K-storys. (“we”, “our”, “us”, or “kstorys”) respects the privacy of its users and is fully committed to protect their personal data and use it in accordance with data privacy laws. This Privacy Policy describes how we collect, use, and process any personal data that we collect from you—or you provide to us—in connection with your use of our website (www.k-storys.com) or our mobile apps and our print-on-demand services (collectively, “Services”). By accessing or using our Services, you signify your understanding of the terms set out in this Privacy Policy.

We do not knowingly collect, maintain, disclose, or sell personal information about users under the age of eighteen (18). If you are under the age of 18, please do not use our Services. If you are under the age of 18 and have used our Services, please contact us at the email address below so that we may delete your personal information.

1. Background: 
K storys provides Services both to its business customers, as well as directly to end users. 

If you use our Services only for your personal use, you are to be considered as the “User” and for the purpose of Data Protection Laws, and we are the data “controller” or covered “business” as such terms are defined in the applicable Data Protection Law.

If you use our Services to execute orders and deliver products to third parties, you are considered a “Merchant”. When processing contact details, payment information and other information listed in Section 1 below directly related to the Merchant, we are the data controller or covered business. Where we act on a Merchant’s behalf to fulfill an order with regard to the Merchant’s customer, we are a “data processor” or “service provider” as such terms are defined in the applicable Data Protection Law. Where we act as a data processor we process information in accordance with our Data Processing Terms on behalf of our customers. 

The term “Data Protection Law(s)” shall include any applicable data privacy or security law, including but not limited to the General Data Protection Regulation (“GDPR”) and the UK General Data Protection Regulation (as defined by the UK Data Protection Act 2018 as amended by the Data Protection, Privacy and Electronic Communications (Amendments, etc.) (EU Exit) Regulations 2019), the California Consumer Protection Act, the Colorado Privacy Act, Connecticut Data Privacy Act, Delaware Personal Data Privacy Act, Indiana Consumer Data Protection Act, Iowa Consumer Data Protection Act, Montana Consumer Data Privacy Act, Oregon Consumer Privacy Act, Tennessee Information Protection Act, Texas Data Privacy and Security Act, Utah Consumer Privacy Act, and Virginia Consumer Data Protection Act, and all applicable amendments and regulations related to the foregoing. 

2. Information Collected About Users and Merchants and How We Use It
The types of personal information we obtain and process about you depends on how you interact with us and our Services. This section provides the categories of information we may collect about you, and such categories are used in accordance with the disclosures in How We Use Your Data below. 

• Identifiers. Such information includes your name, postal address, shipping address, email address, and telephone number. 
• Payment Information. Such information includes information relating to billing and payment details (including first and last digits of your payment card).
• Commercial Information. Such information includes information about Services you have purchased or considered, and your preferences. 
• Device and Unique Identifiers. Such information includes internet or other electronic network activity information, such as IP addresses, the device and browser you use, referring pages, time stamps, and cookies. 
• Geolocation Data. Such information includes non-precise location information that permits us to determine your location based on information provided in your IP address.
• Audio Information. Such information includes recorded phone calls that we or our representatives participate in as allowed under applicable law.  
• Government Issued Identification. Such information includes images and data, which may appear on government-issued identity documents or identification cards.
• Content. Information such as your communications with us and any other content you provide, such as social media profiles, images, videos, survey responses, comments, reviews, and testimonials.

3. How We Collect Your Data
We may collect data in a variety of manners as disclosed in this section. 

• Directly from You. We collect personal information you provide, such as when you make a purchase; register for an account or create a profile; contact us; respond to a survey; participate in a sweepstakes, contest, or other similar campaign or promotion; apply for a job; sign up to receive emails or newsletters, or otherwise engage in direct communication with us.
• Using Online Tracking Technologies and Other Automatic Data Collection Technologies. When you visit our websites, use our Services, open or click on emails we send you, or interact with our advertisements, we or third parties we work with automatically collect certain information using online tracking technologies such as cookies. For more information, please see our cookies policy by clicking here.
• From Merchants. We obtain information directly from Merchants that we may be providing services on behalf of. 
• From Social Media Platforms and Networks. If you interact with us on social media or use features, such as plugins, widgets, or other tools made available by social media platforms or networks (including Instagram, Facebook, Twitter, Google, LinkedIn, and Pinterest) in connection with our websites, we collect information that you disclose to us. For more information about the privacy practices of those social media platforms, please review the privacy policies and settings of the social media platforms and networks that you use. 
• From Other Sources. We may obtain information about you from other sources, such as data analytics providers, marketing or advertising service providers, fraud prevention service providers, vendors that provide services on our behalf, or publicly available sources. We also create information based on our analysis of the information we have collected from you.

4. How We Use Your Data 
This section explains how we use your data and identifies the categories of information we collect and process in connection therewith. 

• Providing our Services. Where you are a User of our Services, we will use data collected as is necessary to fulfill our contract with you for the purposes of providing, maintaining, or improving our products and Services (including, to the extent permitted by applicable law, any matters in our legitimate interests with respect to the Services), we will confirm your identity, contact you, provide customer support (including via chat, in the comment section of our blog, or other platforms, where you may reach us), operate your account with us and invoice you. 
• When you call our customer support phone line, we may monitor or record the call to ensure the quality of our customer support. If you have a  Korean Folk Stories, we will retain the recording for as long as you have an account. If you do not have an account, we will delete the recording within 12 months or retain it, if it will be needed to resolve disputes between you and us.
• When you interact with our customer support through email or chat features which may be offered via third-party software, we may monitor or record the conversation to ensure the quality of our customer support. If you have a store account, we will retain the recording for as long as you have an account. If you do not have an account, we will delete the recording within 12 months or retain it if it is needed to protect our legal interests or resolve disputes between you and us.

5. Information Collected About Our Merchant’s Customers
In the course of providing products and services on our Merchant’s behalf, we collect and process certain information about individuals at the direction of such Merchants (“Customer Data”). Customer Data has historically included information such as personal data relating to the end user of our Services, any personal data in the printing content (where applicable), personal data revealed during the use of any  Korean Folk Stories services, including name, email address, phone number, shipping address, and other information about the Merchant’s customers.

If you are a customer of the Merchant (an end user of our Services), the Merchant is the data controller with regard to your personal data contained in Customer Data and should provide you the information on how your personal data is collected and processed when using our Services. Please read the Merchant’s privacy policy for further information. The Merchant is your contact for any questions you have about how it handles your personal data.

6. Sharing Personal Data With Third Parties
The following details the types of third parties whom we share information with in connection with your use of the Services: 

Service Providers. In order for  Korean Folk Stories to provide you with our Services, we work with third parties who perform services on our behalf and with whom we share personal data to support our Services (“Service Providers”). Service Providers include: 

• Hosting and Online Services. Information you have provided to us during the use of our Services, including technical usage data, is shared for business purposes in our legitimate interests with third parties who provide hosting and server co-location services as well as data and cyber security services.
• Manufacturing Services. Information you have provided to us during the use of our Services may be shared with third-party manufacturing services whom we engage to provide our Services to you.
• Email Service Providers. Your email address and other contact details you have provided to us and your messages to our customer service is shared for business purposes in our legitimate interests with communication, email distribution, and content delivery services as well as customer support system providers.
• Payment Processors. Information regarding your purchases and payments is shared with billing and payment processing services, fraud detection and prevention services, accounting and financial advisors, advisors, so that we can provide our Services to you.
• Analytic and Digital Marketing Providers. Information regarding your use of our Services and other information received from cookies and similar technology is shared with web analytics, session recording, and online marketing services.
• 7. Retention Periods
  We may retain your personal data for as long as you have a  Korean Folk Stories account or any of the abovementioned legal bases for personal data processing still exists. For example, if you unsubscribe from our marketing, newsletter, or blog emails, we will stop the processing of the personal data for such purposes. 
• If you have used our Services without creating a  Korean Folk Stories account, we will keep your personal data as long as necessary to comply with our legal obligation to retain information relating to provision of services, for example, for tax purposes.
• After terminating your relationship with us by deleting your  Korean Folk Stories account or otherwise ceasing to use our Services, we may continue to store copies of your (and in regard to Merchants, your customers’ personal data) as necessary to comply with our contractual obligations with Merchants and legal obligations, as well as to resolve disputes between you and us (or Merchants and applicable customers), to prevent fraud and abuse, to enforce our agreements, and/or to protect our legitimate interests (to the extent that we are permitted by the applicable law to continue to store copies to protect our legitimate interests).
• We reserve the right to retain usage data relating to our products and services, as well as data that has been anonymized and/or aggregated, to the extent permitted by applicable laws.

8. Information Security

• We seek to use reasonable organizational, technical, and administrative measures to protect the confidentiality, integrity, and availability of personal data. We encourage you to take care of the personal data in your possession that you process online and set strong passwords for your  Korean Folk Stories account, limit access to your computer and browser by signing out after you have finished your session, and avoid providing us with any sensitive information.