Privacy policy
1. Our Commitment to Protecting Your Personal Information
This Privacy Policy explains how PAULSPOLLEM collects, uses, and shares your personal information when you visit or make a purchase from our website. We are committed to safeguarding your information in accordance with applicable UK and European privacy laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Company Information and Contact Details
Business Operator: Sangahtop (operating brand name: PAULSPOLLEM)
Business Address:
170 Haneulmaeul-ro, Ilsandong-gu,
Goyang-si, Tower A – Office 701-1,
Gyeonggi-do 10355, Republic of Korea
Contact: If you have questions about this Privacy Policy or our data practices, please contact us at soul@ivorytower.me.
Privacy Officer / DPO: Kim Jung Eim
Phone No.: +82-10-2357-4173
3. How We Collect and Use Your Personal Information
We collect and use personal information for the following business purposes:
Order Fulfilment
• Information Collected: Name, shipping and billing address, email, phone number, payment information (processed by third-party providers).
• Purpose: To process orders, deliver products, and provide order confirmations.
Customer Service
• Information Collected: Name, email, phone number, order history, enquiry details.
• Purpose: To respond to enquiries, provide support, and resolve issues.
Marketing Communications
• Information Collected: Name, email, purchase history.
• Purpose: To send promotional emails and updates (only if you opt in).
Website Analytics
• Information Collected: IP address, browser type, device information, pages visited, cookies.
• Purpose: To analyse site usage, improve functionality, and ensure security.
Fraud Prevention
• Information Collected: Name, address, payment details, IP address.
• Purpose: To detect and prevent fraudulent or suspicious activity.
4. Sharing Your Personal Information
We do not sell personal information. However, we may share it with trusted third parties to operate our business:
• E-commerce Platform: Our store is hosted by Shopify Inc., which stores and processes data on our behalf.
• Payment Providers: We share necessary details with Shopify Payments, PayPal, and/or Stripe to process payments securely.
• Delivery Partners: We provide your shipping details to couriers (e.g. USPS, UPS, FedEx, or other delivery providers).
• Marketing and Analytics Partners: With your consent, we may share limited data with services such as Google Analytics or email marketing providers (e.g. Klaviyo).
5. Cookies and Tracking Technologies
We use cookies and similar technologies to provide functionality, analyse traffic, and personalise your experience.
• Essential Cookies: Required for the site to function (e.g. shopping cart, checkout).
• Performance & Analytics Cookies: Help us understand how visitors use the site and improve performance.
• Advertising Cookies: Used only if you consent, to deliver relevant ads.
You may manage your cookie preferences through your browser settings or our cookie management tool.
6. International Data Transfers
As our store is hosted on Shopify (a Canadian company), your information may be processed in Canada. Some third-party providers (e.g. Google, PayPal, Klaviyo) may process data in the United States or other jurisdictions.
By using our website, you acknowledge that your information may be transferred outside your country of residence and subject to the laws of the relevant jurisdiction.
7. Data Security and Retention
We implement technical and organisational measures to protect your information from unauthorised access, loss, or misuse.
We retain personal information only as long as necessary to fulfil the purposes outlined in this Policy, including accounting, legal, or compliance requirements. Once no longer needed, your information will be securely deleted.
In compliance with Republic of Korea's laws, including the Act on Consumer Protection in Electronic Commerce, records concerning consumer complaints or dispute resolution are retained for a minimum of 5 years.
Personal Information Destruction: Upon expiration of the retention period, your personal information is destroyed without delay. Electronic files are deleted using a method that renders them irrecoverable, and paper records are destroyed by shredding or incineration.
8. Your Privacy Rights (UK and EU Residents)
Under the UK General Data Protection Regulation (UK GDPR) and the European General Data Protection Regulation (EU GDPR), you have specific rights concerning your personal information, including:
Right of Access: To request a copy of the personal data we hold about you.
• Right to Rectification: To request the correction of inaccurate or incomplete personal data.
• Right to Erasure ('Right to be Forgotten'): To request the deletion of your personal data, subject to legal exceptions.
• Right to Restrict Processing: To request the temporary suspension of processing your personal data.
• Right to Object to Processing: To object to the processing of your personal data in certain situations.
• Right to Data Portability: To request your data in a structured, commonly used, and machine-readable format.
To exercise your rights, please contact us at soul@ivorytower.me.
We will verify your request and respond within the timeframes required by applicable law.
9. Complaints and Enforcement
If you have concerns about how we handle your personal information, please contact us directly at soul@ivorytower.me.
You also have the right to lodge a complaint with a supervisory authority. For residents of the United Kingdom, this is the Information Commissioner's Office (ICO). For residents of the European Union, this is the relevant Data Protection Authority (DPA) in your country of residence.
10. Updates to This Policy
We may update this Privacy Policy to reflect changes in our business, operational, legal, or regulatory requirements. Material updates will be communicated via our website. The version date is shown at the top of this Policy.