Privacy Policy

Status: November 2025
This Privacy Policy explains how YULIM Co., Ltd. (“YULIM”, “we”, “us”, “our”) processes personal data when operating the website www.yulimcover.com (“Website”) and providing our products and services to customers and visitors.
We process personal data in accordance with:
•    the Personal Information Protection Act of the Republic of Korea,
•    where applicable, the EU General Data Protection Regulation (GDPR), and
•    where relevant, international standards such as the California Consumer Privacy Act (CCPA),
as already set out in §11 of our General Terms and Conditions.

I. Name and Contact Details of the Controller
The controller in the meaning of the GDPR and other applicable data protection laws for the operation of this Website is:
YULIM Co., Ltd.
305-6, Daecheong-ro, Samseong-myeon
Eumseong-gun, Chungcheongbuk-do
Republic of Korea
Email: info@yulimkorea.co.kr
Website: www.yulimcover.com

II. Contact Details of the Data Protection Contact
YULIM has not appointed a separate data protection officer under GDPR at this time.
For all questions or concerns regarding data protection, you may contact us at:
Data Protection Contact
YULIM Co., Ltd.
Email: info@yulimkorea.co.kr
We will forward your request internally to the responsible person.

III. Data We Collect
Depending on how you interact with our Website and services, we may collect and process the following categories of personal data:
•    Contact data (e.g. name, company, address, email address, telephone number)
•    Account and order data (e.g. login details, order history, delivery address, payment status)
•    Payment data (e.g. masked credit card data, payment method details, payment confirmation from payment providers)
•    Content data (e.g. information you enter into contact forms, inquiries, messages)
•    Usage data (e.g. visited pages, clicked elements, session duration, access time)
•    Technical / Meta / Communication data (e.g. IP address, browser type and version, device identifiers, operating system, language settings, referrer URL)
We only collect personal data that is necessary for the respective purpose described below or that you voluntarily provide to us.

IV. How We Use the Data

IV.1 Performance of a Contract (Online Shop / Orders)

Purpose:
When you place an order in our online shop, we process the data you provide during the ordering process to:
•    register and process your order,
•    prepare invoices and shipping documents,
•    deliver products, and
•    handle inquiries related to your order.
Legal Basis:
•    Art. 6(1)(b) GDPR (performance of a contract or steps prior to entering into a contract),
•    and, where applicable, the Korean Civil Act and Commercial Act provisions on contracts.
Recipients / Categories of Recipients:
•    Logistics and delivery partners (for shipping and delivery),
•    Payment service providers (for processing your payment),
•    IT and hosting providers (for operating the shop system),
•    Internal departments (sales, accounting, customer service).
Third Country Transfers:
For certain services (e.g. payment providers, cloud hosting, analytics), data may be transferred to countries outside your jurisdiction. In such cases, we aim to ensure an adequate level of data protection (e.g. through standard contractual clauses or comparable safeguards).
Storage Period:
We retain order-related personal data for as long as necessary for contract performance and legal retention obligations.
Where commercial and tax laws apply, order and invoice data may be retained for up to 10 years after the end of the financial year in which the transaction occurred.
Data that is no longer required for these purposes will be deleted or anonymised.

IV.2 Payment Processing

Purpose:
To enable secure payment in our online shop, we may use external payment service providers. Depending on the payment method chosen, necessary data is transmitted to the respective payment provider for payment processing (e.g. amount, order ID, payment method details).
Legal Basis:
•    Art. 6(1)(b) GDPR (performance of a contract).
Recipients / Categories of Recipients:
•    Payment service providers (e.g. credit card providers, PayPal, bank transfer providers) as listed on our Website and during checkout.
Storage Period:
Payment data is stored in accordance with legal retention periods (typically up to 5–10 years in line with applicable accounting and tax regulations). Technical transaction tokens or authorisation codes may be stored for shorter periods if no longer required.

IV.3 Customer Account

Purpose:
If you create a customer account on our Website, we process the data you provide (e.g. name, email address, login data, order history) to:
•    create and maintain your account,
•    allow you to view your orders,
•    simplify future purchases.
We may also process your IP address and timestamp at the time of registration for security and proof purposes.
Legal Basis:
•    Art. 6(1)(b) GDPR (performance of a contract).
Storage Period:
We store your account data as long as your customer account is active.
You can request deletion of your account at any time. If there are legal retention obligations (e.g. for invoices), the related data will be retained in line with those obligations even after account deletion.
To request account deletion, please contact: info@yulimkorea.co.kr

V. Website Operation

V.1 Hosting

Purpose:
We use external hosting providers to operate and technically provide the Website. For this purpose, your IP address and other technical data must be processed to deliver the Website to your device.
Legal Basis:
•    Art. 6(1)(f) GDPR (legitimate interest in providing a secure and stable Website).
Recipients / Categories of Recipients:
•    External hosting provider(s) and infrastructure service providers (as listed in our internal records and, where relevant, in this policy or upon request).
Storage Period:
IP addresses are processed for the duration of the session. They may be stored in log files for security and troubleshooting purposes for a limited period (see next section).

V.2 Log Files

Purpose:
When you access our Website, certain technical data (such as IP address, browser type, operating system, access time, referrer URL) is automatically stored in server log files. This helps us:
•    ensure the security and stability of the Website,
•    detect misuse or attacks, and
•    improve technical performance.
Legal Basis:
•    Art. 6(1)(f) GDPR (legitimate interest in secure and reliable Website operation).
Storage Period:
Log files are generally stored only as long as necessary for the above purposes, typically for a few weeks.
In specific cases (e.g. security incidents), storage may be extended until the issue is resolved.

VI. Use of Cookies and Similar Technologies

VI.1 Consent Management

Purpose:
We may use a Consent Management Platform (CMP) to manage cookie preferences and document your consent where required by law. This allows you to:
•    accept or reject non-essential cookies,
•    change your preferences at any time,
•    and enables us to fulfil legal obligations regarding consent.
Legal Basis:
•    Art. 6(1)(c) GDPR (compliance with legal obligations regarding consent),
•    Art. 6(1)(f) GDPR (legitimate interest in transparent and compliant consent management),
•    and, where applicable, Art. 6(1)(a) GDPR (your consent).

VI.2 Cookies and Similar Technologies

Purpose:
We use cookies and similar technologies in order to:
•    enable essential Website functions (e.g. shopping cart, login),
•    remember your preferences (e.g. language, region),
•    analyse Website usage (if you have given consent),
•    provide marketing and remarketing services (if you have given consent).
Legal Basis:
•    For strictly necessary cookies: Art. 6(1)(f) GDPR (legitimate interest in providing a functional Website).
•    For analytics, marketing, or preference cookies: Art. 6(1)(a) GDPR (your consent).
You can manage your cookie settings via the cookie banner or consent settings on our Website and withdraw your consent at any time with effect for the future.

VII. Communication and Events

VII.1 Contact Requests (Form or Email)

Purpose:
When you contact us via contact form or email, we process the data you provide (e.g. name, email, message content) to handle and respond to your request. IP address and timestamp at submission may be processed for security and documentation.
Legal Basis:
•    Art. 6(1)(a) GDPR (your consent) where applicable,
•    Art. 6(1)(b) GDPR (pre-contractual or contractual communication),
•    Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).
Storage Period:
Contact data is stored only as long as necessary to process your inquiry and for a reasonable documentation period, typically up to several months, unless retention is required for contractual or legal reasons.

VII.2 Newsletter (If Offered)

Purpose:
If you subscribe to our newsletter, we process your email address and, where applicable, your name to send you information about our products, services, and news. We may analyse opening rates and clicks to improve our communications.
Legal Basis:
•    Art. 6(1)(a) GDPR (your consent).
Storage Period:
We store your data as long as your newsletter subscription is active. You may unsubscribe at any time via the unsubscribe link in each newsletter or by contacting us directly.

VII.3 Job Applications (If Applicable)

Purpose:
If you submit a job application to YULIM, we process your personal data for the purpose of reviewing your application and conducting the recruitment process.
Legal Basis:
•    Art. 6(1)(b) GDPR (pre-contractual measures in an employment context),
•    and relevant national employment and data protection laws.
Storage Period:
Application data is generally stored for the duration of the recruitment process and for a subsequent period (e.g. up to 6 months) to comply with legal requirements or defend legal claims, after which it is deleted or anonymised unless you have consented to longer storage (e.g. for a talent pool).

VIII. Website Analytics and Marketing Services
Where you have provided consent, we may use analytics and marketing tools (e.g. web analytics, conversion tracking, remarketing pixels) to understand how our Website is used and to optimise our online presence and advertising.

Examples of services that may be used (depending on implementation):
•    Web analytics services (e.g. Google Analytics or similar),
•    Tag management systems (e.g. Google Tag Manager or similar),
•    Advertising and remarketing tools (e.g. Meta Pixel / Facebook, Instagram ads, search engine advertising platforms),
•    Session recording and heatmap tools (e.g. Microsoft Clarity or similar).
Legal Basis:
•    Art. 6(1)(a) GDPR (your consent via cookie/consent banner).
Withdrawal:
You can withdraw your consent at any time by adjusting your cookie or privacy settings on our Website. For some services, you can also use opt-out tools provided by the respective providers.
Concrete details (e.g. specific providers, links to their privacy information, storage periods) will be set out in an updated version of this policy or in our cookie information, depending on the tools actually used on the Website.

IX. Plugins and Tools
We may integrate third-party content (e.g. videos, fonts, map services, search services) into our Website. When you access such content, your IP address and technical data may be transmitted to the respective provider.
Examples include:
•    Video platforms (e.g. Vimeo or similar),
•    Web fonts or captcha services (e.g. Google Fonts / reCAPTCHA),
•    On-site search tools (e.g. Algolia or similar).

Legal Basis:
•    Art. 6(1)(a) GDPR (your consent, when such services are not technically necessary),
•    Art. 6(1)(f) GDPR (our legitimate interest in providing a user-friendly Website), where appropriate.
More detailed information about the specific providers we use, as well as your opt-out options, will be provided in this Privacy Policy or via our cookie / consent banner, depending on the actual implementation.

X. External Media and Social Media Links
Our Website may display logos or icons of social media providers (e.g. Instagram, Facebook, LinkedIn). These are typically implemented as external links.
No personal data is transmitted to these providers unless you click on such a logo or link.
When you click on a social media link, you are redirected to the respective provider’s site, and their own privacy policy applies.
You can refer to their privacy notices for more information on data processing:
•    Meta / Facebook
•    Instagram
•    LinkedIn
•    Other providers as listed on their platforms.

XI. Rights of Data Subjects
Depending on the applicable law (in particular the GDPR for EU data subjects), you may have the following rights regarding your personal data:
1.    Right of Access:
You may request confirmation as to whether we process your personal data and obtain a copy of such data.
2.    Right to Rectification:
You may request correction of inaccurate or incomplete personal data.
3.    Right to Erasure:
You may request deletion of your personal data, in particular if it is no longer necessary for the purposes for which it was collected or if you withdraw your consent.
4.    Right to Restriction of Processing:
You may request restriction of processing under certain conditions (e.g. pending verification of contested data).
5.    Right to Object:
You may object to processing based on legitimate interests (Art. 6(1)(f) GDPR) on grounds relating to your particular situation. We will no longer process your data unless there are compelling legitimate grounds or legal obligations.
6.    Right to Data Portability (where applicable):
You may request to receive personal data you have provided to us in a structured, commonly used, and machine-readable format and to transmit those data to another controller.
7.    Right to Lodge a Complaint:
o    If you are located in the European Union, you may lodge a complaint with your local data protection supervisory authority.
o    If you are located in the Republic of Korea, you may lodge a complaint with the Personal Information Protection Commission (PIPC) or another competent authority.

Withdrawal of Consent
Where processing is based on your consent (Art. 6(1)(a) GDPR), you have the right to withdraw your consent at any time with effect for the future.
The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
You can withdraw consent, for example:
•    by changing your cookie/consent settings on our Website, or
•    by contacting us at info@yulimkorea.co.kr.

Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our processing activities or legal requirements. The updated version will be published on our Website and marked with the relevant status date.