Privacy Policy
THE GENUYN Privacy Policy
Download Full PDF
Introduction
WELCOME TO THE GENUYN WEBSITE
THE GENUYN cares about your privacy and data protection. We are committed to offering the highest standards of products and services. We value each of our existing or prospective clients and aim to maintain appropriate protection of your Personal Information.
THE GENUYN is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how THE GENUYN (“THE GENUYN”, “we”, “us”, or “our”) collects, uses, and shares information about you. This policy applies to information we collect when you use our websites, and other online interfaces (collectively, the “Platform”), and the products, content, digital experiences, online stores, subscription programs (including email) and all its related services to THE GENUYN through the Platform (collectively, the “Services”). We may update this Privacy Policy from time to time. If we make changes, we will notify you by revising the “Last Updated” date at the top of this policy, and in some cases, we may provide you with additional notice (for example, by posting a statement to the homepages of our websites or sending you email notification). We comply with the applicable statutory provisions, regulatory guidelines, and established practices of the Republic of Korea on the obligation to provide prior notice. We encourage you to review the Privacy Policy whenever you interact with us to stay informed about our information practices and the ways you can help protect your privacy. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
ACCEPTANCE OF THESE TERMS
Note that our Terms of Service apply to this Privacy Policy. By accessing and using our Services, including by browsing, making a purchase or otherwise interacting with the Services, you will be deemed to agree to this policy and any changes to this policy. Please take a moment to read this Privacy Policy before you start to use our services. If you do not agree to this Privacy Policy, you should immediately discontinue access to or the use of our Services. Your continued use of our services following the posting of
changes to this policy will be deemed your acceptance of those changes.
If you are resident of the EU/EEA, please take a look at Privacy Policy Addendum for GDPR.
If you are resident of California in the U.S.A., please take a look at Privacy Policy Addendum for CALIFORNIA (CCPA,CPRA).
1. How do we get the information about you?
We and our Service Providers and entrusted processors (each, a “Service Provider”) may directly collect your information through the Services. For example, we collect information when you perform the following activities. (The personal information collected, and collection methods may slightly vary by country or service channel, as required or permitted by applicable law.)
- Creating an account on the Platform;
- Registering or connecting your existing THE GENUYN account with third-party login services such as Apple ID;
- Accessing our Services;
- Participating in any type of event organized by us through the Services;
- Participating in any type of survey organized by us through the Services;
- Making any purchases through the Platform;
- Contacting us via methods we provide; or
- Reporting infringement or unauthorized distribution of our contents;
- Subscribing to our newsletters, text messages, push notifications, or other marketing communications;
- Joining or managing membership and loyalty programs offered through the Services;
- Downloading or obtaining access to our digital products (e.g., PDF files, templates);
2. What is Personal Information?
“Personal Information” is any information that identifies, relates to, or could reasonably be linked with you.
3. What personal information do we collect?
A. Current state of personal information data
- Items of personal information
| Purpose | Items | Remarks |
| Account creation and management | E-mail address | required |
| Provision of services or products | Name, E-mail address, Phone number, Shipping and billing address and Order No. | required |
| Deal with complaints | Name, Email address, Phone number, Shipping and billing address, Resident country, Shopping (service usage) history, Payment history and Inquiries | required |
| Communications with us | including the information you include in communications with us, for example, when sending a customer support inquiry | required |
| Payment | Name, email, Phone Number, Credit card details, Bank account details, Purchased Items | Payment card details are processed directly by our payment processor(s); we do not store full card numbers or CVV |
| Personal Information automatically generated and collected on our website | Image information taken and uploaded by the customer from participatory content | required |
| Refund | Name, Shipping and billing history and Bank account details, bank account info (if bank transfer is used) | required |
| Marketing and advertising | Name, E-mail address, Phone number, Birthdate, Cookies, IP address | optional |
| Transaction information | the items you view, put in your cart, or purchase, return, exchange or cancel and your past transactions | required |
| Device information | including information about your device, browser, or network connection, your IP address, and other unique identifiers | required |
| Usage information | information regarding your interaction with the Services, including how and when you interact with or navigate the Services | required |
B. Current state of personal information data
When you submit a report of infringement or unauthorized distribution of our content, you provide us with Personal Information such as your name and email address.
C. Information automatically collected
We may automatically collect certain information about you when you access or use our Services (“Usage Information”). Usage Information may include device identifier, operating system (OS), hardware version, device setting, device model, IP addresses, access recording, country information, language, browser, and other information about your use of the Services.
The methods that may be used on the Services to collect Usage Information include:
-
Log Information: Data about your use of the Services, which is stored in log files
-
Tracking Technologies: We may collect information about your interaction with the Services, including your browsing and activity behavior, through cookies, web beacons, and other similar technologies (“Tracking Technologies”). These technologies help us understand how users navigate and engage with the Services and enable us to improve functionality and user experience.
-
Cookies: We may use cookies to provide customized Services for our users including guest users by identifying interests and preferences through analyzing frequency of access and visit time. You can disable cookies in your browser settings, but some parts of the Services may then not function properly. To find out more on how we use the cookies, please refer to our Cookie Policy.
-
Web Beacons (“Tracking Pixel”): Web Beacons are small graphic images, also known as “internet tags” or “clear gifs”, embedded in web pages and email messages. Web Beacons may be used to count the number of visitors to the Services, to monitor how users navigate the Services, and to count content views.
-
For details, please refer to our Cookie Policy.
-
Tracking Technologies: We may collect information about your interaction with the Services, including your browsing and activity behavior, through cookies, web beacons, and other similar technologies (“Tracking Technologies”). These technologies help us understand how users navigate and engage with the Services and enable us to improve functionality and user experience.
D. De-identified Personal Information
Once personal information is de-identified in accordance with applicable law, we may use such information for any lawful purpose, provided that we do not attempt to re-identify the data except as permitted by law.
4. What are the sources of personal information we collect?
We may collect personal information from the following sources:
- Directly from you including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information;
- Automatically through the Services including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies;
- From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;
- From our partners or other third parties.
5. What do we do with the collected personal information?
We collect, use, process, share, and/or disclose your information for the following purposes and we do not process it for incompatible purposes without your consent or as permitted by law:
- To provide the Services based on contractual relationship with you
- to provide, operate, and maintain our Platform and Services;
- to verify, operate, and process user identification for membership service(s) including your THE GENUYN account;
- to verify, operate, and process your purchases, transactions, and refunds;
- to help you or your device register for our Services;
- to operate our Platform and to analyze your activities;
- to provide customized Services;
- to remember your preferences and items you are interested in, and to provide a personalized and tailored user experience;
- to recommend products or content that may interest you based on your previous purchases, items you added to your cart, and your activity on the Services;
- to suggest and operate promotional and event activities;
- to suggest personalized promotional and event activities tailored to your interests;
- to troubleshoot any issues;
- to monitor and analyze to improve Service performance quality;
- to maintain the confidentiality, integrity and availability of our systems and data (Security monitoring and incident response);
- to develop and improve operating environment for better Services;
- to allow you to manage your THE GENUYN account;
- to conduct any other activities required to provide our Services; and/or
- to receive reports of infringement or unauthorized distribution of our contents (including the email address provided in the “Contact Us” section below.);
- to enforce the Terms of Service, Privacy Policy (including relevant Addendums), and other agreements with third parties;
- to detect, prevent, investigate, and report violations, unauthorized use of and/or abuse of Services, other agreements and/or suspected illegal activities;
- to resolve any issues and claims in connection with you (including, but not limited to collecting/reviewing documents, having legal advice, and proceeding dispute resolution);
- to store records of dispute settlements;
- to protect the rights, privacy, safety, and property of us and our Service
Providers; and/or
- to enforce other policies and agreements;
- to comply with legal requirements;
- to meet or comply with any applicable rules, laws, regulations, and/or guidelines established by any legal or regulatory authorities binding on us;
- to support any criminal investigations in accordance with subpoena, court order or legal process for which we, our Service Providers, or you have legal liability; and/or
- to support requests from government and/or investigative authorities inside and outside of the country of your residence;
- to provide, operate, and maintain our Platform and Services;
- To perform customers services
- to support customer inquiries and complaints given by (or purported to be given by) you or on your behalf and to carry out your instructions;
- to notify you of administrative and other important information regarding the Services and to contact you when necessary; and/or
- to otherwise render customer support and services to you;
- to promote services, events, and products;
- to send various types of communications for promotional and marketing purposes; and/or
- to deliver targeted marketing and promotional offers;
- to show you advertisements for our products or services on our Services or on other websites or platforms, where permitted by applicable law;
- We may use and process your information for additional purposes under the following conditions;
- additional purposes are disclosed to you before your information is collected for such purposes; and/or
- you consent to collecting/using/processing/disclosing for the additional purposes;
- to support customer inquiries and complaints given by (or purported to be given by) you or on your behalf and to carry out your instructions;
6. When and with whom is the personal information shared, disclosed, and provided?
A. Provision of Personal Information to Third Parties
We only use personal information for the purpose stipulated in clause 5 of this Privacy Policy. We provide the personal information to third parties only when we obtain user’s consent to such provision after notifying (i) the recipient of the personal information, (ii) the purpose for which the recipient of personal information uses such information, (iii) particulars of personal information to be provided, and (iv) the period during which the recipient retains and uses personal information, or when the special provisions exist in other laws or regulations.
B. Entrustment of Processing to Service Providers
We may share and provide your personal information with but not limited to our agents, vendors, and consultants (“Support Company”) of THE GENUYN as well as companies that provide the Services on behalf (“Service Providers”) of THE GENUYN in the following cases:
- With your consent:
- We may share your information with external parties when you obtain consent from you or with your direction;
- We may share your information with external parties when you obtain consent from you or with your direction;
- With Service Providers (and affiliate companies) for the following processes:
- Billing and payment processes;
- Data storage and development; and/or
- Administrative services and other third-party services required to provide the Services;
- Advertising and performance measurement to support personalized marketing, where permitted by applicable law;
- Billing and payment processes;
- With current and future affiliated companies, group companies, and/or subsidiaries for following processes on behalf of us:
- Personalizing content and experience; and/or
- Offering promotions and events for our products and services or third-
party’s products and services;
- Personalizing content and experience; and/or
- With law enforcement and appropriate third parties for legal reasons:
- to investigate criminals, fraud, infringement of intellectual property rights, or other suspected illegal activities, or as otherwise may be required by applicable laws, or as we deem necessary in our sole discretion, in order to protect our legitimate legal and business interests;
- to investigate criminals, fraud, infringement of intellectual property rights, or other suspected illegal activities, or as otherwise may be required by applicable laws, or as we deem necessary in our sole discretion, in order to protect our legitimate legal and business interests;
- With Corporate restructuring:
- We may share Personal Information when we do a business deal, or negotiate a business deal, involving the sale or transfer of all or a part of our business or assets. These deals can include any merger, financing, acquisition, or bankruptcy transaction or proceeding;
- We may share Personal Information when we do a business deal, or negotiate a business deal, involving the sale or transfer of all or a part of our business or assets. These deals can include any merger, financing, acquisition, or bankruptcy transaction or proceeding;
Except as disclosed in this Privacy Policy, we DO NOT sell, trade, or rent any personal information we collect online (or mobile) unless we have your explicit permission.
C. Entrustment of Processing to Service Providers
We entrust the processing of personal information as described below, to improve our services and stipulate the necessary matters to ensure that personal information is safely managed upon conclusion of entrustment contracts (prohibiting the processing of personal information for purposes other than fulfilling the entrustment contract, restricting sub-entrustment, and taking measures to ensure stability) pursuant to the relevant laws. In the event of a change of the entrusted party, we will disclose the fact through this Privacy Policy without delay. We entrust the following scope of work to provide you with better services.
| Entrusted Party | Entrusted work and Purpose |
| Shopify Inc. | Online store hosting and order processing |
| PayPal, Inc. / Eximbay Co., Ltd. (Republic of Korea) | Payment processing |
| Henqq Ecommerce LLC (Pendora Downloads) | Digital product delivery and download management |
| Google LLC (Google Workspace / Google Analytics 4) | Cloud email services, analytics, and service performance improvement |
In the event of a change of the entrusted party, we will disclose such changes in this Privacy Policy without delay.
D. Entrustment of Processing to Service Providers
For California residents, it is advisable to provide a separate CCPA-compliant supplemental privacy notice addressing the consumer’s right to opt out of the “sale” or “sharing” of personal information as defined under the California Consumer Privacy Act (CCPA), including the methods for submitting such opt-out requests.
7. Relationship with Shopify
The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you. In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our Store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain rights with respect to your personal information here Shopify Privacy Portal Link.
9. How long do we retain the personal information?
We retain personal information only for as long as necessary to fulfill the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by applicable laws. Specifically, we retain personal information for the following periods in accordance with the Act on the Consumer Protection in Electronic Commerce, Consumer Protection Act, and other applicable regulations in the Republic of Korea: while you are using our Platform (while your account is alive, not closed and deleted);
- Records related to contracts, payments, refunds, and provision of the Services: 5 years
- Records related to consumer complaints and dispute resolution: 3 years
- Records related to advertisements and promotional activities: 6 months
- Records related to website visit logs such as IP address and access records: 3 months
Personal information not subject to statutory retention will be deleted or anonymized without undue delay once it is no longer needed for the purposes stated in this Privacy Policy.
10. When and how is the information deleted?
We will put in place measures such that your personal information in our possession or under our control is deleted in an irreversible format and/or de-identified without undue delay as soon as it is reasonable to assume that (1) the purpose for which that personal information was collected is no longer being served by the retention of such personal information; and (2) retention is no longer necessary for any other legal or business purposes.
If any personal information is to be retained as required by relevant laws and regulations, we retain it for the period as required by such laws and regulations before destruction. The personal information which is stored and managed by us will not be used for purposes not authorized by law or by you.
However, some information you have shared with others on the Platform may, and will likely, remain visible after you close your account such as comments, message board postings, and communications you have with other users of the Platform and certain submissions. In the case of Reporting Illegal Content, the submission is and will not be made public. Nonetheless, please contact THE GENUYN at privacy@thegenuyn.com and THE GENUYN, in THE GENUYN’s sole and reasonable discretion, may assist you in deleting such content, and shall timely do so wherever and to the extent legally obligated.
11. Personal information of children
THE GENUYN is very sensitive to this issue of children’s privacy and, therefore, we endeavor to protect the privacy of children using the Internet and our Services.
We do not knowingly collect personal information from children under 14 in Korea or under the applicable age threshold in other jurisdictions. If we learn that we have collected such information without required consent, we will delete it without undue delay.
Parents or legal guardians should supervise their Children when they participate in online(mobile) activities.
12. Cross-Border Transfer of Personal Information
12.1. Overview of International Transfers
While you use our Services, your personal information may be transferred to, stored in, or processed in countries outside your country of residence, including the Republic of Korea, the United States, and Canada, in accordance with this Privacy Policy.
We rely on reputable cloud and SaaS service providers to support our operations. Information you provide to us is primarily stored in systems located in the Republic of Korea and may also be processed within the infrastructures of our service providers.
We implement appropriate technical, physical, and administrative safeguards and enter into contractual protections where necessary to ensure that any cross-border transfer of personal information is performed securely and lawfully.
If there are any changes to the recipients of personal information, their operating locations, or the purposes of transfer, we will update this Privacy Policy without undue delay.
12.2. Details of Cross-Border Transfers
| Recipient Country | Recipient (Service Provider) |
Transferred Purpose |
| Canada / U.S.A | Shopify Inc. | Online store hosting and order processing |
| U.S.A | PayPal, Inc. | Payment processing |
| Republic of Korea | Eximbay Co., Ltd. (Republic of Korea) | Payment processing |
| U.S.A | Henqq Ecommerce LLC (Pendora Downloads) | Digital file delivery and download management |
| U.S.A / Global | Google LLC (Google Workspace / Google Analytics 4) | Email communications, analytics, and service performance improvement |
12.3. Compliance with International Data Transfer Requirements
Please note that we may transfer, store, and process your personal information outside the country you reside in.
If we transfer your personal information out of the European Economic Area (“EEA”) or the United Kingdom (“UK”), we will rely on recognized data transfer mechanisms such as the European Commission’s Standard Contractual Clauses (“SCCs”) or equivalent contractual safeguards issued by the UK competent authority, unless the destination country has been determined to provide an adequate level of protection under applicable laws.
13. What type of security measures have been implemented to protect personal information?
We and our trusted service providers implement appropriate physical, technical, and administrative safeguards to protect your personal information from loss, theft, unauthorized access, alteration, or destruction. These measures include, but are not limited to:
- Access control (including secure password policy);
- Pseudonymization and encryption of personal information;
- Installation of anti-virus software and firewall; and/or
- Managing and monitoring of event logs for accountability;
14. What are your rights regarding your personal information?
We primarily comply with the Personal Information Protection Act of the Republic of Korea (“PIPA”), while also respecting and fulfilling applicable privacy rights in other jurisdictions where our users reside, including the GDPR and relevant U.S. state privacy laws when applicable.
You may exercise your rights regarding personal information as below:
-
Right of access: You may ask us to provide copies of your personal information, including how we collect, store, use, process, share, and/or disclose information
about you. These rights always apply unless some exemptions exist.
-
Right to rectification: You may contact us if you identify that your information in our possession is not accurate. You may ask us to rectify, update, and complete such inaccurate information.
-
Right to erasure (right to be forgotten): You may ask us to delete your information collected, stored, processed, shared, and disclosed by us when certain circumstances are met.
-
Right of restriction of processing: You may limit the way we collect, process, use, store, share, and disclose your information if you are concerned about how we use it.
-
Right to data portability: This right only applies to the information you have directly given us. You may ask us to transfer such information in a usable format from one organization to an(other) organization(s), or give it to you.
- Right to object: You may ask us to stop processing your information when certain circumstances are met.
- Right to withdraw consent: Where we rely on your consent to process your personal information, you may withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
If you reside in certain U.S. states such as California, Colorado, Connecticut, Utah, or Virginia, you may have additional rights relating to the sale or sharing of your personal information for targeted advertising purposes. You may have a right to opt out of the "sale" or "share" of your personal information or to opt out of the processing of your personal information for purposes considered to be "targeted advertising", as defined in applicable privacy laws. You can exercise your rights to opt-out of those uses here. Please note that if you visit our website with the Global Privacy Control opt-out preference signal enabled, depending on where you are, we will automatically treat this as a request to opt-out for the device and browser that you use to visit the website. If we are able to associate the device sending the signal to a Shopify account, we will apply the opt out request to the account as well. To learn more about Global Privacy Control, you can visit https://globalprivacycontrol.org/. Other than the Global Privacy Control, we do not recognize other "Do Not Track" signals that may be sent from your web browser or device.
If you reside in the UK or European Economic Area, and subject to exceptions and limitations provided by local law, you may exercise the following rights in addition to the rights outlined above:
-
Objection to Processing and Restriction of Processing: You may have the right to ask us to stop or restrict our processing of personal information for certain purposes.
- Withdrawal of Consent: Where we rely on consent to process your personal information, you have the right to withdraw this consent. If you withdraw your consent, this will not affect the lawfulness of any processing based on your consent before its withdrawal.
You may exercise any of these rights where indicated on the Services or by contacting us using the contact details provided below. To learn more about how Shopify uses your personal information and any rights you may have, including rights related to data processed by Shopify, you can visit https://privacy.shopify.com/en.
We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests, as permitted or required under applicable law. We will respond to your request in a timely manner as required under applicable law.
14. Complaints
If you have any concerns or complaints regarding the processing of your personal information, you may contact us using the contact details provided below, and we will respond without undue delay.
If you reside in the Republic of Korea, you also have the right to report a complaint to the Personal Information Protection Commission (“PIPC”) or other competent authorities in accordance with applicable laws.
If you reside in the European Economic Area (“EEA”) or the United Kingdom (“UK”), you
may lodge a complaint with your local data protection authority.
15. Changes to this Privacy Policy
We may change, modify, add, or remove portions of this Privacy Policy from time to time. Material changes that adversely affect your rights will be announced at least 7 days before the effective date, and at least 30 days in advance for changes that are unfavorable to you, through a notice on our homepage and, where practicable, by email. For non-material updates, we will indicate the “Last Updated” date at the top of this Privacy Policy. Your continued use of the Services after the effective date constitutes your acknowledgment of the updated Privacy Policy.
If you disagree with any changes to this Privacy Policy and do not wish your Personal Information to be subject to the revised Privacy Policy, please close your account and/or stop using the Services.
16. Governing Law
This Privacy Policy is governed primarily by the Personal Information Protection Act of the Republic of Korea (“PIPA”). We also comply with privacy rights granted under applicable laws in other jurisdictions where our users reside, including the GDPR (EU/EEA/UK) and relevant U.S. state privacy laws when applicable.
17. Contact
For the purpose of applicable data protection laws, we are the data controller of your personal information.
Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact us at: privacy@thegenuyn.com
You can also contact us by post at the following address:
THE GENUYN
27, Hoenamu-ro, Yongsan-gu, Seoul, Republic of Korea
Last Updated: December 12, 2025
THE GENUYN