provide to us is stored on secure servers which are based both in South Korea and outside of South Korea
When we share your information with our third-party data processors for marketing purposes, they may store your data within or outside South Korea
Whenever we transfer your personal information outside of South Korea, we ensure it receives additional protection as required by law. To keep this Policy as short and easy to understand as possible, we haven’t set out the specific circumstances when each of these protection measures are used. You can contact us at samorgainsert@gmail.com for more detail on this.

How long we keep your data for

We will only retain your personal information for as long as we need it to ensure that we can assist you should you have any questions, feedback or issues. We also reserve the right to retain your personal information for longer than this, to comply with our legal and/or regulatory obligations.
The circumstances where personal data must be retained by law are set out below. During this period, we store the personal data as required by law and do not use this information for any other purpose.

• Records on contract or subscription withdrawal: 3 years
• Records on payment and supply of goods: 3 years
• Records on consumer complaints or dispute handling: 3 years
• Records on distribution of electronic documents through authorised electronic addresses: 10 years
• Login records: 3 months

Destruction of Personal Information

We retain personal data only for as long as we have a lawful purpose to use it. When we no longer need to use it, we securely destroy it. The procedure and method of destroying personal information is as follows.

1. Destruction Procedure: We select the personal data that is required to be destroyed and destroy it with the approval of our data protection officer.
2. Destruction Method: We destroy personal data recorded and stored in the form of electronic files so that the records cannot be reproduced, and destroy personal data recorded and stored in paper documents by shredding or incineration.

Measures to Ensure Safety of Personal Information

We take the following measures (among others) to ensure the safety of personal data:

1. Administrative measures: Establishment and implementation of internal management plans and regular employee training.
2. Technical measures: Management of access rights such as personal data processing systems, installation of access control systems, encryption of unique identification data and use of security programs.
3. Physical measures: Access controls.

Your rights under data protection laws

You have various other rights under applicable data protection laws, including the right to:

• access your personal data (also known as a “subject access request”);
• correct incomplete or inaccurate data we hold about you;
• ask us to erase the personal data we hold about you;
• ask us to restrict our handling of your personal data;
• suspend our handing of your personal data;
• ask us to transfer your personal data to a third party;
• object to how we are using your personal data; and
• withdraw your consent to us handling your personal data.

You can exercise any of the above rights by contacting us via email at samorgainsert@gmail.com. Our security procedures mean that we may need to request proof of identity before we disclose personal information to you in response to any request.
You also have the right to lodge a complaint with us or the Personal Information Protection Commission, the supervisory authority for data protection issues in South Korea. If you are based in a European Union member country, you can find your relevant supervisory authority here. If you are located outside of these locations and require assistance, please contact us via email at samorgainsert@gmail.com
Please keep in mind that privacy law is complicated, and these rights will not always be available to you all of the time.

How to get in touch

Should you need to contact us please email us at samorgainsert@gmail.com
We have a designated data protection officer to take full responsibility for the handling of personal data and to deal with complaints and queries from data subjects related to personal data processing.
Data Protection Officer
Name : [ ]
Position: [**** Director]
Contact: [phone number], samorgainsert@gmail.com
You can contact the data protection officer for all personal information protection related enquiries, complaints, damage relief, etc. that occurred while using our services.