Privacy Poilcy
Ideas On Board Corp. (hereinafter referred to as the "Company" or "We"), a corporation established under the laws of the Republic of Korea, operates the CONCRETED Shopping Mall website (www.concreted.com, hereinafter referred to as the "Site"). We are committed to protecting the personal information and rights of users globally by complying with applicable data protection laws, including the Korean Personal Information Protection Act, and international regulations such as the GDPR and CCPA.
1. Purpose of Collecting and Using Personal Information
We process personal information only for the purposes listed below. If the purpose changes, we will obtain prior consent or take necessary measures in accordance with relevant laws.
|
Category |
Purpose of Use |
Lawful Basis (For EEA/UK Users) |
|
Service Provision & Contract Fulfillment |
Processing, fulfilling, and delivering orders (including fragrances), payment processing, refunds, and providing customized services. |
Contractual Necessity |
|
Membership Management |
Account registration, identity verification, maintaining membership, preventing improper use/fraud, and record retention for dispute resolution. |
Legitimate Interests |
|
Customer Support & Complaints |
Handling inquiries, confirming details of complaints, and notifying processing results. |
Contractual Necessity / Legitimate Interests |
|
Marketing & Advertising |
Developing new services, providing tailored offers, and analyzing site usage for statistical purposes. |
Consent (Opt-in required) / Legitimate Interests (soft opt-in for existing customers only) |
|
Legal Compliance & Security |
Compliance with customs, tax laws, fraud prevention, and enforcing our Terms of Service. |
Legal Obligation / Legitimate Interests |
2. Personal Information Collected and Methods of Collection
① Items of Personal Information Collected
|
Category |
Items Collected |
Notes |
|
Account Creation |
Email (Required), Name (Optional), Mobile Address (Optional). |
|
|
Purchase & Delivery |
Recipient information (Name, Email or Mobile number, Shipping address), Payment method and transaction details, Customs clearance information (Mandatory for international shipping). |
|
|
Automatically Collected Data |
IP address, Cookie ID, Log Data (browser type, OS), Usage history, Device information. |
Collected via cookies and other tracking technologies. |
② Methods of Collection: Information is collected through (i) online website registration, ordering, and event participation; (ii) customer consultation and inquiries; and (iii) automatically through server logs, cookies, and analytics tools upon use of the Site.
3. Retention and Use Period of Personal Information
We retain personal information only for the period necessary to achieve the stated purposes, or for the period required by law.
|
Retention Basis |
Information Retained |
Retention Period |
|
Statutory Obligation (Korean Law) |
Records related to contracts, order withdrawal, payment, and supply of goods. |
5 years |
|
Statutory Obligation (Korean Law) |
Records related to consumer complaints or dispute resolution. |
3 years |
|
Statutory Obligation (Korean Law) |
Records related to computer communications or internet access (Log Data). |
3 months |
|
Company Legitimate Interests |
Records related to misuse, fraud prevention, and identity records of customers who misuse the Site (e.g., fraudulent chargebacks). |
5 years |
|
Membership |
Retained until membership withdrawal or contract termination. |
Until termination |
4. Disclosure and Third-Party Sharing
① Disclosure to Third Parties: We utilize and disclose user information strictly within the scope specified in this Policy. We will not provide personal information to third parties without the user's explicit consent, except when required by law or necessary for law enforcement investigation purposes.
② Outsourcing of Personal Information Processing: We outsource personal data processing to external service providers to ensure smooth service delivery. We mandate that these contractors comply with personal data protection laws, prohibit processing beyond the scope of the outsourced task, and implement security measures.
|
Contractor Category |
Entrusted Tasks |
|
Payment Processors (e.g., PayPal, Eximbay) |
Processing and settlement of purchase payments. |
|
Logistics Providers (e.g., FEDEX, UPS, ShipStation) |
Product delivery, customs clearance procedures, and shipping status updates. Certain information (such as recipient name, phone number, and address) is required for customs clearance when shipping internationally. |
|
IT & Hosting Providers (e.g., Shopify) |
Server hosting, data storage, and system maintenance. |
|
Marketing & Analytics Providers (e.g., Google, Meta) |
Service usage analysis, measuring advertising effectiveness, and providing targeted advertising. |
5. International Data Transfers
① As we are based in the Republic of Korea, your personal information will be transferred to and processed in South Korea. By using our services, you consent to this transfer. Where required by GDPR or other applicable laws, we ensure that transfers are subject to appropriate safeguards, such as Standard Contractual Clauses (SCCs), to ensure your data receives an adequate level of protection.
② Data Controller for EEA/UK Users: For users in the EEA and the UK, Ideas On Board Corp. is the data controller responsible for your personal data.
6. Your Rights as a Data Subject
Depending on your jurisdiction, you have the following rights concerning your personal information, which you may exercise by contacting our Data Protection Manager:
|
Right (Global/GDPR/CCPA) |
Description |
|
Access & Portability |
Request confirmation of data processing and request a copy of your personal data. |
|
Rectification |
Request correction of inaccurate or incomplete data. |
|
Erasure ('Right to be Forgotten') |
Request deletion of your personal data, subject to legal retention obligations (e.g., 5-year tax record retention). |
|
Restriction of Processing |
Request restriction on the processing of your data under certain conditions. |
|
Objection |
Object to processing based on legitimate interests, including for direct marketing. |
|
Withdrawal of Consent |
Withdraw consent for processing based on consent (e.g., non-essential cookies, marketing emails) at any time. |
|
Opt-Out of Sale/Sharing (CCPA/CPRA) |
We do not sell personal information for monetary compensation. However, we may "share" data for cross-context behavioral advertising (retargeting). California residents may exercise their right to opt-out via the designated link on our Site footer. |
7. Cookies and Tracking Technologies
We use cookies to operate the Site, remember your preferences, and provide customized services, including marketing.
① Consent Mechanism: For visitors in the EEA and the UK, we use a Cookie Consent Banner to obtain your explicit consent (Opt-in) before placing non-essential cookies (Performance, Marketing).
② Opt-Out: You have the option to accept or reject all cookies, or to require confirmation each time a cookie is stored. You can manage your preferences through the Site's cookie settings or your web browser settings. Refusing cookies may limit the functionality of personalized services.
8. Protection of Children’s Privacy
Our Site is not directed to children under 13 years old. Purchases are restricted to individuals who are the greater of 18 years old or the age of majority in their jurisdiction (as defined in our Terms of Service). We do not knowingly collect or process personal data from children under the age of 13 (US) or under 16 (EEA/UK), as applicable.
9. Personal Information Protection Manager
For inquiries, complaints, or requests regarding personal information protection or to exercise your rights, please contact our Data Protection Manager:
|
Role |
Details |
|
Data Protection Manager |
Junha Son |
|
|
support@concreted.com |
|
Address |
67-7, Nonhyeon-ro 149-gil, Gangnam-gu, Seoul, South Korea |
Last Updated: Dec 12, 2025
Effective Date: Jan 15, 2026
