Who we are

Touched Seoul operates touchedseoul.com and is responsible for the personal information described in this Privacy Policy.

If you have a question about your personal information or this policy, you can contact us at support@touchedseoul.com.

Information we collect

The information we collect depends on how you interact with Touched Seoul.

• Identity and contact information, including your name, email address, mobile number, billing address and delivery address.
• Order and transaction information, including products purchased, order history, returns, refunds and payment status.
• Account and subscription information, including information associated with your Touched Seoul account or Lash Plan.
• The Edit List information, including your name, email address, mobile number where provided, marketing preferences, consent status, sign-up date and sign-up source.
• Market, pop-up and event information you provide through QR codes, digital forms or other in-person Touched Seoul experiences.
• Beauty and product preferences that you choose to tell us, including product categories, styles or edits you are interested in.
• Creator, survey and feedback information provided through creator applications, reviews, surveys, testing programmes or feedback forms.
• Marketing preference records, including whether you have chosen to hear from us by email or SMS and when that choice was made.
• Website and device information, including IP address, browser, device information, cookie identifiers and related technical data.
• Shopping and engagement activity, where permitted, including pages or products viewed, cart activity, checkout activity, referring source and engagement with Touched Seoul communications.
• Communications that you send to our customer support, creator, partnership or other Touched Seoul channels.

How we collect it

We may collect information directly from you when you:

• place an order;
• create or manage an account;
• join or manage your Lash Plan;
• join The Edit List;
• sign up through a QR code at a market, pop-up, activation or event;
• complete a creator, partnership, review, survey, product testing or feedback form;
• contact Touched Seoul; or
• otherwise voluntarily provide information to us.

We may also collect certain information automatically through cookies and similar technologies, where permitted, or receive information from service providers that help us operate our store, website and customer communications.

How and why we use your information

We use personal information only where we have an appropriate legal basis under applicable data protection law.

The Edit List

The Edit List is Touched Seoul’s opt-in community for new edits, early launches, selected offers, member-only treats, events and other brand updates.

You may join The Edit List through our website, a QR code, a market, pop-up, event or another Touched Seoul activation.

We may record the campaign, event or source through which you joined so that we can understand how people discover Touched Seoul and improve future experiences.

Where consent is required, we will send marketing by email or SMS only after you have actively chosen the relevant channel.

We may retain a limited suppression record after you unsubscribe so that we can respect your preference and avoid sending marketing to you again by mistake.

Cookies & behavioural information

Touched Seoul uses cookies and similar technologies to operate our website, remember preferences, understand website performance and, where permitted, measure or personalise marketing.

Depending on the choices you make through our cookie controls, this may include information about pages visited, products viewed, cart activity, checkout activity and how you arrived at our website.

If you are an identified Touched Seoul customer or subscriber — for example, because you have joined The Edit List or clicked a link in one of our emails — permitted website activity may be associated with your customer profile to help us provide a more relevant experience.

Non-essential cookies and similar technologies are used only where the required permissions have been obtained.

Who we share information with

We do not sell your personal information.

We may share information with trusted service providers where necessary to operate Touched Seoul. Depending on the service, these may include:

• website, hosting and ecommerce service providers;
• customer relationship, email and SMS providers, including Klaviyo;
• form and survey providers, including Tally;
• payment providers such as Stripe and PayPal;
• delivery, logistics, warehousing and fulfilment providers;
• analytics, advertising and measurement platforms where permitted;
• platforms such as Google, Meta and TikTok where we use their services for advertising, analytics, measurement or customer acquisition;
• professional advisers, insurers and service providers; and
• regulators, law enforcement or other authorities where disclosure is legally required.

Marketing & campaign measurement

Where permitted, we may use information to understand the effectiveness of Touched Seoul marketing across channels such as email, SMS, search, social media, creator partnerships and in-person events.

This may include recording whether you discovered Touched Seoul through a particular campaign, creator, advertisement, referral link, QR code, market or pop-up.

Where appropriate permissions and platform requirements are satisfied, information may also be used for advertising measurement or audience creation.

International transfers

Some service providers used by Touched Seoul may process personal information outside the United Kingdom.

Where an international transfer requires additional protection, we take steps designed to ensure that appropriate safeguards are in place in accordance with applicable data protection law.

How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including providing services, maintaining appropriate records, resolving disputes and meeting legal, tax and accounting requirements.

Marketing information may be retained while the relevant relationship remains active or until you withdraw consent, object or request deletion, subject to any limited information that we need to retain to respect your request or comply with legal obligations.

Your privacy rights

Depending on the circumstances, UK data protection law may give you the right to:

• request access to personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to delete personal information in certain circumstances;
• ask us to restrict certain processing;
• object to certain uses of your information, including direct marketing;
• receive certain information in a portable format;
• withdraw consent at any time where we rely on consent; and
• complain to the UK Information Commissioner’s Office if you believe your data protection rights have been infringed.

Withdrawing consent does not affect processing that was lawful before your consent was withdrawn.

Keeping your information secure

We use reasonable organisational and technical measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

No online system can be guaranteed to be completely secure, but we review the services and processes we use and take appropriate steps to protect customer information.

Changes to this policy

We may update this Privacy Policy from time to time as Touched Seoul, our services or applicable laws change.

When we make material updates, we will update the date shown at the top of this page and provide additional notice where appropriate.

Contact us

If you have questions about this Privacy Policy, want to exercise a privacy right or would like us to update your marketing preferences, please contact us.