Privacy policy
Last updated: August 12, 2026
Privacy Policy
CHUNGWOO Co., Ltd. (“CHUNGWOO,” “we,” “us,” or “our”) operates the Incella Global online store and related websites, content, features, products, and services (collectively, the “Services”).
CHUNGWOO Co., Ltd. is the controller responsible for the personal information described in this Privacy Policy. Our online store is powered by Shopify, which provides the commerce platform used to deliver the Services.
This Privacy Policy explains how we collect, use, retain, disclose, transfer, and protect personal information when you visit our website, create an account, place an order, contact us, request customer support, or otherwise use the Services.
If there is a conflict between this Privacy Policy and our Terms of Service concerning the processing of personal information, this Privacy Policy will apply to that processing.
1. Personal Information We Collect
“Personal information” means information that identifies you or can reasonably be linked to you. It does not include information that has been anonymized or irreversibly de-identified.
Depending on how you use the Services, we may collect the following categories of personal information:
- Identity and contact information: name, billing address, shipping address, country or region, telephone number, and email address.
- Account information: account identifier, login credentials, account settings, language, preferences, and saved addresses.
- Order and transaction information: products viewed, added to a cart or wishlist, purchased, returned, replaced, or cancelled; order number; transaction amount; payment status; shipping status; and transaction history.
- Payment information: payment method, transaction amount, payment confirmation, and limited payment details made available to us by the payment provider.
- Customer service information: inquiries, emails, chatbot conversations, return or warranty requests, photos, videos, product serial numbers, and other information submitted in connection with customer support.
- Device and technical information: IP address, browser type, operating system, device type, language setting, network information, cookie identifiers, and other online identifiers.
- Usage information: pages visited, links selected, products viewed, session activity, referring URLs, interaction with advertisements, and the date and time of access.
- Marketing information: marketing consent, communication preferences, responses to campaigns, and interactions with promotional messages.
- Fraud-prevention information: information reasonably required to verify transactions, detect suspicious activity, prevent abuse, and protect the Services.
- Inferences: interests or preferences inferred from purchases, browsing behavior, and interactions with the Services, where permitted by applicable law.
Full payment card details are generally processed directly by our payment providers and are not stored by CHUNGWOO. Please do not send payment card numbers, account passwords, government identification numbers, or other sensitive information through ordinary email or chatbot messages.
2. Sources of Personal Information
We may collect personal information from:
- You directly, when you create an account, place an order, subscribe to marketing, contact us, or submit a return or warranty claim.
- Your device or browser, through cookies, pixels, server logs, and similar technologies.
- Shopify and our service providers, including payment, fraud-prevention, website hosting, translation, analytics, customer support, fulfillment, and delivery providers.
- Advertising and business partners, such as Meta and Google, where permitted by applicable law and subject to your consent where required.
- Carriers and customs authorities, in connection with shipment delivery, customs clearance, returns, and delivery claims.
3. Purposes and Legal Bases for Processing
We may process personal information for the following purposes:
Providing and Performing the Services
- Creating and managing customer accounts
- Processing payments and orders
- Delivering products and completing customs procedures
- Sending order, payment, shipping, and account notifications
- Processing cancellations, returns, refunds, and warranty claims
- Providing customer service and troubleshooting
- Remembering customer settings, language, and preferences
We process this information because it is necessary to enter into or perform a contract with you and to take steps at your request before entering into a contract.
Security and Fraud Prevention
- Verifying transactions and account activity
- Detecting, investigating, and preventing fraud or abuse
- Protecting customers, our business, and the Services
- Maintaining system and payment security
We process this information to comply with legal obligations and to pursue our legitimate interests in operating a secure online store, where those interests are not overridden by your rights.
Marketing, Advertising, and Personalization
- Sending promotional emails where you have subscribed
- Measuring advertising and campaign performance
- Displaying relevant products and advertisements
- Understanding how visitors use the Services
- Improving our products, website, and customer experience
Where required by applicable law, we rely on your consent for promotional communications and non-essential advertising or analytics technologies. You may withdraw your consent at any time.
Legal and Administrative Purposes
- Maintaining tax, accounting, transaction, and compliance records
- Responding to lawful requests from courts or government authorities
- Establishing, exercising, or defending legal claims
- Enforcing our terms, policies, and contractual rights
- Complying with consumer protection and product safety obligations
We process this information to comply with legal obligations and, where applicable, to pursue our legitimate interests.
4. Cookies and Similar Technologies
We and our partners, including Shopify, may use cookies, pixels, tags, local storage, and similar technologies to operate the website, remember preferences, analyze performance, prevent fraud, personalize content, and provide or measure advertising.
These technologies may include:
- Strictly necessary technologies: required for checkout, account access, security, fraud prevention, cart functions, and other essential website operations.
- Functional technologies: used to remember language, region, preferences, and other selected settings.
- Analytics technologies: used to understand website traffic, visitor behavior, and service performance.
- Advertising technologies: used to measure campaigns, limit repeated advertisements, build advertising audiences, and show more relevant advertisements.
Where applicable law requires consent, we will not use non-essential analytics, personalization, or advertising technologies until you have provided consent through our cookie banner.
You can accept, reject, or change your non-essential cookie preferences through the cookie settings available on our website. You may also block or delete cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the Services from working correctly.
We may use Shopify analytics and advertising features, Google services, and Meta technologies. These providers may process information in accordance with their own privacy policies.
5. How We Disclose Personal Information
We may disclose personal information only as reasonably necessary for the purposes described in this Privacy Policy, including:
- Shopify: online-store hosting, checkout, account, order management, analytics, security, personalization, and related commerce services.
- Payment providers: payment authorization, settlement, refunds, fraud prevention, and payment-related customer support.
- Carriers, fulfillment providers, and customs agents: delivery, customs clearance, return transportation, and investigation of lost or damaged shipments.
- Weglot: website translation and multilingual content delivery.
- Google: website analytics, advertising, campaign measurement, and related services, where enabled.
- Meta: advertising, audience measurement, campaign performance, and related services, where enabled.
- Technology and professional service providers: website operation, cloud storage, information security, customer support, accounting, legal advice, and compliance.
- Government authorities: where required for customs, tax, product safety, law enforcement, or other lawful purposes.
The specific payment provider and carrier used for an order may vary depending on the customer’s location, selected payment method, and delivery method. Relevant provider information is displayed during checkout, on the payment page, in the order confirmation, or in shipping communications where applicable.
We may also disclose information:
- When you direct or consent to the disclosure
- To protect our rights, customers, personnel, or the public
- In connection with a merger, acquisition, restructuring, financing, insolvency, or sale of all or part of our business
- To comply with a valid legal process or legal obligation
We require service providers processing personal information on our behalf to protect it and use it only for authorized purposes, subject to applicable contractual and legal requirements.
6. Relationship with Shopify
The Services are hosted by Shopify. Shopify collects and processes personal information concerning your access to and use of the Services to provide, secure, personalize, and improve its commerce services.
Information submitted through the Services may be transmitted to Shopify and its service providers in countries other than the country where you reside.
If Shopify Network Intelligence or other enhanced Shopify services are enabled, Shopify may use information about your interactions with our store, other merchants, and Shopify to provide enhanced analytics, personalization, fraud prevention, or advertising services. For processing performed independently by Shopify, Shopify is responsible for responding to applicable privacy requests.
You can learn more at: Shopify Consumer Privacy Policy .
You may also submit certain privacy requests to Shopify through the Shopify Privacy Portal .
7. International Transfers
Because we operate a global online store and use international service providers, personal information may be transferred to, accessed from, stored in, or processed in countries outside your country of residence, including the Republic of Korea, Canada, the United States, France, and countries in which the relevant payment provider, carrier, or service provider operates.
| Recipient | Purpose and Information | Country / Method / Retention |
|---|---|---|
| Shopify and its service providers | Store hosting, checkout, account, order, security, analytics, and commerce services. Contact, account, order, transaction, device, usage, and communication information may be transferred. | Canada, the United States, and other locations described by Shopify. Information is transferred electronically when the Services are accessed or used and retained according to our instructions, contractual requirements, Shopify’s policies, and applicable law. |
| Weglot | Website translation and multilingual content delivery. Website content, technical information, and limited usage information may be processed. | France and other locations used by its authorized service providers. Information is transmitted electronically during website use and retained only as required to provide the service or comply with applicable law. |
| Google and Meta, where enabled | Analytics, advertising, audience measurement, and campaign performance. Cookie identifiers, IP address, device, usage, purchase-event, and advertising-interaction information may be processed. | The United States and other locations identified in the providers’ privacy policies. Information is transmitted electronically when relevant technologies operate and retained according to account settings, provider policies, and applicable law. |
| Payment providers and fraud-prevention providers | Payment authorization, settlement, refunds, and fraud prevention. Identity, contact, order, transaction, and payment information may be processed. | The Republic of Korea and the countries in which the provider operates. Information is transmitted electronically when a payment is attempted or completed and retained for the period required by financial, contractual, and legal obligations. |
| International carriers, fulfillment providers, and customs agents | Delivery, tracking, customs clearance, returns, and transportation claims. Name, address, telephone number, email address, order description, shipment details, and customs information may be transferred. | The destination country and transit countries. Information is transmitted electronically when shipment is arranged and retained for delivery, customs, claims, and legally required recordkeeping periods. |
Transfers necessary to complete your order, process payment, deliver products, or provide requested Services are performed as necessary to enter into or perform our contract with you and in accordance with applicable privacy law.
Where required, we use recognized transfer safeguards, such as adequacy decisions, data-processing agreements, the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum or equivalent safeguards.
If you do not provide information required for an international payment, delivery, customs clearance, or requested service, we may be unable to complete the order or provide that service. You may contact us for additional information about an applicable transfer or available safeguards.
8. Retention of Personal Information
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Services, maintaining business and transaction records, resolving disputes, enforcing agreements, and complying with legal obligations.
Our general retention standards include:
| Record | General Retention Period |
|---|---|
| Contracts, orders, and withdrawal or cancellation records | 5 years |
| Payment and supply records | 5 years |
| Consumer complaints and dispute-resolution records | 3 years |
| Advertising and promotional records required by law | 6 months |
| Account information | Until account deletion, unless longer retention is legally required |
| Marketing consent and suppression records | Until consent is withdrawn or marketing is discontinued, with limited suppression information retained as necessary to honor the opt-out |
| Cookie, analytics, and advertising data | According to the relevant cookie duration, account setting, provider policy, and applicable law |
If information is required for an unresolved dispute, fraud investigation, legal claim, regulatory inquiry, or other legal obligation, we may retain the relevant information until the matter is resolved and any applicable limitation period has expired.
9. Deletion and Destruction
When personal information is no longer required, we securely delete, destroy, or anonymize it unless continued retention is required by law.
- Electronic records are deleted using methods designed to prevent restoration or recovery.
- Physical records are securely shredded or destroyed using another appropriate method.
- Information retained solely because of a legal requirement is separated or access-restricted and used only for the legally required purpose.
- Information stored in backups is deleted or rendered inaccessible according to the applicable backup-deletion cycle.
10. Security
We use reasonable administrative, technical, and physical safeguards appropriate to the nature of the information and the risks involved. These measures may include access controls, account authentication, encrypted transmission, service-provider controls, employee access restrictions, security monitoring, and incident-response procedures.
No security system or method of transmission is completely secure. Therefore, we cannot guarantee absolute security. Please do not transmit passwords, full payment card numbers, or other highly sensitive information through unsecured email or chatbot channels.
If a personal-information incident occurs, we will investigate and provide notifications to affected individuals and competent authorities where required by applicable law.
11. Children’s Personal Information
The Services are intended for adults and are not directed to children. We do not knowingly collect personal information from children under 14 years of age or under the minimum age established by applicable local law.
If you are a parent or legal guardian and believe that a child has provided personal information to us without valid authorization, please contact us. We will review the request and delete the information where required.
We do not knowingly sell or share, as those terms are defined under applicable United States privacy laws, personal information belonging to individuals under 16 years of age.
12. Your Privacy Rights
Depending on where you live and subject to applicable exceptions, you may have the right to:
- Request confirmation of whether we process your information
- Access or obtain a copy of your personal information
- Correct inaccurate or incomplete personal information
- Request deletion or destruction of personal information
- Request restriction or suspension of processing
- Object to certain processing
- Withdraw consent at any time
- Request data portability, where applicable
- Opt out of the sale or sharing of personal information or targeted advertising, where applicable
- Receive information about applicable international-transfer safeguards
- Lodge a complaint with a competent privacy or data-protection authority
You may exercise your rights by contacting us at info@incella.co.kr. We may request information reasonably necessary to verify your identity and protect your information from unauthorized access.
You may authorize an agent to submit a request where permitted by law. We may require proof of authorization and may ask you to verify your identity directly.
We will not unlawfully discriminate against you for exercising a privacy right. We will respond within the period required by applicable law.
Marketing Preferences
You may unsubscribe from promotional emails by using the unsubscribe link in the message or by contacting us. Even after unsubscribing, you may continue to receive non-promotional communications concerning orders, payments, deliveries, security, warranties, or customer support.
Targeted Advertising and Data Sharing
Depending on your location, you may have the right to opt out of data processing considered a “sale,” “sharing,” or “targeted advertising.” You can exercise this choice through the “Your Privacy Choices” or data sharing opt-out link made available in our website footer, where applicable, or by contacting us.
Where recognized by applicable law and supported by our website, we will process eligible Global Privacy Control signals as an opt-out request for the browser or device sending the signal.
EEA and UK Residents
If you reside in the European Economic Area or the United Kingdom, you may also have the right to object to processing based on legitimate interests, restrict processing, withdraw consent, request portability, and lodge a complaint with your local supervisory authority.
A list of European Economic Area supervisory authorities is available from the European Data Protection Board .
Where we rely on consent, withdrawing consent does not affect the lawfulness of processing performed before withdrawal.
13. Automated Decision-Making
We do not make decisions producing legal or similarly significant effects based solely on automated processing without human involvement, except where permitted by applicable law.
Shopify, payment providers, or fraud-prevention providers may use automated tools to identify potentially fraudulent or high-risk transactions. If an order is restricted or cancelled and you believe the decision was made incorrectly, you may contact us and request a review.
14. Third-Party Websites and Services
The Services may contain links, social media features, or integrations operated by third parties. Those third parties process information according to their own privacy notices and terms.
We do not control and are not responsible for the privacy, content, or security practices of unaffiliated third-party websites or platforms. Please review their policies before providing personal information.
15. Complaints and Remedies
If you have a concern about our processing of personal information, please contact us first using the information below. We will review and respond to your concern in accordance with applicable law.
Individuals in the Republic of Korea may also obtain privacy guidance or submit a complaint through the following official services:
Residents of other countries or regions may lodge a complaint with the privacy or data-protection authority responsible for their place of residence.
16. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our Services, technologies, service providers, legal obligations, or business practices.
We will publish the revised policy on this website, update the “Last updated” date, and provide additional notice or obtain consent where required by applicable law. Material changes will apply from the effective date stated in the revised policy.
17. Privacy Contact and Company Information
To ask a question, exercise a privacy right, withdraw consent, or submit a complaint, please contact:
Data Controller: CHUNGWOO Co., Ltd.
Store/Brand: Incella Global
Privacy Contact Department: Incella Global Customer Service
Business Registration Number: 119-81-52010
CEO: LEE IL KWON
Address:
Room 614, Lions Valley 2,
2, Gasan Digital 1-ro, Geumcheon-gu,
Seoul 08591, Republic of Korea
Email: info@incella.co.kr
Tel: +82-2-2027-2200