Legal care

Privacy Policy

This policy explains how JISOO collects, uses, shares, stores, and protects information across shopping, account, AI concierge, region, newsletter, support, and review experiences.

Last updated

May 11, 2026

Regional notice

JISOO supports region-aware experiences for the United Arab Emirates, Europe, Canada, and Turkey. Product availability, currency, tax display, payment methods, shipping rules, returns, and customer rights may vary by selected region.

This content is a practical website policy draft and should be reviewed by qualified counsel before publication as final legal advice.

Information we collect

We collect account details such as name, email, password credentials, addresses, wishlist items, region, language, and communication preferences.

When you place or attempt an order, we process cart contents, product choices, shipping details, billing details, payment authorization status, refund records, fraud-prevention signals, and customer-service notes.

When you use the AI concierge, search, reviews, quizzes, or support tools, we may process your messages, skin concerns you choose to share, product preferences, region availability questions, and interaction logs needed to provide the service.

How we use information

We use information to operate the storefront, personalize region-aware catalog visibility, process orders, provide customer support, prevent fraud, manage returns, improve product recommendations, and send service messages.

With your consent or where permitted by law, we use email or SMS for product launches, routine notes, offers, survey requests, and loyalty updates. You can opt out of marketing without losing access to essential order messages.

We analyze aggregated behavior to improve navigation, accessibility, performance, translation quality, product data, and stock planning.

Region and legal bases

For Europe and other GDPR-style regions, our legal bases may include contract performance, consent, legitimate interests, legal obligations, and vital security interests where applicable.

For Canada, we use personal information for identified purposes and rely on consent, contractual necessity, legal obligations, and reasonable business purposes.

For the UAE, Turkey, and other supported regions, we follow applicable data protection, e-commerce, consumer, and record-keeping requirements and adjust local notices where required.

Sharing and processors

We share data only with service providers needed to run JISOO: hosting, analytics, payments, fraud screening, shipping, warehouse, customer support, translation, email, review moderation, and compliance tools.

Payment card details are handled by payment processors and are not stored as full card numbers by JISOO. Shipping carriers receive the information needed to deliver orders.

We may disclose information if required by law, to protect customers and the service, or in connection with a business transfer subject to appropriate safeguards.

Retention and security

We keep information only as long as needed for orders, warranties, returns, tax and accounting records, fraud prevention, legal claims, customer support, and product safety duties.

Security measures include access controls, encryption in transit, environment separation, logging, vendor review, and limited staff access based on role. No online system is risk-free, so we also monitor and improve controls over time.

Your choices and rights

Depending on your region, you may request access, correction, deletion, portability, restriction, objection, consent withdrawal, or review of automated decisions. Some rights may be limited by fraud prevention, order records, tax, legal, or safety obligations.

You can update account details, unsubscribe from marketing, change region/language settings, and contact support for privacy requests. We may need to verify your identity before completing a request.

Children, sensitive data, and AI

JISOO is not intended for children under the age required by local law. We do not knowingly sell children’s personal information.

Do not send medical diagnoses, highly sensitive health data, or emergency requests to the AI concierge. The concierge provides product and routine guidance, not medical advice.

Contact

For privacy questions, data requests, or regional concerns, contact JISOO support through the help center. We will route the request according to your selected region and applicable law.