PRIVACY POLICY

SOUTH KOREA PRIVACY POLICY

Rich Products Korea Limited and their affiliates and subsidiaries (hereinafter collectively referred to as “Rich’s,” “us,” “we,” “our,” or “Company”) have created this Privacy Policy to apply to all users of this website, https://www.richskorea.co.kr/, and all digital assets contained or offered therein (collectively, our “Services”). This Privacy Policy describes, among other things, the types of information we collect from users when you use our Services, how we use it, and your rights with respect to your information.

This Privacy Policy is integrated into our Terms & Conditions of Use (“Terms & Conditions”). By accepting this Privacy Policy and providing us with Information (defined below), you agree and consent to the practices described in this Privacy Policy.

If you have any privacy or data use concerns, please contact us as set out below under the heading “How to Contact Us.” To make sure you stay informed of all changes, you should check these policies periodically. Updates will be referenced by the “Last Updated” date shown below.

I. PERSONAL DATA CONTROLLER

For purposes of this Privacy Policy, Rich’s is the personal data controller, with an address at 10, Mullaedong 5-ga, Yeongdeungpo-gu, SEOUL. Rich’s has appointed a Chief Privacy Officer (CPO) that can be reached at __.

II. INFORMATION WE COLLECT ABOUT YOU

We may collect the following categories of personal data about you which are described in more detail below: (A) information you provide to us, (B) information we may automatically collect, and (C) information we may receive from third parties. The information listed in (A)-(C) below, are detailed below, and hereinafter referred to as “Information.”

A. Information You Provide to Us

In using our Services, you may provide us with Information, including, without limitation:

• Individual identifier such as name, username, birth date, and contact information including email address, mailing address, and telephone number(s);
• Communications with us, preferences, and other Information you provide to us such as any messages (including via online chat feature), opinions and feedback that you provide to us, your user preferences (such as in receiving updates or marketing information), and other Information that you share with us when you contact us directly (such as for customer support services); and
• Additional Information as otherwise described to you at the point of collection or pursuant to your consent.

You may also provide us with Sensitive Personal Information, such as the following:

B. Information We May Automatically Collect About You

Our Services may automatically collect the following categories of usage and technical Information about you. This Information is used by Rich’s for the operation of the Services, to maintain quality of the Services, and to provide general statistics regarding use of the Services. This Information may include:

• IP address, which is the number associated with the service through which you access the Internet, like your ISP (Internet service provider);
• Date and time of your visit or use of our Services;
• Domain server from which you are using our Services;
• Type of computer, web browsers, search engine used, operating system, or platform you use;
• Data identifying the web pages you visited prior to and after visiting our website or use of our Services;
• Your movement and activity within the website, which is aggregated with other information;
• Geographic data such as country or region;
• Mobile device information, including the type of device you use, operating system version, and the device identifier (or “UDID”); and
• Mobile application identification and behavior, use, and aggregated usage, performance data, and where the application was downloaded from.

C. Information We May Receive from Third Parties

We may collect additional Information about you from third-party websites, social media platforms, such as but not limited to, ____, Facebook, Instagram, or YouTube (“Social Media Platforms”), and/or sources providing publicly available information (e.g., from the U.S. postal service) to help us provide services to you, help prevent fraud, and for marketing and advertising purposes.

This Privacy Policy only applies to Information collected by our Services. We are not responsible for the privacy and security practices of those other websites or Social Media Platforms or the Information they may collect (which may include IP address). You should contact such third parties directly to determine their respective privacy policies. Links to any other websites or content do not constitute or imply an endorsement or recommendation by us of the linked website, Social Media Platform, and/or content.

III. HOW WE USE YOUR INFORMATION

A. Use and Purpose of Processing Your Information

We will only collect and process your Information when we have the consent of yours for one or more of the following purposes:

• To respond to your inquiries and provide you with requested information and other communications, including by email;
• To process your product registration request;
• To send you our newsletter and other correspondence you request;
• To help you locate retailer, distributor, and wholesaler locations near you;
• For general or targeted marketing and advertising purposes, including sending you promotional material or special offers on our behalf or on behalf of our marketing partners and/or their respective affiliates and subsidiaries and other third parties, provided that you have not already opted out of receiving such communications;
• To fulfill contracts we have with you;
• To manage, improve, and foster relationships with third-party service providers, including vendors, suppliers, and parents, affiliates, subsidiaries, and business partners;
• To maintain, improve, customize, or administer the Services, perform business analyses, or other internal purposes to improve the quality of our business, the Services, resolve technical problems, or improve security or develop other products and services;
• To comply with our Terms & Conditions;
• For analytics for business purposes and business intelligence;
• To comply with any applicable laws and regulations and respond to lawful requests; and/or
• For any other purposes disclosed to you at the time we collect your Information and/or pursuant to your consent.

B. Sharing or Disclosing Your Information

For the above-mentioned use and purposes of Information processing, we may share and/or disclose your Information as set forth in the Privacy Policy and in the following circumstances:

• Third-Party Service Providers. We may share your Information with third-party service providers or data processors that perform certain functions or services on our behalf (such as to host the Services, store or manage the data, perform analyses, process payments, provide customer service, or send communications for us). These third-party service providers will process this data only for purposes specified by us. In some instances, we may aggregate Information we collect so third parties do not have access to your identifiable Information to identify you individually.
• Disclosure of Information for Legal and Administrative Reasons. We may disclose your Information without notice: (i) when required to by law or to comply with a court order, subpoena, search warrant, or other legal process; (ii) to cooperate with or undertake an internal or external investigation or audit; (iii) to comply with legal, regulatory, or administrative requirements of governmental authorities (including, without limitation, requests from the governmental agency authorities to view your Information); (iv) to protect and defend the rights, property, or safety of us, our subsidiaries and affiliates and any of their officers, directors, employees, attorneys, agents, contractors and partners, and the website Service users; (v) to enforce or apply our Terms & Conditions; and (vi) to verify the identity of the user of our Services.
• Business Transfers. Your Information may be transferred or otherwise conveyed to a third party (“Conveyances”) where we: (i) merge with or are acquired by another business entity; (ii) sell all or substantially all of our assets; (iii) are adjudicated bankrupt; or (iv) are liquidated or otherwise reorganize. You agree to any and all such Conveyances of your Information. We may also share Information with prospective purchasers to evaluate the proposed transaction.
• Information Shared with our Subsidiaries, Parents, and Affiliates. We may share your Information with our subsidiaries and affiliates. If you do not want us to share your Information with our subsidiaries and affiliates, please contact [email protected].
• Aggregate and Deidentified Data. We may share general Information, aggregated data or publish information based on aggregated data. However, we will only do so in a way that your personal identity is protected.
• With Your Consent. We may share Information consistent with this Privacy Policy with your consent. In the case of handling your Information for purposes other than those mentioned above, we will only comply with the agreement with you or obtain your consent.

C. Links to Other Websites

Our Services may contain links to other websites or services that are not owned or controlled by us, including links to Social Media Platforms such as Kakao-Talk, Facebook, Instagram, or YouTube or may redirect you off our website away from our Services.

This Privacy Policy only applies to Information collected by our Services. We are not responsible for the privacy and security practices of those other websites or Social Media Platforms or the Information they may collect (which may include IP address). You should contact such third parties directly to determine their respective privacy policies. Links to any other websites or content do not constitute or imply an endorsement or recommendation by us of the linked website, Social Media Platform, and/or content.

IV. COOKIES & TECHNOLOGIES USED TO COLLECT INFORMATION ABOUT YOU

We and/or certain service providers operating on our behalf may collect Information about your activity, or activity on devices associated with you over time, on our sites and applications, and across non-affiliated websites or online applications. We may collect this Information by using certain technologies, such as cookies and other similar technologies. Third-party service providers, advertisers, and/or partners may also view, edit, or set their own cookies or place web beacons.

• Cookies (or browser cookies). Cookies are small digital files that are transferred to your computer or smartphone’s hard drive when you visit a website or click on a URL. Most web browsers automatically accept cookies. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting, you may be unable to access certain parts of our Services. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Services.
• Analytics. Analytics are tools we use, such as Google Analytics, to help provide us with information about traffic to our website and use of our Services, which Google may share with other services and websites who use the collected data to contextualize and personalize the ads of its own advertising network. Learn more about Google’s Privacy Policy here: https://policies.google.com/privacy?hl=en-US. You can opt out of having your activity on our Services made available to Google Analytics by installing the Google Analytics opt-out add-on for your web browser by visiting: https://tools.google.com/dlpage/gaoptout for your web browser.

V. INFORMATION SECURITY

We use commercially reasonable measures to provide our Services. However, you should assume that no data transmitted over the Internet or stored or maintained by us or our third-party service providers can be 100% secure. Therefore, although we believe the measures implemented by us reduce the likelihood of security problems to a level appropriate to the type of data involved, we do not promise or guarantee, and you should not expect that your Information or private communications will always remain private or secure. We do not guarantee that your Information will not be misused by third parties.  We are not responsible for the circumvention of any privacy settings or security features. You agree that we will not have any liability for misuse, access, acquisition, deletion, or disclosure of your Information.

If you believe that your Information has been accessed or acquired by an unauthorized person, you shall promptly contact us via the How to Contact Us section so that we can quickly take necessary measures.

VI. DATA RETENTION

Within the scope permitted by law, we retain your Information from the beginning of establishing a relationship with us until there is a request for deletion, destruction of Information given by you. We may retain your Information for a longer period needed to provide you the Services, and as necessary for other lawful purpose, such as to comply with our legal obligations, to resolve disputes, and to enforce our policies and agreements.

VII. DELETION AND DESTRUCTION OF YOUR INFORMATION

We may delete, destroy certain of your Information when: (i) your Information is no longer necessary for the purposes stated herein or for compliance with our routine record keeping; (ii) we no longer have a legal basis to retain your Information; (iii) you withdraw your consent. We are under no obligation to store such Information indefinitely and disclaim any liability arising out of, or related to, the Information after deletion or destruction.

Deletion and destruction of Information will not be applicable in the following cases upon your request:

• When the law prohibits data deletion;
• When personal data is processed by competent state agencies for the purpose of serving the operations of those state agencies in accordance with legal provisions;
• When personal data has been publicly disclosed in accordance with legal regulations;
• When personal data is processed to serve legal requirements, scientific research, or statistics as prescribed by law;
• In cases of urgent situations related to natural defense, national security, social order and safety, major disasters, dangerous epidemics, or when there is a risk threatening security and national defense, but the situation has not reached the level of declaring a state of emergency, prevention and combat of riots, terrorism, crime, and law violations.
• When dealing with urgent situations that pose a threat to the life, health, or safety of the data subject or other individuals.

VIII. YOUR DATA SUBJECT RIGHTS

This section applies only to individuals coming to our Services from within South Korea, and only if we collect through the Services any information from you that is considered “Personal Information” or “Sensitive Personal Information” as defined by the Personal Information Protection Act (“PIPA”), its regulations, and other applicable decrees or legislation.

A. Identity and Contact Details

B. Your Data Protection Rights

To the extent that PIPA applies, and we hold your Information under PIPA, you may have the following rights:

• Right to access: The right to request and receive personal data held about you.
• Right to correct: The right to have inaccurate personal data corrected.
• Right to erase: The right to have personal data deleted.
• Right to restrict processing: The right to limit the processing of personal data.
• Right to object: The right to object to the processing of personal data for direct marketing purposes.
• Right to data portability: The right to move personal data between different service providers.

C. Exercising Your Data Subject Rights

To exercise any of the rights described above, free of charge (subject to certain limitations), please submit a verifiable request to us via the methods described below:

IX. GEOGRAPHIC LOCATION OF DATA STORAGE AND PROCESSING

Our Services collect Information and process and store that Information in databases located in South Korea. As such, we may store and process Information on servers located outside of the country where you originally deposited the data. If you are visiting the Services from a country outside the United States, you should be aware that you may transfer personally identifiable Information about yourself to the United States, and that the data protection laws of the United States may not be as comprehensive as those in your own country. By visiting our Services and submitting Information, you consent to the transfer of such Information beyond the national jurisdiction for the purposes of fulfilling customer needs and of data processing as mentioned herein.

X. CHILDREN’S INFORMATION

The Services are intended only for users over the age of fourteen (14) years of age. If we become aware that a user is under fourteen (14) years of age (or a higher age threshold where applicable) and has provided us with Information, we will take steps to comply with any applicable legal requirement to remove such Information. Contact us if you believe that we have mistakenly or unintentionally collected Information from a child under the age of fourteen (14).

Our processing of a user’s Information who is fourteen (14) years of age or older must have the consent of the user and have the consent of their parents or legal guardians as prescribed by current law, except for cases where the law allows the processing of Information without consent. Parents or legal guardians of the user have the responsibility to verify the age of the user and collect the consent of the user aged fourteen (14) or above for allowing us to process the personal data of the user before providing Information. When requested, the parents or legal guardians of the user must provide us with a copy of the user’s consent.

XI. DIFFICULTY ACCESSING OUR PRIVACY POLICY

Individuals with disabilities who are unable to usefully access our Privacy Policy online may contact us to inquire how they can obtain a copy of our policy in another, more easily readable format.

XII. CHANGES TO THIS PRIVACY POLICY

We reserve the right to change, modify, or amend this Privacy Policy at any time to reflect changes in our products and service offerings, accommodate new technologies, regulatory requirements, or other purposes. If we modify our Privacy Policy, we will update the “Last Updated” date below and notify you via reasonable methods, such changes will be effective immediately upon posting.

XIII. HOW TO CONTACT US

If you have any questions about this Privacy Policy or the Information, we have collected about you or would like to contact our Data Protection Officer (DPO), please contact us at the following: