Privacy policy
1. Our Commitment to Protecting Your Personal Information
This Privacy Policy explains how PAULSPOLLEM (operated by Sangahtop) collects, uses, and shares your personal information when you visit or make a purchase from our website. We are committed to safeguarding your information in accordance with applicable Canadian privacy laws, including PIPEDA (Personal Information Protection and Electronic Documents Act), and other relevant North American privacy regulations.
2. Company Information and Contact Details
Business Operator: Sangahtop (operating brand name: PAULSPOLLEM)
Business Address: 170 Haneulmaeul-ro, Ilsandong-gu, Goyang-si, Tower A – Office 701-1, Gyeonggi-do 10355, Republic of Korea
Contact: If you have questions about this Privacy Policy or our data practices, please contact us at soul@ivorytower.me.
Privacy Officer / DPO: Kim Jung Eim • Phone No.: +82-10-2357-4173
3. How We Collect and Use Your Personal Information
We collect and use personal information for the following business purposes:
Order Fulfilment
• Information Collected: Name, shipping and billing address, email, phone number, payment information (processed by third-party providers)
• Purpose: To process orders, deliver products, and provide order confirmations.
Customer Service
• Information Collected: Name, email, phone number, order history, enquiry details.
• Purpose: To respond to enquiries, provide support, and resolve issues.
Marketing Communications
• Information Collected: Name, email, purchase history.
• Purpose: To send promotional emails and updates (only if you opt in).
Website Analytics
• Information Collected: IP address, browser type, device information, pages visited, cookies.
• Purpose: To analyse site usage, improve functionality, and ensure security.
Fraud Prevention
• Information Collected: Name, address, payment details, IP address.
• Purpose: To detect and prevent fraudulent or suspicious activity.
4. Sharing Your Personal Information
We do not sell personal information. However, we may share it with trusted third parties to operate our business:
• E-commerce Platform: Our store is hosted by Shopify Inc., which stores and processes data on our behalf.
• Payment Providers: We share necessary details with Shopify Payments, PayPal, and/or Stripe to process payments securely.
• Delivery Partners: We provide your shipping details to couriers (e.g. USPS, UPS, FedEx, or other delivery providers).
• Marketing and Analytics Partners: With your consent, we may share limited data with services such as Google Analytics or email marketing providers (e.g. Klaviyo).
5. Cookies and Tracking Technologies
We use cookies and similar technologies to provide functionality, analyse traffic, and personalise your experience.
• Essential Cookies: Required for the site to function (e.g. shopping cart, checkout).
• Performance & Analytics Cookies: Help us understand how visitors use the site and improve performance.
• Advertising Cookies: Used only if you consent, to deliver relevant ads.
You may manage your cookie preferences through your browser settings or our cookie management tool.
6. International Data Transfers
As our store is hosted on Shopify (a Canadian company), your information may be processed in Canada. Some third-party providers (e.g. Google, PayPal, Klaviyo) may process data in the United States or other jurisdictions.
By using your website, you acknowledge that your information may be transferred outside your country of residence and subject to the laws of the relevant jurisdiction.
7. Data Security and Retention
We implement technical and organisational measures to protect your information from unauthorised access, loss, or misuse. We retain personal information only as long as necessary to fulfil the purposes outlined in this Policy, including accounting, legal, or compliance requirements. Once no longer needed, your information will be securely deleted. In compliance with Republic of Korea's laws, including the Act on Consumer Protection in Electronic Commerce, records concerning consumer complaints or dispute resolution are retained for a minimum of 5 years. Personal Information Destruction: Upon expiration of the retention period, your personal information is destroyed without delay. Electronic files are deleted using a method that renders them irrecoverable, and paper records are destroyed by shredding or incineration.
8. Your Privacy Rights (Canadian and North American Residents)
Depending on your jurisdiction (e.g. PIPEDA or Quebec), you may have specific rights regarding your personal information, which include:
• Right of Access: To request details of the personal data we hold about you.
• Right to Rectification: To request the correction of inaccurate or incomplete personal data.
• Right to Withdraw Consent: To withdraw your consent to the collection, use, and disclosure of your personal data, subject to legal restrictions.
• Right to Challenge Compliance: To challenge our compliance with applicable privacy laws.
To exercise your rights, please contact us at soul@ivorytower.me. We will verify your request and respond within the timeframes required by applicable law.
9. Complaints and Enforcement
If you have concerns about how we handle your personal information, please contact us directly at soul@ivorytower.me. You also have the right to file a complaint with the Office of the Privacy Commissioner of Canada (OPC) or the relevant provincial privacy authority in your region.
10. Updates to This Policy
We may update this Privacy Policy to reflect changes in our business, operational, legal, or regulatory requirements. Material updates will be communicated via our website. The version date is shown at the top of this Policy.