Privacy Notice - Yogoods

YOGOODS STORE Privacy Policy

Last updated: October 15, 2026

This Privacy Policy (the “Privacy Policy”) explains how BEIJING ZHUOBEN TECHNOLOGY CO., LTD. (the “Company”, “we”, “us” or “our”), as a cross-border e-commerce operator serving users in South Korea, collects, uses, discloses and processes your personal information through this website and related services (as defined in the Terms of Service) in compliance with South Korean personal information protection laws.

Please read this Privacy Policy carefully.

This Privacy Policy forms part of the agreement between you and us. By clicking or selecting “I agree”, “Accept” or a similar indication on the website, or by accessing or using any part of our website or services, you are deemed to have read and understood this Privacy Policy. You are also deemed to consent to our collection, use, provision or processing of your personal information in the manner described in this Privacy Policy. This website does not intentionally collect personal information from children under 14. Children under 14 require the express consent of a legal representative to use this website. If you do not agree to this Privacy Policy, please refrain from using our website or services.

Amendments

We may amend this Privacy Policy from time to time. If an amendment materially changes your rights or obligations, we will notify you in advance through a website notice or email of the changes, reasons and effective date. If, after receiving notice, you continue to use our website or services after the amended Privacy Policy takes effect, you are deemed to agree to the amended Privacy Policy. You may object to an amendment at any time. If you do not agree to it, you may stop using the services and request account deletion.

For questions or complaints about this Privacy Policy or our collection, use, provision or processing of personal information, please contact service-kr@yogoods.shop. Our person responsible for personal information protection can be contacted at the same email address. You may send personal information enquiries or complaints directly to this address.

1. Definitions

1.1 The terms used in this Privacy Policy have the following meanings:

“Personal information protection laws” means the personal information protection laws applicable in South Korea, including the Personal Information Protection Act and its Enforcement Decree, guidelines issued by the Personal Information Protection Commission, and the Act on Promotion of Information and Communications Network Utilization and Information Protection.

“Personal information” means information that directly or indirectly identifies a particular individual, such as a name, date of birth, email address, telephone number, delivery address or Personal Customs Clearance Code (PCCC). Information that can identify a particular individual when combined with other information is also personal information.

“Processing” means any act concerning personal information, including recording, storage, retrieval, provision, transmission and deletion.

“Overseas transfer” means providing your personal information to an entity outside South Korea (such as an overseas storage server or third-party processor) for storage, use, outsourcing or processing.

1.2 Terms not separately defined in this Privacy Policy have the meanings given in our published Terms of Service.

2. Categories of Personal Information Collected

2.1 When you visit our website, use our services or register an account, we may collect the following personal information to the minimum extent necessary for each purpose:

(a) Identity and account information

We may collect your name, nickname, username, email address, mobile telephone number, PCCC, login password and membership information (including membership points and usage history, membership level, wishlist and coupon history). This information is used to create accounts, verify identity or contact you. We do not store login passwords in plain text; we store salted, hashed password verification values. You may choose whether to register when placing an order. If you choose to register, we automatically create an account using the email address used for the order and link the order to that account. Your date of birth and profile photograph are optional information that you may enter or upload. Unless otherwise required by law, we do not actively collect unnecessary personal information such as photographs of identification documents.

(b) Transaction information

We may collect billing and delivery addresses (including postal code, province or metropolitan area, city, county or district, detailed address and company name), payment records, order history (including product information, quantities, amounts, taxes, shipping fees, coupon and points usage, payment status, transaction numbers and tracking numbers), and the IP address and browser information used when ordering. This information is used to process transactions and arrange delivery. Sensitive payment information, including card numbers and CVV codes, is processed directly by third-party payment service providers such as Oceanpayment and PayPal. We do not store full card numbers or CVV codes; we receive only payment results and transaction information necessary to fulfil orders.

We may collect product preferences, your opinions and feedback, support records (such as chat, email and telephone communications), email addresses registered for marketing communications, and coupon issue and receipt history. This information is used to improve services and provide personalised product recommendations.

(d) Service usage information

We may collect interaction records, such as login times, and technical information, including IP addresses, device information and browser types. We may also record IP addresses associated with failed logins to prevent account hacking.

(i) Information about your use of the website or services, including the dates and times of information entered on the website or provided while using the services.

(ii) Records of consultations and interactions between you and customer support.

(iii) Technical information that may include URLs, cookie data, web beacons and other tracking technologies, IP addresses, the types of devices used to access or connect to the website, unique device IDs, device characteristics, network connection type and provider, network and device performance, browser type, language and operating system.

This information is used to improve the website and services and provide you with better service.

(f) Third-party platform information

This website does not currently support third-party account login and does not actively receive your personal information from third-party platforms.

2.2 We do not actively collect sensitive information such as race, beliefs, health or criminal records, nor facial recognition information, biometric information or precise GPS-based location information. If you provide such information voluntarily, we process it only where you have given express consent or processing is required by law.

3. Purposes of Using Personal Information

3.1 We may process your personal information for the following purposes:

(a) Providing access to and use of the website and services.

(b) Processing and managing your account, including:

(i) Verifying your age and identity.

(ii) Assessing your suitability and eligibility to use particular features, products or services, and emailing identity verification and account management notices, including password resets.

(i) Conducting research, analysis and development, including data analysis, surveys and other analytical activities.

(ii) Personalising and customising content and services by providing location- or traffic-based services and products and services better suited to your preferences.

(iii) Improving the user experience.

(iv) Improving the website user interface.

(v) Identifying additional characteristics about you from personal information you provide to us or third parties, and providing more suitable or relevant information.

(vi) Conducting data analysis, testing and research to monitor and analyse usage and activity trends.

(d) Processing personal information for legal and operational purposes, including:

(i) Storing, hosting and backing up personal information domestically and overseas for disaster recovery.

(ii) Receiving, handling and responding to your enquiries, requests, applications, complaints and comments.

(iii) Detecting fraud.

(iv) Contacting you to provide information or services where required by law or requested by you.

(v) Sharing personal information in proposed purchases, mergers or acquisitions of part of our business, and complying with applicable personal information protection requirements when disclosing it.

(vi) Responding to legal proceedings, exercising legal rights and remedies, and handling complaints or claims.

(vii) Responding to information requests from the public, government and regulatory bodies, statutory boards and related companies, and conducting audits, compliance activities, investigations and inspections.

(viii) Complying with applicable laws, codes of conduct, guidelines or rules and assisting law enforcement and investigations by domestic and overseas government and regulatory bodies.

(e) Processing purchases on the website, including:

(i) Enabling you to browse and buy goods on the website.

(ii) Verifying and processing payment transactions.

(iii) Arranging delivery of goods you purchase.

(iv) Informing you of purchase progress. These notices are sent through the email system to your registered email address.

(v) Providing customer support.

(f) Marketing and advertising, including providing information that may be useful to you or that you request.

(g) Transmitting or providing personal information for the above purposes to unaffiliated third parties (including third-party service providers and agents) and relevant government and regulatory bodies domestically and overseas.

(h) Achieving other business purposes related or incidental to the above purposes.

3.2 Even if you stop using the services for any reason, we may retain necessary personal information for the retention periods prescribed by law. When those periods expire, we delete or anonymise the information without undue delay.

4. Recipients of Personal Information and Overseas Transfers

Your personal information may be provided to the following third parties domestically or overseas.

4.1 You acknowledge and agree that personal information you provide to us may be provided or transferred to the following third parties, which may use or process it for the above purposes or other purposes permitted or required by law.

(a) Affiliates

We do not currently provide your personal information to affiliates. If we do so in the future, we will disclose in advance the affiliate’s name, categories of information, purpose and retention period, and obtain your separate express consent.

(b) Service providers

We use third-party service providers to operate and maintain the website, store data and provide other services. We may share your personal information with them to enable your smooth use of the website and services. Examples include:

(i) We use third-party payment service providers such as Oceanpayment and PayPal to process payments.

(ii) We use cloud services from Alibaba Cloud Computing Co., Ltd. (brand name: Alibaba Cloud), a third-party cloud service provider, to host this website and related personal information. Relevant data is stored at a cloud server node in Seoul, South Korea.

(iii) We use third-party data analytics and user experience optimisation providers, such as Google Tag Manager, Google Analytics and Microsoft Clarity, for website visit statistics, user behaviour analysis and service experience optimisation. We may share the technical information and website usage information necessary for these purposes with those providers. In Microsoft Clarity, names, addresses, telephone numbers, email addresses and payment information entered in page fields are masked, so this personal information is not displayed in plain text in behaviour replay recordings. Google Search Console is used only to monitor website search performance and does not collect additional personal information from website visitors through that service. Google Fonts is used to load website fonts; your IP address is transmitted to Google when you access the website and load font resources.

(iv) We use third-party logistics providers to process orders and related deliveries. We may provide your name, delivery address, contact details and the purchaser’s PCCC as needed to perform delivery services. The system also checks whether your PCCC matches your name and mobile telephone number to facilitate customs clearance and delivery.

Where necessary under South Korean or other applicable laws to respond to court orders, administrative measures or other legal proceedings, or to protect the public interest or prevent unlawful activity, we may disclose personal information to domestic and overseas law enforcement, government or regulatory bodies to the extent necessary.

(d) Purchasers or successors of our business

If there is a merger, reorganisation, dissolution or other sale or transfer of ownership, we may share your personal information with the purchaser or successor.

(e) Our advisers

We may share or disclose your personal information when seeking professional advice from advisers, including auditors and lawyers.

4.2 Overseas transfers of personal information

When transferring your personal information outside South Korea for storage or processing, we strictly comply with the overseas provision and transfer requirements of South Korea’s Personal Information Protection Act. Analytics information processed by service providers such as Google and Microsoft may be stored outside South Korea, including but not limited to the United States and other countries or regions. We take the necessary safeguards to protect your personal information to an equivalent level to that within South Korea. By agreeing to this Privacy Policy, you are deemed to give express consent, in accordance with law, to these overseas transfers.

You may withdraw consent to overseas transfers at any time. Please see the user rights provisions in section 7 of this Privacy Policy for how to withdraw. On withdrawal, we immediately stop transmitting personal information to overseas third parties. However, some core or additional services that rely on overseas data processing, such as purchaser PCCC verification, cross-border order delivery and cross-border brand after-sales support, may no longer function normally. Withdrawal does not affect the validity of lawful overseas transfers and processing carried out before withdrawal.

4.3 Regardless of how our relationship with you ends or changes, personal information may continue to be provided and retained to the extent necessary to fulfil legal obligations.

5. Third-Party Links and Collection by Third Parties

5.1 This website may contain links to websites operated by our affiliates, advertisers or other third parties (“Third-Party Websites”). Some website functions and features, such as payments, may be provided by third parties such as payment service providers (“Third-Party Services”). Third-Party Websites and Third-Party Services are operated by the relevant third parties (“Third-Party Service Providers”). When you use these services or follow links to their websites, the relevant providers may directly collect your personal information, including credit card information. These services are operated independently, and their processing of personal information is governed by their own published privacy policies.

5.2 We do not warrant the personal information processing practices of Third-Party Services. Please read the relevant provider’s privacy policy carefully before using them. If a Third-Party Service we connect collects personal information, we will clearly inform you before connecting the service. You bear the risks arising from visiting or using Third-Party Websites or Services and providing your personal information to their providers.

5.3 By visiting a Third-Party Website, using a Third-Party Service or providing personal information to a Third-Party Service Provider, you acknowledge and agree that:

(a) You have read and understood the provider’s privacy policy and consent to its collection, use, provision or processing of your personal information under that policy.

(b) We do not control that provider. The provider alone determines how and why it collects, uses, provides or processes your personal information as a personal information controller under applicable laws.

(c) To the maximum extent permitted by law, we are not liable for any liability, loss or damage arising from your visit to a Third-Party Website, use of a Third-Party Service, or a provider’s collection, use, provision or processing of your personal information.

6. Use of Cookies

6.1 This website uses cookies and similar technologies to operate normally, provide features and optimise the user experience. With your consent, they may also be used for website visit analysis, user behaviour analysis and marketing effectiveness analysis. Cookies are small data files stored in your browser or device that may record visit preferences, session status and website usage information.

6.2 Essential cookies are mainly used for functions necessary for the normal operation of the website, including maintaining login status, storing shopping cart contents, operating order and payment procedures, recording coupon issue status, retaining guest wishlists, website security and fraud prevention. Essential cookies are used only within this website and are not provided to third parties. Separate consent for essential cookies is not obtained under South Korea’s Act on Promotion of Information and Communications Network Utilization and Information Protection.

Analytics tools such as Google Analytics and Microsoft Clarity use analytics cookies to statistically understand website usage and improve the user experience. Analytics cookies are activated only after separate express consent is obtained through the popup shown on your first visit.

6.3 On your first visit, a cookie popup provides information about cookies and similar technologies. Except for cookies necessary for basic website operation, non-essential cookies used for analytics, user experience optimisation, personalised recommendations, advertising and marketing are activated only after your consent.

You can choose “Accept all” or “Reject all” in the cookie popup. We may use cookies and similar technologies to understand how you visit and use the website. For this purpose, third-party tools such as Google Analytics and Microsoft Clarity may provide visit statistics, user behaviour analysis and session replay. Website usage and technical information necessary for these purposes may be provided to the relevant analytics providers. If we use cookies provided by social media or advertising service providers in the future, we will disclose the relevant information and obtain necessary consent in accordance with law after actually activating the service. See this Privacy Policy for details of the collection, use, sharing and overseas transfer of personal information.

6.4 You may change permission for cookies at any time by changing your browser settings or deleting stored cookies. Disabling essential cookies may prevent core features such as login and the shopping cart from functioning properly.

7. Your Rights and Choices Regarding Personal Information

7.1 Withdrawal of consent

(a) You may withdraw consent and require us to stop collecting, using, disclosing and/or processing your personal information for all or some purposes by emailing a request to the contact address above.

(b) After you submit a withdrawal request, we may require a reasonable period to process it and respond.

(c) We respect your decision to withdraw consent. Depending on the nature and scope of the request, you may be unable to continue using our website or services. We will inform you of this before completing the request.

(d) Withdrawal does not affect the validity of processing based on your consent before withdrawal.

7.2 Requests to access, correct or delete personal information

(a) You may request:

(i) Access to a copy of your personal information held by us or information about how we used or disclosed it during the year preceding your request.

(ii) Correction, updating or deletion of your personal information held by us.

(iii) Information about the purposes for which we use your personal information.

You may submit a request by emailing the contact address above.

(b) We do not charge for exercising these rights, except for necessary and reasonable costs in special circumstances, such as postage.

(c) We respond to and process requests within 10 business days of receipt. If a valid reason prevents processing within that period, we will notify you in writing before the 10 business days expire of the reason for extension and expected processing period. An extension will not exceed 10 business days. If we cannot provide personal information or make a requested correction, we will explain why. You also have the right to request suspension of processing. If the legal requirements for suspension are met, we immediately stop processing.

You can also log in to “My Account” to directly view, correct or update your personal information, delivery address and login password. Order and accounting records that must be retained by law continue to be retained even after your account is deleted or closed.

8. Protection of Personal Information

8.1 We implement appropriate administrative, physical and technical safeguards to prevent unauthorised access, collection, use, disclosure, copying, alteration, deletion or similar risks, and to prevent loss of media or devices storing personal information.

8.2 Although we implement reasonable safeguards, absolute security on the internet cannot be guaranteed. We continually improve our security systems to protect your personal information as safely as possible.

9. Accuracy of Personal Information

9.1 When providing personal information, you must ensure it is true, accurate and complete. If it changes, please promptly update it through account settings or customer support so transactions and services can proceed normally.

9.2 You may log in to your account at any time to check and update your personal information.

10. Retention Periods

10.1 We retain your personal information only for as long as necessary to achieve the collection purposes or as required or permitted by applicable laws.

10.2 Business data is retained for as long as necessary to achieve its collection purposes. If other applicable laws specify a separate retention period, that period applies. If we reasonably determine that continued retention is inconsistent with the collection purposes and there is no legal or business need, we stop retaining the information and delete it or anonymise it so that no particular individual can be identified.

Dispute Resolution

11.1 The formation, validity, performance and interpretation of this Privacy Policy and all disputes arising from personal information processing are governed by South Korean law, excluding its conflict-of-laws rules.

11.2 Any dispute relating to this Privacy Policy will first be addressed through amicable consultation. If it cannot be resolved through consultation, proceedings may be brought before the Seoul Central District Court in South Korea.

11.3 This provision does not restrict your statutory right under South Korean law to bring proceedings before a court with jurisdiction over your place of residence.