Controller and scope
CPass Korea Co., Ltd. is the controller of personal information collected through K+Mall, subject to determination of applicable Korean and Philippine privacy-law roles. Privacy contact: cpasskorea@gmail.com; privacy officer: Kim Hyunmyung / DTO. Registered address: Unit 601, 48, Digital-ro 33-gil, Guro-gu, Seoul, 08377, Republic of Korea.
Information collected
We may collect name, email, telephone, shipping/billing address, account credentials in protected form, order and transaction records, customer-service messages, return evidence, device and browser identifiers, cookie preferences, fraud signals and consent records. Payment card details are ordinarily processed by contracted payment providers rather than stored by K+Mall.
Purposes and legal bases
We process data to create accounts, verify orders, collect payments, arrange international shipment and customs clearance, prevent fraud, process returns, provide support, comply with tax and legal duties, secure our systems, and, where lawfully permitted, send marketing communications. The applicable lawful basis may be contractual necessity, legal obligation, legitimate interest where recognized, or consent.
Recipients and international transfers
Data may be shared on a need-to-know basis with payment processors, Korean suppliers, Philippine delivery and return partners, hosting/cloud providers, customer-service vendors, customs brokers, fraud-prevention providers and competent authorities. Processing may occur in South Korea, the Philippines or other disclosed hosting locations. We will implement required safeguards and notices for cross-border transfers.
Retention
We retain information only for the period necessary for the stated purpose and applicable statutory retention requirements. Data will be deleted or de-identified when no longer needed, subject to legal holds.
Security
We apply reasonable technical and organizational safeguards including access control, encryption in transit where appropriate, backups, vendor controls and incident response. No internet service can guarantee absolute security.
Rights and choices
Subject to applicable law, individuals may request access, correction, deletion, objection, withdrawal of consent, portability where applicable, and information on processing. Send requests to cpasskorea@gmail.com; identity verification may be required. Withdrawal of marketing consent does not affect necessary order processing.
Children and marketing
The Store is not intended for children purchasing without the necessary parental or guardian authority. Promotional emails or messages are sent only as legally permitted, with a practical opt-out.
Updates and complaints
Material changes will be notified where required. Individuals may contact our privacy team and competent privacy authorities regarding unresolved concerns.