Privacy Policy

This Privacy Policy describes how CJ ENM Co., Ltd. (operating as "CJ OnStyle", "we", "us", or "our") collects, uses, discloses, and protects your personal information when you visit or use our global cross-border e-commerce platform (the "Site"), including services targeting users in the United States, Singapore, and Hong Kong.

 

Article 1. Acceptance of This Policy

By accessing or using the Site, creating an account, or making a purchase, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree, please discontinue use of the Site.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Updated versions will be posted on the Site with a revised effective date, and your continued use of the Site following any update constitutes acceptance.

 

Article 2. Personal Information We Collect

2.1 Information You Provide

We collect the following categories of personal information that you voluntarily provide to us:

 

 

2.2 Information Collected Automatically

When you visit or use the Site, we automatically collect certain technical and usage data, including:

•   Device and browser information (IP address, browser type, operating system, device model);

•   Usage data (pages viewed, time spent, click events, search queries, purchase history);

•   Location data derived from IP address (city, country, region); and

•   Cookies and similar tracking technology data (see Article 9).

Please note that we do not alter our data collection practices in response to a "Do Not Track" signal from your browser.

 

2.3 Information from Third-Party Sources

If you register or log in using a social account (Google, Apple, or LINE), we may receive your name and email address from those platforms, subject to your privacy settings with them.

 

Article 3. Purposes and Legal Bases for Processing

 

 

Article 4. Sharing of Personal Information

We do not sell your personal information for monetary consideration. We may share your personal information with the following categories of recipients only to the extent necessary for the stated purposes:

 

 

We may also disclose your information in connection with a business transaction such as a merger, acquisition, or sale of assets, in which case we will notify you and your information will remain subject to this Privacy Policy.

 

Article 5. International Transfer of Personal Information

Your personal information is stored and primarily processed on secure servers located in the Republic of Korea (AWS Seoul Region). To provide our services, your data may also be transferred to and processed in the United States and other jurisdictions where our service providers operate.

 

Transfers to the Republic of Korea from the EEA/UK are based on the European Commission's Adequacy Decision. For transfers to other countries, we implement appropriate safeguards such as standard contractual clauses. By using the Site, you acknowledge and consent to these international transfers.

If you do not wish to have your information transferred internationally, you may withdraw your membership or request suspension of processing by contacting us at onstyle_glb@cj.net.

 

Article 6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, subject to the following minimum retention periods required by applicable law:

 

 

Upon membership withdrawal or expiry of the applicable retention period, personal information is securely deleted or anonymized by the following methods:

•   Paper records: shredded or incinerated;

•   Electronic records: permanently deleted using methods that render the data irrecoverable.

 

Article 7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (such as web beacons and pixel tags) to operate the Site, enhance your user experience, analyze traffic patterns, and support marketing activities. Cookies are small text files stored on your device that identify your browser but not you personally.

We use the following types of cookies:

•   Strictly necessary cookies: Required for the Site to function properly (e.g., session management, shopping cart);

•   Analytics cookies: Help us understand how users interact with the Site;

•   Advertising and targeting cookies: Used to deliver interest-based advertising.

You may disable or manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Site. For advertising cookies, you may opt out through the relevant platform settings listed in Article 10.

 

Article 8. Behavioral Advertising

We may use your personal information, including device and browsing data, to provide targeted advertising. We work with third-party advertising partners, including:

•   Google Ads

•   META (Facebook / Instagram)

•   Snapchat

•   TikTok

•   Amazon Ads

•   Criteo

These partners may collect behavioral information (such as your visit history, search history, and purchase history) when you use the Site. We only permit collection of this information with your consent.

You may opt out of interest-based advertising by visiting each partner's privacy or advertising settings page.

 

Article 9. Your Privacy Rights

9.1 General Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

•   Right of access: Request a copy of the personal information we hold about you;

•   Right to correction: Request correction of inaccurate or incomplete information;

•   Right to deletion (erasure): Request deletion of your personal information, subject to applicable legal exceptions;

•   Right to restriction: Request that we restrict the processing of your personal information;

•   Right to data portability: Receive your personal information in a structured, machine-readable format;

•   Right to object: Object to the processing of your personal information for marketing or on legitimate interest grounds; and

•   Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting lawfulness of prior processing.

 

9.2 Additional Rights for U.S. Residents (CCPA / CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

•   Right to Know: Request disclosure of the categories and specific pieces of personal information collected, used, disclosed, or sold;

•   Right to Opt-Out of Sharing: We do not sell your personal information. We do use services that may involve sharing for cross-context behavioral advertising, which we only permit with your consent;

•   Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your privacy rights; and

•   Authorized Agents: You may designate an authorized agent to submit requests on your behalf, subject to verification requirements.

California residents may submit up to two (2) rights requests within any 12-month period.

 

9.3 Additional Rights for Singapore Residents (PDPA)

If you are located in Singapore, you have rights under the Personal Data Protection Act 2012 (PDPA), including the right to access and correct your personal data, and the right to withdraw consent. Where withdrawal of consent would prevent us from providing a service you have requested, we will inform you of the consequences of such withdrawal before processing your request.

 

9.4 Additional Rights for Hong Kong Residents (PDPO)

If you are located in Hong Kong, you have rights under the Personal Data (Privacy) Ordinance (Cap. 486) (PDPO), including the right to request access to and correction of your personal data held by us. Requests for data access or correction should be made in writing using the contact information in Article 12.

 

Article 10. How to Exercise Your Rights

You may exercise your privacy rights by:

•   Emailing us at: onstyle_glb@cj.net

 

To process your request, we will need to verify your identity based on your registered email address and name. We will respond to verified requests within the timeframe required by applicable law (generally 30 days, subject to extension where permitted).

Please do not include sensitive personal information beyond what is strictly necessary in your request email.

 

Article 11. Children's Privacy

The Site is not intended for, and we do not knowingly market to, individuals under the age of 16. We do not knowingly collect personal information from children under 16 without verifiable parental consent. If we become aware that we have inadvertently collected personal information from a child under 16, we will promptly delete that information from our records.

If you believe your child has provided us with personal information without your consent, please contact us at onstyle_glb@cj.net.

 

Article 12. Security Measures

Technical Measures

•   All personal information and passwords are encrypted prior to storage;

•   Data transmitted over networks is protected using industry-standard encryption protocols (TLS/SSL);

•   Regular vulnerability assessments and intrusion detection systems are in place; and

•   Anti-virus and malware protection systems are maintained and updated regularly.

 

Organizational Measures

•   Access to personal information is restricted to authorized personnel with a demonstrated need;

•   Regular privacy and security training is provided to relevant employees;

•   Access privileges are periodically reviewed and revoked when no longer required; and

•   We supervise and contractually bind third-party processors to appropriate security standards.

 

Physical Measures

•   Access to server rooms and data storage facilities is restricted to authorized personnel only.

 

Article 13. Complaints and Regulatory Contacts

If you are dissatisfied with our response to a privacy request or believe we have handled your personal information in violation of applicable law, you may contact the relevant regulatory authority:

 

 

Article 14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in applicable law, our data practices, or operational requirements. All updates will be posted on the Site with a revised effective date. Where material changes are made, we will take additional steps to notify you (such as via email or a prominent notice on the Site) as required by applicable law.