Privacy policy
RITE37° (“RITE37°”, “we”, “us”, or “our”) complies with the Personal Information Protection Act of the Republic of Korea and other applicable data protection laws. This Privacy Policy explains how we collect, use, retain, and protect your personal information.
1. PERSONAL INFORMATION WE COLLECT
We may collect the following personal information:
| Category | Information Collected |
|---|---|
| Required information | Name, email address, shipping address, and phone number |
| Payment information | Payment authorisation information. Card numbers and certain payment information are processed directly by our payment service providers and are not stored by RITE37°. |
| Automatically collected information | IP address, cookies, date and time of visits, service usage records, and device information |
We may collect personal information through online order forms, customer enquiries, and automated technologies such as cookies and analytics tools.
2. PURPOSES OF PROCESSING PERSONAL INFORMATION
We may process personal information for the following purposes:
- Processing orders, payments, and product delivery
- Responding to customer enquiries and resolving disputes
- Providing marketing communications where separate consent has been obtained
- Preventing fraud and improving our services
3. RETENTION PERIOD
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected.
Where retention is required by applicable law, records may be retained for the following periods:
| Records | Legal Basis | Retention Period |
|---|---|---|
| Contracts and withdrawal of orders | Applicable e-commerce laws | 5 years |
| Payments and supply of goods | Applicable e-commerce laws | 5 years |
| Consumer complaints and dispute resolution | Applicable e-commerce laws | 3 years |
| Advertising and promotional activities | Applicable e-commerce laws | 6 months |
| Access records | Applicable telecommunications laws | 3 months |
4. DISCLOSURE TO THIRD PARTIES
RITE37° does not provide personal information to third parties except:
- Where the customer has provided prior consent; or
- Where disclosure is required by applicable law or by lawful request of a competent authority.
5. PROCESSING BY SERVICE PROVIDERS
We may entrust the processing of personal information to third-party service providers as necessary to operate our services.
| Service Provider | Purpose |
|---|---|
| Shopify Inc. | Online store hosting and order processing |
| Toss Payments | Payment processing |
| PayPal Holdings, Inc. | International payment processing |
| Korea Post | Product delivery |
6. INTERNATIONAL TRANSFER OF PERSONAL INFORMATION
As some of our service providers operate outside the Republic of Korea, personal information may be transferred internationally where necessary for operating our online store, processing payments and orders, or fulfilling deliveries.
- Recipients: Shopify Inc., PayPal Holdings, Inc., and other relevant service providers
- Countries of transfer: Countries where the relevant service providers operate or process personal information
- Information transferred: Name, email address, phone number, shipping address, and order information
- Purpose: Online store operation, payment processing, order fulfilment, and delivery
- Retention: Until the relevant processing purpose is fulfilled or the applicable service agreement ends, subject to applicable legal requirements
7. YOUR RIGHTS
Subject to applicable law, you may request access to, correction of, deletion of, or restriction of the processing of your personal information.
To exercise these rights, please contact us using the information provided below.
USERS IN THE EU/EEA AND UNITED KINGDOM
Where applicable, individuals in the European Union, European Economic Area, or United Kingdom may have rights under the GDPR or UK GDPR, including:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object to processing
- Rights relating to automated decision-making
- Right to lodge a complaint with a relevant supervisory authority
Where applicable, we rely on the following legal bases:
- Performance of a contract: Processing orders, payments, and deliveries
- Legal obligation: Maintaining tax and e-commerce records
- Consent: Marketing communications and non-essential cookies
- Legitimate interests: Fraud prevention and improvement of our services
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
8. COOKIES
We use cookies and similar technologies to improve user experience and analyse the use of our services. You may refuse or delete cookies through your browser settings. Disabling certain cookies may affect website functionality.
9. DESTRUCTION OF PERSONAL INFORMATION
Personal information is securely deleted or destroyed once the purpose of processing has been fulfilled or the applicable retention period has expired.
Electronic records are deleted using methods designed to prevent recovery. Physical records are destroyed by shredding or other appropriate methods.
10. PERSONAL INFORMATION PROTECTION CONTACT
Name: Iseol Hwang
Email: studio@rite37o.com
For privacy-related enquiries, concerns, or requests regarding your personal information, please contact us using the information above.
For users in South Korea, privacy-related complaints or consultations may also be directed to the relevant Korean personal information protection authorities.
11. CHANGES TO THIS PRIVACY POLICY
This Privacy Policy is effective from September 17, 2026.
We may update this Privacy Policy where necessary due to changes in applicable laws, our services, or our data processing practices. Where material changes are made, we will provide notice in advance where required by applicable law.