Privacy policy

Last updated: December 10, 2025

Derma Factory operates this website to provide information about our brand and products and to direct visitors to our official sales channels, such as Amazon and our Naver Store (the “Services”). This website does not support transactions or online purchases directly; instead, visitors may be redirected to third-party platforms to complete their purchases.

This website is hosted by Shopify, which enables certain website functionalities and may collect or process personal information as described in this Privacy Policy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website, interact with its features, or otherwise communicate with us.

Please read this Privacy Policy carefully. By using or accessing any part of the Services, you acknowledge that you have read and understood how we collect, use, and disclose your information as described in this Privacy Policy. If there is any conflict between this Privacy Policy and our Terms of Service, this Privacy Policy will govern with respect to our handling of personal information.

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

  • Contact details including your name and email address.
  • Communications with us including the information you include in communications with us, for example, when sending a customer support inquiry.
  • Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.
  • Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information from the following sources:

  • Directly from you including when you communicate with us, or otherwise provide us with your personal information;
  • Automatically through the Services including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies;
  • From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;
  • From our partners or other third parties.

How We Use Your Personal Information

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

  • Provide, Tailor, and Improve the Services. We use your personal information to provide you with the Services, including to remember your preferences and items you are interested in, to create a customized experience for you, such as recommending products related to your clicks. This may include using your personal information to better tailor and improve the Services.
  • Marketing and Advertising. We use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email and to show you online advertisements for products or services on the Services or other websites.
  • Communicating with You. We use your personal information to provide you with customer support, to be responsive to you, to provide effective services to you and to maintain our business relationship with you.
  • Legal Reasons. We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or participate in civil discovery, potential or actual litigation, or other adversarial legal proceedings, and to enforce or investigate potential violations of our terms or policies.

How We Disclose Personal Information

In certain circumstances, we may share your personal information with third parties for legitimate purposes, as described in this Privacy Policy. Such circumstances may include:

  • Service providers: We may share information with Shopify, vendors, or other third parties that perform services on our behalf, such as website hosting, IT management, data analytics, customer support, and cloud storage.

  • Marketing partners: We may share information with business and marketing partners to provide marketing services and personalized advertising. For example, Shopify may support targeted advertising based on your activity across different websites. Our partners will use your information in accordance with their own privacy policies. Depending on where you live, you may have the right to opt out of such targeted advertising. 

  • Affiliates and corporate group: We may share information with our affiliates or within our corporate group to support our business operations.

  • Legal and business purposes: We may disclose information when required to comply with legal obligations (such as subpoenas or court orders), to enforce our Terms of Service or policies, to protect our rights or the rights of our users, or in connection with business transactions such as mergers or acquisitions.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you. In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our Store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy . Depending on where you live, you may exercise certain rights with respect to your personal information here Shopify Privacy Portal Link.

Third Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

Children's Data

The Services are not intended to be used by children, and we do not knowingly collect any personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted. As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) personal information of individuals under 16 years of age.

Security and Retention of Your Information

Please be aware that no security measures are completely foolproof, and we cannot guarantee “perfect security.” Any information you provide to us may not be fully secure while in transit. We recommend that you avoid sending sensitive or confidential information through unsecured channels.

Since our website does not allow the creation of user accounts, we do not retain personal information for account management purposes. We will only retain the personal information you provide to us (for example, through contact forms or inquiries) for as long as necessary to respond to your request, comply with legal obligations, resolve disputes, or enforce our policies.

Your Rights and Choices

Depending on where you live, you may have certain rights regarding your personal information. These rights are not absolute and may only apply in specific circumstances. In some cases, we may decline a request as permitted by law.

  • Right to Access / Know: You may request access to the personal information we hold about you.

  • Right to Delete: You may request that we delete personal information you have provided to us.

  • Right to Correct: You may request that we correct inaccurate personal information we maintain.

  • Right to Portability: In certain cases, you may request a copy of your personal information or ask that it be transferred to a third party.

  • Right to Opt Out of Targeted Advertising: Depending on your location, you may opt out of the “sale” or sharing of your personal information for targeted advertising purposes. You can exercise this right via this link. If you visit our website with the Global Privacy Control signal enabled, we will treat it as an opt-out request for your device and browser. Learn more at https://globalprivacycontrol.org/.

Managing Communication Preferences:
We may send you promotional emails. You can opt out at any time using the unsubscribe option in these emails. Non-promotional emails, such as responses to inquiries, will still be sent as needed.


You may exercise any of these rights where indicated on the Services or by contacting us using the contact details provided below. To learn more about how Shopify uses your personal information and any rights you may have, including rights related to data processed by Shopify, you can visit https://privacy.shopify.com/en.

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests, as permitted or required under applicable law. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.

Complaints

If you have complaints about how we process your personal information, please contact us using the contact details provided below. Depending on where you live, you may have the right to appeal our decision by contacting us using the contact details set out below, or lodge your complaint with your local data protection authority.

International Transfers

Please note that we may transfer, store and process your personal information outside the country you live in.

If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date and provide notice as required by applicable law.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact us at 9. Gukhoe-daero 74-gil, Yeongdeungpo-gu, Seoul, Republic of Korea.