GLOW TAG

Privacy Policy

How GLOW TAG processes personal information, including the information collected, its purposes, retention periods and your rights.

Original effective date: June 21, 2026

1. About this Privacy Policy

This Privacy Policy explains how GLOW TAG collects, uses, retains and destroys users' personal information when operating its online store. GLOW TAG complies with applicable privacy laws and processes personal information within the scope needed to provide services.

2. Purposes of processing

GLOW TAG processes personal information for the purposes below. Information is not used for other purposes, and necessary measures will be taken under applicable law if the purpose changes.

Registration, membership management and identity verification
Product orders, payments, delivery, exchanges, returns and refunds
Reviewing and responding to customer inquiries
Preventing misuse, maintaining service stability and addressing disputes
Reviewing service usage statistics and improving the store

3. Personal information processed

GLOW TAG may process personal information needed at each stage of service use. GLOW TAG does not directly store sensitive payment details such as full card numbers; these are processed through payment service providers.

Activity	Information that may be processed	Main purpose
Registration and membership management	Information entered on the registration screen, such as email address, password, name and contact details	Member identification, account management, order history and customer support
Guest purchases	Purchaser and recipient names, contact details, addresses, email address and order information	Order confirmation, delivery, exchanges, returns and refunds
Orders and payments	Products ordered, payment amount, payment method and transaction information needed for authorization, cancellation and refunds	Payment processing, cancellation, refunds and proof of transactions
Product delivery	Recipient name, contact details, delivery address and delivery instructions	Delivery, tracking and delivery-related notices
Exchanges and returns	Order information, contact details, collection address, reason for exchange or return and information needed for refunds	Requests, collection and refunds
Customer inquiries	Name, contact details, email address, inquiry contents and support records	Reviewing inquiries, customer support and disputes
Automatically generated or collected information	IP address, cookies, access logs, browser and device information and service usage records	Service stability, security and improvement of the user environment

When you request payment after selecting international payment (PayPal), the PortOne integration uses the purchaser’s name, email and phone number; billing country, region, city, street address and postcode; recipient name and shipping address; order identifiers and summary; and the payment amount and actual payment currency (USD or JPY). GLOW TAG processes transaction identifiers, status, amounts and currencies to verify payments and handle cancellations and refunds. GLOW TAG does not directly store your PayPal password or full card number.

4. Collection methods

Information is collected when users directly enter it during registration, ordering, payment, delivery address entry or customer inquiries. Cookies, access logs, device information and certain other information may also be automatically generated and collected during use of the Store.

5. Processing and retention periods

GLOW TAG destroys personal information without delay once its purpose has been fulfilled. Where retention is required by law, information may be retained separately for the statutory period.

Membership information: retained until withdrawal from membership or a request to delete the account; information subject to statutory retention obligations is retained for the required period.
Order, payment, delivery, exchange, return and refund information: may be retained after completion of a transaction for the period necessary to handle disputes and fulfill statutory retention obligations.
Customer inquiry records: may be retained for the period needed to address inquiries and disputes.

6. Children under 14

In principle, GLOW TAG does not provide services directed at children under 14. If processing a child's personal information is necessary, GLOW TAG follows applicable legal procedures, including obtaining a legal representative's consent where required.

7. Disclosure to third parties

In principle, GLOW TAG does not disclose users' personal information externally. Information may be disclosed to the necessary extent with prior consent, on a legal basis or in response to a lawful request from a public body such as an investigative authority.

Processing entrusted to external providers is described separately under outsourced processing below, rather than as third-party disclosure.

Order and payment information needed for the selected international payment is sent to PayPal. PayPal also processes information for its own services and legal obligations, so its role differs from a simple store-hosting processor. See Section 9 for the data, purposes and overseas processing. Publication of this policy or selection of a payment method is not treated as consent to processing that requires separate consent.

8. Outsourced processing

GLOW TAG may entrust personal information processing to the providers below to deliver services smoothly. Necessary management and supervision are carried out to support safe processing by providers.

Provider	Role	Entrusted work	Retention and use period
Cafe24	Website and online store hosting	Website and store systems, server and data hosting, and operational support for systems storing order and membership information	Until the outsourcing agreement ends or for the period required by law
KG Inicis	Payment service provider	Electronic payments including credit cards and bank transfers; payment authorization, cancellation and refunds; payment-related customer inquiries	Until the outsourcing agreement ends or for the period required by law
Lotte Courier	Delivery provider	Product delivery, tracking and collection of exchanges and returns. Names, contact details and addresses needed for delivery may be processed.	Until completion of delivery, exchange and return work, followed by any legally required retention period
Korea Post (EMS)	International delivery provider	International delivery, tracking, customs clearance and returns. Recipient names, contact details, addresses and shipment details needed for delivery and customs clearance may be processed.	Until completion of delivery, customs clearance and return work, followed by any legally required retention period
Korea PortOne (PortOne)	Payment integration	Sending international PayPal payment requests; payment-result lookup and verification; checking cancellation and refund results. The relevant data is described in Section 3.	For the payment-integration purpose and applicable contractual period, with exceptions for legally required retention. Contact us to confirm the detailed rules applicable to a particular transaction.

9. International transfers

International payment and international shipping are separate processing activities. The PayPal payment-data transfer below does not apply to orders paid through domestic KG Inicis.

A. International PayPal payments

International payment data and public provider information
Provider and contact	The Korean merchant’s contractual provider is PayPal Pte. Ltd. (Singapore). The entity applicable to the buyer’s account may depend on their country of residence; see PayPal’s official policy.
Processing countries	PayPal’s public policy describes processing and storage in the United States and other countries. Processing is not limited to Singapore, the entity’s location. The public policy does not identify every processing country for each transaction at this store.
Data	Purchaser contact details, billing and shipping details, and order/payment information described in Section 3
Purpose	Requesting, approving and verifying the selected international payment; cancellation, refund and transaction-dispute handling
Timing and method	Network transmission through the PortOne integration and PayPal systems when loading the PayPal payment interface, requesting payment, or verifying, cancelling or refunding a transaction. Transmission may begin when the payment interface loads, before final approval.
Retention	For ongoing-relationship data, PayPal’s English policy describes retention for 10 years or the applicable locally mandated period after the relationship ends, with longer retention permitted for legal duties or disputes. This is not a uniform ten-year period for every transaction. Consult PayPal’s policy and privacy contact for country- and service-specific rules.
How to decline and consequences	You may decline the payment-data transfer by not selecting PayPal or stopping the order process before proceeding to the PayPal payment interface. PayPal payment will then be unavailable. Orders eligible for domestic payment may use KG Inicis. For information already processed, contact GLOW TAG or PayPal to exercise your rights; mandatory legal retention may apply.

The links below are the providers’ public policies. Not every service, subprocessor or country listed in PortOne’s policy necessarily applies to this store’s PayPal transactions. Additional transfer routes and retention rules under the individual contract require provider confirmation.

B. EMS delivery to the United States, Japan and China

International orders are shipped by Korea Post EMS. Recipient name, contact details, shipping address and shipment information may be transmitted to and processed in the destination country (the United States, Japan or China) through postal and customs authorities for delivery, customs clearance and returns. Transmission takes place through postal systems and transport documents during dispatch and delivery/customs processing. Retention depends on those activities and applicable legal requirements. If you do not want the information transferred, do not place an international shipping order, or contact customer service before dispatch. International delivery cannot proceed without the required information.

Official sources and contacts

PayPal Korea privacy contact: skrprivacy@paypal.com / 02-737-5775. GLOW TAG: glowtag@naver.com.

10. Destruction procedures and methods

Personal information is destroyed without delay when the processing purpose is fulfilled or the retention period ends. Electronic files are deleted using methods that make recovery difficult. Paper records are shredded or destroyed using comparable methods.

11. Rights of users and legal representatives

Users and legal representatives may request access, correction, deletion or suspension of processing at any time. Requests may be submitted to customer service or by email, and GLOW TAG takes the necessary measures under applicable law.

Members can view or edit their information in the account menu after logging in. Contact customer service if you cannot complete the action yourself.

12. Security measures

GLOW TAG takes the following measures to prevent loss, theft, disclosure, falsification, alteration or damage to personal information.

Limit access rights to the necessary scope
Manage access records for personal information processing systems
Maintain security software and stable store systems
Manage and supervise providers' personal information processing

13. Cookies and other automatic collection technologies

GLOW TAG may use cookies to improve the shopping experience. Cookies may maintain the cart, check login status and improve the service environment.

Users can refuse cookie storage or delete stored cookies through browser settings. Refusing cookies may limit functions such as login, the cart and ordering.

14. Privacy officer or privacy contact

Privacy inquiries, requests to exercise rights and complaints may be submitted using the contact details below.

Operator: GLOW TAG
Representative: Yugyeong Im
Email: glowtag@naver.com
Telephone: +82 70-7756-2879

15. Remedies for privacy infringements

Users may contact the following organizations for advice or remedies concerning privacy infringements.

16. Changes and notices

This Privacy Policy may be revised when laws, services or methods of processing personal information change. Important changes will be announced on the GLOW TAG website.

Payment and international delivery update: September 15, 2026