Legal
Privacy Policy
Effective: March 18, 2026 · Last updated: March 18, 2026
Launch K-Beauty (“we,” “our,” or “us”) operates launchkbeauty.com. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and your rights under applicable law — including the EU General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA/CPRA), Korea’s Personal Information Protection Act (PIPA), and Japan’s Act on the Protection of Personal Information (APPI).
1. Who We Are (Data Controller)
Launch K-Beauty is operated by Opepe, an individual based in the Republic of Korea.
- Website: launchkbeauty.com
- Contact: support@launchkbeauty.com
- Country of operation: Republic of Korea
For EU/EEA residents: We do not maintain a physical establishment in the EU. We process EU personal data on the lawful bases described below.
For Korean residents: As a Korean-based operator, we comply fully with PIPA as administered by the Personal Information Protection Commission (PIPC).
2. Information We Collect
We collect only what is necessary for the services we provide. The categories of personal information are:
2.1 Information You Provide Directly
- Contact forms & inquiries: First name, last name, email address, company name, and the content of your message
- Consulting booking: Name, email, preferred date/time, project description
- Purchases (Paddle): Name, email, and payment information processed by Paddle as the merchant of record
- Manufacturer listing claims: Business name, email address, and supporting information you submit during the claim process
2.2 Information Collected Automatically
- Usage data: Pages visited, time on page, referral source, browser type, operating system, and approximate geographic region (country/city level), collected via PostHog analytics
- Cookies and similar technologies: See Section 6 for full details
- Log data: IP address, server request timestamps, and error logs retained by our hosting provider (Vercel)
2.3 Information About Third Parties (Directory Listings)
We publish a directory of Korean cosmetics manufacturers. Listing information (business name, location, certifications, product categories) is sourced from public records, trade databases (KITA, KCIA, KOTRA), business registries, and publicly accessible websites. We do not intentionally collect personal data about private individuals in this process — only business entity information. If you believe your personal information has been included incorrectly, contact us at support@launchkbeauty.com.
3. Legal Basis for Processing (GDPR — EU/EEA Residents)
If you are located in the EU or EEA, we rely on the following lawful bases under GDPR Article 6:
- Consent (Art. 6(1)(a)): Placing analytics cookies (PostHog) on your device. You may withdraw consent at any time via our cookie banner or by contacting us.
- Contract (Art. 6(1)(b)): Processing your name and email to fulfill consulting engagements and respond to inquiries you initiate.
- Legitimate interests (Art. 6(1)(f)): Improving our directory, preventing fraud, and understanding how users navigate our site — where our interests do not override your fundamental rights.
- Legal obligation (Art. 6(1)(c)): Where required by applicable law to retain records.
4. How We Use Your Information
- Respond to your inquiries and schedule consulting sessions
- Deliver digital products (PDF guides) you have purchased via Paddle
- Process and manage directory listing claims and verifications
- Send transactional emails (booking confirmations, purchase receipts)
- Analyze site usage to improve the directory and content (PostHog)
- Prevent fraud and enforce our Terms of Service
- Comply with applicable legal obligations
We do not sell your personal information to third parties. We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects on you.
5. Third Parties and Data Sharing
We share personal information only with the following categories of processors and only to the extent necessary:
| Processor | Purpose | Location |
|---|---|---|
| Vercel | Website hosting and edge delivery | USA / Global |
| Supabase | Database storage for listing claims and inquiries | USA |
| PostHog | Product analytics (with your consent) | USA |
| Resend | Transactional email delivery | USA |
| Paddle | Payment processing (merchant of record) | United Kingdom |
International transfers (GDPR): Most of our processors are located in the United States. Transfers from the EU/EEA to the US are covered by Standard Contractual Clauses (SCCs) or the EU-US Data Privacy Framework where applicable. You may request details of these transfer mechanisms at support@launchkbeauty.com.
Cross-border transfers (PIPA): Pursuant to PIPA Article 28-8, transfers of Korean personal information to overseas processors listed above occur under contractual protections equivalent to PIPA standards. Details are available on request.
Cross-border transfers (APPI): Where we transfer personal information of Japanese users abroad, we do so under equivalent protection standards as required by Japan’s APPI and PPC guidelines.
We will disclose personal information to law enforcement or government authorities only when required by applicable law, court order, or to protect the safety of users.
6. Cookies and Tracking
We use the following categories of cookies:
6.1 Strictly Necessary Cookies
These cookies are required for the site to function (e.g., authentication session management via Auth.js). They cannot be disabled. No consent is required under GDPR for strictly necessary cookies.
6.2 Analytics Cookies (Consent Required)
We use PostHog to understand how visitors use our site. PostHog may set cookies that track your session across pages. These cookies are only placed after you give consent via our cookie banner.
- What is tracked: Pages visited, click events, session duration, approximate location (country level)
- What is not tracked: We do not use PostHog for targeted advertising
- PostHog privacy policy: posthog.com/privacy
6.3 Your Cookie Choices
You can manage your cookie preferences at any time by clicking the “Cookie Settings” link in the footer, using your browser settings to block or delete cookies, or contacting us at support@launchkbeauty.com. Note that disabling analytics cookies does not affect your ability to use the site.
7. Data Retention
- Inquiry / contact form data: Retained for 24 months from the date of your last contact, then deleted
- Consulting engagement records: Retained for 5 years for business and legal compliance purposes
- Purchase transaction data: Retained by Paddle per their retention policy; we retain email address and purchase date for 5 years for tax purposes
- Analytics data (PostHog): Anonymized after 12 months; raw event data deleted after 12 months
- Server logs (Vercel): Retained for up to 30 days
When data is no longer required, we delete or anonymize it. You may request early deletion subject to any legal retention obligations.
8. Your Rights
Depending on your location, you have the following rights regarding your personal information:
8.1 Rights Available to All Users
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your personal data (subject to legal retention obligations)
- Opt-out of analytics: Withdraw consent for PostHog cookies at any time
8.2 Additional Rights — EU/EEA Residents (GDPR)
- Restriction: Request that we restrict processing of your data
- Portability: Receive your data in a structured, machine-readable format
- Object: Object to processing based on legitimate interests
- Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing
- Lodge a complaint: You have the right to lodge a complaint with your local EU supervisory authority
8.3 Additional Rights — California Residents (CCPA/CPRA)
California residents have the following additional rights under the California Consumer Privacy Act:
- Know what personal information we collect, use, disclose, or sell
- Delete personal information we have collected (subject to exceptions)
- Correct inaccurate personal information we hold about you
- Opt out of the sale or sharing of personal information — we do not sell or share personal information for advertising purposes
- Limit our use of sensitive personal information — we do not collect sensitive personal information as defined by CPRA
- Non-discrimination for exercising your rights
To exercise CCPA rights, email support@launchkbeauty.com with “California Privacy Rights Request” in the subject line. We will respond within 45 days.
8.4 Additional Rights — Korean Residents (PIPA)
- Right to access, correct, delete, and suspend processing of your personal information
- Right to data portability (effective March 2025 under amended enforcement decree)
- Right to withdraw consent for optional data collection at any time
- Right to lodge a complaint with the Personal Information Protection Commission (PIPC) at privacy.go.kr
8.5 Additional Rights — Japanese Residents (APPI)
- Right to disclosure of purpose of use and retained personal data
- Right to correction, addition, or deletion of your data
- Right to cessation of use or third-party provision
- Right to lodge a complaint with Japan’s Personal Information Protection Commission (PPC) at ppc.go.jp
To exercise any of these rights, email support@launchkbeauty.com. We will verify your identity before processing requests and respond within 30 days (or 45 days for CCPA requests).
9. Children's Privacy
Our services are not directed at children under the age of 16. We do not knowingly collect personal information from children. If we discover that we have inadvertently collected personal information from a child, we will promptly delete it. If you believe a child has provided us with personal data, please contact support@launchkbeauty.com.
10. Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted connections (HTTPS), access controls on our database (Supabase Row Level Security), and working only with processors who maintain adequate security standards.
No transmission over the internet is 100% secure. While we protect your data to a commercially reasonable standard, we cannot guarantee absolute security.
11. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be announced by updating the “Last updated” date above and, where required by law, by notifying you by email or prominent notice on the site. Continued use of the site after changes take effect constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, contact:
Launch K-Beauty
Email: support@launchkbeauty.com
Country: Republic of Korea
EU residents may also contact your local Data Protection Authority. Korean residents may contact the PIPC at privacy.go.kr or call 182. Japanese residents may contact the PPC at ppc.go.jp.