Privacy policy
PRIVACY POLICY
Effective Date: October 13, 2026
1. Who We Are
GLOSETT (glosett.com) is operated by FORTY COMPANY CO., LTD., a company registered in the Republic of Korea. We are responsible for personal information processed through our shopping services and customer support.
2. Information We Collect and Why
Depending on your use of our services, we collect:
• Account details: name, email address, telephone number, and account identifiers, to manage your account.
• Purchase details: order information, recipient details, delivery address, payment status, and refund records, to process purchases and arrange delivery.
• Support information: messages and attachments you provide, to answer enquiries and resolve complaints.
• Website information: IP address, device and browser details, cookies, and activity records, to operate the Website, maintain security, and analyse performance where permitted.
We process information to provide requested services, meet legal obligations, or on another lawful basis. Optional marketing and processing requiring consent are subject to separate consent. You may decline optional information, although missing information necessary for an order may prevent us from completing it.
3. Sharing and International Processing
We use Shopify to host and operate our online store. Information necessary for a transaction may also be processed by the payment, delivery, and fulfillment providers used for that order.
If you contact us through LINE or our Gmail account, those services also process information under their own privacy policies.
Information may be processed in Korea and in countries where our service providers operate. Shopify’s infrastructure includes international processing, including in Canada and Singapore.
We provide additional provider and international-transfer details, and obtain consent, where required by law. This Policy does not replace any separately required consent.
Shopify’s privacy policy: https://www.shopify.com/legal/privacy
4. Retention and Deletion
We retain information only as necessary for its purpose or legal obligations. Account information is deleted after account closure unless lawful retention is required.
Where Korean electronic-commerce requirements apply, we retain:
• Contract and cancellation records: five years.
• Payment and delivery records: five years.
• Consumer complaint and dispute records: three years.
• Product display and advertising records: six months.
Marketing information is retained until consent is withdrawn or its purpose ends, except for necessary consent or opt-out records.
Information no longer required is securely deleted, destroyed, or irreversibly anonymized.
5. Cookies, Marketing, and Security
Cookies support functions such as login, shopping carts, and security. Non-essential tracking requires consent where applicable. You can manage cookies through available Website controls and browser settings.
You can unsubscribe from marketing messages or contact us to withdraw consent. Necessary order and security messages may continue.
We apply reasonable safeguards against unauthorized access, loss, and disclosure and make breach notifications required by law.
6. Your Rights
Subject to applicable law, you may request access, correction, deletion, account closure, restriction of processing, withdrawal of consent, or other available privacy rights.
We may verify your identity and will respond within the applicable legal period. If information must be retained, we will explain why.
Where legally required, a parent’s or guardian’s consent must be obtained before processing a child’s information.
7. Contact and Changes
For privacy enquiries or rights requests, please contact:
Email: glosettofficial@gmail.com
Thailand Customer Support: 080-809-8094
International: +66 80 809 8094
LINE Official Account: GLOSETT
Please use “Privacy Request” as your email subject. You may also complain to the competent privacy authority.
We will publish changes with an updated effective date and provide additional notice or request consent where required.