Privacy and Data Protection Policy

Last updated: 02/01/2026

At Minji Korean Cosmetics, S.L. (hereinafter, “Minji Korean Cosmetics” or “we”), we respect the privacy of our customers and users of our website https://www.minjikoreancosmetics.com (hereinafter, “Website”). This Policy aims to inform about how we collect, use, and protect your personal data and your rights under the General Data Protection Regulation (GDPR) and the Organic Law 3/2018, on Personal Data Protection and guarantee of digital rights (LOPDGDD).

1. Data Controller

  • Name: Minji Korean Cosmetics, S.L.
  • Tax ID: B75311761
  • Address: Raval de Santa Anna, 9, 43201, Reus, Tarragona, Spain
  • Email: minjikoreancosmetics@gmail.com

2. Personal data we collect

We only collect the data necessary for the provision of our services and products:

  • Contact details: name, surname, email, address, phone
  • Payment data: credit/debit card, Bizum, other accepted methods (securely managed by Shopify)
  • Purchase data: products purchased, order history, workshop preferences
  • Communication data: messages sent via contact forms or email
  • Cookies and technical data: browsing information, web analytics, and cookie preferences (see Cookie Policy)

3. Purposes of processing

We use personal data to:

  1. Manage and process product and workshop orders
  2. Issue invoices and receipts in accordance with tax legislation
  3. Manage payments securely
  4. Send communications related to orders, shipping, and changes
  5. Send newsletters and promotions, only if the user has given explicit prior consent
  6. Improve the browsing experience and the functioning of the Website
  7. Comply with legal and tax obligations

4. Legal basis for processing

The processing of your data is based on:

  • Contract performance (Art. 6.1.b GDPR) for orders and services
  • Explicit consent (Art. 6.1.a GDPR) for newsletters, promotions, and non-essential cookies
  • Compliance with legal obligations (Art. 6.1.c GDPR) for invoicing and tax obligations
  • Legitimate interest (Art. 6.1.f GDPR) for fraud prevention, Website security, and service improvement

5. Data retention

  • Order and billing data: up to 6 years according to tax regulations
  • Website user and newsletter data: until unsubscription is requested or consent is withdrawn
  • Cookie and browsing data: according to the Cookie Policy timelines

6. User rights (ARCO and GDPR)

Users can exercise the following rights by sending an email to minjikoreancosmetics@gmail.com:

  1. Access: know what data is being processed
  2. Rectification: correct inaccurate or incomplete data
  3. Erasure: request the deletion of your personal data
  4. Objection: object to processing for legitimate reasons
  5. Restriction: request the restriction of processing in certain circumstances
  6. Data portability: receive data in a structured and reusable format

Exercising rights: requests will be handled within a maximum period of 1 month, in accordance with current regulations.

7. Disclosure of data to third parties

Your data will not be sold or transferred to third parties except in the following cases:

  • Shipping companies for order delivery
  • Payment gateways (Shopify Payments, Bizum, etc.)
  • Legal obligation or judicial requirement
  • Marketing and analytics service providers only with explicit consent

8. Cookies and similar technologies

We use our own and third-party cookies to:

  • Ensure the proper functioning of the Website
  • Web analytics and experience improvement
  • Personalization of promotions and newsletters (only with consent)

For more information and cookie management, please consult our Cookie Policy.

9. Data security

  • All personal data is stored on secure servers managed by Shopify
  • Technical and organizational measures are applied to prevent unauthorized access, loss, or alteration of data
  • Payment transactions are carried out using secure and encrypted platforms (HTTPS/SSL)

10. Consent

By registering, placing an order, or subscribing to newsletters, the user accepts this Privacy Policy and gives explicit consent for the processing of their data as indicated.

11. Withdrawal of consent

Users can withdraw consent at any time by sending an email to minjikoreancosmetics@gmail.com. The withdrawal of consent will not affect the legality of processing prior to withdrawal.

12. Contact for inquiries and complaints

Optional: you can also indicate the Spanish supervisory authority (Agencia Española de Protección de Datos - AEPD) for complaints:

13. Changes to the Privacy Policy

Minji Korean Cosmetics, S.L. reserves the right to modify this Privacy Policy.

  • Any changes will be published on this page
  • The current version includes the last update date