Privacy Policy

Last updated: April 2026

Korean Fillers EU ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with the General Data Protection Regulation (GDPR) and applicable EU data protection legislation.

1. Data Controller

The data controller responsible for your personal data is:

Korean Fillers EU
Email: [email protected]

2. What Data We Collect

We collect the following categories of personal data:

• Identity data: Full name, professional title, medical license/registration number
• Clinic/practice data: Clinic name, clinic address, professional registration details
• Contact data: Email address, phone number
• Shipping data: Delivery address (clinic/professional address)
• Payment data: Payment method details (processed securely by our payment processor; we do not store full card numbers)
• Order data: Order history, product preferences, communication records
• Technical data: IP address, browser type, device information, pages visited, cookies

3. Why We Collect Your Data

We process your personal data for the following purposes:

• Order fulfillment: To process, ship, and deliver your orders
• Professional verification: To verify that purchasers are licensed healthcare professionals, as required by the nature of our products
• Communication: To send order confirmations, shipping updates, and respond to inquiries
• Legal compliance: To comply with tax, accounting, and regulatory obligations
• Marketing (with consent): To send product updates, promotions, and professional resources (you may opt out at any time)
• Website improvement: To analyze website usage and improve our services

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

• Contract performance (Art. 6(1)(b)): Processing necessary to fulfill your order and provide our services
• Legal obligation (Art. 6(1)(c)): Processing required by tax, accounting, or regulatory law
• Legitimate interest (Art. 6(1)(f)): Professional verification, fraud prevention, website analytics, and business improvement
• Consent (Art. 6(1)(a)): Marketing communications (you may withdraw consent at any time)

5. Data Retention

We retain your personal data only for as long as necessary:

• Order and transaction data: 7 years (tax and accounting requirements)
• Professional verification data: Duration of the business relationship plus 3 years
• Marketing data: Until you withdraw consent or unsubscribe
• Website analytics data: 26 months
• Communication records: 3 years from last contact

6. Third Parties

We may share your personal data with the following categories of third parties, only to the extent necessary:

• Payment processors: To securely process your payments (they operate under their own GDPR-compliant privacy policies)
• Shipping carriers: To deliver your orders (name and delivery address only)
• Hosting providers: Our website and data are hosted on secure European servers
• Tax and accounting services: As required by law

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

7. International Transfers

Your personal data is stored and processed within the European Economic Area (EEA). If any data transfer outside the EEA is necessary, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

8. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data (subject to legal retention obligations)
• Right to restriction: Request that we limit how we process your data
• Right to data portability: Receive your data in a structured, commonly used, machine-readable format
• Right to object: Object to processing based on legitimate interest or for direct marketing
• Right to withdraw consent: Withdraw consent for marketing at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with your national data protection authority.

9. Cookies

Our website uses cookies to improve your browsing experience. Cookies are small text files stored on your device.

We use the following types of cookies:

• Essential cookies: Required for the website to function (e.g., shopping cart, language preference). These cannot be disabled.
• Functional cookies: Remember your preferences and settings to enhance your experience.
• Analytics cookies: Help us understand how visitors use our website so we can improve it.

You can manage cookie preferences through our cookie banner or your browser settings. Disabling non-essential cookies will not affect the core functionality of the website.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encrypted connections (SSL/TLS), secure server infrastructure, and access controls.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

12. Contact

For any questions, concerns, or requests regarding your personal data or this Privacy Policy, contact us at:

Email: [email protected]