Privacy Policy

01 — Who we are

KCOS is a Korean beauty retail brand operating under a registered entity in South Korea (Reg. No. 201-81-89515, 6GA, 11 Eulji-ro 42-gil, Jung-gu, Seoul 04561, KR). We operate the website kcosonline.com. For privacy-related enquiries contact us at hello@kcosonline.com.

02 — Data we collect

When you place an order or create an account, we collect your name, email address, shipping address, phone number, and payment information. Payment data is processed directly by PayPal and is never stored by us. We also collect browsing data automatically via Shopify's built-in analytics and Google Analytics to improve site performance.

03 — How we use your data

We use your data to process and fulfil orders, send order confirmations and shipping updates, respond to customer service enquiries, and improve our website. We do not sell, rent, or share your personal data with third parties for marketing purposes.

04 — Cookies

kcosonline.com uses cookies necessary for the operation of the store, set by Shopify and required for cart functionality, checkout, and session management. We also use Google Analytics to understand how visitors interact with our site — this sets analytics cookies that collect anonymous, aggregated data about traffic and behaviour. These analytics cookies are only placed with your prior consent, managed through our cookie banner on your first visit. We do not use advertising or retargeting cookies at this time. If this changes, this policy will be updated and fresh consent will be requested. For full details on the cookies we use, see our Cookie Policy.

05 — Data sharing

Your data is shared only with service providers necessary to operate our business — including Shopify (platform), PayPal (payment processing), Google Analytics (traffic analysis), and shipping carriers (for order fulfilment). These providers process data solely on our behalf and are bound by their own privacy commitments.

06 — Data retention

We retain your personal data for as long as necessary to fulfil orders and comply with legal obligations. Order records are kept for a minimum of 5 years in accordance with applicable accounting regulations. You may request deletion of your data at any time, subject to legal retention requirements.

07 — Your rights

Depending on your country of residence, you may have the right to access, correct, delete, or restrict the processing of your personal data. EU residents have rights under the General Data Protection Regulation (GDPR). To exercise any of these rights, email us at hello@kcosonline.com and we will respond within 30 days.

08 — International transfers

As we are based in South Korea and use Shopify's global infrastructure, your data may be processed outside your country of residence. Where data is transferred from the EU, we rely on standard contractual clauses or equivalent safeguards as provided by Shopify.

09 — Security

We take reasonable technical and organisational measures to protect your data. Our store is hosted on Shopify, which is PCI DSS compliant and uses SSL encryption across all pages. No method of transmission over the internet is 100% secure — if you have concerns, contact us directly.

10 — Changes

We may update this Privacy Policy from time to time. Changes will be published on this page with an updated date. Continued use of kcosonline.com after changes constitutes acceptance of the revised policy.