Privacy Policy

At Haewahdal, accessible via haewahdal.com, your privacy is of paramount importance. This Privacy Policy sets forth our unwavering commitment to safeguarding your personal data and upholding your rights in accordance with the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant data protection laws.

This policy outlines the types of personal data we collect, our purposes for processing, your available rights, and our approach to data protection. We encourage you to read this Privacy Policy carefully to understand how Haewahdal processes your information.

1. Introduction: Our Commitment to Privacy and Data Protection

At Haewahdal, we value transparency, security, and user autonomy. Our data processing practices are grounded in privacy-by-design principles, ensuring that we minimize data collection and provide you with control over your personal information. Whether you visit our website, make a purchase, or contact us, we are committed to protecting your data against misuse, unauthorized access, and loss.

2. Scope of this Policy and Our Role as Data Controller

This Privacy Policy applies to all data collected through haewahdal.com, including any communications or transactions you have with us. Haewahdal acts as the data controller for the personal data we collect, determine the purposes and means of processing your data in accordance with applicable data protection legislation.

If you reside in California or the European Economic Area, you may be entitled to additional privacy rights under local laws, which are honored in the scope and intent of this policy.

3. Categories of Personal Data We Process

We collect and process the following categories of personal information:

a. Usage Data
This category includes information about how you interact with haewahdal.com, such as IP address, browser type and version, device identifiers, time zone, session history, page views, navigation paths, and referring websites.

b. Account Data
When you register or make a purchase, we collect information such as your full name, postal address, email address, and phone number.

c. Profile Data
This includes data collected about your preferences, purchase history, items added to wishlists, behavior on the site, and interests relevant to your account profile.

d. Communication Data
We maintain records of your interactions with our support and customer service teams, including the content of emails and form submissions and any other inquiries directed to us.

e. Technical Data
To ensure continuous improvement and compatibility, we collect details about your device, operating system, browser configurations, language settings, and network performance.

f. Transaction Data
Includes payment-related information (billing address, partial payment card data processed through secure third-party platforms), fulfillment details, shipping address, and order history.

g. Preference Data
We store your preferences regarding marketing communications, interest categories, and consent record logs.

4. Legal Bases for Data Processing

We process your data under the following legal justifications:

– Legitimate Interest: To enhance user experience, secure our platform, and market relevant products to our customers.
– Contract Performance: To fulfill our obligations when you purchase goods or sign up for our services.
– Legal Obligations: To comply with financial, regulatory, or compliance requirements.
– Consent: For optional marketing, cookie deployment (where required), and specific uses of non-essential personal data.

5. Your Rights Under Data Protection Laws

You have the right, subject to applicable laws and verification requirements, to exercise the following:

– Right of Access: Obtain access to your personal data.
– Right to Rectification: Request correction of inaccurate or incomplete data.
– Right to Erasure: Request deletion of your data, where legally permissible.
– Right to Restriction: Ask us to restrict or suspend processing of your data under certain conditions.
– Right to Data Portability: Receive your personal information in a structured, machine-readable format to share with another provider.
– Right to Object: Withdraw consent or object to certain processing activities.
– California-specific Rights: California residents may also exercise the right to opt out of the sale or sharing of their personal data and to request detailed disclosures of categories collected or shared.

To exercise any of these rights, please contact us at [email protected].

6. Security Measures

Haewahdal implements industry-standard organizational and technical safeguards including, but not limited to:

– End-to-end encryption of sensitive data in transit and at rest;
– Role-based access control to limit access to personal data;
– Regular system updates and patch management;
– Comprehensive employee privacy training;
– Secure data backups and disaster recovery protocols;
– User authentication and login obfuscation techniques.

While no digital transmission is completely secure, we continuously review and enhance our measures in light of evolving threats.

7. International Data Transfers

Personal data collected via haewahdal.com may be transferred to and processed in jurisdictions outside your home country, including the United States or countries without equivalent data protection laws. In such cases, we ensure:

– The implementation of standard contractual clauses approved by the European Commission;
– Binding corporate rules or other approved transfer mechanisms;
– Compliance with legal obligations for cross-border data handling.

8. Data Retention

We retain personal data for the period necessary to fulfill the purposes outlined in this policy:

– Usage, Technical, and Profile Data: up to 36 months after last user activity;
– Account and Communication Data: retained as long as the account is active or for 6 years post-deletion for compliance;
– Transaction Data: retained for at least 7 years to meet tax and accounting obligations;
– Preference and Marketing Data: retained indefinitely unless revoked or account is terminated.

Upon expiry of relevant periods, data is either anonymized or irreversibly deleted.

9. Cookie Policy

Haewahdal.com utilizes cookies and similar technologies for performance, personalization, and security purposes. Cookies fall into the following categories:

– Essential Cookies: Necessary for website functionality, login sessions, and cart persistence.
– Functional Cookies: Enhance usability and personalize your experience.
– Analytics Cookies: Help us analyze website traffic and performance (e.g., via Google Analytics).
– Performance Cookies: Improve speed, performance, and response times based on aggregated data.

We only use non-essential cookies with your consent as required under applicable laws.

10. Cookie Management and Compliance

You may manage your cookie preferences directly through your browser settings or via our on-site cookie consent manager, compliant with GDPR Article 7 and CCPA requirements. Users may withdraw consent at any time.

Do Not Track signals are honored where technically feasible. Consent logs are maintained to ensure compliance and revocation requests are processed without undue delay.

11. Children’s Data Protection

Haewahdal.com and its services are not directed toward children under the age of 13. We do not knowingly collect or solicit personal data from minors. If we become aware that information has been collected from a child without verified parental consent, we take immediate steps to delete such data. Parents or guardians may contact us at [email protected] to request removal of any such records.

12. Policy Updates and Notification Procedures

Haewahdal reserves the right to amend this Privacy Policy to reflect operational, legal, or regulatory changes. When such updates occur, we will make the revised version available on haewahdal.com and may notify you via prominent website notices or direct communication, especially where material changes affect your rights.

13. Contact Us

For any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, you may reach us at:

Email: [email protected]

We are committed to ensuring your data is processed lawfully, transparently, and fairly. If you believe your privacy rights have been infringed, you also have the right to lodge a complaint with your local supervisory authority.

This Privacy Policy reflects our adherence to global data privacy standards and our duty to protect the information you entrust to us. For any further clarification or to exercise your privacy rights, do not hesitate to contact us at [email protected].