Privacy Policy

Effective Date: May 23, 2021

Black Tangerine (hereinafter "the Company") is committed to protecting the privacy and personal data of its customers (users). This Privacy Policy outlines how the Company collects, uses, and safeguards your personal data, as well as your rights regarding your personal information. The Company adheres to the applicable privacy regulations, including but not limited to, the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

By using our services, you agree to the terms outlined in this Privacy Policy. If you do not agree to the collection and use of your data as described, please do not use our services.

1. Definitions

• Personal Data: Any information that can directly or indirectly identify an individual (e.g., name, email, IP address, etc.).
• Data Subject: Any individual whose personal data is being processed by the Company.
• Processing: Any operation performed on personal data, including collection, storage, use, sharing, or deletion.
• Data Controller: The Company, responsible for determining the purposes and means of processing personal data.

2. Data We Collect

We collect the following categories of personal data to provide and improve our services:

• Account Information: Includes name, email address, password, phone number, and gender.
• Usage Information: Includes details about your interactions with our services (e.g., access logs, IP address, device information).
• Transaction Data: Information about your purchases, preferences, and any returns or exchanges.
• Marketing and Communication Preferences: Data collected from interactions with our marketing channels and preferences for receiving communications.
• Cookies and Tracking Technologies: Information collected using cookies and similar tracking technologies to enhance user experience.

3. Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you provide explicit consent (e.g., when subscribing to our newsletter).
• Contractual Necessity: When processing is necessary to fulfill a contract (e.g., account creation or service usage).
• Legal Obligation: When required by law (e.g., tax reporting).
• Legitimate Interest: When processing is necessary for the legitimate interests of the Company, unless these are overridden by your rights and interests.

4. Data Usage

We use your data for the following purposes:

• To verify your identity and manage your account.
• To deliver and improve our services.
• To provide customer support and respond to inquiries.
• To send promotional offers and communications (with your consent).
• To analyze trends and usage patterns to enhance service offerings.
• To comply with legal and regulatory obligations.

5. Data Sharing and Transfers

Your personal data may be shared with the following third parties:

• Service Providers: Third parties who provide services on our behalf (e.g., cloud storage providers, payment processors).
• Legal Authorities: When required by law or in response to valid legal requests (e.g., government or law enforcement agencies).
• International Transfers: If your data is transferred outside of your jurisdiction (e.g., from the EU to the U.S.), we ensure that adequate safeguards are in place, such as standard contractual clauses, to protect your data in compliance with applicable regulations.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. For example:

• Account information will be retained for the duration of your account's active status.
• Transaction data may be retained for tax and legal reporting purposes for up to 5 years.
• Marketing preferences will be retained until you opt-out.

7. Data Subject Rights

You have the following rights regarding your personal data:

• Access: You can request access to the data we hold about you.
• Rectification: You can request corrections to any inaccurate or incomplete data.
• Erasure (Right to be Forgotten): You can request the deletion of your data, subject to legal obligations.
• Data Portability: You can request a copy of your data in a machine-readable format.
• Restriction of Processing: You can request that we restrict the processing of your data under certain conditions.
• Objection: You can object to the processing of your data, especially for direct marketing purposes.
• Withdraw Consent: If processing is based on consent, you can withdraw your consent at any time.

To exercise these rights, please contact us at cocon@blacktangerine.kr.

8. Security Measures

We take the security of your personal data seriously and implement the following measures:

• Encryption: Your personal data is encrypted in transit and at rest.
• Access Controls: Access to personal data is restricted to authorized personnel.
• Regular Audits: We regularly audit our systems for potential vulnerabilities and perform updates to protect against breaches.

9. Cookies and Tracking Technologies

We use cookies to enhance user experience, analyze website traffic, and personalize content. You can control cookie preferences through your browser settings. For more information, refer to our Cookie Policy.

10. Updates to This Policy

We may update this Privacy Policy from time to time in response to changing legal, technical, or business developments. Any changes will be communicated via our website or by email notification.